This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mHSYtv3VIyS1W42DZveKtQHFUUI.roa File: mHSYtv3VIyS1W42DZveKtQHFUUI.roa (raw, json) Hash identifier: iVYNvi5pwsVKiIaKc9gD00TuXGiDIh1KOhdaIHGs3fY= Subject key identifier: 98:74:98:B6:FD:D5:23:24:B5:5B:8D:83:66:F7:8A:B5:01:C5:51:42 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B4A9A7B203CCC74FBE2AD9026172 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mHSYtv3VIyS1W42DZveKtQHFUUI.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397211 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b4:a9:a7:b2:03:cc:c7:4f:be:2a:d9:02:61:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=987498b6fdd52324b55b8d8366f78ab501c55142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7a:39:3e:84:0e:fe:64:33:72:73:03:9a:52: 39:ed:2e:63:27:68:96:e0:6f:cd:11:0f:d5:3e:61: 83:32:19:fc:9c:18:34:d7:1d:f5:3c:68:25:e0:58: 20:a2:52:04:f9:ea:33:db:c5:96:8b:75:ea:36:10: aa:dd:72:53:f3:5b:98:60:33:e0:74:29:3b:8e:d3: e2:dd:05:a8:24:50:26:69:bd:7f:f9:a4:c1:39:07: ef:f3:66:b2:8a:f3:94:eb:69:43:d8:9a:98:0e:ff: 54:ca:29:3b:c6:6d:85:05:7d:19:e1:0c:ef:22:2e: 27:a3:26:dd:dd:fa:1c:10:66:45:bd:16:9a:27:ca: 2f:f5:a5:a2:da:a2:45:f7:88:e9:ef:21:da:28:ff: a8:b6:ef:c6:3a:d3:a8:d8:33:51:ae:6b:79:91:d1: 87:01:6d:f3:f1:b2:9b:d1:1a:c9:fa:5a:1b:51:01: 23:5b:83:a5:05:41:17:cf:79:d9:57:47:54:fd:f9: 57:bb:3c:75:8b:a9:35:11:d4:13:45:ae:2f:1b:ee: bd:8d:07:86:b8:c0:c8:20:e7:f2:7c:ef:69:fa:fe: da:7c:47:8d:7a:6f:96:73:52:20:70:ec:23:4f:8b: aa:43:1b:46:cd:c0:8b:02:8a:21:97:63:40:4d:10: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:98:B6:FD:D5:23:24:B5:5B:8D:83:66:F7:8A:B5:01:C5:51:42 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mHSYtv3VIyS1W42DZveKtQHFUUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 68:d3:89:d6:3e:8f:54:ea:a7:af:88:74:b1:16:8a:d8:25:ce: 5a:22:05:b6:f2:ea:4a:9c:c9:fa:2f:c4:fe:23:4e:17:d0:9c: 66:cb:c8:99:ac:8b:5e:a0:20:42:5a:c6:1f:d5:67:cb:a3:8c: 19:f2:29:dd:43:14:f2:ab:25:00:83:82:7b:09:ca:0d:96:44: 30:0f:45:ad:cb:e1:20:d9:c1:84:ee:4f:86:9a:f3:27:c7:6c: 2b:c8:d0:4b:b0:fc:bf:60:d5:56:74:5a:be:36:29:7a:e9:48: 71:15:3a:b0:1c:61:9a:13:4b:db:78:1e:4d:86:5a:03:5a:47: de:0f:ba:3c:8f:93:5b:88:b3:9c:f4:bd:88:a2:33:37:89:a1: 48:99:86:13:bd:20:f2:2a:40:21:60:d7:53:c8:42:90:4e:56: 8e:f5:ad:33:3b:2d:27:cc:e6:5d:1f:e0:fe:ef:87:0b:98:89: 89:c3:2e:73:1b:70:e1:27:4e:7c:55:83:7d:aa:e7:cb:ea:88: bc:dd:ca:50:2a:8a:bb:33:33:ca:ca:bc:b1:3b:a1:e4:e2:ac: ae:fa:cb:55:55:f9:f5:0d:94:e5:19:08:67:f6:be:d2:c2:63: df:8c:56:28:9e:94:7d:b9:5e:59:df:f5:fb:8e:4a:ec:d8:63: 58:9e:d0:65 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrSpp7IDzMdPvirZAmFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODc0OThiNmZkZDUyMzI0YjU1YjhkODM2NmY3OGFiNTAxYzU1MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ho5PoQO/mQzcnMDmlI57S5jJ2iW 4G/NEQ/VPmGDMhn8nBg01x31PGgl4FggolIE+eoz28WWi3XqNhCq3XJT81uYYDPg dCk7jtPi3QWoJFAmab1/+aTBOQfv82ayivOU62lD2JqYDv9Uyik7xm2FBX0Z4Qzv Ii4noybd3focEGZFvRaaJ8ov9aWi2qJF94jp7yHaKP+otu/GOtOo2DNRrmt5kdGH AW3z8bKb0RrJ+lobUQEjW4OlBUEXz3nZV0dU/flXuzx1i6k1EdQTRa4vG+69jQeG uMDIIOfyfO9p+v7afEeNem+Wc1IgcOwjT4uqQxtGzcCLAoohl2NATRCr+wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJh0mLb91SMktVuNg2b3irUBxVFCMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvbUhTWXR2M1ZJeVMxVzQyRFp2ZUt0UUhGVVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGjTidY+j1Tqp6+IdLEWitglzloiBbby 6kqcyfovxP4jThfQnGbLyJmsi16gIEJaxh/VZ8ujjBnyKd1DFPKrJQCDgnsJyg2W RDAPRa3L4SDZwYTuT4aa8yfHbCvI0Euw/L9g1VZ0Wr42KXrpSHEVOrAcYZoTS9t4 Hk2GWgNaR94PujyPk1uIs5z0vYiiMzeJoUiZhhO9IPIqQCFg11PIQpBOVo71rTM7 LSfM5l0f4P7vhwuYiYnDLnMbcOEnTnxVg32q58vqiLzdylAqirszM8rKvLE7oeTi rK76y1VV+fUNlOUZCGf2vtLCY9+MViielH25Xlnf9fuOSuzYY1ie0GU= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:33 2026 by rpki-client