This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/opDgvBUeKgnryeV_remzMnGVxh8.roa File: opDgvBUeKgnryeV_remzMnGVxh8.roa (raw, json) Hash identifier: kUkYaCAW9GkDb4/HgHQ4OjzksBnoHb1mtSe3bxNEX5M= Subject key identifier: A2:90:E0:BC:15:1E:2A:09:EB:C9:E5:7F:AD:E9:B3:32:71:95:C6:1F Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67F567F9EC2A45D2088C5052DA36F Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/opDgvBUeKgnryeV_remzMnGVxh8.roa Signing time: Thu 01 Jan 2026 04:17:36 +0000 ROA not before: Thu 01 Jan 2026 04:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 27544 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7f:56:7f:9e:c2:a4:5d:20:88:c5:05:2d:a3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a290e0bc151e2a09ebc9e57fade9b3327195c61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:f2:9b:b7:f9:9c:5a:55:ad:95:10:9c:49: 39:dc:57:b5:71:5f:64:ec:9c:4e:2d:65:1b:8f:3a: 8a:b4:b8:69:25:23:6f:85:05:eb:07:be:54:ef:a5: 5a:01:76:26:4d:48:8e:c6:29:16:bb:77:28:92:d5: 88:ad:8a:4c:c3:04:96:fe:c0:0e:aa:95:29:15:b0: 86:ab:30:ce:7e:a2:b5:28:51:7c:8a:60:52:97:47: aa:61:58:b3:fb:34:37:db:c2:5c:8b:d9:35:69:b7: dd:da:59:52:a5:66:a4:84:15:09:bd:80:a8:e2:9b: 34:48:9d:74:e3:54:f3:2e:a2:a2:ee:5b:36:ba:df: ed:5f:69:71:b4:49:6b:35:2c:d6:92:73:d9:53:24: b5:ae:0c:7a:81:e0:5f:b1:b1:0b:ee:da:98:01:6c: 1b:de:5e:76:2b:1b:7c:4c:5b:80:bc:fa:e6:6e:08: a7:99:18:0e:66:6c:1e:02:5e:42:ed:59:23:75:9f: 51:31:56:cc:ad:fc:4e:f3:6d:ff:58:3c:0c:28:d8: 84:9c:b5:73:98:bb:83:36:bd:be:1d:24:55:10:f1: d1:2f:d5:27:1d:cf:4f:39:ed:a2:01:1d:31:64:b3: 4c:73:ba:39:38:37:63:67:0e:15:94:b5:68:47:f2: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:90:E0:BC:15:1E:2A:09:EB:C9:E5:7F:AD:E9:B3:32:71:95:C6:1F X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/opDgvBUeKgnryeV_remzMnGVxh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption a0:07:6a:7d:1f:16:4c:07:46:76:48:b0:96:6d:a1:4f:d3:13: 5e:7c:9b:f2:7b:4c:f7:1f:a9:9c:df:65:86:8c:0e:76:a5:cd: f0:24:03:70:4b:1d:56:d8:db:90:2d:3f:9c:ed:8b:0d:bb:e3: c9:88:10:32:b9:16:5e:de:a7:09:86:55:b4:00:35:28:57:b9: 3f:9b:d1:a7:79:b3:c8:b8:36:1c:19:04:f0:83:02:59:64:4a: 66:4e:e5:8f:f9:00:fc:00:4a:c4:0d:de:7c:29:95:64:f2:58: fd:ae:01:6e:4d:9d:15:57:ae:30:43:f3:7d:fa:91:ec:d9:86: a4:98:1a:15:30:9e:8c:99:ad:54:4b:a9:8b:3b:fc:07:e6:a7: 79:ee:56:49:82:0e:fa:3b:6d:ce:22:40:ce:94:bb:8f:1c:d1: ed:b3:56:4b:f3:e4:d1:cc:24:c8:d4:a2:86:0e:51:92:5a:23: fd:c3:8d:a3:05:06:b4:47:75:57:86:20:bb:17:e8:ea:3a:4f: 47:c5:1f:ef:f9:28:3a:ff:12:f4:71:95:d0:2b:61:4b:63:9c: 22:38:0e:48:a0:19:10:fb:28:1e:0f:47:6c:ff:6f:d1:2e:0f: 86:0b:a8:79:b0:f9:c5:7b:ab:d6:05:7e:7d:ac:9b:8e:36:e4: f9:fe:2b:06 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xn9Wf57CpF0giMUFLaNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjkwZTBiYzE1MWUyYTA5ZWJjOWU1N2ZhZGU5YjMzMjcxOTVjNjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJLym7f5nFpVrZUQnEk53Fe1cV9k 7JxOLWUbjzqKtLhpJSNvhQXrB75U76VaAXYmTUiOxikWu3coktWIrYpMwwSW/sAO qpUpFbCGqzDOfqK1KFF8imBSl0eqYViz+zQ328Jci9k1abfd2llSpWakhBUJvYCo 4ps0SJ1041TzLqKi7ls2ut/tX2lxtElrNSzWknPZUyS1rgx6geBfsbEL7tqYAWwb 3l52Kxt8TFuAvPrmbginmRgOZmweAl5C7VkjdZ9RMVbMrfxO823/WDwMKNiEnLVz mLuDNr2+HSRVEPHRL9UnHc9POe2iAR0xZLNMc7o5ODdjZw4VlLVoR/LfXwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKKQ4LwVHioJ68nlf63pszJxlcYfMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvb3BEZ3ZCVWVLZ25yeWVWX3JlbXpNbkdWeGg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAKAHan0fFkwHRnZIsJZtoU/TE158m/J7 TPcfqZzfZYaMDnalzfAkA3BLHVbY25AtP5ztiw2748mIEDK5Fl7epwmGVbQANShX uT+b0ad5s8i4NhwZBPCDAllkSmZO5Y/5APwASsQN3nwplWTyWP2uAW5NnRVXrjBD 8336kezZhqSYGhUwnoyZrVRLqYs7/Afmp3nuVkmCDvo7bc4iQM6Uu48c0e2zVkvz 5NHMJMjUooYOUZJaI/3DjaMFBrRHdVeGILsX6Oo6T0fFH+/5KDr/EvRxldArYUtj nCI4DkigGRD7KB4PR2z/b9EuD4YLqHmw+cV7q9YFfn2sm4425Pn+KwY= -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:39 2026 by rpki-client