This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jS-zqSgS4vdBNFXlihhQZQtNeLM.roa File: jS-zqSgS4vdBNFXlihhQZQtNeLM.roa (raw, json) Hash identifier: TGbHol3oNo9G8tFYCR1GtYTQS7H9aiB07yl+zwdVbB0= Subject key identifier: 8D:2F:B3:A9:28:12:E2:F7:41:34:55:E5:8A:18:50:65:0B:4D:78:B3 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A442E1DC7BEF1CAB91E6F6E63E06 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jS-zqSgS4vdBNFXlihhQZQtNeLM.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396608 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a4:42:e1:dc:7b:ef:1c:ab:91:e6:f6:e6:3e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d2fb3a92812e2f7413455e58a1850650b4d78b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0d:1f:3c:42:d2:c1:7d:c0:0f:2a:7d:15:1b: 77:5a:8f:98:dd:73:1d:d1:99:d6:9e:aa:5c:b4:14: f0:e6:74:15:0d:a2:96:6a:0d:4d:1f:43:9c:3a:5d: 6f:1e:00:29:ae:d8:af:c5:d9:ae:de:0c:5c:35:11: ff:1d:0a:83:4e:33:9c:b6:cc:50:90:91:31:a7:b5: 88:6d:6d:40:51:dd:40:31:f8:9b:d1:46:7d:98:0b: a3:11:75:a8:8a:5e:5f:d1:ac:1c:47:64:29:93:8f: 3f:44:a9:88:92:9f:fc:a6:83:fd:6e:41:c7:b3:ef: c7:9b:c1:6f:c5:19:97:39:c3:98:13:2c:12:e8:1d: b3:7d:5e:c2:e8:97:a8:23:be:af:76:1d:42:bb:0e: 82:70:cc:bb:97:69:8f:88:4a:fd:98:50:db:9b:e9: ac:5f:1a:5f:46:3f:cf:f1:96:19:0f:e8:4c:6e:b7: a5:d7:41:9b:58:77:26:b5:35:70:ab:d4:7d:08:06: 16:eb:8c:1a:67:b0:2b:80:54:85:7e:ef:eb:29:10: fc:46:f5:0c:b6:1a:19:d9:c9:41:65:ea:1c:98:be: 2d:69:4d:51:51:54:bd:2b:57:9f:c2:c1:6e:f3:c8: 84:c0:1f:cd:2e:1b:95:12:08:da:92:42:15:44:e8: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2F:B3:A9:28:12:E2:F7:41:34:55:E5:8A:18:50:65:0B:4D:78:B3 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/jS-zqSgS4vdBNFXlihhQZQtNeLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 8b:30:93:b0:e7:9b:98:58:e1:29:05:cd:fe:7d:21:7b:7c:ee: 78:88:44:cf:ed:53:18:42:f4:78:32:c1:5f:f6:66:dd:b4:fb: 49:b7:4a:eb:dc:e9:8c:76:dc:bd:ab:7b:fc:08:fa:3a:ff:95: 8b:ab:25:f6:8a:6e:cb:63:8e:b0:6c:1c:cb:c0:26:91:0a:2d: 9c:87:06:28:79:5a:8b:f6:96:10:8a:93:90:0f:6f:68:80:24: 9d:78:f8:48:9a:e9:de:fc:eb:af:3b:e1:39:02:44:37:0f:06: 82:00:b7:9e:d7:fa:a3:ba:a3:3b:2c:ed:d8:61:64:ad:29:4d: cc:8a:5b:a9:4f:61:8c:90:4f:1e:b9:1b:f8:91:97:ce:c2:cb: 98:e2:4d:2b:f6:03:36:cb:78:fa:2f:88:41:3e:0f:54:73:14: e9:e5:b7:fa:93:4c:20:d3:85:60:37:77:ac:a4:a8:82:78:c5: 89:65:55:64:30:35:15:af:d6:6e:25:64:fb:8a:0b:9b:75:25: fa:2e:ae:7d:de:d5:e0:67:09:12:06:e7:a6:02:03:5a:fe:b9: 22:2f:c9:7a:31:76:28:c9:e7:13:e1:88:af:87:b9:5e:97:d4: 4d:66:7b:b3:a8:cd:8b:00:7d:d4:8c:8c:13:b4:67:4e:51:eb: 8f:49:93:5f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqRC4dx77xyrkeb25j4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDJmYjNhOTI4MTJlMmY3NDEzNDU1ZTU4YTE4NTA2NTBiNGQ3OGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A0fPELSwX3ADyp9FRt3Wo+Y3XMd 0ZnWnqpctBTw5nQVDaKWag1NH0OcOl1vHgAprtivxdmu3gxcNRH/HQqDTjOctsxQ kJExp7WIbW1AUd1AMfib0UZ9mAujEXWoil5f0awcR2Qpk48/RKmIkp/8poP9bkHH s+/Hm8FvxRmXOcOYEywS6B2zfV7C6JeoI76vdh1Cuw6CcMy7l2mPiEr9mFDbm+ms XxpfRj/P8ZYZD+hMbrel10GbWHcmtTVwq9R9CAYW64waZ7ArgFSFfu/rKRD8RvUM thoZ2clBZeocmL4taU1RUVS9K1efwsFu88iEwB/NLhuVEgjakkIVROj2BQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFI0vs6koEuL3QTRV5YoYUGULTXizMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvalMtenFTZ1M0dmRCTkZYbGloaFFaUXROZUxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAIswk7Dnm5hY4SkFzf59IXt87niIRM/t UxhC9HgywV/2Zt20+0m3Suvc6Yx23L2re/wI+jr/lYurJfaKbstjjrBsHMvAJpEK LZyHBih5Wov2lhCKk5APb2iAJJ14+Eia6d7866874TkCRDcPBoIAt57X+qO6ozss 7dhhZK0pTcyKW6lPYYyQTx65G/iRl87Cy5jiTSv2AzbLePoviEE+D1RzFOnlt/qT TCDThWA3d6ykqIJ4xYllVWQwNRWv1m4lZPuKC5t1Jfourn3e1eBnCRIG56YCA1r+ uSIvyXoxdijJ5xPhiK+HuV6X1E1me7OozYsAfdSMjBO0Z05R649Jk18= -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:52 2026 by rpki-client