This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dJEPDoTHxLWrllRGyRD9y-uSZe8.roa File: dJEPDoTHxLWrllRGyRD9y-uSZe8.roa (raw, json) Hash identifier: zs7VdlWQ1csNmi+4v+5grlRVdfo4dFbSQMaJ+NBKoUY= Subject key identifier: 74:91:0F:0E:84:C7:C4:B5:AB:96:54:46:C9:10:FD:CB:EB:92:65:EF Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69AEC9A465486A627196F1E31C630 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dJEPDoTHxLWrllRGyRD9y-uSZe8.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396585 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:ec:9a:46:54:86:a6:27:19:6f:1e:31:c6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74910f0e84c7c4b5ab965446c910fdcbeb9265ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:43:81:61:dc:00:50:b6:32:a9:c3:59:6c:3d: 91:3c:9c:69:e9:46:5a:76:e7:d7:21:5a:3b:43:bc: 4a:18:87:fa:99:3f:1e:99:02:a3:60:0c:cc:82:7b: 83:d6:c9:41:bb:49:b7:88:bc:f2:3a:d7:61:2b:1f: 8c:62:a8:d8:62:8e:22:14:3d:80:e0:52:0e:d5:64: 60:a2:22:dc:20:6c:13:48:40:d7:a2:f8:6e:d5:f7: 14:8e:e6:b4:dc:c2:40:98:e8:28:1c:89:a6:fe:f5: e3:62:77:d7:49:68:99:c6:a6:18:46:4f:09:01:39: 81:25:e0:1f:c8:1d:08:b5:97:0d:47:80:d4:a3:4c: de:8e:c0:11:72:6c:cd:5c:29:f1:2b:9b:0a:05:92: b6:d4:0d:d7:04:43:8b:8c:af:ae:e5:36:e7:5e:e7: 01:a6:2f:ed:b3:23:66:2a:fd:0e:ff:07:2f:3e:87: ec:77:89:ec:53:95:6b:85:21:aa:62:6b:17:c6:33: 8f:a2:c9:6a:de:3b:fd:c3:c7:bc:0d:50:6c:fb:5a: e6:c1:b1:17:be:76:7e:52:27:a4:ad:02:59:40:fa: 08:d0:d7:1e:14:f7:be:1d:9a:ca:1b:8c:b8:36:8a: 43:a0:e4:99:1f:93:e8:80:55:46:e3:f2:91:93:43: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:91:0F:0E:84:C7:C4:B5:AB:96:54:46:C9:10:FD:CB:EB:92:65:EF X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dJEPDoTHxLWrllRGyRD9y-uSZe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption c6:d3:eb:ae:93:06:3a:8a:9c:52:b4:0b:81:98:5c:dc:39:66: e0:47:f3:25:c0:65:25:1e:e9:30:a9:cc:05:16:d0:84:b9:ad: 2b:6e:7f:48:ba:1f:4a:dd:3c:77:45:f8:4d:5f:e3:6c:ae:29: f8:20:b7:e3:6a:7b:b8:84:86:64:52:c9:1a:a3:ae:50:a1:58: 34:32:e0:b7:e1:23:07:9e:91:e6:7a:5f:a9:15:b0:28:ea:47: e2:6c:d7:e4:da:c5:14:00:de:ba:cb:12:05:fa:51:39:c3:cf: 88:b6:82:61:f4:16:df:85:78:1e:b3:4b:98:a3:a7:23:7d:c0: 35:31:e1:0f:35:87:8d:7c:45:c6:1a:54:1f:bb:ef:b9:00:0b: d2:c0:de:7f:39:d6:31:37:c8:f8:91:fc:5d:18:32:9d:6e:b2: c9:39:58:03:9d:30:89:cd:a2:66:da:13:c5:94:ef:ae:fe:d7: cb:07:d2:2d:75:59:1b:1b:86:b4:c5:03:cf:8a:f4:d5:45:d5: 2e:b2:f8:07:68:35:3c:32:9b:bf:fb:df:fa:dd:9f:60:4b:c9: 08:6f:9b:1c:0a:b1:0b:fe:eb:7d:6a:b6:5d:90:c1:17:e4:ac: 30:14:2b:72:13:65:ad:72:61:79:2c:3d:e2:cb:14:24:60:f3: f0:ca:15:22 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xprsmkZUhqYnGW8eMcYwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDkxMGYwZTg0YzdjNGI1YWI5NjU0NDZjOTEwZmRjYmViOTI2NWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEOBYdwAULYyqcNZbD2RPJxp6UZa dufXIVo7Q7xKGIf6mT8emQKjYAzMgnuD1slBu0m3iLzyOtdhKx+MYqjYYo4iFD2A 4FIO1WRgoiLcIGwTSEDXovhu1fcUjua03MJAmOgoHImm/vXjYnfXSWiZxqYYRk8J ATmBJeAfyB0ItZcNR4DUo0zejsARcmzNXCnxK5sKBZK21A3XBEOLjK+u5TbnXucB pi/tsyNmKv0O/wcvPofsd4nsU5VrhSGqYmsXxjOPoslq3jv9w8e8DVBs+1rmwbEX vnZ+UiekrQJZQPoI0NceFPe+HZrKG4y4NopDoOSZH5PogFVG4/KRk0PgsQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHSRDw6Ex8S1q5ZURskQ/cvrkmXvMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvZEpFUERvVEh4TFdybGxSR3lSRDl5LXVTWmU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMbT666TBjqKnFK0C4GYXNw5ZuBH8yXA ZSUe6TCpzAUW0IS5rStuf0i6H0rdPHdF+E1f42yuKfggt+Nqe7iEhmRSyRqjrlCh WDQy4LfhIweekeZ6X6kVsCjqR+Js1+TaxRQA3rrLEgX6UTnDz4i2gmH0Ft+FeB6z S5ijpyN9wDUx4Q81h418RcYaVB+777kAC9LA3n851jE3yPiR/F0YMp1ussk5WAOd MInNombaE8WU767+18sH0i11WRsbhrTFA8+K9NVF1S6y+AdoNTwym7/73/rdn2BL yQhvmxwKsQv+631qtl2QwRfkrDAUK3ITZa1yYXksPeLLFCRg8/DKFSI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:01:36 2026 by rpki-client