This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sa6VCWaz5RlUYHvuXxoE4qDhF9A.roa File: sa6VCWaz5RlUYHvuXxoE4qDhF9A.roa (raw, json) Hash identifier: P8JoP9Wbg2fJKAg93pMgQLRAQJFYoj8ctzV93W3jogo= Subject key identifier: B1:AE:95:09:66:B3:E5:19:54:60:7B:EE:5F:1A:04:E2:A0:E1:17:D0 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6854D19D751A9BE2D16D1432B6CBB Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sa6VCWaz5RlUYHvuXxoE4qDhF9A.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36626 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:4d:19:d7:51:a9:be:2d:16:d1:43:2b:6c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1ae950966b3e51954607bee5f1a04e2a0e117d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:49:4f:64:94:5b:6a:f3:27:4f:bd:42:89: 20:e5:08:dc:78:9f:1b:6e:d8:e3:57:89:a3:8d:33: 7f:ba:32:dc:35:cc:e1:9f:67:72:60:ec:26:3a:0e: 76:e5:44:35:8c:3e:ab:32:1d:7c:e4:ae:21:aa:28: 72:f6:f9:98:80:1e:c1:0f:87:85:ed:65:bc:74:c7: 39:6b:1d:a7:12:95:0b:8e:4f:56:b3:2b:82:b8:e1: 00:ab:41:2d:38:b4:0c:7e:1b:92:b6:08:89:ad:72: fd:e7:98:b4:07:c4:bc:ea:89:e0:8c:5b:8d:c1:81: f8:3c:d8:5c:dd:3c:42:bc:87:ce:9d:2e:8b:ab:a4: a0:29:fb:3a:d0:e6:c6:2b:01:fb:f9:b8:be:5d:f6: 9f:26:4f:da:2c:66:96:f7:7b:3e:43:a6:59:ae:c9: 53:9f:b1:68:10:30:18:94:d4:cd:13:34:1d:d2:cb: a5:3e:90:8c:95:b1:bc:77:ab:d0:b0:89:91:1d:fe: fd:d3:3b:b2:96:19:14:f6:93:76:ed:bb:a6:94:07: 1f:7f:cd:87:e9:39:f6:34:42:a1:a4:39:08:92:65: f1:b1:22:ba:91:49:f0:ac:80:60:ca:76:e4:19:12: ea:49:8d:c7:a1:6b:9c:fa:f1:b2:8a:3f:b3:65:a6: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:AE:95:09:66:B3:E5:19:54:60:7B:EE:5F:1A:04:E2:A0:E1:17:D0 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sa6VCWaz5RlUYHvuXxoE4qDhF9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 6e:a7:fc:c6:ac:a4:d8:bb:21:5c:53:20:0d:24:3f:bd:1c:27: 7d:2b:ee:db:49:69:fa:6b:2c:05:8b:b0:ce:89:0f:2e:bc:14: 71:bd:39:ca:5c:22:9d:a8:51:c4:6d:44:c5:f8:63:93:5c:d4: 23:49:8d:3e:f8:e9:ca:9f:51:38:46:83:de:3d:2d:42:83:b5: 65:65:b1:ed:e0:76:f9:24:1d:78:43:11:4c:83:ab:9a:fd:1f: 9a:05:15:56:8e:40:7e:db:eb:ce:58:46:28:dd:02:99:59:1e: 01:33:2f:13:1b:1e:16:8c:e1:00:a3:d7:a2:10:07:4a:a2:89: 9b:60:48:d3:ea:93:26:c8:6d:6b:80:38:20:7c:af:4b:f1:02: 38:e6:97:c5:81:ed:cc:68:22:18:38:5e:06:db:d4:5f:f7:d4: a9:0c:e1:75:d8:e9:82:45:5d:ef:95:e1:b4:19:4b:43:ec:18: 16:ab:f4:33:0f:cd:36:0f:45:06:fb:14:e2:62:ee:eb:a4:f8: 5b:03:13:39:76:57:42:23:b9:92:6d:fb:60:f0:d0:17:cf:80: 78:78:a2:00:3d:00:d4:68:1e:7b:95:3a:90:c7:97:ac:2e:c2: 1d:2e:39:a2:2a:58:b4:d9:8e:f7:53:49:8f:b2:34:5a:5b:01: ff:92:98:5f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoVNGddRqb4tFtFDK2y7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWFlOTUwOTY2YjNlNTE5NTQ2MDdiZWU1ZjFhMDRlMmEwZTExN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUVJT2SUW2rzJ0+9Qokg5QjceJ8b btjjV4mjjTN/ujLcNczhn2dyYOwmOg525UQ1jD6rMh185K4hqihy9vmYgB7BD4eF 7WW8dMc5ax2nEpULjk9WsyuCuOEAq0EtOLQMfhuStgiJrXL955i0B8S86ongjFuN wYH4PNhc3TxCvIfOnS6Lq6SgKfs60ObGKwH7+bi+XfafJk/aLGaW93s+Q6ZZrslT n7FoEDAYlNTNEzQd0sulPpCMlbG8d6vQsImRHf790zuylhkU9pN27bumlAcff82H 6Tn2NEKhpDkIkmXxsSK6kUnwrIBgynbkGRLqSY3HoWuc+vGyij+zZabuDQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLGulQlms+UZVGB77l8aBOKg4RfQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvc2E2VkNXYXo1UmxVWUh2dVh4b0U0cURoRjlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAG6n/MaspNi7IVxTIA0kP70cJ30r7ttJ afprLAWLsM6JDy68FHG9OcpcIp2oUcRtRMX4Y5Nc1CNJjT746cqfUThGg949LUKD tWVlse3gdvkkHXhDEUyDq5r9H5oFFVaOQH7b685YRijdAplZHgEzLxMbHhaM4QCj 16IQB0qiiZtgSNPqkybIbWuAOCB8r0vxAjjml8WB7cxoIhg4Xgbb1F/31KkM4XXY 6YJFXe+V4bQZS0PsGBar9DMPzTYPRQb7FOJi7uuk+FsDEzl2V0IjuZJt+2Dw0BfP gHh4ogA9ANRoHnuVOpDHl6wuwh0uOaIqWLTZjvdTSY+yNFpbAf+SmF8= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:29 2026 by rpki-client