This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dIAb5ebp8u0jVdQQ8TMJcy1IMq4.roa
File: dIAb5ebp8u0jVdQQ8TMJcy1IMq4.roa (raw, json)
Hash identifier: fR3/rRU8sctZrUiwGmPnjIrrehx6ijyfYLkGtIpTfYw=
Subject key identifier: 74:80:1B:E5:E6:E9:F2:ED:23:55:D4:10:F1:33:09:73:2D:48:32:AE
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019B77C6B06E3FB0AB293474198EE05CF9B3
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dIAb5ebp8u0jVdQQ8TMJcy1IMq4.roa
Signing time: Thu 01 Jan 2026 04:17:48 +0000
ROA not before: Thu 01 Jan 2026 04:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397201
IP address blocks: 81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.53/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c6:b0:6e:3f:b0:ab:29:34:74:19:8e:e0:5c:f9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 04:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74801be5e6e9f2ed2355d410f13309732d4832ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9e:a5:83:89:52:79:8c:c3:20:94:97:5c:3a:
31:95:c3:2c:d7:64:1a:bd:dc:d3:ea:9a:5f:3f:3b:
02:93:bc:3b:a2:19:91:6d:b3:7e:0d:d8:fa:aa:58:
87:f3:53:49:cf:ea:da:b3:9b:41:9a:59:f0:06:4c:
7c:ed:50:48:fa:c9:4b:70:26:30:fd:ef:81:1f:94:
d6:71:19:ef:84:d3:65:b4:e3:1d:cc:fa:b2:5c:ab:
6d:bf:95:88:f0:89:0a:1d:8a:b8:7e:7b:ad:4d:18:
c8:04:39:5f:be:85:0a:7c:2d:fd:da:51:22:79:15:
c6:86:c5:45:98:b4:2f:67:79:11:71:68:a8:c1:63:
14:46:3f:25:4b:c4:51:de:e6:81:df:be:63:1e:25:
e5:3e:48:e6:99:a6:14:1e:0f:64:c6:d9:c2:07:f0:
33:8d:e2:05:19:33:c5:2c:c1:98:7d:5c:35:e6:6a:
ad:19:da:bf:82:42:22:f0:b6:71:ee:2f:30:d4:ab:
bc:82:26:bd:92:f6:3f:5f:75:c3:a3:78:1f:a3:3c:
8f:72:4d:99:61:7a:a7:4f:a2:17:b2:c7:f5:b3:39:
a4:60:6c:39:f5:6c:15:72:71:ca:06:e7:4c:f5:3d:
e9:be:b3:8e:be:79:b5:93:89:43:50:e3:96:da:e6:
7b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:1B:E5:E6:E9:F2:ED:23:55:D4:10:F1:33:09:73:2D:48:32:AE
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dIAb5ebp8u0jVdQQ8TMJcy1IMq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.195.30/31
185.100.0.53/32
Signature Algorithm: sha256WithRSAEncryption
be:64:0f:50:a1:b4:0e:38:5d:2b:af:27:85:54:21:81:6c:0d:
ca:73:4b:7e:a6:c6:51:60:49:8a:32:14:c8:a1:f9:15:45:41:
5a:fe:cb:b1:04:db:3b:00:1c:5b:5c:d2:d3:d8:6c:6a:06:73:
c7:fb:c1:f1:2b:f2:57:f2:c5:03:ea:c4:4d:29:2a:a7:cc:50:
e4:ad:b9:c9:ad:48:15:20:c6:c1:7e:96:36:c5:f5:50:bb:e1:
cf:4c:1d:68:58:b7:8b:72:1c:f4:b5:36:50:e2:7b:8c:a5:48:
ea:73:ff:45:e1:7f:e8:f5:00:68:56:f0:2a:85:a4:75:e3:e0:
96:48:2b:24:3d:28:62:50:4c:d0:17:38:ee:3d:6b:80:3e:54:
46:a4:d4:26:08:d1:88:41:2e:bf:56:b5:a1:da:1b:ac:1f:b8:
5e:76:bf:1c:47:0c:43:5d:16:57:b7:40:dc:ba:fa:62:f7:98:
44:0a:92:f4:40:e8:41:33:70:32:9b:18:9d:1a:53:9a:f7:52:
98:f1:cc:fd:ec:df:cb:e2:d0:26:22:61:42:b0:df:54:69:66:
a9:aa:e2:b1:07:e6:18:3e:d7:48:9d:2b:4f:52:2f:25:2b:4d:
b3:f5:91:ac:96:e8:0d:cd:8d:20:a5:01:41:28:e9:09:a7:24:
5f:17:11:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:03:11 2026 by rpki-client