This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lRekSpcLN-YNB68GsQsGdMrpXNA.roa File: lRekSpcLN-YNB68GsQsGdMrpXNA.roa (raw, json) Hash identifier: RjSfVau/KogAxOGA84FsTYby36BtJXyXlr9BNjmPOjc= Subject key identifier: 95:17:A4:4A:97:0B:37:E6:0D:07:AF:06:B1:0B:06:74:CA:E9:5C:D0 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67D84758071FBC18958CCCFA82157 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lRekSpcLN-YNB68GsQsGdMrpXNA.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20431 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7d:84:75:80:71:fb:c1:89:58:cc:cf:a8:21:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9517a44a970b37e60d07af06b10b0674cae95cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:98:dc:a7:96:0d:04:02:ae:b7:af:7c:7c:6d: 66:b7:e7:9a:f4:03:67:87:88:f1:dc:a9:bd:e3:de: e0:4b:2c:e7:9c:7a:f8:08:46:52:53:69:73:fb:ec: af:2e:2d:bc:a2:e4:19:8f:44:82:82:e3:9e:de:30: a6:53:cd:ab:e1:21:b7:6a:9f:12:32:88:4a:08:8e: d4:08:5b:09:15:86:56:eb:5b:3f:46:8f:ee:7e:86: e3:e1:fc:af:d8:de:32:d4:b9:13:04:68:b2:c8:c3: d8:59:c5:2b:51:2b:19:31:0b:e6:43:39:6d:9b:04: c2:b5:ab:fd:fd:89:6b:39:38:22:c5:ce:84:fd:a9: ce:15:99:79:19:fa:3a:0a:27:a4:d5:96:f7:e5:48: 51:4f:14:61:af:cb:aa:7c:02:5e:05:40:87:09:05: 57:ab:5a:2a:f1:6d:a8:96:11:ab:ba:92:47:b8:3d: 72:91:4b:fb:4a:da:8f:b1:da:1c:bb:97:d9:ad:0a: 33:ca:81:e8:69:9b:4a:7b:9d:34:61:3a:e7:71:5a: 1d:6d:fc:f9:b7:9d:c7:42:24:4d:d3:1f:fc:76:c3: 5a:fa:52:e9:97:12:7c:03:3b:53:d6:d8:32:47:e7: a9:65:14:34:e0:58:ed:6f:d1:ec:e6:4a:f4:2c:2b: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:17:A4:4A:97:0B:37:E6:0D:07:AF:06:B1:0B:06:74:CA:E9:5C:D0 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/lRekSpcLN-YNB68GsQsGdMrpXNA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 30:69:b8:15:4d:68:f3:7a:05:0a:70:0b:4d:6a:fb:d0:23:db: 32:02:66:2d:ca:40:e3:1a:45:b5:d0:15:7f:6a:35:1a:58:53: d2:79:f8:23:5c:ec:db:08:17:e1:5c:98:f2:44:f5:61:2d:e0: 90:94:64:a3:4d:43:ae:d6:42:d8:06:ca:84:91:d9:19:e6:c5: 94:c6:9b:c8:a6:3e:d7:73:30:d3:d3:8b:9a:71:b7:6b:98:0c: da:e6:c2:05:ce:9b:3c:a9:24:57:73:c4:c8:e9:d2:5e:9a:ef: 4d:ff:b5:f0:12:7d:65:c2:5f:8b:d9:03:1f:d6:19:d5:63:4a: e9:80:13:a8:99:54:88:c7:9f:53:2e:bc:c6:2d:11:6b:74:58: bc:d2:f7:b5:42:20:bd:b3:f5:2e:ac:7c:88:a8:60:7d:81:0c: ca:4a:b3:d7:c7:e3:bb:77:48:2a:30:04:53:aa:fb:e2:9b:79: 7d:00:e0:48:30:78:1a:40:72:c0:f7:04:70:5f:e4:f1:98:e6: db:c2:f8:b7:b1:e8:31:55:a7:a4:a9:59:d0:29:ba:21:e8:c6: 4a:db:81:fd:1d:a5:25:77:19:90:32:5c:9b:fd:ee:1b:d1:59: fc:c0:71:5b:d7:03:bb:db:2b:d5:c9:4f:32:0d:ef:37:9e:4f: 1e:77:0d:77 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xn2EdYBx+8GJWMzPqCFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTE3YTQ0YTk3MGIzN2U2MGQwN2FmMDZiMTBiMDY3NGNhZTk1Y2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZjcp5YNBAKut698fG1mt+ea9ANn h4jx3Km9497gSyznnHr4CEZSU2lz++yvLi28ouQZj0SCguOe3jCmU82r4SG3ap8S MohKCI7UCFsJFYZW61s/Ro/ufobj4fyv2N4y1LkTBGiyyMPYWcUrUSsZMQvmQzlt mwTCtav9/YlrOTgixc6E/anOFZl5Gfo6Ciek1Zb35UhRTxRhr8uqfAJeBUCHCQVX q1oq8W2olhGrupJHuD1ykUv7StqPsdocu5fZrQozyoHoaZtKe500YTrncVodbfz5 t53HQiRN0x/8dsNa+lLplxJ8AztT1tgyR+epZRQ04Fjtb9Hs5kr0LCtkJQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJUXpEqXCzfmDQevBrELBnTK6VzQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvbFJla1NwY0xOLVlOQjY4R3NRc0dkTXJwWE5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBADBpuBVNaPN6BQpwC01q+9Aj2zICZi3K QOMaRbXQFX9qNRpYU9J5+CNc7NsIF+FcmPJE9WEt4JCUZKNNQ67WQtgGyoSR2Rnm xZTGm8imPtdzMNPTi5pxt2uYDNrmwgXOmzypJFdzxMjp0l6a703/tfASfWXCX4vZ Ax/WGdVjSumAE6iZVIjHn1MuvMYtEWt0WLzS97VCIL2z9S6sfIioYH2BDMpKs9fH 47t3SCowBFOq++KbeX0A4EgweBpAcsD3BHBf5PGY5tvC+Lex6DFVp6SpWdApuiHo xkrbgf0dpSV3GZAyXJv97hvRWfzAcVvXA7vbK9XJTzIN7zeeTx53DXc= -----END CERTIFICATE-----Generated at Mon Jan 26 03:28:00 2026 by rpki-client