This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/f8hSz53j02iaWWsAf-qIedcP1bQ.roa File: f8hSz53j02iaWWsAf-qIedcP1bQ.roa (raw, json) Hash identifier: wUG7qU+PPSTT9aBWrA6vFOvyywY0rN3mg3iXRZOYkI8= Subject key identifier: 7F:C8:52:CF:9D:E3:D3:68:9A:59:6B:00:7F:EA:88:79:D7:0F:D5:B4 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AC23C35E29E65657DCFFE57EC641 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/f8hSz53j02iaWWsAf-qIedcP1bQ.roa Signing time: Thu 01 Jan 2026 04:17:47 +0000 ROA not before: Thu 01 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397193 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ac:23:c3:5e:29:e6:56:57:dc:ff:e5:7e:c6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fc852cf9de3d3689a596b007fea8879d70fd5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:a8:ec:61:9e:35:34:02:d1:ff:26:97:40: 24:15:7e:3c:58:72:44:0f:37:f9:6a:67:3a:b4:3a: b0:8d:6d:1c:22:98:51:c4:b2:f9:fb:5a:4d:d6:56: 92:a2:53:d2:9d:b0:04:46:25:81:6b:1f:18:92:39: f0:89:0a:92:55:c9:6b:f9:5c:c3:45:0e:99:ec:d2: 48:dc:4f:9b:84:55:27:8b:cf:51:3e:03:86:19:dd: 48:5d:46:75:85:d3:14:6e:f4:17:94:d1:21:95:33: 67:60:ec:d6:c4:15:df:36:cb:d6:18:b6:1a:3c:0d: 66:a6:63:c1:ce:12:60:14:ce:e5:34:53:fe:9c:14: 7b:d1:75:e4:86:0e:88:d0:4d:8e:01:09:ea:e4:e7: 0b:f4:fc:f9:72:09:61:08:ef:0b:b6:e3:d6:68:83: 12:24:fa:6c:8d:54:8d:d4:72:91:e5:b4:61:e4:e1: e1:90:60:0e:c9:de:11:84:ac:88:a4:7e:3a:53:53: a7:a0:ac:dc:2c:db:5a:8b:85:e2:0c:80:8d:9e:9e: 64:a6:7b:a9:1e:a4:b8:41:c5:6b:52:77:7c:05:2a: 6c:78:5a:71:0d:12:e8:54:63:4f:5c:47:de:3d:ec: 53:b7:05:39:b0:83:d3:ee:1a:d6:1e:e9:99:0b:7b: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C8:52:CF:9D:E3:D3:68:9A:59:6B:00:7F:EA:88:79:D7:0F:D5:B4 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/f8hSz53j02iaWWsAf-qIedcP1bQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 06:0e:3a:d9:46:1f:46:1b:77:60:f7:b3:ac:85:03:93:eb:85: cd:f4:59:0c:4a:d6:70:77:32:55:bb:32:a4:08:53:52:ab:ee: 85:c0:14:f6:32:d0:fc:b6:9f:d6:78:68:65:59:e3:23:fa:f2: d7:d1:c0:c8:21:b3:a0:b6:c8:0a:60:40:3a:4d:17:50:85:39: f0:50:ef:cd:c7:11:b7:7a:1a:87:3d:f0:b0:7c:b3:ac:44:9e: e3:45:3a:c6:80:39:d6:75:00:fb:12:b1:f8:dd:0f:91:75:96: 0e:31:8d:2c:a1:85:b0:cd:98:03:14:a4:ab:25:ab:b5:7e:9e: ee:3f:98:60:a3:e1:05:fd:43:ad:6c:41:45:42:2f:49:04:c2: b1:0c:f0:41:8d:d0:f7:41:b6:a7:00:4f:f6:08:8b:fd:be:01: db:96:24:2c:c2:da:db:e1:ba:82:dc:b8:ea:f9:89:0d:3c:05: bc:df:53:3a:86:80:95:83:bb:21:99:0a:db:ee:d0:1a:9e:d2: 10:66:e7:39:e5:90:32:29:c6:ea:5c:e4:51:62:63:cb:5b:6c: 81:39:87:7b:ef:8a:e0:42:1a:c7:d8:b0:77:98:09:75:f2:3f: 8e:bb:a0:a7:e5:4c:6c:18:35:aa:02:eb:dc:99:a6:d5:f6:ff: ce:c6:ab:46 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqwjw14p5lZX3P/lfsZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmM4NTJjZjlkZTNkMzY4OWE1OTZiMDA3ZmVhODg3OWQ3MGZkNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdKo7GGeNTQC0f8ml0AkFX48WHJE Dzf5amc6tDqwjW0cIphRxLL5+1pN1laSolPSnbAERiWBax8YkjnwiQqSVclr+VzD RQ6Z7NJI3E+bhFUni89RPgOGGd1IXUZ1hdMUbvQXlNEhlTNnYOzWxBXfNsvWGLYa PA1mpmPBzhJgFM7lNFP+nBR70XXkhg6I0E2OAQnq5OcL9Pz5cglhCO8LtuPWaIMS JPpsjVSN1HKR5bRh5OHhkGAOyd4RhKyIpH46U1OnoKzcLNtai4XiDICNnp5kpnup HqS4QcVrUnd8BSpseFpxDRLoVGNPXEfePexTtwU5sIPT7hrWHumZC3tiowIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH/IUs+d49NomllrAH/qiHnXD9W0MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvZjhoU3o1M2owMmlhV1dzQWYtcUllZGNQMWJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAYOOtlGH0Ybd2D3s6yFA5Prhc30WQxK 1nB3MlW7MqQIU1Kr7oXAFPYy0Py2n9Z4aGVZ4yP68tfRwMghs6C2yApgQDpNF1CF OfBQ783HEbd6Goc98LB8s6xEnuNFOsaAOdZ1APsSsfjdD5F1lg4xjSyhhbDNmAMU pKslq7V+nu4/mGCj4QX9Q61sQUVCL0kEwrEM8EGN0PdBtqcAT/YIi/2+AduWJCzC 2tvhuoLcuOr5iQ08BbzfUzqGgJWDuyGZCtvu0Bqe0hBm5znlkDIpxupc5FFiY8tb bIE5h3vviuBCGsfYsHeYCXXyP467oKflTGwYNaoC69yZptX2/87Gq0Y= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:35 2026 by rpki-client