This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uZsUS6hzQiPtbZk9NHqJ6oFRp_o.roa File: uZsUS6hzQiPtbZk9NHqJ6oFRp_o.roa (raw, json) Hash identifier: oPq4e6reqktJ9LplNuxF5kBCiVt2uvd7epoAo9RyIYA= Subject key identifier: B9:9B:14:4B:A8:73:42:23:ED:6D:99:3D:34:7A:89:EA:81:51:A7:FA Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6AA1EE207715332119CDC48A615CA Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uZsUS6hzQiPtbZk9NHqJ6oFRp_o.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396617 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:aa:1e:e2:07:71:53:32:11:9c:dc:48:a6:15:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b99b144ba8734223ed6d993d347a89ea8151a7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:d0:6b:4f:46:08:85:0f:ef:bf:c1:00:95: 73:49:df:dd:09:eb:ff:97:28:47:c1:a2:57:c4:80: 15:79:54:c0:fb:09:bd:1b:1a:6f:e0:93:3e:2d:5c: 48:f8:c5:a7:a6:8b:6c:1c:1d:d8:e6:76:7f:48:32: 87:08:e4:b8:97:ce:08:95:db:45:97:32:36:1d:4f: 8d:b7:9c:0a:2f:da:c3:94:94:c5:0f:0a:2b:0a:76: 71:d5:fc:83:b2:bf:85:24:b8:64:da:62:ac:db:90: 78:ec:16:63:09:2f:2c:58:70:5c:4c:e8:bf:45:74: 44:fa:1b:aa:2d:4a:bf:66:a4:3c:cb:bd:6c:2b:bf: fe:cd:55:91:82:bf:2b:6b:9d:ab:5d:1a:46:2c:bd: 71:1e:d5:51:7b:62:12:21:07:c2:61:59:67:cc:d2: 65:99:7a:10:82:7f:1a:4f:25:1c:8e:35:a5:c2:fb: 8b:ee:b6:66:9c:b1:13:9d:ba:d2:fd:76:c3:2c:3f: 21:dd:fe:00:59:00:fd:78:07:73:71:5c:e4:32:71: 0c:66:ec:a4:8e:fe:13:f8:14:40:4d:89:b1:f4:87: 09:42:41:45:4d:e7:3a:47:38:00:9c:67:25:41:d4: 78:15:8a:f1:00:d3:9f:ca:af:10:cb:3c:3e:f6:c3: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9B:14:4B:A8:73:42:23:ED:6D:99:3D:34:7A:89:EA:81:51:A7:FA X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/uZsUS6hzQiPtbZk9NHqJ6oFRp_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 93:35:02:da:62:cf:45:90:f6:83:89:8b:4c:3e:99:9d:dc:6b: 84:fd:3e:73:25:05:ea:22:82:c3:0f:c6:97:2d:aa:8f:65:ba: 65:ea:9a:57:27:b8:0e:5c:ca:35:10:4e:0e:f7:73:07:8e:ef: a9:f5:24:30:99:52:7d:7d:ad:c6:d3:40:b0:cf:67:4c:58:5d: 57:40:b0:63:b9:8b:6e:fb:32:e8:8f:aa:25:4f:69:03:17:ef: f6:8f:4d:fb:4a:61:26:4d:67:e5:45:79:55:e8:9c:ae:cd:a2: ef:ac:18:c6:c9:7f:8d:55:61:de:15:68:89:48:8b:8d:21:af: ad:b8:cf:dd:b8:a7:d3:f3:b9:4c:15:82:2d:d3:a0:c2:00:03: df:c6:c3:2a:74:c2:0b:5a:de:f6:d3:cc:fd:42:57:53:7e:04: c3:ab:4a:39:07:23:57:27:80:1d:a4:82:17:5b:bc:9f:e8:1c: 81:00:17:85:ea:87:df:35:b9:47:bc:09:87:0a:b7:5e:af:2e: 31:38:a6:e1:d0:fc:4f:50:16:44:02:88:ba:9d:a1:c1:29:cf: 9c:76:bc:e2:94:a3:6f:af:15:56:85:49:66:6a:14:83:f1:3d: 23:67:c7:ed:c8:64:94:db:21:2c:b1:ea:58:32:20:f5:4f:d1: ac:fb:1a:a6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqoe4gdxUzIRnNxIphXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTliMTQ0YmE4NzM0MjIzZWQ2ZDk5M2QzNDdhODllYTgxNTFhN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/DQa09GCIUP77/BAJVzSd/dCev/ lyhHwaJXxIAVeVTA+wm9Gxpv4JM+LVxI+MWnpotsHB3Y5nZ/SDKHCOS4l84IldtF lzI2HU+Nt5wKL9rDlJTFDworCnZx1fyDsr+FJLhk2mKs25B47BZjCS8sWHBcTOi/ RXRE+huqLUq/ZqQ8y71sK7/+zVWRgr8ra52rXRpGLL1xHtVRe2ISIQfCYVlnzNJl mXoQgn8aTyUcjjWlwvuL7rZmnLETnbrS/XbDLD8h3f4AWQD9eAdzcVzkMnEMZuyk jv4T+BRATYmx9IcJQkFFTec6RzgAnGclQdR4FYrxANOfyq8Qyzw+9sNzGQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLmbFEuoc0Ij7W2ZPTR6ieqBUaf6MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvdVpzVVM2aHpRaVB0YlprOU5IcUo2b0ZScF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJM1Atpiz0WQ9oOJi0w+mZ3ca4T9PnMl BeoigsMPxpctqo9lumXqmlcnuA5cyjUQTg73cweO76n1JDCZUn19rcbTQLDPZ0xY XVdAsGO5i277MuiPqiVPaQMX7/aPTftKYSZNZ+VFeVXonK7Nou+sGMbJf41VYd4V aIlIi40hr624z924p9PzuUwVgi3ToMIAA9/Gwyp0wgta3vbTzP1CV1N+BMOrSjkH I1cngB2kghdbvJ/oHIEAF4Xqh981uUe8CYcKt16vLjE4puHQ/E9QFkQCiLqdocEp z5x2vOKUo2+vFVaFSWZqFIPxPSNnx+3IZJTbISyx6lgyIPVP0az7GqY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:47 2026 by rpki-client