This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mNEnAt531dzIE0g5lI1zLtP3vcQ.roa File: mNEnAt531dzIE0g5lI1zLtP3vcQ.roa (raw, json) Hash identifier: PwsxzkLb/FCSv6oK7PnDrfQK5fndqZfpZFHYF48ORmc= Subject key identifier: 98:D1:27:02:DE:77:D5:DC:C8:13:48:39:94:8D:73:2E:D3:F7:BD:C4 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67E8C98BA4A1D5B6D64C1017F2744 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mNEnAt531dzIE0g5lI1zLtP3vcQ.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22547 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7e:8c:98:ba:4a:1d:5b:6d:64:c1:01:7f:27:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98d12702de77d5dcc8134839948d732ed3f7bdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:d2:64:eb:12:4f:68:95:ca:0f:a4:87:6d: fa:ce:7d:32:11:0c:8e:2d:ed:a1:be:91:bb:7c:e8: 91:5c:29:6b:e2:5b:a9:10:ad:ca:f1:e0:6c:4c:f4: 49:c4:27:8a:44:d6:b3:1e:7e:19:e3:b8:46:81:a5: fc:52:1a:54:24:63:0c:39:2d:4c:0b:20:7f:41:0c: be:e2:e3:95:60:40:53:ba:36:7e:5f:c2:ab:3f:b5: b4:bc:a4:88:b6:a3:4a:74:fb:35:e2:7c:f0:1b:5d: 0a:70:56:11:da:7f:11:5b:1c:0c:a4:de:46:74:32: 81:27:29:0e:91:fb:31:a8:d3:7b:e4:dd:d2:21:77: 51:5b:ef:f9:3d:41:45:6d:26:cc:07:34:f4:db:f5: 01:2b:a9:40:b3:f4:30:eb:31:ac:9d:fc:0a:3e:81: 9c:4b:28:47:ef:dd:4d:ac:24:9b:6c:23:8f:c3:9d: 59:a5:ca:5b:bf:62:3c:0e:b7:c0:44:f1:78:f2:2a: eb:d9:41:26:18:d1:9c:06:af:e7:cd:72:06:0e:62: bc:6a:e4:47:de:f0:98:59:be:e9:22:2b:15:30:1b: ae:44:eb:d8:bb:3e:ba:a7:6f:df:96:ac:3f:75:3f: 7e:e9:ee:1b:fb:57:92:d1:fb:c1:67:c4:cc:06:76: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:27:02:DE:77:D5:DC:C8:13:48:39:94:8D:73:2E:D3:F7:BD:C4 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/mNEnAt531dzIE0g5lI1zLtP3vcQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 1c:88:43:b4:9f:dd:00:8e:7a:fd:03:d3:55:30:9c:c9:57:42: 26:c4:ef:1c:82:47:64:a3:c8:ad:0a:ae:7d:27:f6:d0:9e:04: db:c0:d5:63:91:02:7a:19:17:ce:27:f3:4c:c1:0d:aa:a3:6c: 5c:af:12:0d:e2:4a:ad:77:1b:2d:4b:b8:3c:52:9f:bb:a0:2b: 2e:38:82:ac:f3:23:b9:ae:9f:5c:18:e6:e2:65:5e:0e:1b:1f: f6:af:ec:f4:7b:4c:19:fe:53:5e:e2:c8:4f:9b:48:6e:28:32: 1f:2d:50:68:c3:42:7f:87:4d:40:f6:58:a8:af:e4:e2:9b:c2: 69:44:32:60:1b:2a:42:43:2e:89:a2:ea:7d:af:f7:97:f2:d2: 66:fb:e4:c3:1c:c9:e2:f6:e0:5b:0d:13:45:4f:c9:c8:99:5b: 9d:dc:23:d2:1e:bc:17:c1:fb:09:22:2f:0b:22:6e:e3:a4:3e: 12:80:ba:44:b7:78:11:dc:a4:77:e8:35:c4:f8:8a:31:39:39: 7f:46:58:da:6e:4d:76:eb:2e:b4:86:ec:6b:05:2f:74:48:9c: 62:b6:2e:d3:a0:d0:5d:5e:46:c7:50:16:bb:9d:89:9d:b2:c9: 48:c6:68:c8:c1:6a:b5:07:62:89:28:22:a2:ab:2d:5c:0e:db: 79:57:e0:3d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xn6MmLpKHVttZMEBfydEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGQxMjcwMmRlNzdkNWRjYzgxMzQ4Mzk5NDhkNzMyZWQzZjdiZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAjSZOsST2iVyg+kh236zn0yEQyO Le2hvpG7fOiRXClr4lupEK3K8eBsTPRJxCeKRNazHn4Z47hGgaX8UhpUJGMMOS1M CyB/QQy+4uOVYEBTujZ+X8KrP7W0vKSItqNKdPs14nzwG10KcFYR2n8RWxwMpN5G dDKBJykOkfsxqNN75N3SIXdRW+/5PUFFbSbMBzT02/UBK6lAs/Qw6zGsnfwKPoGc SyhH791NrCSbbCOPw51Zpcpbv2I8DrfARPF48irr2UEmGNGcBq/nzXIGDmK8auRH 3vCYWb7pIisVMBuuROvYuz66p2/flqw/dT9+6e4b+1eS0fvBZ8TMBnZ1tQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJjRJwLed9XcyBNIOZSNcy7T973EMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvbU5FbkF0NTMxZHpJRTBnNWxJMXpMdFAzdmNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAByIQ7Sf3QCOev0D01UwnMlXQibE7xyC R2SjyK0Krn0n9tCeBNvA1WORAnoZF84n80zBDaqjbFyvEg3iSq13Gy1LuDxSn7ug Ky44gqzzI7mun1wY5uJlXg4bH/av7PR7TBn+U17iyE+bSG4oMh8tUGjDQn+HTUD2 WKiv5OKbwmlEMmAbKkJDLomi6n2v95fy0mb75MMcyeL24FsNE0VPyciZW53cI9Ie vBfB+wkiLwsibuOkPhKAukS3eBHcpHfoNcT4ijE5OX9GWNpuTXbrLrSG7GsFL3RI nGK2LtOg0F1eRsdQFrudiZ2yyUjGaMjBarUHYokoIqKrLVwO23lX4D0= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:29 2026 by rpki-client