This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i8oolpbqan-NIl-fSPAuz0aiCoM.roa File: i8oolpbqan-NIl-fSPAuz0aiCoM.roa (raw, json) Hash identifier: ijiJ74T8qCLnZbtxaEuAzyuzbITou5hz8xyakm3aJGg= Subject key identifier: 8B:CA:28:96:96:EA:6A:7F:8D:22:5F:9F:48:F0:2E:CF:46:A2:0A:83 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A177DCE3E0554BB362DA9419CAF9 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i8oolpbqan-NIl-fSPAuz0aiCoM.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396599 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a1:77:dc:e3:e0:55:4b:b3:62:da:94:19:ca:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bca289696ea6a7f8d225f9f48f02ecf46a20a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:e9:b7:1d:1e:8e:3a:42:71:5f:21:76:2f: 0e:01:40:44:a5:b8:39:50:9a:8d:4f:22:4f:23:d1: 19:93:9d:3d:b4:8d:f8:54:a8:28:e1:80:5d:08:e7: 2c:a9:a9:9f:95:51:fb:89:9d:e9:5a:04:e3:7f:83: 3d:2e:34:5e:04:39:01:df:7b:70:ea:72:67:77:9f: 0a:ea:3b:8d:fe:78:36:e0:ea:b5:fd:dd:84:56:c9: 64:6d:8d:3d:8e:62:83:0c:b0:dd:3e:4d:20:8d:b5: 70:3e:89:13:84:bb:fb:6c:f7:fb:8b:bf:46:ea:10: f9:c5:f1:87:f7:00:3f:16:c5:6c:19:09:41:91:f2: b0:83:65:9d:a2:05:84:14:92:96:3d:32:5a:58:06: 78:c5:8f:14:ac:ff:54:0e:ff:20:1a:51:e6:0a:1b: 8b:97:ea:92:8b:56:88:3d:45:b7:09:6f:1d:10:67: d8:3b:34:ff:32:a3:f1:a1:ae:1b:56:14:dd:e9:55: 18:69:41:6e:da:66:01:4a:03:46:b4:ad:0e:70:0b: bd:63:f6:fc:59:25:b0:ee:ad:87:64:4b:66:eb:bb: 12:7a:59:cb:7d:e2:66:88:e0:1f:ed:c8:e0:76:81: 97:74:d0:ac:2d:24:77:13:10:13:bc:3f:55:2e:6a: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CA:28:96:96:EA:6A:7F:8D:22:5F:9F:48:F0:2E:CF:46:A2:0A:83 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/i8oolpbqan-NIl-fSPAuz0aiCoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 88:bc:96:49:82:3f:19:51:a4:be:e6:b1:2e:c8:ce:0f:76:6c: d0:c2:ca:02:82:2c:c1:bb:9b:9a:b5:db:86:49:b6:f2:df:11: 45:c9:fd:2f:61:aa:ec:c4:2c:62:0f:7e:7b:4a:f9:dd:0a:a4: c4:26:f1:fc:ec:18:22:b3:9d:71:1f:f8:16:4b:ca:fe:5f:93: 5f:c1:0e:1d:00:c6:5e:99:c3:53:76:1b:df:b9:9e:25:ab:81: b8:60:5f:4e:66:f2:3e:44:e5:c0:a5:d9:92:07:95:1b:0d:8e: cd:21:59:a3:ec:6d:26:4e:88:cb:60:b3:fd:0f:23:f1:1b:d8: 47:6b:ec:0b:99:58:cb:9d:60:e7:0c:0a:75:03:7f:40:5f:f9: a0:a9:e3:d9:1e:1a:27:10:be:b2:bb:c6:d9:0b:37:40:eb:1a: 30:95:df:6b:5e:ec:45:27:e0:c5:a6:ff:44:ab:d7:9c:ca:99: 75:1a:6c:62:88:b6:32:76:89:2a:db:9b:e8:b3:09:13:9f:07: 91:e7:e6:f5:e0:bb:4d:50:a8:c8:51:7d:12:83:30:e9:0c:db: 60:d1:11:44:30:01:0b:e9:71:eb:d3:bf:a3:c9:33:71:26:3b: 18:85:af:bd:b5:30:57:b0:34:c4:94:41:a6:37:47:a3:0c:b8: c6:aa:1a:1f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqF33OPgVUuzYtqUGcr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmNhMjg5Njk2ZWE2YTdmOGQyMjVmOWY0OGYwMmVjZjQ2YTIwYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswjptx0ejjpCcV8hdi8OAUBEpbg5 UJqNTyJPI9EZk509tI34VKgo4YBdCOcsqamflVH7iZ3pWgTjf4M9LjReBDkB33tw 6nJnd58K6juN/ng24Oq1/d2EVslkbY09jmKDDLDdPk0gjbVwPokThLv7bPf7i79G 6hD5xfGH9wA/FsVsGQlBkfKwg2WdogWEFJKWPTJaWAZ4xY8UrP9UDv8gGlHmChuL l+qSi1aIPUW3CW8dEGfYOzT/MqPxoa4bVhTd6VUYaUFu2mYBSgNGtK0OcAu9Y/b8 WSWw7q2HZEtm67sSelnLfeJmiOAf7cjgdoGXdNCsLSR3ExATvD9VLmofcwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIvKKJaW6mp/jSJfn0jwLs9GogqDMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvaThvb2xwYnFhbi1OSWwtZlNQQXV6MGFpQ29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIi8lkmCPxlRpL7msS7Izg92bNDCygKC LMG7m5q124ZJtvLfEUXJ/S9hquzELGIPfntK+d0KpMQm8fzsGCKznXEf+BZLyv5f k1/BDh0Axl6Zw1N2G9+5niWrgbhgX05m8j5E5cCl2ZIHlRsNjs0hWaPsbSZOiMtg s/0PI/Eb2Edr7AuZWMudYOcMCnUDf0Bf+aCp49keGicQvrK7xtkLN0DrGjCV32te 7EUn4MWm/0Sr15zKmXUabGKItjJ2iSrbm+izCROfB5Hn5vXgu01QqMhRfRKDMOkM 22DREUQwAQvpcevTv6PJM3EmOxiFr721MFewNMSUQaY3R6MMuMaqGh8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:36 2026 by rpki-client