This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qTKEVk4LKEzAmkz6mN7IKw7BW2w.roa File: qTKEVk4LKEzAmkz6mN7IKw7BW2w.roa (raw, json) Hash identifier: VTNz6lFhVCWB4wwaSI5T2iadUdV4/Qwmaf7OyxYh7Z8= Subject key identifier: A9:32:84:56:4E:0B:28:4C:C0:9A:4C:FA:98:DE:C8:2B:0E:C1:5B:6C Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6B297CAAE66B93CCAAC3D16EADFA8 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qTKEVk4LKEzAmkz6mN7IKw7BW2w.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397205 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:97:ca:ae:66:b9:3c:ca:ac:3d:16:ea:df:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a93284564e0b284cc09a4cfa98dec82b0ec15b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:00:b9:47:42:9c:5f:09:89:79:3a:6c:53: 2b:dd:2a:6a:3c:14:a4:c0:7a:8f:d8:46:73:71:75: fd:79:26:5d:bf:1e:93:da:90:4d:57:f2:b5:50:bc: cd:ba:8a:17:c2:ea:69:c6:fd:4f:98:bb:bb:97:93: f9:f3:54:84:ba:77:8c:d6:24:55:bf:0b:72:bc:c4: d0:ea:45:0f:99:85:40:f2:00:11:07:bc:61:a6:03: bc:2a:d3:99:c3:a1:82:38:f2:0a:33:60:28:34:a0: e8:b4:8d:49:e2:7f:9e:fc:23:ce:0b:6a:3a:71:d9: ed:50:a5:eb:32:29:13:5d:e2:9f:bb:80:f0:c0:e3: 91:a0:18:6e:da:01:0d:95:6d:94:01:d7:09:f2:10: 94:49:90:8d:89:9e:ea:55:a9:7e:b3:22:65:ba:b0: 75:c1:af:c3:11:e5:55:a3:3f:1a:06:03:c4:69:26: 6f:bf:ea:b8:e7:df:17:6e:cd:e3:ce:3e:1c:c6:e7: 59:a7:b0:3e:63:9d:d9:4e:99:f0:39:7f:06:32:ed: 63:53:db:20:ff:dd:d9:ac:cb:0d:21:1d:62:a5:7d: ce:4a:36:a1:44:37:1a:03:d9:e5:a3:d9:86:dc:d5: 80:dd:31:f4:30:ce:c4:4c:2c:84:82:37:23:e1:6f: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:32:84:56:4E:0B:28:4C:C0:9A:4C:FA:98:DE:C8:2B:0E:C1:5B:6C X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qTKEVk4LKEzAmkz6mN7IKw7BW2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 1a:e2:9b:a5:99:06:9a:24:de:4c:8b:0e:dc:96:db:66:22:03: 50:d4:72:5e:4a:88:96:88:7a:dc:21:26:56:b3:8b:c2:80:39: 85:be:92:db:ec:a9:7b:bb:d5:bd:19:6c:8c:fd:04:16:ba:52: 52:19:9f:8b:8e:6a:d7:68:e2:00:92:0a:77:e6:3d:d2:c9:0c: 8d:bc:1e:f1:13:3c:45:b0:9b:35:d5:27:1b:f2:dd:ea:4e:88: 78:da:1f:8f:9d:dc:72:8a:f9:26:dd:62:41:a2:92:ea:ed:aa: 39:10:a2:89:f6:63:6c:0a:13:ec:8e:dc:68:b7:01:8d:32:50: 5c:f8:13:71:74:22:48:87:f3:c9:da:56:71:3b:4e:89:fb:40: 5d:e8:38:1d:53:c7:0f:09:72:a4:99:b5:6d:07:46:8d:a7:9b: 4c:d2:20:ac:40:0e:2c:eb:21:5c:1c:ae:66:d7:77:87:fb:d7: 37:df:d0:3f:2a:44:71:f6:f9:ea:a6:c0:26:59:c4:69:24:09: 67:6f:0b:43:95:76:ce:ce:09:7c:4f:35:37:b0:30:39:18:86: 94:68:c2:49:01:24:68:c9:a3:0f:ae:a4:2f:2d:1d:67:f2:4d: e3:c8:db:92:90:5b:0f:4c:35:23:a1:6a:8f:f3:6a:ca:f7:fa: 13:ae:af:d5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xrKXyq5muTzKrD0W6t+oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTMyODQ1NjRlMGIyODRjYzA5YTRjZmE5OGRlYzgyYjBlYzE1YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuAAuUdCnF8JiXk6bFMr3SpqPBSk wHqP2EZzcXX9eSZdvx6T2pBNV/K1ULzNuooXwuppxv1PmLu7l5P581SEuneM1iRV vwtyvMTQ6kUPmYVA8gARB7xhpgO8KtOZw6GCOPIKM2AoNKDotI1J4n+e/CPOC2o6 cdntUKXrMikTXeKfu4DwwOORoBhu2gENlW2UAdcJ8hCUSZCNiZ7qVal+syJlurB1 wa/DEeVVoz8aBgPEaSZvv+q4598Xbs3jzj4cxudZp7A+Y53ZTpnwOX8GMu1jU9sg /93ZrMsNIR1ipX3OSjahRDcaA9nlo9mG3NWA3TH0MM7ETCyEgjcj4W/vYQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKkyhFZOCyhMwJpM+pjeyCsOwVtsMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvcVRLRVZrNExLRXpBbWt6Nm1ON0lLdzdCVzJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBABrim6WZBpok3kyLDtyW22YiA1DUcl5K iJaIetwhJlazi8KAOYW+ktvsqXu71b0ZbIz9BBa6UlIZn4uOatdo4gCSCnfmPdLJ DI28HvETPEWwmzXVJxvy3epOiHjaH4+d3HKK+SbdYkGikurtqjkQoon2Y2wKE+yO 3Gi3AY0yUFz4E3F0IkiH88naVnE7Ton7QF3oOB1Txw8JcqSZtW0HRo2nm0zSIKxA DizrIVwcrmbXd4f71zff0D8qRHH2+eqmwCZZxGkkCWdvC0OVds7OCXxPNTewMDkY hpRowkkBJGjJow+upC8tHWfyTePI25KQWw9MNSOhao/zasr3+hOur9U= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:34 2026 by rpki-client