This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/t9XB_JKhcVw4YviaE_Vr83SD5Ks.roa File: t9XB_JKhcVw4YviaE_Vr83SD5Ks.roa (raw, json) Hash identifier: GrhP417tYDeXIFjhOfDhsrQqzS5A0qZVynXtQHltYBQ= Subject key identifier: B7:D5:C1:FC:92:A1:71:5C:38:62:F8:9A:13:F5:6B:F3:74:83:E4:AB Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A012DA93EFD8250243114B899109 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/t9XB_JKhcVw4YviaE_Vr83SD5Ks.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396596 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a0:12:da:93:ef:d8:25:02:43:11:4b:89:91:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7d5c1fc92a1715c3862f89a13f56bf37483e4ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:d8:1a:ed:2a:d2:bd:68:37:01:2c:e6:3c: 69:9d:f5:be:8c:42:84:f8:bc:7e:62:73:e0:45:18: ae:4f:18:18:b5:93:8b:e5:9a:4c:e4:16:93:02:78: 68:2e:13:da:76:d8:67:c2:d3:e3:a4:aa:a6:a7:8f: 65:36:c4:92:c6:9b:0d:ec:17:59:b4:92:d9:7f:22: 87:a5:b7:4d:02:9e:7f:f2:f7:fb:c3:c9:d0:3e:6e: 6f:66:42:1e:42:73:de:6a:5e:40:e3:8e:5d:ae:e1: 40:34:65:35:db:08:27:14:fa:87:7c:b8:00:2c:2f: 6d:0c:a1:b3:32:38:78:70:ce:43:ff:aa:da:41:8e: 3c:0a:5e:2e:18:de:b8:e2:36:be:6b:21:b7:80:4a: b8:12:5b:0f:10:24:98:ac:fd:af:36:8d:d1:43:f7: 73:e5:1b:25:7b:e7:9c:ab:11:c9:98:d1:54:44:57: 03:ec:1b:04:c9:7f:a7:32:10:f9:b6:64:e1:6d:3e: f9:c5:20:f9:86:db:3f:85:44:38:50:e4:78:12:91: 11:68:95:a8:b6:24:2f:2f:3c:39:ab:4b:ed:7f:f2: c9:7e:60:ae:51:f4:65:2d:2f:a2:5d:7e:cd:88:46: 75:45:c1:08:05:d9:f6:e3:48:0e:52:77:a7:94:38: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D5:C1:FC:92:A1:71:5C:38:62:F8:9A:13:F5:6B:F3:74:83:E4:AB X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/t9XB_JKhcVw4YviaE_Vr83SD5Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 3d:8a:b2:4d:92:4d:a1:b0:13:3a:af:d8:be:2d:43:76:d9:9e: cb:f0:33:23:5f:4c:29:16:fd:6c:2b:b6:cd:89:c5:de:51:70: db:27:b8:d6:ad:53:cd:07:8a:9b:06:33:a1:33:ce:29:22:5d: 35:a1:2c:2f:71:48:54:79:4f:32:7d:b1:1e:e2:bb:fb:ed:17: e0:d0:3f:92:aa:86:ec:df:f3:ce:0e:e0:b9:e8:bc:51:48:83: 4d:4d:cb:b4:44:88:5d:80:13:14:c1:16:02:cc:b6:8b:48:0a: 8a:fc:3a:aa:97:a3:8b:34:f3:2b:34:b0:92:73:ea:64:2d:ac: 24:58:b9:54:90:70:90:07:74:1c:b1:1c:28:19:31:4d:dc:3b: f1:86:da:54:d1:18:c2:90:80:67:ef:2e:3d:d2:1c:1e:cf:d6: 99:08:0f:27:d7:89:23:ee:8e:43:0d:4c:0e:79:e0:ac:26:ee: 6b:f1:61:7b:40:ad:d5:32:0f:b5:41:8a:73:7a:97:3a:f4:43: 72:fe:b1:a5:43:8b:06:55:cb:3a:4c:81:c4:2a:da:8b:49:fa: 19:95:2a:f4:63:f3:d2:69:cb:09:82:28:6f:0e:c8:37:36:82: 1e:26:86:1a:3f:f3:3b:bc:f3:13:88:d7:e6:e2:c9:2d:fa:db: 62:8f:69:bf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqAS2pPv2CUCQxFLiZEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2Q1YzFmYzkyYTE3MTVjMzg2MmY4OWExM2Y1NmJmMzc0ODNlNGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRHYGu0q0r1oNwEs5jxpnfW+jEKE +Lx+YnPgRRiuTxgYtZOL5ZpM5BaTAnhoLhPadthnwtPjpKqmp49lNsSSxpsN7BdZ tJLZfyKHpbdNAp5/8vf7w8nQPm5vZkIeQnPeal5A445druFANGU12wgnFPqHfLgA LC9tDKGzMjh4cM5D/6raQY48Cl4uGN644ja+ayG3gEq4ElsPECSYrP2vNo3RQ/dz 5Rsle+ecqxHJmNFURFcD7BsEyX+nMhD5tmThbT75xSD5hts/hUQ4UOR4EpERaJWo tiQvLzw5q0vtf/LJfmCuUfRlLS+iXX7NiEZ1RcEIBdn240gOUnenlDjrnQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLfVwfySoXFcOGL4mhP1a/N0g+SrMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvdDlYQl9KS2hjVnc0WXZpYUVfVnI4M1NENUtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAD2Ksk2STaGwEzqv2L4tQ3bZnsvwMyNf TCkW/Wwrts2Jxd5RcNsnuNatU80HipsGM6EzzikiXTWhLC9xSFR5TzJ9sR7iu/vt F+DQP5Kqhuzf884O4LnovFFIg01Ny7REiF2AExTBFgLMtotICor8OqqXo4s08ys0 sJJz6mQtrCRYuVSQcJAHdByxHCgZMU3cO/GG2lTRGMKQgGfvLj3SHB7P1pkIDyfX iSPujkMNTA554Kwm7mvxYXtArdUyD7VBinN6lzr0Q3L+saVDiwZVyzpMgcQq2otJ +hmVKvRj89JpywmCKG8OyDc2gh4mhho/8zu88xOI1+biyS3622KPab8= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:36 2026 by rpki-client