This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dJY7kG54xiA_CcF4UXWfDgG2QYc.roa File: dJY7kG54xiA_CcF4UXWfDgG2QYc.roa (raw, json) Hash identifier: dWTH72TBlQ/CgVwdCIEO5vD89ZSASuIIahVtA38o8y4= Subject key identifier: 74:96:3B:90:6E:78:C6:20:3F:09:C1:78:51:75:9F:0E:01:B6:41:87 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68F8FD5C0CCD741406C2036436201 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dJY7kG54xiA_CcF4UXWfDgG2QYc.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396560 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8f:8f:d5:c0:cc:d7:41:40:6c:20:36:43:62:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74963b906e78c6203f09c17851759f0e01b64187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:99:87:c8:95:59:aa:b1:e4:61:82:95:87: b6:53:dc:ba:13:8b:c4:3c:b1:0e:98:de:b7:9a:75: f0:20:30:0f:ab:4e:07:cb:18:91:30:f4:ac:63:ef: f3:9a:90:29:34:46:5a:bf:7b:b9:b7:97:37:48:4b: f0:3b:0e:21:08:1c:d8:eb:9d:1c:e8:56:f6:ef:34: ac:2b:21:67:63:ac:5a:3b:62:d5:3e:05:40:58:37: c0:66:57:25:75:49:a1:a7:54:9b:17:fd:ce:04:69: df:33:a2:d9:ba:2d:98:61:3e:09:4d:63:fb:66:49: 79:26:05:6b:8b:2f:9a:32:30:18:a4:c3:09:24:7a: 40:dc:10:8f:ce:17:3b:22:eb:90:6f:ec:cd:3c:41: 07:3b:d1:49:4a:82:33:70:e7:12:7c:a4:e2:a0:bf: c7:cc:14:92:bb:5c:9a:85:e3:5e:75:f6:72:72:bb: c0:42:d2:4b:41:ed:10:44:0b:73:01:39:1a:e5:4e: b3:d5:08:14:47:e2:cf:5c:86:ab:e4:f9:16:40:9e: 59:1a:4d:d9:bb:6b:38:61:b4:6a:08:04:80:26:1d: 26:e0:9b:ba:d6:5e:99:98:06:47:aa:d3:2a:42:82: 67:34:1f:d9:db:99:5c:b2:02:93:5e:18:e7:d6:60: 96:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:96:3B:90:6E:78:C6:20:3F:09:C1:78:51:75:9F:0E:01:B6:41:87 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/dJY7kG54xiA_CcF4UXWfDgG2QYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption c6:62:b0:74:b0:8f:12:dd:13:05:27:a0:c3:91:a3:02:31:25: 70:59:b1:1b:80:58:f1:9d:5a:8a:fb:76:be:ce:af:cd:74:d9: 17:7e:b7:f7:0e:02:a1:a0:14:30:e6:a4:48:75:5f:56:b7:ba: 7d:1c:bc:cf:16:78:ac:0f:c6:fb:3a:49:2a:d6:39:c7:f4:3a: bb:fb:3c:9a:e2:70:34:fd:46:34:c1:20:48:69:1f:f5:d0:d8: ad:8e:be:a4:48:ea:b2:cc:32:fe:2f:e0:bb:75:16:26:8e:07: c7:2f:23:9e:19:45:4a:9f:c8:22:80:ad:a7:c3:34:42:ea:90: c7:5d:25:c5:ad:92:90:c4:29:48:11:35:15:aa:91:5b:34:16: 19:59:8b:61:ac:21:0a:24:ee:4e:0c:66:bf:f8:d3:9d:db:dc: 59:5a:56:01:09:e0:86:b1:0e:3e:af:11:44:1a:c2:a0:4f:ac: 15:f6:19:08:5b:ee:9c:df:a5:22:22:5a:82:0d:16:72:85:c4: 49:ed:19:fc:7d:73:1a:9e:6f:5e:4f:7f:8f:61:3c:c3:06:e9: 91:07:9a:e1:ad:a3:2e:d5:8c:26:03:1b:41:d9:d7:6c:b5:2a: df:f4:0e:b1:af:5d:ec:d6:17:66:c1:43:6d:b3:8f:e6:e0:a3: 59:3f:0a:7e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo+P1cDM10FAbCA2Q2IBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDk2M2I5MDZlNzhjNjIwM2YwOWMxNzg1MTc1OWYwZTAxYjY0MTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVeZh8iVWaqx5GGClYe2U9y6E4vE PLEOmN63mnXwIDAPq04HyxiRMPSsY+/zmpApNEZav3u5t5c3SEvwOw4hCBzY650c 6Fb27zSsKyFnY6xaO2LVPgVAWDfAZlcldUmhp1SbF/3OBGnfM6LZui2YYT4JTWP7 Zkl5JgVriy+aMjAYpMMJJHpA3BCPzhc7IuuQb+zNPEEHO9FJSoIzcOcSfKTioL/H zBSSu1yaheNedfZycrvAQtJLQe0QRAtzATka5U6z1QgUR+LPXIar5PkWQJ5ZGk3Z u2s4YbRqCASAJh0m4Ju61l6ZmAZHqtMqQoJnNB/Z25lcsgKTXhjn1mCWJQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHSWO5BueMYgPwnBeFF1nw4BtkGHMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvZEpZN2tHNTR4aUFfQ2NGNFVYV2ZEZ0cyUVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAMZisHSwjxLdEwUnoMORowIxJXBZsRuA WPGdWor7dr7Or8102Rd+t/cOAqGgFDDmpEh1X1a3un0cvM8WeKwPxvs6SSrWOcf0 Orv7PJricDT9RjTBIEhpH/XQ2K2OvqRI6rLMMv4v4Lt1FiaOB8cvI54ZRUqfyCKA rafDNELqkMddJcWtkpDEKUgRNRWqkVs0FhlZi2GsIQok7k4MZr/4053b3FlaVgEJ 4IaxDj6vEUQawqBPrBX2GQhb7pzfpSIiWoINFnKFxEntGfx9cxqeb15Pf49hPMMG 6ZEHmuGtoy7VjCYDG0HZ12y1Kt/0DrGvXezWF2bBQ22zj+bgo1k/Cn4= -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:01 2026 by rpki-client