This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/thDFuopHuZw59zVC6EFrwx9ExPU.roa File: thDFuopHuZw59zVC6EFrwx9ExPU.roa (raw, json) Hash identifier: YkvQHfcrJVtngA1lY2MOyoNi3yWtAfJl7cHQzsSau+s= Subject key identifier: B6:10:C5:BA:8A:47:B9:9C:39:F7:35:42:E8:41:6B:C3:1F:44:C4:F5 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69E29589D2BE05A9645B13CF3F27C Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/thDFuopHuZw59zVC6EFrwx9ExPU.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396592 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:29:58:9d:2b:e0:5a:96:45:b1:3c:f3:f2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b610c5ba8a47b99c39f73542e8416bc31f44c4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ff:26:24:a5:34:a6:3c:2a:ee:3b:20:73:06: 9a:4e:ba:e5:56:7e:7f:74:7a:32:4d:c3:2a:dd:4f: 2b:fb:d1:a4:75:2a:a6:79:69:bd:25:99:9c:6f:b6: 1d:61:f3:72:ef:18:4b:77:c8:a0:0c:2f:ac:40:91: 89:3f:86:79:9b:a3:e0:c0:dd:3e:1f:3c:08:fc:07: 51:b9:3e:6d:de:6a:4f:0b:8e:5c:96:2f:8c:0f:ae: 3d:28:ec:9e:b6:fc:77:a9:35:2e:3f:08:9b:5b:05: ab:dc:9c:05:a7:84:a1:fb:89:78:69:24:af:41:e6: 3d:9d:85:f3:9c:ff:13:c5:61:b5:d0:71:9c:85:b0: 60:2d:d5:ca:1f:e7:e6:17:0c:67:cc:66:f8:58:ae: 7e:8a:88:eb:6e:b2:7c:da:19:ed:d6:f2:41:55:8e: 1b:0d:03:44:a9:d1:88:e9:a7:f6:77:06:30:80:11: 39:2b:e0:27:05:1f:e2:52:fc:c1:b2:01:4b:96:62: b2:ed:ae:05:e5:72:78:ee:f6:d7:ab:c9:01:5b:2c: 2d:0c:81:0c:98:4a:52:68:a3:1e:63:86:c7:bd:10: 9a:32:88:6b:ac:f2:06:72:96:68:5b:09:22:b6:00: 29:60:58:0c:13:45:b3:8c:34:a3:7c:32:87:83:9d: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:10:C5:BA:8A:47:B9:9C:39:F7:35:42:E8:41:6B:C3:1F:44:C4:F5 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/thDFuopHuZw59zVC6EFrwx9ExPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 71:89:b8:c0:63:18:ef:c2:8c:77:1f:e2:50:75:c0:be:f3:d5: 34:83:13:9c:49:13:85:eb:f6:ff:bb:f6:8f:5c:42:06:e9:0b: b3:54:b4:da:9d:da:90:ad:9a:1a:dc:d6:a5:55:e0:75:f0:00: 23:0e:24:47:0e:8d:83:c2:e0:e7:86:e8:ca:ba:1b:18:2c:a8: 14:77:c3:e8:7c:fc:aa:ed:4a:13:fd:1b:1a:26:fb:a0:ee:6f: 5c:2b:9b:5f:79:20:38:e2:75:90:de:9b:7f:21:22:7e:d0:b5: 11:36:fc:74:31:2a:6d:82:ca:0a:b6:10:2e:35:d5:93:f0:7c: 3f:c2:6f:86:27:89:87:9d:16:d1:ff:d0:af:27:60:2d:e7:35: ba:8e:30:82:28:39:bb:02:48:95:11:ba:16:3a:28:79:ed:ea: 40:cf:2b:ae:bf:fe:ff:3c:53:1d:3d:5f:cd:31:b1:e8:de:4a: 8c:65:96:c9:1b:a1:79:30:ca:8b:43:bf:da:c6:0e:56:ec:a6: 4d:c7:92:10:a2:90:7b:74:c5:60:39:c5:f9:77:6a:80:20:d0: 06:d7:7a:e9:9a:50:5b:42:4c:e1:c9:0e:25:36:9e:bd:52:71: d6:2e:06:d5:cc:e4:39:29:18:df:56:bd:7f:d3:88:85:bf:20: b9:cb:67:1d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xp4pWJ0r4FqWRbE88/J8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjEwYzViYThhNDdiOTljMzlmNzM1NDJlODQxNmJjMzFmNDRjNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/8mJKU0pjwq7jsgcwaaTrrlVn5/ dHoyTcMq3U8r+9GkdSqmeWm9JZmcb7YdYfNy7xhLd8igDC+sQJGJP4Z5m6PgwN0+ HzwI/AdRuT5t3mpPC45cli+MD649KOyetvx3qTUuPwibWwWr3JwFp4Sh+4l4aSSv QeY9nYXznP8TxWG10HGchbBgLdXKH+fmFwxnzGb4WK5+iojrbrJ82hnt1vJBVY4b DQNEqdGI6af2dwYwgBE5K+AnBR/iUvzBsgFLlmKy7a4F5XJ47vbXq8kBWywtDIEM mEpSaKMeY4bHvRCaMohrrPIGcpZoWwkitgApYFgME0WzjDSjfDKHg507FQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLYQxbqKR7mcOfc1QuhBa8MfRMT1MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvdGhERnVvcEh1Wnc1OXpWQzZFRnJ3eDlFeFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAHGJuMBjGO/CjHcf4lB1wL7z1TSDE5xJ E4Xr9v+79o9cQgbpC7NUtNqd2pCtmhrc1qVV4HXwACMOJEcOjYPC4OeG6Mq6Gxgs qBR3w+h8/KrtShP9Gxom+6Dub1wrm195IDjidZDem38hIn7QtRE2/HQxKm2Cygq2 EC411ZPwfD/Cb4YniYedFtH/0K8nYC3nNbqOMIIoObsCSJURuhY6KHnt6kDPK66/ /v88Ux09X80xsejeSoxllskboXkwyotDv9rGDlbspk3HkhCikHt0xWA5xfl3aoAg 0AbXeumaUFtCTOHJDiU2nr1ScdYuBtXM5DkpGN9WvX/TiIW/ILnLZx0= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:50 2026 by rpki-client