This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nBcI8-pzpqx2-7FQ7INYlOTqdyI.roa File: nBcI8-pzpqx2-7FQ7INYlOTqdyI.roa (raw, json) Hash identifier: a8IDi5b5e2qLLVM1No/Sx0+tlHqSDdRiP4lHe4AsESg= Subject key identifier: 9C:17:08:F3:EA:73:A6:AC:76:FB:B1:50:EC:83:58:94:E4:EA:77:22 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B304CF5A449C8508AA03883547E8 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nBcI8-pzpqx2-7FQ7INYlOTqdyI.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397207 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b3:04:cf:5a:44:9c:85:08:aa:03:88:35:47:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c1708f3ea73a6ac76fbb150ec835894e4ea7722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:58:55:46:0a:b7:0c:4f:4c:93:36:5d:9b:3c: fe:bf:27:37:09:ca:63:ab:49:54:19:70:40:e4:13: a5:08:d6:67:61:48:17:34:14:08:70:7d:1f:64:35: d5:1d:f7:cb:51:2b:ef:14:ca:d0:07:0d:65:e6:92: 70:1d:28:88:a0:bb:c8:0b:48:93:f3:33:92:c0:c7: fc:8d:e0:2f:b4:a8:f2:ce:34:e0:04:c9:1f:12:12: 56:b4:98:d7:2f:41:9f:96:90:08:3d:bb:db:42:05: 52:9d:20:ce:b0:cd:84:c8:f0:33:1f:c4:45:bf:37: d8:d2:5b:d9:45:44:f2:f0:49:e2:2c:d9:8a:6c:68: 8a:94:3a:7b:f0:56:0b:25:da:e9:5e:60:d7:cb:29: 83:d4:28:4e:9e:ef:3e:a3:f5:a9:35:0e:cf:93:bd: 71:41:d1:16:f1:cf:10:30:c1:3a:de:cf:0f:9a:9e: 56:65:0c:ef:a5:ae:c0:5b:fe:51:d0:53:2c:a4:b9: 41:3b:c1:6d:d7:b2:e8:c1:1d:8a:a9:eb:30:80:32: a1:6e:24:6f:cf:ec:e6:8a:c2:ab:6c:aa:cf:82:8a: ed:04:08:f6:53:a5:47:4b:ee:c8:d8:8e:14:6e:a6: cf:49:e8:d6:ce:df:4a:70:58:ec:3c:58:01:94:de: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:17:08:F3:EA:73:A6:AC:76:FB:B1:50:EC:83:58:94:E4:EA:77:22 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/nBcI8-pzpqx2-7FQ7INYlOTqdyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption b1:b1:f0:20:52:6a:78:51:a0:f8:ff:34:7e:76:d9:98:87:4e: 49:fb:85:f8:47:29:b6:9e:ac:f2:d2:ba:0a:2c:02:a0:ca:49: 34:49:eb:db:00:a9:c8:ac:81:e0:08:4e:78:fd:5c:e5:3b:ba: 40:a9:59:01:61:40:d2:f1:9f:3e:21:bd:41:01:f3:f2:f2:9a: a5:ae:8f:8c:af:12:06:02:91:de:23:e0:69:28:3a:7f:bc:f3: cf:ce:b4:fc:52:d6:e1:35:bc:eb:45:09:e6:0a:66:61:0c:f6: bb:12:e2:00:7b:d2:02:43:89:dc:d1:a4:58:a4:50:aa:d5:cc: 53:6c:f1:82:08:94:fd:33:54:7d:9b:58:2c:9d:93:52:bc:22: 4b:e6:e1:11:eb:e0:28:1e:8f:f7:32:ba:f7:de:5c:d3:88:d4: 21:05:54:7d:43:6e:f2:63:92:7c:3c:2a:72:40:b1:21:8b:f0: 56:54:f9:de:ce:ff:85:bb:74:bc:84:ff:fd:94:b9:04:ab:a9: 01:32:d5:95:54:a5:41:4c:e9:7c:24:0f:0a:7c:fe:05:27:26: 55:32:05:a3:77:bd:df:41:90:dd:8f:2f:17:bc:fc:1c:85:0c: 5c:4a:74:72:ab:07:c5:8c:79:5e:fc:8c:ba:d0:9c:e6:8a:62: eb:cf:05:71 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrMEz1pEnIUIqgOINUfoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzE3MDhmM2VhNzNhNmFjNzZmYmIxNTBlYzgzNTg5NGU0ZWE3NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VhVRgq3DE9MkzZdmzz+vyc3Ccpj q0lUGXBA5BOlCNZnYUgXNBQIcH0fZDXVHffLUSvvFMrQBw1l5pJwHSiIoLvIC0iT 8zOSwMf8jeAvtKjyzjTgBMkfEhJWtJjXL0GflpAIPbvbQgVSnSDOsM2EyPAzH8RF vzfY0lvZRUTy8EniLNmKbGiKlDp78FYLJdrpXmDXyymD1ChOnu8+o/WpNQ7Pk71x QdEW8c8QMME63s8Pmp5WZQzvpa7AW/5R0FMspLlBO8Ft17LowR2KqeswgDKhbiRv z+zmisKrbKrPgortBAj2U6VHS+7I2I4UbqbPSejWzt9KcFjsPFgBlN77twIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFJwXCPPqc6asdvuxUOyDWJTk6nciMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvbkJjSTgtcHpwcXgyLTdGUTdJTllsT1RxZHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBALGx8CBSanhRoPj/NH522ZiHTkn7hfhH KbaerPLSugosAqDKSTRJ69sAqcisgeAITnj9XOU7ukCpWQFhQNLxnz4hvUEB8/Ly mqWuj4yvEgYCkd4j4GkoOn+888/OtPxS1uE1vOtFCeYKZmEM9rsS4gB70gJDidzR pFikUKrVzFNs8YIIlP0zVH2bWCydk1K8Ikvm4RHr4Cgej/cyuvfeXNOI1CEFVH1D bvJjknw8KnJAsSGL8FZU+d7O/4W7dLyE//2UuQSrqQEy1ZVUpUFM6XwkDwp8/gUn JlUyBaN3vd9BkN2PLxe8/ByFDFxKdHKrB8WMeV78jLrQnOaKYuvPBXE= -----END CERTIFICATE-----Generated at Mon Jan 26 02:08:07 2026 by rpki-client