This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/oR2l_zUIZ9jl5AYEQPja6wxWAkE.roa File: oR2l_zUIZ9jl5AYEQPja6wxWAkE.roa (raw, json) Hash identifier: LJev5hC/wNhvPL/4W5zzEyCRyZRNIiljVB9HurpQrQg= Subject key identifier: A1:1D:A5:FF:35:08:67:D8:E5:E4:06:04:40:F8:DA:EB:0C:56:02:41 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C685B4021E384E1A469EE2171F674C Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/oR2l_zUIZ9jl5AYEQPja6wxWAkE.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36627 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:b4:02:1e:38:4e:1a:46:9e:e2:17:1f:67:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a11da5ff350867d8e5e4060440f8daeb0c560241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:9d:a8:b4:14:46:5e:1d:6d:c4:26:4e:86: f6:a3:ac:57:94:7c:5e:42:f0:1e:b0:1b:7a:ba:06: 5b:47:03:4a:fb:c0:c0:58:d3:db:5e:78:e2:53:9e: d6:e4:b3:8c:69:1f:2f:1d:9e:1c:de:f9:e8:fd:11: b6:34:08:ff:5e:64:ac:b9:d4:b1:4f:5c:ef:a8:be: 5b:97:4a:34:35:66:ab:f0:b5:01:c4:b9:55:f8:2b: a8:f0:cb:4a:74:3b:cc:34:f7:49:83:36:50:ab:0f: fe:14:c7:c1:18:81:14:23:5b:11:6e:38:a8:e9:b9: 14:f5:d4:61:cf:07:90:b4:c8:f4:14:49:c9:e6:d5: b7:32:27:30:2e:57:e2:ec:f6:85:b4:32:0c:af:35: c7:cd:c0:f6:2c:bb:3c:a7:66:3b:ac:4b:3c:62:11: bd:88:c8:1c:02:9e:4d:fd:14:57:29:00:66:5a:a8: 0b:9b:85:18:87:d0:b8:41:39:94:a6:e2:7b:00:61: 2f:35:0d:a2:8c:87:1c:a1:a9:38:fc:57:55:6c:61: b1:db:70:f2:a9:6a:3a:14:62:d0:3f:b7:a0:d5:da: be:bd:63:fc:c3:da:a3:f9:f2:0b:b3:00:8f:cf:44: 1d:9f:39:d1:02:c1:8f:c0:69:d9:4e:60:6d:43:b1: 26:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:A5:FF:35:08:67:D8:E5:E4:06:04:40:F8:DA:EB:0C:56:02:41 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/oR2l_zUIZ9jl5AYEQPja6wxWAkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 50:37:d8:ed:11:65:79:cc:91:a2:2b:62:69:20:b1:50:16:f5: 2e:b7:30:fc:bd:3d:d5:7b:bc:30:9d:b3:a5:4e:e6:63:ee:8f: 36:04:c6:94:0e:7a:b8:e8:7a:e9:bd:e7:ea:5d:0b:67:0b:8e: 64:7a:6d:62:54:f1:9c:b8:09:05:b1:0f:f6:33:03:55:49:90: 5d:95:6c:52:30:96:47:53:3c:eb:f5:56:c8:36:23:94:49:08: 38:19:ac:6e:9a:ee:10:8e:87:3d:d4:d5:c2:1e:12:cd:a7:37: b5:0a:ad:c9:f8:d5:e9:83:ac:d2:76:aa:07:01:f6:ef:58:9f: 3a:a3:e1:f6:5e:46:23:91:c5:b5:5a:5a:81:5a:70:87:38:6b: 71:28:c4:d9:eb:24:f2:47:37:b2:06:39:00:47:f4:90:c2:50: 08:87:ba:9c:d5:f3:45:d3:17:3e:0d:df:25:8a:ed:bd:4e:3e: fb:a9:75:c6:23:2e:99:c5:b4:4e:de:e2:37:de:fa:70:bb:bf: 44:bb:a2:cc:c1:3f:9e:7a:5d:73:47:17:f8:7b:93:8e:d2:05: 18:38:8a:07:08:31:a5:a7:3e:7d:b4:3e:3a:7b:e5:b2:94:f9: ef:a6:42:4f:92:c1:5f:9a:b4:54:cf:f5:c9:36:e1:96:74:28: af:4a:71:c3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoW0Ah44ThpGnuIXH2dMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTFkYTVmZjM1MDg2N2Q4ZTVlNDA2MDQ0MGY4ZGFlYjBjNTYwMjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZudqLQURl4dbcQmTob2o6xXlHxe QvAesBt6ugZbRwNK+8DAWNPbXnjiU57W5LOMaR8vHZ4c3vno/RG2NAj/XmSsudSx T1zvqL5bl0o0NWar8LUBxLlV+Cuo8MtKdDvMNPdJgzZQqw/+FMfBGIEUI1sRbjio 6bkU9dRhzweQtMj0FEnJ5tW3MicwLlfi7PaFtDIMrzXHzcD2LLs8p2Y7rEs8YhG9 iMgcAp5N/RRXKQBmWqgLm4UYh9C4QTmUpuJ7AGEvNQ2ijIccoak4/FdVbGGx23Dy qWo6FGLQP7eg1dq+vWP8w9qj+fILswCPz0QdnznRAsGPwGnZTmBtQ7EmlQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKEdpf81CGfY5eQGBED42usMVgJBMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvb1IybF96VUlaOWpsNUFZRVFQamE2d3hXQWtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFA32O0RZXnMkaIrYmkgsVAW9S63MPy9 PdV7vDCds6VO5mPujzYExpQOerjoeum95+pdC2cLjmR6bWJU8Zy4CQWxD/YzA1VJ kF2VbFIwlkdTPOv1Vsg2I5RJCDgZrG6a7hCOhz3U1cIeEs2nN7UKrcn41emDrNJ2 qgcB9u9Ynzqj4fZeRiORxbVaWoFacIc4a3EoxNnrJPJHN7IGOQBH9JDCUAiHupzV 80XTFz4N3yWK7b1OPvupdcYjLpnFtE7e4jfe+nC7v0S7oszBP556XXNHF/h7k47S BRg4igcIMaWnPn20Pjp75bKU+e+mQk+SwV+atFTP9ck24ZZ0KK9KccM= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:33 2026 by rpki-client