This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tYJouwiwepSAxFVcUhFKcqIZBRE.roa File: tYJouwiwepSAxFVcUhFKcqIZBRE.roa (raw, json) Hash identifier: ZxIt8ej/Grwjqg05tXf/iWhjtNT0H8wzfWKxI0B+3WQ= Subject key identifier: B5:82:68:BB:08:B0:7A:94:80:C4:55:5C:52:11:4A:72:A2:19:05:11 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6915F146114C49B5CC084532A8C4E Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tYJouwiwepSAxFVcUhFKcqIZBRE.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396564 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:91:5f:14:61:14:c4:9b:5c:c0:84:53:2a:8c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58268bb08b07a9480c4555c52114a72a2190511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:d3:c9:3d:74:7e:e6:68:f6:28:dc:e1:ba: 45:96:9d:a8:af:b7:a0:99:11:5c:07:37:31:3d:eb: 6c:c3:54:85:fc:24:0b:2b:58:9d:d3:b2:d4:50:11: f3:8b:14:e1:3b:f4:76:95:70:ba:01:fd:a8:b2:cb: 06:21:cb:0f:45:51:24:7a:60:4f:87:78:5a:f3:65: 3c:62:7c:65:2d:39:83:67:fa:dd:da:05:82:bc:8a: 2b:c5:b3:49:d4:db:48:36:81:1a:97:72:c3:48:06: 48:7f:be:21:fc:a8:ed:36:72:45:e9:4d:b5:ee:52: ab:39:9d:8d:f1:71:e1:59:b2:f9:d3:02:da:9e:44: 4a:cd:92:70:0c:de:3a:4e:30:d8:e3:27:f7:54:e9: df:a3:00:eb:f4:43:18:87:d2:66:80:00:76:8b:be: 3b:ef:5d:b7:80:5f:a3:53:fa:ce:a6:6b:60:b5:d8: 6f:c9:b4:53:f0:82:8d:2f:d9:ec:df:29:85:b5:b9: eb:f0:0a:21:a2:df:c3:11:84:96:6c:0b:85:01:bd: 1e:01:3d:ce:75:f5:43:f0:4a:35:00:48:3c:2d:e5: 3a:82:a6:67:02:1f:f7:b7:ff:f3:f9:5b:fa:b8:f1: 76:a4:db:a6:77:ac:a3:25:f6:96:24:d4:b6:8f:d6: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:82:68:BB:08:B0:7A:94:80:C4:55:5C:52:11:4A:72:A2:19:05:11 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tYJouwiwepSAxFVcUhFKcqIZBRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 04:a1:ab:6a:14:11:83:4b:55:4e:f4:8b:e5:f9:95:27:11:91: c1:47:d0:cb:7c:9b:15:04:e0:fe:cb:67:89:4e:ce:99:34:1c: 5a:dd:7b:4f:c3:76:67:93:dd:62:34:76:21:e1:9c:9e:e9:52: 36:6c:9b:8d:19:e3:3f:59:8d:bb:9b:6e:ae:e7:d3:ed:fe:2c: 8a:8d:87:63:d9:d4:3d:9a:5e:bb:64:df:f9:8f:a3:55:a1:ef: da:b9:69:a7:75:5a:c4:cd:43:4e:ca:4d:ae:2b:ec:40:b2:bd: 67:8b:ed:18:be:77:72:e0:3a:f2:f6:1a:f8:e3:42:e9:2b:b0: b3:6d:89:1e:a9:ad:b6:3f:fd:87:23:14:48:d7:62:ce:70:34: 60:07:d3:fd:25:e7:64:b4:7b:c2:a4:4b:e9:35:b0:42:44:cf: 0d:04:8e:94:0b:12:e0:41:22:f3:d2:d8:fa:5d:0d:23:fc:30: 71:5a:93:cf:8f:83:69:6e:b4:4b:ca:30:00:cb:1a:b5:a7:1e: 92:0d:98:1d:5d:ac:cb:84:e4:78:d6:b0:fa:0d:76:26:2e:da: ad:da:69:e3:88:fd:81:8b:fb:ab:5e:0f:50:64:49:9a:77:7b: 86:da:31:61:53:a8:97:12:ce:bf:81:6d:5a:62:71:2c:9f:3b: c4:49:75:1d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpFfFGEUxJtcwIRTKoxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTgyNjhiYjA4YjA3YTk0ODBjNDU1NWM1MjExNGE3MmEyMTkwNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvrTyT10fuZo9ijc4bpFlp2or7eg mRFcBzcxPetsw1SF/CQLK1id07LUUBHzixThO/R2lXC6Af2osssGIcsPRVEkemBP h3ha82U8YnxlLTmDZ/rd2gWCvIorxbNJ1NtINoEal3LDSAZIf74h/KjtNnJF6U21 7lKrOZ2N8XHhWbL50wLankRKzZJwDN46TjDY4yf3VOnfowDr9EMYh9JmgAB2i747 7123gF+jU/rOpmtgtdhvybRT8IKNL9ns3ymFtbnr8Aohot/DEYSWbAuFAb0eAT3O dfVD8Eo1AEg8LeU6gqZnAh/3t//z+Vv6uPF2pNumd6yjJfaWJNS2j9bN7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLWCaLsIsHqUgMRVXFIRSnKiGQURMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvdFlKb3V3aXdlcFNBeEZWY1VoRktjcUlaQlJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAAShq2oUEYNLVU70i+X5lScRkcFH0Mt8 mxUE4P7LZ4lOzpk0HFrde0/DdmeT3WI0diHhnJ7pUjZsm40Z4z9Zjbubbq7n0+3+ LIqNh2PZ1D2aXrtk3/mPo1Wh79q5aad1WsTNQ07KTa4r7ECyvWeL7Ri+d3LgOvL2 GvjjQukrsLNtiR6prbY//YcjFEjXYs5wNGAH0/0l52S0e8KkS+k1sEJEzw0EjpQL EuBBIvPS2PpdDSP8MHFak8+Pg2lutEvKMADLGrWnHpINmB1drMuE5HjWsPoNdiYu 2q3aaeOI/YGL+6teD1BkSZp3e4baMWFTqJcSzr+BbVpicSyfO8RJdR0= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:35 2026 by rpki-client