This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/l6ItoIrFAwXoag5rEhusd6MPpWc.roa File: l6ItoIrFAwXoag5rEhusd6MPpWc.roa (raw, json) Hash identifier: NVmKhwo48AS7REpj3ozC2612T3yA766+iMa+2axymEk= Subject key identifier: 97:A2:2D:A0:8A:C5:03:05:E8:6A:0E:6B:12:1B:AC:77:A3:0F:A5:67 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B3F19BE1BF77D34A80564DD88731 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/l6ItoIrFAwXoag5rEhusd6MPpWc.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397209 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b3:f1:9b:e1:bf:77:d3:4a:80:56:4d:d8:87:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97a22da08ac50305e86a0e6b121bac77a30fa567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:a3:87:f4:da:cc:41:81:49:ba:e9:c7:b0: bc:f8:f5:6a:2b:a9:6a:dd:98:f9:21:6f:05:15:b0: 1e:74:d0:d3:b6:bb:18:f1:84:34:a6:a6:51:41:8f: ba:27:af:99:d4:f5:63:36:51:9b:a2:26:a5:b1:2b: e5:01:d4:fd:d1:ef:c8:ed:46:c9:0f:06:08:fc:f6: be:33:ed:51:5b:07:2c:c7:73:db:ae:21:67:c7:c4: c8:de:0e:ca:dc:f1:31:f5:fa:09:b5:38:d2:9e:9a: 7b:52:ef:2d:2a:96:3b:70:3c:c6:fa:f6:dd:95:c3: 48:94:06:68:d9:29:a1:04:d8:d1:47:70:39:f6:c1: 18:e6:8d:35:e4:2a:df:5d:59:07:e4:d3:a7:cd:e6: fe:cf:5d:55:e3:76:3f:da:bf:e6:f4:05:59:f7:c6: 04:8f:e5:f7:65:e8:bc:aa:eb:6b:dc:75:98:0e:de: eb:bf:2f:00:ea:64:30:56:96:17:11:6c:2c:5c:18: ff:25:25:e5:33:d5:29:3b:04:d2:5c:63:76:21:34: 3d:29:1b:ab:f1:12:00:29:0b:fc:be:b0:86:7f:e0: 41:48:c3:e3:5b:96:cd:c4:29:34:a9:8c:fc:78:b7: 9b:bd:ad:a4:fc:f4:65:33:d3:b0:98:85:55:ac:2a: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A2:2D:A0:8A:C5:03:05:E8:6A:0E:6B:12:1B:AC:77:A3:0F:A5:67 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/l6ItoIrFAwXoag5rEhusd6MPpWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 5e:ce:62:1e:50:e9:9a:6b:d4:a6:fc:19:ac:18:9a:ed:99:39: d0:31:94:64:9c:1e:0a:27:90:28:b6:69:a1:ac:18:ac:55:a1: 2f:67:30:c1:dd:f9:33:fe:36:19:2a:1d:58:68:5d:d3:1e:c8: 39:38:2e:8e:86:e9:3e:99:3a:0b:26:52:37:c3:59:bb:a1:54: 07:79:a7:80:e5:bd:80:cc:1e:2c:29:c8:2d:6a:81:00:2b:e9: fe:c1:d6:94:c5:b5:23:16:d2:c7:41:88:4f:a0:78:ab:86:f9: 53:86:43:8a:ea:60:fd:b2:8c:61:88:14:1c:4f:17:80:79:eb: 69:42:9c:15:51:ee:e0:62:0f:06:6a:22:2c:2e:90:4f:05:49: 83:ce:55:32:4d:10:ad:62:6a:b3:a6:de:6a:31:8b:78:0e:45: 6f:4a:fc:70:a9:00:9e:fb:0a:ec:bb:99:61:a4:ed:1f:97:b2: 4b:ae:2e:cc:09:4e:14:b8:eb:76:a1:c2:89:a3:b9:3d:3c:26: 19:2a:1e:2c:fd:87:42:ba:b8:03:d3:55:86:51:96:ec:4a:b5: 54:d6:5c:c8:db:b3:99:f1:8e:e7:61:11:69:b3:e8:31:64:0b: ca:bd:c9:17:75:60:44:32:3a:97:8a:79:b8:db:15:ed:ef:7f: d3:e6:8f:98 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrPxm+G/d9NKgFZN2IcxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2EyMmRhMDhhYzUwMzA1ZTg2YTBlNmIxMjFiYWM3N2EzMGZhNTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJejh/TazEGBSbrpx7C8+PVqK6lq 3Zj5IW8FFbAedNDTtrsY8YQ0pqZRQY+6J6+Z1PVjNlGboialsSvlAdT90e/I7UbJ DwYI/Pa+M+1RWwcsx3PbriFnx8TI3g7K3PEx9foJtTjSnpp7Uu8tKpY7cDzG+vbd lcNIlAZo2SmhBNjRR3A59sEY5o015CrfXVkH5NOnzeb+z11V43Y/2r/m9AVZ98YE j+X3Zei8qutr3HWYDt7rvy8A6mQwVpYXEWwsXBj/JSXlM9UpOwTSXGN2ITQ9KRur 8RIAKQv8vrCGf+BBSMPjW5bNxCk0qYz8eLebva2k/PRlM9OwmIVVrCr2EQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJeiLaCKxQMF6GoOaxIbrHejD6VnMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvbDZJdG9JckZBd1hvYWc1ckVodXNkNk1QcFdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAF7OYh5Q6Zpr1Kb8GawYmu2ZOdAxlGSc HgonkCi2aaGsGKxVoS9nMMHd+TP+NhkqHVhoXdMeyDk4Lo6G6T6ZOgsmUjfDWbuh VAd5p4DlvYDMHiwpyC1qgQAr6f7B1pTFtSMW0sdBiE+geKuG+VOGQ4rqYP2yjGGI FBxPF4B562lCnBVR7uBiDwZqIiwukE8FSYPOVTJNEK1iarOm3moxi3gORW9K/HCp AJ77Cuy7mWGk7R+XskuuLswJThS463ahwomjuT08JhkqHiz9h0K6uAPTVYZRluxK tVTWXMjbs5nxjudhEWmz6DFkC8q9yRd1YEQyOpeKebjbFe3vf9Pmj5g= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:44 2026 by rpki-client