This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xud82TU8s7fBk_ktw25aWZ6oQ3c.roa File: xud82TU8s7fBk_ktw25aWZ6oQ3c.roa (raw, json) Hash identifier: wpD58VWYjINoFF7kvsr9lAJVQ5KQIh9W3hPpCqLnOgk= Subject key identifier: C6:E7:7C:D9:35:3C:B3:B7:C1:93:F9:2D:C3:6E:5A:59:9E:A8:43:77 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C685ED087A901E5C75F767499CFE7F Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xud82TU8s7fBk_ktw25aWZ6oQ3c.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36628 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:85:ed:08:7a:90:1e:5c:75:f7:67:49:9c:fe:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6e77cd9353cb3b7c193f92dc36e5a599ea84377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:5c:54:1f:be:12:6d:11:bb:d9:8e:d6:b4: 5b:0e:1f:5c:c3:8f:61:0a:b4:51:70:92:31:b4:24: 67:48:72:79:ce:89:3d:da:c1:3d:5c:0f:5b:c6:9d: 4b:16:54:6b:c6:43:8f:58:b1:d7:b6:36:35:14:4f: bf:63:e8:0f:1e:5d:dd:15:fa:21:16:91:03:2f:ed: 8d:e6:c1:9c:fd:04:93:ce:b5:f2:ec:eb:26:3f:92: e4:98:38:83:c8:ee:13:b7:cf:ee:a7:50:b6:65:cf: 79:ef:95:0b:aa:f2:60:e0:bc:2e:34:5c:17:4d:d4: 2a:52:35:96:0c:56:f4:7e:58:76:91:19:61:a4:5d: ea:2c:91:81:b4:96:db:3a:ad:3c:0a:6b:0d:78:e3: b4:c5:c4:7f:37:60:c2:74:7f:14:6d:d8:01:74:96: b7:ed:c8:ff:2c:17:81:66:6a:c6:3f:ef:4f:59:cf: 69:60:d1:7b:3b:f3:4a:0d:bd:ad:ce:2e:fe:b8:50: e9:3e:3a:00:69:34:19:5b:ca:13:0c:ad:69:23:bd: 40:cd:14:5e:8f:74:2c:c1:8b:9a:bd:7c:2e:a4:96: 31:8f:91:22:0e:54:f4:79:95:4c:94:c4:51:8d:d7: 3a:2c:c1:d8:51:03:58:2b:29:b5:cb:b8:12:b0:69: ed:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E7:7C:D9:35:3C:B3:B7:C1:93:F9:2D:C3:6E:5A:59:9E:A8:43:77 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xud82TU8s7fBk_ktw25aWZ6oQ3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 59:79:e3:29:69:a0:7c:21:53:f4:fd:74:03:fe:34:a7:c3:79: 7e:cd:2b:26:6b:35:aa:3e:17:e4:ce:fa:3f:11:82:ed:a9:e2: 47:82:fe:5a:bd:c8:40:89:c7:86:50:bb:a8:b2:cd:2a:7b:ab: 84:bb:80:8c:c6:27:7b:d7:b5:d8:55:a7:a3:f4:01:27:5c:1b: bc:cd:86:8e:23:4f:61:b4:55:a9:7c:06:b1:33:55:52:55:23: 4e:ff:6d:00:cb:fa:ad:86:8a:04:20:de:73:92:9b:35:be:20: 45:76:4f:74:d2:94:2c:13:e3:81:15:51:6b:01:04:49:92:af: 76:f2:3b:bb:ae:82:d8:c1:b9:ab:4c:11:39:f5:ef:96:74:d9: 6b:ff:27:72:18:bd:dc:9a:a9:d2:ce:99:dd:bb:da:1c:ee:cf: 86:bf:45:80:2e:b3:b4:71:9d:c3:5d:24:72:5f:bf:96:3a:62: 00:4e:b1:c4:f7:38:c1:e4:29:be:c1:c9:10:7f:22:bf:c1:bb: 6b:a7:cd:9a:ac:a3:a3:5c:27:1f:13:aa:12:83:58:f6:01:20: e4:32:fd:13:59:95:6d:5d:b1:05:1b:02:58:8d:7a:22:bc:a4: 63:81:78:05:48:e8:7a:de:e7:bc:2d:ee:7b:72:00:c2:ea:e8: 43:44:73:d2 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoXtCHqQHlx192dJnP5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmU3N2NkOTM1M2NiM2I3YzE5M2Y5MmRjMzZlNWE1OTllYTg0Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GFcVB++Em0Ru9mO1rRbDh9cw49h CrRRcJIxtCRnSHJ5zok92sE9XA9bxp1LFlRrxkOPWLHXtjY1FE+/Y+gPHl3dFfoh FpEDL+2N5sGc/QSTzrXy7OsmP5LkmDiDyO4Tt8/up1C2Zc9575ULqvJg4LwuNFwX TdQqUjWWDFb0flh2kRlhpF3qLJGBtJbbOq08CmsNeOO0xcR/N2DCdH8UbdgBdJa3 7cj/LBeBZmrGP+9PWc9pYNF7O/NKDb2tzi7+uFDpPjoAaTQZW8oTDK1pI71AzRRe j3QswYuavXwupJYxj5EiDlT0eZVMlMRRjdc6LMHYUQNYKym1y7gSsGntwwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMbnfNk1PLO3wZP5LcNuWlmeqEN3MB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEveHVkODJUVThzN2ZCa19rdHcyNWFXWjZvUTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAFl54ylpoHwhU/T9dAP+NKfDeX7NKyZr Nao+F+TO+j8Rgu2p4keC/lq9yECJx4ZQu6iyzSp7q4S7gIzGJ3vXtdhVp6P0ASdc G7zNho4jT2G0Val8BrEzVVJVI07/bQDL+q2GigQg3nOSmzW+IEV2T3TSlCwT44EV UWsBBEmSr3byO7uugtjBuatMETn175Z02Wv/J3IYvdyaqdLOmd272hzuz4a/RYAu s7RxncNdJHJfv5Y6YgBOscT3OMHkKb7ByRB/Ir/Bu2unzZqso6NcJx8TqhKDWPYB IOQy/RNZlW1dsQUbAliNeiK8pGOBeAVI6Hre57wt7ntyAMLq6ENEc9I= -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:33 2026 by rpki-client