This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fzJmEHtN3JpGvjNdZ2xofhRzzb0.roa File: fzJmEHtN3JpGvjNdZ2xofhRzzb0.roa (raw, json) Hash identifier: wIBzi0jTu/33kGUoNDxK1PdYxKN7R/n1Ln3/mGQIz6c= Subject key identifier: 7F:32:66:10:7B:4D:DC:9A:46:BE:33:5D:67:6C:68:7E:14:73:CD:BD Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B2E0C8F80AD83449B5BF99A1E15B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fzJmEHtN3JpGvjNdZ2xofhRzzb0.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397206 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:e0:c8:f8:0a:d8:34:49:b5:bf:99:a1:e1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f3266107b4ddc9a46be335d676c687e1473cdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:eb:9e:9e:76:d1:88:8b:36:07:f8:db:ee: b0:e0:ba:61:97:62:47:c4:e9:cf:5e:a7:5f:99:93: 41:d2:8c:dd:fe:18:81:61:9f:04:9e:02:cd:ba:4c: 24:00:fe:2e:86:b1:1b:e9:53:ea:17:06:04:af:75: 5f:01:65:02:8b:1d:96:f7:e5:de:2f:32:25:5a:77: fd:ac:70:e2:8d:9a:ce:10:8d:95:24:5e:00:b0:1b: 2e:11:ee:94:8f:d0:e2:5c:0d:d1:6c:b3:a5:8c:b2: f8:4b:62:97:54:5e:64:b9:95:ed:11:d0:20:d5:13: 41:64:48:e5:80:2c:80:d8:76:bc:e6:9b:66:43:bf: 20:94:8c:eb:8e:90:60:98:36:ba:8e:f0:5b:f4:dd: 66:49:eb:b5:08:d4:82:93:51:f9:f5:d7:69:42:f7: 8c:41:27:fa:c0:5a:5b:b8:37:70:6a:fe:11:d2:b0: 47:b3:e2:80:5a:9d:d4:62:8a:28:ed:96:6b:2e:44: 98:b1:86:af:c5:fb:41:73:f9:41:25:4c:10:65:d6: 92:4f:f9:15:9c:17:dc:70:ae:3c:89:4e:8b:8c:70: f8:0b:cf:7d:e3:fb:3e:d3:2b:fb:1c:c7:7e:43:d2: 2d:61:4a:99:e6:9c:5d:a4:f1:c9:95:79:b6:84:24: 95:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:66:10:7B:4D:DC:9A:46:BE:33:5D:67:6C:68:7E:14:73:CD:BD X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/fzJmEHtN3JpGvjNdZ2xofhRzzb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 89:d5:6e:bd:5d:e8:56:a9:63:fd:1c:55:67:4c:2b:82:ff:a8: 6b:be:1f:e8:57:c7:a8:4a:74:31:7b:0a:ef:a7:64:c3:45:2c: 8d:e3:5c:ec:4f:33:5e:5d:d5:1b:be:51:3d:92:bd:a0:d0:1e: 73:67:1e:cd:e4:6c:d2:c9:af:49:00:f7:7c:53:c7:1d:89:40: 5f:53:20:7e:4f:4c:51:fa:b2:cc:38:a3:2d:65:58:23:e4:e9: e8:08:fb:8b:9c:e7:b2:0d:a5:7b:c4:fc:af:78:1c:a6:3c:66: bb:8d:df:69:9a:e5:87:ef:75:33:e3:8e:b1:27:e8:dc:d8:1d: 67:34:2d:b0:ff:54:c8:08:6a:11:b0:dc:7d:c6:a7:f2:8e:47: 60:0b:d4:0f:9c:b3:8e:a4:57:2d:c1:b8:38:e0:6f:94:51:6b: d6:37:17:b0:83:99:95:43:2d:cb:f9:20:5a:36:1e:20:37:e9: 64:e3:28:a0:72:eb:61:28:b4:1c:6c:df:6a:0a:e6:00:99:84: 3b:1f:61:b6:3f:a6:49:50:88:4a:bf:9f:16:24:88:2d:b7:2d: b8:75:21:c5:53:64:63:38:da:62:f9:10:5f:51:09:d4:7a:f1: 2f:8b:6e:42:d5:e1:29:e9:ca:8b:b0:c5:40:cd:77:d4:b8:ef: 4c:3f:33:49 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrLgyPgK2DRJtb+ZoeFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjMyNjYxMDdiNGRkYzlhNDZiZTMzNWQ2NzZjNjg3ZTE0NzNjZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yDrnp520YiLNgf42+6w4Lphl2JH xOnPXqdfmZNB0ozd/hiBYZ8EngLNukwkAP4uhrEb6VPqFwYEr3VfAWUCix2W9+Xe LzIlWnf9rHDijZrOEI2VJF4AsBsuEe6Uj9DiXA3RbLOljLL4S2KXVF5kuZXtEdAg 1RNBZEjlgCyA2Ha85ptmQ78glIzrjpBgmDa6jvBb9N1mSeu1CNSCk1H59ddpQveM QSf6wFpbuDdwav4R0rBHs+KAWp3UYooo7ZZrLkSYsYavxftBc/lBJUwQZdaST/kV nBfccK48iU6LjHD4C8994/s+0yv7HMd+Q9ItYUqZ5pxdpPHJlXm2hCSVyQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFH8yZhB7TdyaRr4zXWdsaH4Uc829MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvZnpKbUVIdE4zSnBHdmpOZFoyeG9maFJ6emIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAInVbr1d6FapY/0cVWdMK4L/qGu+H+hX x6hKdDF7Cu+nZMNFLI3jXOxPM15d1Ru+UT2SvaDQHnNnHs3kbNLJr0kA93xTxx2J QF9TIH5PTFH6ssw4oy1lWCPk6egI+4uc57INpXvE/K94HKY8ZruN32ma5YfvdTPj jrEn6NzYHWc0LbD/VMgIahGw3H3Gp/KOR2AL1A+cs46kVy3BuDjgb5RRa9Y3F7CD mZVDLcv5IFo2HiA36WTjKKBy62EotBxs32oK5gCZhDsfYbY/pklQiEq/nxYkiC23 Lbh1IcVTZGM42mL5EF9RCdR68S+LbkLV4SnpyouwxUDNd9S470w/M0k= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:20 2026 by rpki-client