This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fSOhP9StE09zSoUbDpLBRUSz2mY.roa File: fSOhP9StE09zSoUbDpLBRUSz2mY.roa (raw, json) Hash identifier: pmrMsrDur5XB9Muw4kH3ioHFegLQvja1dx9Xdl3K6qc= Subject key identifier: 7D:23:A1:3F:D4:AD:13:4F:73:4A:85:1B:0E:92:C1:45:44:B3:DA:66 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C695905CBAAC4816B04D94D6B6AF3A Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fSOhP9StE09zSoUbDpLBRUSz2mY.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396574 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:90:5c:ba:ac:48:16:b0:4d:94:d6:b6:af:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d23a13fd4ad134f734a851b0e92c14544b3da66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:cf:d7:2a:c8:61:00:99:33:1f:b5:50:ef:92: a7:6f:48:03:dc:f6:6e:66:c8:e6:ac:00:09:59:ea: 56:66:75:23:63:9b:4e:f8:27:0e:bd:87:67:cc:aa: 97:6e:d3:9f:66:8f:e0:3d:f7:8c:1c:de:b9:33:06: 0a:ac:3b:3c:95:60:fd:ea:d0:d2:1a:0d:6a:f5:76: ea:bb:55:1d:ae:0b:93:24:cd:43:8a:90:d7:b0:84: 07:a6:42:c9:0a:58:20:9e:f8:e7:20:7d:ca:10:c7: 3c:1f:b7:e1:71:62:53:bd:28:0e:50:65:4c:67:15: 82:bc:dd:a5:b4:88:6f:00:7f:b5:a2:6e:a1:e4:fb: 64:d7:d9:cb:a2:78:c7:20:77:96:73:2a:9f:2e:2b: 9d:3d:5f:8e:75:67:30:31:9d:c2:16:71:d0:d6:d7: b5:45:1d:9b:47:f7:56:24:d2:87:ce:b0:6e:43:bc: 57:0f:aa:50:8d:4e:ca:d4:ea:ed:2f:d1:22:63:5c: da:d0:6b:40:d4:69:55:8e:db:7f:13:22:8c:82:ae: 2c:b7:20:8a:50:53:19:ab:96:f6:93:03:af:96:ec: 9b:ed:b7:99:14:c6:67:88:20:51:cd:c1:f5:61:57: ef:fe:a5:2a:aa:6a:93:6b:cd:7f:e4:ac:69:4c:51: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:23:A1:3F:D4:AD:13:4F:73:4A:85:1B:0E:92:C1:45:44:B3:DA:66 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fSOhP9StE09zSoUbDpLBRUSz2mY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 72:70:42:ff:f1:be:6d:33:ba:47:c8:84:e9:01:6b:cb:36:61: 80:31:a5:4e:2f:5a:eb:3b:35:43:8a:23:c8:90:5f:45:f2:c8: d6:b9:22:e8:c4:90:82:2a:12:85:21:0e:c1:9b:14:92:c9:93: dd:ca:cf:dd:d6:0a:27:78:ce:84:9e:a6:e8:fd:57:f3:20:a0: 30:5d:0e:31:3e:4c:55:15:9c:1a:ba:1c:ba:c1:92:29:6d:38: e8:2d:ac:81:29:72:38:a2:57:47:cc:72:01:26:bd:97:b4:f3: a5:88:e8:b3:52:b4:c6:fe:28:23:91:b7:f4:9a:f4:1e:15:e7: 49:57:89:a8:82:2f:2d:56:c4:95:4c:84:e8:2c:eb:76:b2:ae: e6:9e:9c:17:16:11:ea:13:74:9a:f1:5a:5c:9d:17:ef:e0:88: c1:50:1f:f5:87:e5:c5:4b:18:6e:be:c6:a9:3b:41:e2:4e:0d: 8a:b4:da:23:d3:91:a7:e6:64:da:57:c1:e1:83:c1:39:ab:e0: 47:eb:6a:e1:9b:be:06:c8:ab:7b:a4:43:f4:87:b1:3e:1d:21: c7:b1:3a:d6:8a:20:40:80:f9:3f:eb:ba:0a:75:23:13:71:1d: 23:00:89:45:78:3f:b8:c8:82:b6:ea:a1:8a:7b:f6:79:7b:33: a0:68:f5:1e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpWQXLqsSBawTZTWtq86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDIzYTEzZmQ0YWQxMzRmNzM0YTg1MWIwZTkyYzE0NTQ0YjNkYTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58/XKshhAJkzH7VQ75Knb0gD3PZu ZsjmrAAJWepWZnUjY5tO+CcOvYdnzKqXbtOfZo/gPfeMHN65MwYKrDs8lWD96tDS Gg1q9Xbqu1UdrguTJM1DipDXsIQHpkLJClggnvjnIH3KEMc8H7fhcWJTvSgOUGVM ZxWCvN2ltIhvAH+1om6h5Ptk19nLonjHIHeWcyqfLiudPV+OdWcwMZ3CFnHQ1te1 RR2bR/dWJNKHzrBuQ7xXD6pQjU7K1OrtL9EiY1za0GtA1GlVjtt/EyKMgq4styCK UFMZq5b2kwOvluyb7beZFMZniCBRzcH1YVfv/qUqqmqTa81/5KxpTFH3vwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH0joT/UrRNPc0qFGw6SwUVEs9pmMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvZlNPaFA5U3RFMDl6U29VYkRwTEJSVVN6Mm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAHJwQv/xvm0zukfIhOkBa8s2YYAxpU4v Wus7NUOKI8iQX0XyyNa5IujEkIIqEoUhDsGbFJLJk93Kz93WCid4zoSepuj9V/Mg oDBdDjE+TFUVnBq6HLrBkiltOOgtrIEpcjiiV0fMcgEmvZe086WI6LNStMb+KCOR t/Sa9B4V50lXiaiCLy1WxJVMhOgs63ayruaenBcWEeoTdJrxWlydF+/giMFQH/WH 5cVLGG6+xqk7QeJODYq02iPTkafmZNpXweGDwTmr4EfrauGbvgbIq3ukQ/SHsT4d IcexOtaKIECA+T/rugp1IxNxHSMAiUV4P7jIgrbqoYp79nl7M6Bo9R4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:00:48 2026 by rpki-client