This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/vJwXl_witvws9X2blgiht67ekjc.roa File: vJwXl_witvws9X2blgiht67ekjc.roa (raw, json) Hash identifier: U7PxTsuVe69kh2qEYcHluldNYI4QEmxP8fzfLF9zYHQ= Subject key identifier: BC:9C:17:97:FC:22:B6:FC:2C:F5:7D:9B:96:08:A1:B7:AE:DE:92:37 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68E7185BC2F991BF7A1C7155E44F3 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/vJwXl_witvws9X2blgiht67ekjc.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396553 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:71:85:bc:2f:99:1b:f7:a1:c7:15:5e:44:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc9c1797fc22b6fc2cf57d9b9608a1b7aede9237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:38:a5:6a:9e:13:cf:e1:07:dc:ab:02:6a:81: 30:2a:79:01:0c:b1:7a:e4:64:3d:6b:e0:08:f4:89: 7a:2f:58:ce:18:5d:8f:7f:10:c4:72:fd:04:6b:68: 04:ab:6f:d6:a9:f5:10:de:63:8f:b4:b1:2d:8f:71: aa:1b:bd:3f:19:29:87:ac:ab:b7:32:66:2c:e0:3c: a0:ae:1d:5b:5f:32:d6:65:f8:07:9b:17:0e:cf:18: 1b:b7:2c:61:e0:0a:e5:dd:f1:62:03:ee:9b:9f:3e: a1:21:93:23:f3:d0:4f:d3:e4:00:6f:60:60:98:2a: 7e:5b:0a:a2:ca:7d:76:8d:a9:40:be:cf:0f:c2:01: 22:87:29:f8:3c:01:3c:93:91:31:55:21:b8:40:5e: 0c:be:92:0f:ba:7c:de:14:08:9c:64:38:ef:a0:50: 87:8e:c1:64:55:df:cf:7c:17:05:7f:5a:c2:23:de: 2e:d7:88:17:23:50:0e:76:36:e3:12:8b:ad:82:0c: 24:1b:27:83:dd:f0:f9:7a:1c:50:dd:d0:36:74:e4: 5e:b7:28:7a:3a:9a:33:3f:67:f2:e2:31:91:5d:ea: 96:06:32:c2:d6:83:e4:b3:77:5e:99:01:1e:05:92: f3:d3:fd:59:9a:6c:98:33:a7:bf:96:cd:d4:53:e2: a1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:9C:17:97:FC:22:B6:FC:2C:F5:7D:9B:96:08:A1:B7:AE:DE:92:37 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/vJwXl_witvws9X2blgiht67ekjc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 9b:56:37:f2:88:d1:65:c2:b9:88:97:03:1c:5f:62:cb:51:93: a2:ab:c7:d4:38:71:35:51:b3:0d:0c:a8:a1:47:7d:37:04:cb: df:f3:08:2d:d7:52:af:28:e0:79:8e:99:b9:9c:87:ed:e3:83: 42:98:eb:a7:76:7e:fb:2b:31:92:2f:2a:c6:33:62:20:6c:8c: 90:a5:80:37:3c:89:45:b6:da:bc:bb:ce:58:89:69:35:e2:74: 57:c5:a5:ab:5b:3e:9b:cc:1a:6d:7d:0e:67:ce:7f:49:9b:52: 79:95:44:d7:4b:e1:85:2a:96:c0:52:14:fb:79:fd:a7:05:12: d6:75:e8:09:f0:0a:5f:20:c4:a9:5a:f2:e9:3e:a5:8a:e5:07: ea:1c:e9:9c:77:d7:4b:c0:7d:87:13:13:2a:50:49:d7:4b:3b: 55:6b:2b:03:87:74:f1:fd:b3:11:a4:c1:54:32:8e:ae:2a:06: 00:6b:d8:34:6e:31:2a:8a:60:72:f4:ff:8f:e2:02:14:27:0c: 2b:f7:cf:94:7d:6a:1f:81:f9:13:c1:ba:86:d7:6b:29:3a:61: ff:83:a5:bd:83:b0:7d:d0:2e:67:52:20:3b:45:cd:b9:02:cf: fa:38:5c:43:20:ce:5b:31:81:1d:f3:58:3f:fc:b9:5d:d9:5f: af:f3:2c:e1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo5xhbwvmRv3occVXkTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzljMTc5N2ZjMjJiNmZjMmNmNTdkOWI5NjA4YTFiN2FlZGU5MjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jilap4Tz+EH3KsCaoEwKnkBDLF6 5GQ9a+AI9Il6L1jOGF2PfxDEcv0Ea2gEq2/WqfUQ3mOPtLEtj3GqG70/GSmHrKu3 MmYs4Dygrh1bXzLWZfgHmxcOzxgbtyxh4Arl3fFiA+6bnz6hIZMj89BP0+QAb2Bg mCp+Wwqiyn12jalAvs8PwgEihyn4PAE8k5ExVSG4QF4MvpIPunzeFAicZDjvoFCH jsFkVd/PfBcFf1rCI94u14gXI1AOdjbjEoutggwkGyeD3fD5ehxQ3dA2dORetyh6 OpozP2fy4jGRXeqWBjLC1oPks3demQEeBZLz0/1ZmmyYM6e/ls3UU+Kh0wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLycF5f8Irb8LPV9m5YIobeu3pI3MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvdkp3WGxfd2l0dndzOVgyYmxnaWh0Njdla2pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJtWN/KI0WXCuYiXAxxfYstRk6Krx9Q4 cTVRsw0MqKFHfTcEy9/zCC3XUq8o4HmOmbmch+3jg0KY66d2fvsrMZIvKsYzYiBs jJClgDc8iUW22ry7zliJaTXidFfFpatbPpvMGm19DmfOf0mbUnmVRNdL4YUqlsBS FPt5/acFEtZ16AnwCl8gxKla8uk+pYrlB+oc6Zx310vAfYcTEypQSddLO1VrKwOH dPH9sxGkwVQyjq4qBgBr2DRuMSqKYHL0/4/iAhQnDCv3z5R9ah+B+RPBuobXayk6 Yf+Dpb2DsH3QLmdSIDtFzbkCz/o4XEMgzlsxgR3zWD/8uV3ZX6/zLOE= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:54 2026 by rpki-client