This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/y0sVlKplNUs3izqYWqVwPSMU4FA.roa File: y0sVlKplNUs3izqYWqVwPSMU4FA.roa (raw, json) Hash identifier: WdFxBAUJVr3hUy1FpuWlz8PP3Z9D/d5WMeWqiWt3Qzc= Subject key identifier: CB:4B:15:94:AA:65:35:4B:37:8B:3A:98:5A:A5:70:3D:23:14:E0:50 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C68FB946D635A23AFE0AB9F830CFB4 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/y0sVlKplNUs3izqYWqVwPSMU4FA.roa Signing time: Thu 01 Jan 2026 04:17:40 +0000 ROA not before: Thu 01 Jan 2026 04:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396561 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8f:b9:46:d6:35:a2:3a:fe:0a:b9:f8:30:cf:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb4b1594aa65354b378b3a985aa5703d2314e050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:50:9e:08:d9:99:92:9e:0d:57:73:bd:80:70: 2e:18:2b:53:67:6c:2d:9e:f7:37:34:ac:60:37:86: 9a:64:80:3b:81:c3:f5:19:d8:4b:1a:3f:b6:dd:1f: a9:67:ee:da:6f:c9:1a:60:4c:c8:27:fb:75:4a:3c: f5:4b:15:42:44:65:46:f3:10:42:b9:0c:65:e1:cb: 7f:b2:fc:a4:e9:c5:5a:60:41:73:c9:55:49:28:a9: 7d:ca:d2:33:a9:0d:39:3c:0e:09:44:73:ee:3c:ba: ef:80:36:06:f8:a9:46:c8:89:58:5d:30:63:d9:24: fe:bf:68:46:26:30:0d:b3:79:42:b5:92:e4:b1:38: df:b3:54:d5:f7:64:b3:f3:94:f4:59:90:d3:eb:8e: 86:61:2f:ce:39:db:e8:18:16:c1:cf:bf:a2:9a:56: 8f:4e:1c:9f:3d:59:ac:c4:1d:a3:1a:12:03:29:9a: 38:df:72:bb:4c:bc:73:bb:e2:9a:40:a5:9a:40:b9: ee:63:1b:36:ab:b5:a1:7a:70:86:58:99:f5:fe:aa: de:c3:12:72:58:15:27:72:a1:8b:6a:13:12:36:c8: b4:69:e3:20:fe:66:15:1d:61:fa:ac:a6:e0:a5:a3: dc:86:d7:c6:6a:e3:66:84:bd:7b:f7:9f:2d:bb:6f: ef:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4B:15:94:AA:65:35:4B:37:8B:3A:98:5A:A5:70:3D:23:14:E0:50 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/y0sVlKplNUs3izqYWqVwPSMU4FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 9e:b5:1a:24:b3:a6:1f:cb:15:2b:c7:a5:2b:57:cc:41:a7:dc: 65:4c:1c:38:ff:93:2b:68:a3:74:19:e4:4d:49:27:59:3e:07: 36:ce:bc:8b:d9:ac:62:66:7b:85:9a:1d:49:81:5b:f6:ee:1f: 37:cd:eb:26:b3:18:54:44:c9:98:34:ad:2c:7c:97:25:34:cd: 4a:81:d8:0a:e1:c9:9b:a9:de:fc:fd:28:ca:24:aa:d0:87:ed: 8e:c0:03:1a:9a:b1:7c:41:8e:fd:21:d7:e8:91:95:e7:fc:53: ee:7d:95:bd:da:55:38:e4:9f:70:df:1b:41:bd:76:e7:8c:43: 57:57:b3:f5:5d:2e:4e:f9:f2:4f:14:15:b3:47:00:b6:37:f1: 81:88:ba:25:f9:22:f9:d8:03:bb:80:90:60:7f:de:c6:08:f2: 09:c6:31:e4:e8:bd:ab:27:ef:3f:9b:b9:c6:04:aa:af:3f:59: 6e:8f:03:b3:92:ac:d7:49:09:24:37:d9:1b:c2:ea:a4:84:1a: 4b:04:22:cf:c1:06:8c:3c:39:f9:ee:46:cf:24:f6:61:9b:b8: 0e:43:67:ca:ba:53:cf:24:05:ab:ac:72:7b:c1:08:43:81:ae: 4d:1b:27:f5:d0:84:5f:f6:e0:fa:25:fd:69:30:2f:0d:7f:43: 60:87:2c:88 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xo+5RtY1ojr+Crn4MM+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjRiMTU5NGFhNjUzNTRiMzc4YjNhOTg1YWE1NzAzZDIzMTRlMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FCeCNmZkp4NV3O9gHAuGCtTZ2wt nvc3NKxgN4aaZIA7gcP1GdhLGj+23R+pZ+7ab8kaYEzIJ/t1Sjz1SxVCRGVG8xBC uQxl4ct/svyk6cVaYEFzyVVJKKl9ytIzqQ05PA4JRHPuPLrvgDYG+KlGyIlYXTBj 2ST+v2hGJjANs3lCtZLksTjfs1TV92Sz85T0WZDT646GYS/OOdvoGBbBz7+imlaP ThyfPVmsxB2jGhIDKZo433K7TLxzu+KaQKWaQLnuYxs2q7WhenCGWJn1/qrewxJy WBUncqGLahMSNsi0aeMg/mYVHWH6rKbgpaPchtfGauNmhL17958tu2/vCQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMtLFZSqZTVLN4s6mFqlcD0jFOBQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEveTBzVmxLcGxOVXMzaXpxWVdxVndQU01VNEZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAJ61GiSzph/LFSvHpStXzEGn3GVMHDj/ kytoo3QZ5E1JJ1k+BzbOvIvZrGJme4WaHUmBW/buHzfN6yazGFREyZg0rSx8lyU0 zUqB2ArhyZup3vz9KMokqtCH7Y7AAxqasXxBjv0h1+iRlef8U+59lb3aVTjkn3Df G0G9dueMQ1dXs/VdLk758k8UFbNHALY38YGIuiX5IvnYA7uAkGB/3sYI8gnGMeTo vasn7z+bucYEqq8/WW6PA7OSrNdJCSQ32RvC6qSEGksEIs/BBow8OfnuRs8k9mGb uA5DZ8q6U88kBauscnvBCEOBrk0bJ/XQhF/24Pol/WkwLw1/Q2CHLIg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:47 2026 by rpki-client