This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kMGp7vUTf8kNbJtAs2LdLxS2xJ8.roa File: kMGp7vUTf8kNbJtAs2LdLxS2xJ8.roa (raw, json) Hash identifier: MJ9g0w4cQgVzvpEyVSNHbKNXaFNFTIT010qiAjfdDl4= Subject key identifier: 90:C1:A9:EE:F5:13:7F:C9:0D:6C:9B:40:B3:62:DD:2F:14:B6:C4:9F Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B3AC2518484B8F1C0289AD6D330B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kMGp7vUTf8kNbJtAs2LdLxS2xJ8.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397208 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b3:ac:25:18:48:4b:8f:1c:02:89:ad:6d:33:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90c1a9eef5137fc90d6c9b40b362dd2f14b6c49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:1d:98:27:1d:66:00:73:ea:14:95:73:29: 7b:2b:3b:ff:a2:cb:31:4f:ba:b4:0f:cc:dd:3a:13: db:d5:51:05:10:dd:6d:04:48:25:31:00:ec:12:91: 00:9d:ac:2b:52:87:51:7f:34:85:cf:00:af:ba:32: b3:ae:a2:a6:65:c3:e7:34:f4:b3:a7:f0:65:29:35: d2:62:e3:65:27:b9:4b:24:a7:db:f8:b3:15:29:93: 55:5a:c5:01:b2:18:00:c9:0a:0a:03:12:7f:f6:14: 2e:57:b3:f8:c3:d1:18:6f:0b:94:c2:b6:ce:71:b7: cf:e3:6e:5c:ab:89:d7:31:c3:ec:5f:10:2b:06:64: fd:4c:23:cd:01:36:33:60:ca:aa:85:c8:0a:f4:14: 3c:7c:d0:dc:40:7e:0e:f5:b9:cb:60:04:17:83:41: 84:49:8f:df:65:5c:34:5f:d6:63:ac:9c:5f:ce:be: fc:08:2d:a9:66:49:b8:c0:61:05:36:61:e7:42:01: d3:8d:3d:b4:ab:09:4a:bb:59:25:a3:79:0e:d6:17: b9:47:fd:b1:44:e9:21:ff:e2:72:29:70:b4:94:81: 2c:ad:af:0a:b3:08:e4:1d:14:eb:b9:eb:04:52:1b: 4a:81:58:c2:3c:ee:2d:6b:1c:7a:f1:5d:7b:ab:89: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C1:A9:EE:F5:13:7F:C9:0D:6C:9B:40:B3:62:DD:2F:14:B6:C4:9F X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kMGp7vUTf8kNbJtAs2LdLxS2xJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption a9:80:14:da:c3:b0:39:35:6e:56:ab:60:89:96:71:79:ea:d2: 1f:2f:79:bd:d5:0b:7e:66:2f:31:bf:40:08:a8:1f:26:f5:21: 9a:18:a9:7a:2f:25:18:b3:ee:f8:46:fc:c0:f7:74:19:44:bd: cd:bd:2a:be:30:81:af:53:a9:d4:99:b0:33:7b:35:f6:cf:bd: b7:02:ce:e3:44:f8:d2:8d:32:23:ed:a2:a6:8d:23:ef:6c:bb: 53:cb:08:08:6a:7e:44:d7:9d:4a:a5:c0:3b:4b:cc:7f:87:01: 9a:01:e4:3e:fa:f3:bd:fc:91:6e:01:35:04:7e:8e:1e:a9:82: e6:fc:f2:57:ea:0d:09:83:b4:a9:10:ea:d0:67:06:be:81:41: 4a:87:ff:d4:ff:ba:84:ef:c2:30:29:c5:2e:0f:5a:37:9a:3a: 6c:d0:db:60:76:43:ec:78:1a:99:6e:75:1d:a8:8c:8a:97:33: 65:00:a7:ef:8e:c7:7e:37:91:3c:0a:9f:39:e3:7f:9f:16:30: 3d:06:c2:54:bc:61:bc:ea:a5:63:b8:57:f3:96:18:dc:b0:57: 29:fd:65:b2:07:55:c3:c2:bb:de:1e:28:55:f2:1d:52:64:44: d2:75:13:4a:3f:b9:26:88:e2:e2:da:32:c5:0f:0d:40:3c:43: a0:bf:34:31 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrOsJRhIS48cAomtbTMLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGMxYTllZWY1MTM3ZmM5MGQ2YzliNDBiMzYyZGQyZjE0YjZjNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqYdmCcdZgBz6hSVcyl7Kzv/ossx T7q0D8zdOhPb1VEFEN1tBEglMQDsEpEAnawrUodRfzSFzwCvujKzrqKmZcPnNPSz p/BlKTXSYuNlJ7lLJKfb+LMVKZNVWsUBshgAyQoKAxJ/9hQuV7P4w9EYbwuUwrbO cbfP425cq4nXMcPsXxArBmT9TCPNATYzYMqqhcgK9BQ8fNDcQH4O9bnLYAQXg0GE SY/fZVw0X9ZjrJxfzr78CC2pZkm4wGEFNmHnQgHTjT20qwlKu1klo3kO1he5R/2x ROkh/+JyKXC0lIEsra8KswjkHRTruesEUhtKgVjCPO4taxx68V17q4mB7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJDBqe71E3/JDWybQLNi3S8UtsSfMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEva01HcDd2VVRmOGtOYkp0QXMyTGRMeFMyeEo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAKmAFNrDsDk1blarYImWcXnq0h8veb3V C35mLzG/QAioHyb1IZoYqXovJRiz7vhG/MD3dBlEvc29Kr4wga9TqdSZsDN7NfbP vbcCzuNE+NKNMiPtoqaNI+9su1PLCAhqfkTXnUqlwDtLzH+HAZoB5D768738kW4B NQR+jh6pgub88lfqDQmDtKkQ6tBnBr6BQUqH/9T/uoTvwjApxS4PWjeaOmzQ22B2 Q+x4GpludR2ojIqXM2UAp++Ox343kTwKnznjf58WMD0GwlS8YbzqpWO4V/OWGNyw Vyn9ZbIHVcPCu94eKFXyHVJkRNJ1E0o/uSaI4uLaMsUPDUA8Q6C/NDE= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:40 2026 by rpki-client