This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lRY47qSQmgJ_joMyd1MPCtZ03qs.roa File: lRY47qSQmgJ_joMyd1MPCtZ03qs.roa (raw, json) Hash identifier: Ut5Gh77LvOhLH0X82UhgUguPUyR2UXYc6Zcsn/DwAHg= Subject key identifier: 95:16:38:EE:A4:90:9A:02:7F:8E:83:32:77:53:0F:0A:D6:74:DE:AB Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AF114D542740FA6E2B6760D9D9DB Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lRY47qSQmgJ_joMyd1MPCtZ03qs.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397199 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:af:11:4d:54:27:40:fa:6e:2b:67:60:d9:d9:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951638eea4909a027f8e833277530f0ad674deab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:22:ec:f4:00:88:02:30:28:40:8a:8e:27: 64:88:61:d8:4f:31:00:05:98:75:4e:5e:78:ec:b2: 33:e8:b2:37:08:43:b8:d2:45:fe:c7:85:dc:18:bb: cf:9b:9e:a8:58:5a:9d:60:35:1e:37:12:55:aa:33: bc:89:4e:08:75:92:3f:03:1c:f6:33:36:fe:93:40: d4:da:30:05:91:74:78:ba:d5:a3:4a:10:f7:6f:4e: ef:a4:d8:1b:a7:bb:78:ed:6d:0b:80:fa:6a:54:c2: 0d:84:52:e7:a6:e8:1c:5a:93:6c:dd:1e:17:83:e0: 3c:29:fe:81:6e:d7:f7:2f:6b:b7:14:4d:b8:ae:41: fe:1a:cb:e5:1a:2f:ea:8d:84:74:3d:5c:b0:b3:3c: 08:af:6f:8f:94:46:78:12:4c:d8:ef:ce:42:b3:e3: 1c:db:3e:05:dd:12:a7:e0:d5:ff:2a:b1:fc:72:49: f3:93:35:4b:e6:fc:ee:33:57:73:87:d6:f7:82:85: 59:ae:38:bd:1a:e3:e8:c4:e6:86:e5:fd:e1:f5:d7: f7:cf:ad:85:13:aa:0a:87:f2:9a:7d:1f:35:21:4e: 5f:f6:e6:8c:c7:11:2c:cf:2a:6f:5f:e9:6c:ad:08: 19:13:33:30:f6:a5:37:83:53:48:17:a5:d7:36:d2: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:16:38:EE:A4:90:9A:02:7F:8E:83:32:77:53:0F:0A:D6:74:DE:AB X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lRY47qSQmgJ_joMyd1MPCtZ03qs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 97:c0:15:84:ef:fd:79:5e:03:4a:d9:ce:38:8d:20:c3:49:7e: b7:b9:7a:91:5c:29:30:ee:a0:e9:72:94:93:d9:02:f0:a8:2a: ab:92:87:66:d2:a6:48:a6:6d:be:06:04:fc:73:f1:0f:a2:ac: 09:49:04:d6:28:2f:4f:42:bf:e3:fc:91:e4:d6:e0:03:38:3b: ca:ca:bc:4f:5c:fb:db:ae:57:70:6b:f1:bb:6c:6e:c3:83:1f: 13:59:47:b0:02:94:d5:7d:20:90:75:52:4c:40:3f:cb:3e:2b: e4:90:44:ea:16:04:3d:12:85:84:fc:c8:0a:17:5a:99:bb:b9: ab:05:85:91:c9:05:c1:20:a7:c0:3d:9f:5d:37:60:75:ef:18: 49:05:66:e3:6f:5e:b5:44:89:ba:20:1a:16:d5:3a:ee:d1:d7: 7f:cd:4a:71:dc:d6:06:08:0b:17:d5:75:6b:3a:1b:79:2c:45: b2:05:45:c1:2c:5f:cb:91:ce:1f:f2:cf:67:7f:c8:12:e0:01: b3:62:ff:51:03:d3:a5:ad:a4:7c:a5:e7:1e:20:11:26:c4:da: 48:a6:7b:df:05:23:53:0b:6e:3c:45:33:e1:de:e9:a6:e5:22: da:d4:8a:d6:f4:7e:d8:f0:c5:f6:36:59:9b:94:6d:bf:da:39: e6:f5:f6:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xq8RTVQnQPpuK2dg2dnbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTE2MzhlZWE0OTA5YTAyN2Y4ZTgzMzI3NzUzMGYwYWQ2NzRkZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynwi7PQAiAIwKECKjidkiGHYTzEA BZh1Tl547LIz6LI3CEO40kX+x4XcGLvPm56oWFqdYDUeNxJVqjO8iU4IdZI/Axz2 Mzb+k0DU2jAFkXR4utWjShD3b07vpNgbp7t47W0LgPpqVMINhFLnpugcWpNs3R4X g+A8Kf6Bbtf3L2u3FE24rkH+GsvlGi/qjYR0PVywszwIr2+PlEZ4EkzY785Cs+Mc 2z4F3RKn4NX/KrH8cknzkzVL5vzuM1dzh9b3goVZrji9GuPoxOaG5f3h9df3z62F E6oKh/KafR81IU5f9uaMxxEszypvX+lsrQgZEzMw9qU3g1NIF6XXNtLqlwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJUWOO6kkJoCf46DMndTDwrWdN6rMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvbFJZNDdxU1FtZ0pfam9NeWQxTVBDdFowM3FzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJfAFYTv/XleA0rZzjiNIMNJfre5epFc KTDuoOlylJPZAvCoKquSh2bSpkimbb4GBPxz8Q+irAlJBNYoL09Cv+P8keTW4AM4 O8rKvE9c+9uuV3Br8btsbsODHxNZR7AClNV9IJB1UkxAP8s+K+SQROoWBD0ShYT8 yAoXWpm7uasFhZHJBcEgp8A9n103YHXvGEkFZuNvXrVEibogGhbVOu7R13/NSnHc 1gYICxfVdWs6G3ksRbIFRcEsX8uRzh/yz2d/yBLgAbNi/1ED06WtpHyl5x4gESbE 2kime98FI1MLbjxFM+He6ablItrUitb0ftjwxfY2WZuUbb/aOeb19oI= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:33 2026 by rpki-client