This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kWUxQey9ZpcAlk4Ohkprtvf-6T4.roa File: kWUxQey9ZpcAlk4Ohkprtvf-6T4.roa (raw, json) Hash identifier: fgdKwT1A24snSEpvOA8egbGgyAs24at5bYkFbB7gPFQ= Subject key identifier: 91:65:31:41:EC:BD:66:97:00:96:4E:0E:86:4A:6B:B6:F7:FE:E9:3E Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A85A9950C95A5C9E64D3A307E04B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kWUxQey9ZpcAlk4Ohkprtvf-6T4.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396614 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a8:5a:99:50:c9:5a:5c:9e:64:d3:a3:07:e0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91653141ecbd669700964e0e864a6bb6f7fee93e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:22:1e:99:21:95:40:59:cf:a3:c6:8c:9c:e5: 5c:6f:9d:16:4c:fc:57:28:33:8a:5f:b4:8d:f6:6b: 5c:29:90:97:d4:5a:24:4c:d9:69:81:64:bb:e0:47: 96:80:44:9b:27:53:dc:79:f7:1d:20:9d:26:04:89: ae:44:c1:c6:e0:c0:cd:a8:77:5c:da:66:14:35:08: 48:70:5f:34:c4:ea:5b:79:ec:1d:aa:61:8f:d7:5c: 61:2a:26:dc:d5:07:a8:f8:50:c5:d0:ac:d8:80:60: 5c:31:53:b2:36:2d:df:75:10:78:7f:e0:0d:ae:22: 0e:7c:e8:81:0f:40:10:4f:fa:42:d0:e9:4d:d0:43: ae:14:9c:16:dd:9a:0d:65:09:16:e0:3d:c1:4a:28: f9:55:fb:5b:68:81:40:d7:99:f4:82:bb:e4:bc:d4: 42:b7:99:6f:d1:b1:d5:f6:a5:b1:15:87:00:00:46: db:ed:7c:1d:4c:a8:b3:2b:de:0d:c7:1c:0d:51:02: 09:3b:d8:3e:ee:72:c1:7f:ad:d8:eb:a5:9d:65:24: 7f:0d:ca:58:5d:7f:75:64:ec:50:7a:41:d7:c6:1a: 91:18:a0:5c:13:58:eb:f4:44:4f:a8:4a:e7:75:55: 0a:48:9e:c6:6f:6f:11:64:f7:cb:42:ea:d3:c6:84: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:31:41:EC:BD:66:97:00:96:4E:0E:86:4A:6B:B6:F7:FE:E9:3E X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/kWUxQey9ZpcAlk4Ohkprtvf-6T4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 63:e5:73:2b:6d:11:19:6e:3a:a8:2f:13:70:5f:ff:20:39:1f: 2e:15:45:79:ea:41:92:97:a7:8d:56:4e:1d:ce:d2:0d:1d:76: c5:7a:ab:ea:ea:63:46:d7:2e:5f:9d:4d:20:d3:22:bb:3c:47: 84:fa:6c:2f:d5:c0:01:2d:81:9a:c2:01:e3:38:17:4c:ea:57: 30:1a:d7:61:e4:6b:c5:bf:c3:87:8c:6e:e2:7f:50:23:eb:8a: cf:76:f2:ad:9a:bb:06:b0:95:d1:21:68:1e:ad:d3:46:89:47: 3c:38:26:ee:1d:dd:e8:f0:25:3c:68:66:0d:53:ba:b7:1b:45: 85:50:79:0d:f4:b8:b8:64:3f:89:3f:a1:66:15:ac:03:7c:e3: b7:81:a9:8d:61:f2:4e:1d:72:50:26:14:6d:55:4f:a8:fe:c1: 10:4e:3a:59:fb:bc:dd:21:5b:08:91:83:ed:2f:28:b4:85:24: 0f:c2:62:f4:57:e7:f2:0b:d5:e6:21:86:cb:26:4d:6e:64:91: 2e:f4:34:2e:34:56:a9:b0:66:52:f3:54:55:2f:f2:d8:4d:ec: f4:ac:97:e3:40:25:fe:39:bb:a0:8c:44:1f:c9:e8:48:4e:a7: 20:1f:dd:4f:71:ed:21:4e:9b:a8:01:35:2a:0d:01:3e:bf:bd: 1c:b9:94:87 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqhamVDJWlyeZNOjB+BLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTY1MzE0MWVjYmQ2Njk3MDA5NjRlMGU4NjRhNmJiNmY3ZmVlOTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiIemSGVQFnPo8aMnOVcb50WTPxX KDOKX7SN9mtcKZCX1FokTNlpgWS74EeWgESbJ1PcefcdIJ0mBImuRMHG4MDNqHdc 2mYUNQhIcF80xOpbeewdqmGP11xhKibc1Qeo+FDF0KzYgGBcMVOyNi3fdRB4f+AN riIOfOiBD0AQT/pC0OlN0EOuFJwW3ZoNZQkW4D3BSij5VftbaIFA15n0grvkvNRC t5lv0bHV9qWxFYcAAEbb7XwdTKizK94NxxwNUQIJO9g+7nLBf63Y66WdZSR/DcpY XX91ZOxQekHXxhqRGKBcE1jr9ERPqErndVUKSJ7Gb28RZPfLQurTxoSMlQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJFlMUHsvWaXAJZODoZKa7b3/uk+MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEva1dVeFFleTlacGNBbGs0T2hrcHJ0dmYtNlQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGPlcyttERluOqgvE3Bf/yA5Hy4VRXnq QZKXp41WTh3O0g0ddsV6q+rqY0bXLl+dTSDTIrs8R4T6bC/VwAEtgZrCAeM4F0zq VzAa12Hka8W/w4eMbuJ/UCPris928q2auwawldEhaB6t00aJRzw4Ju4d3ejwJTxo Zg1TurcbRYVQeQ30uLhkP4k/oWYVrAN847eBqY1h8k4dclAmFG1VT6j+wRBOOln7 vN0hWwiRg+0vKLSFJA/CYvRX5/IL1eYhhssmTW5kkS70NC40VqmwZlLzVFUv8thN 7PSsl+NAJf45u6CMRB/J6EhOpyAf3U9x7SFOm6gBNSoNAT6/vRy5lIc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:39 2026 by rpki-client