This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zyJJRB4fKEPLt4gaecRrPNMI2EY.roa File: zyJJRB4fKEPLt4gaecRrPNMI2EY.roa (raw, json) Hash identifier: iRAwFy+dUe6af+dFOhD4FWMQZuvinUk8ux2Vcee97hg= Subject key identifier: CF:22:49:44:1E:1F:28:43:CB:B7:88:1A:79:C4:6B:3C:D3:08:D8:46 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C69BB1A52B45E802048FD04BE1E57B Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zyJJRB4fKEPLt4gaecRrPNMI2EY.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396586 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9b:b1:a5:2b:45:e8:02:04:8f:d0:4b:e1:e5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf2249441e1f2843cbb7881a79c46b3cd308d846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:32:d5:2e:db:5c:21:04:e0:89:e8:17:2f: 2f:e3:26:89:9e:b2:2c:cc:67:43:6c:0e:bf:dc:6b: 43:c5:31:5d:1f:c4:6a:7a:c6:7f:d9:cb:40:ef:23: 7b:80:8c:42:41:b0:fc:7b:b3:0e:74:61:ff:e7:85: fb:b1:ed:23:b9:a9:0e:8e:6c:18:8f:f2:a0:98:a3: 62:33:62:75:b6:3d:c5:12:7c:06:bc:06:09:01:13: 9e:3c:43:b5:f6:69:4d:c3:f8:7d:3b:da:61:04:d7: 22:cf:98:ac:7a:03:cc:65:a4:2c:c2:bf:73:63:5b: 76:01:dc:85:dd:87:02:37:9a:28:a1:a9:a5:f6:1f: b0:7e:99:bb:e9:ad:8c:21:a9:c3:7c:56:55:2d:5b: 77:af:80:35:d0:f7:22:49:e7:f5:78:d1:af:ef:14: d7:de:df:b7:32:27:5d:43:30:70:d8:0b:67:f8:a5: 09:03:88:3b:7f:80:da:b8:c9:f6:a6:f4:6b:0d:57: 0f:27:d2:8d:d9:33:03:16:a0:02:56:08:e4:58:62: b8:71:1a:d8:30:61:e4:e1:90:19:48:03:cc:e4:f6: e7:b2:dd:48:8f:4c:a2:81:cd:86:c2:83:5e:5a:44: b1:c1:63:48:fd:d1:a8:40:fb:73:9c:fd:10:4d:4e: 2e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:22:49:44:1E:1F:28:43:CB:B7:88:1A:79:C4:6B:3C:D3:08:D8:46 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/zyJJRB4fKEPLt4gaecRrPNMI2EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption b6:a9:bf:35:e2:a4:67:04:d0:3f:f4:6c:48:9e:3d:2b:06:3c: a5:5b:7c:b7:f1:70:0a:31:e3:68:04:e6:aa:6d:f3:83:e7:41: 7e:56:9c:68:dd:95:c0:58:1c:62:01:92:f0:38:fa:15:e3:4c: ae:b9:8f:25:66:75:d7:ca:f2:a9:40:a9:1e:78:9d:89:e4:ef: b7:bd:a7:b3:88:91:e4:9f:4e:d3:91:81:a0:5f:01:17:f6:87: b9:ba:b4:96:c6:12:3f:55:6d:b7:de:16:ce:f6:ff:e9:7e:9a: cf:0e:8d:ec:64:89:f4:93:c6:78:cc:b1:3d:47:d8:f6:2b:3f: ff:ba:38:2a:b4:63:f9:c7:38:bd:9c:b9:95:e3:2f:fa:04:4a: cd:3d:d9:6e:3a:5a:fd:94:b5:a0:94:f1:33:d4:f9:c5:89:21: 54:61:48:df:69:be:16:8b:aa:be:9c:e7:4e:c3:1d:96:01:02: 2b:07:60:44:4e:ec:c8:18:5f:0c:a5:a9:fd:b3:a6:69:e4:a9: 66:9c:ca:8c:22:5f:69:3c:77:60:61:21:4c:6a:8c:90:d7:3c: dc:89:a7:66:2a:34:26:a9:81:f5:49:6f:e6:b2:ca:1b:ca:b1: b8:38:75:df:04:f0:39:88:ea:c1:cb:50:c2:87:ca:b9:2b:6a: be:34:81:0f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xpuxpStF6AIEj9BL4eV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjIyNDk0NDFlMWYyODQzY2JiNzg4MWE3OWM0NmIzY2QzMDhkODQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyEy1S7bXCEE4InoFy8v4yaJnrIs zGdDbA6/3GtDxTFdH8RqesZ/2ctA7yN7gIxCQbD8e7MOdGH/54X7se0juakOjmwY j/KgmKNiM2J1tj3FEnwGvAYJAROePEO19mlNw/h9O9phBNciz5isegPMZaQswr9z Y1t2AdyF3YcCN5oooaml9h+wfpm76a2MIanDfFZVLVt3r4A10PciSef1eNGv7xTX 3t+3MiddQzBw2Atn+KUJA4g7f4DauMn2pvRrDVcPJ9KN2TMDFqACVgjkWGK4cRrY MGHk4ZAZSAPM5Pbnst1Ij0yigc2GwoNeWkSxwWNI/dGoQPtznP0QTU4uZwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM8iSUQeHyhDy7eIGnnEazzTCNhGMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvenlKSlJCNGZLRVBMdDRnYWVjUnJQTk1JMkVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBALapvzXipGcE0D/0bEiePSsGPKVbfLfx cAox42gE5qpt84PnQX5WnGjdlcBYHGIBkvA4+hXjTK65jyVmddfK8qlAqR54nYnk 77e9p7OIkeSfTtORgaBfARf2h7m6tJbGEj9VbbfeFs72/+l+ms8OjexkifSTxnjM sT1H2PYrP/+6OCq0Y/nHOL2cuZXjL/oESs092W46Wv2UtaCU8TPU+cWJIVRhSN9p vhaLqr6c507DHZYBAisHYERO7MgYXwylqf2zpmnkqWacyowiX2k8d2BhIUxqjJDX PNyJp2YqNCapgfVJb+ayyhvKsbg4dd8E8DmI6sHLUMKHyrkrar40gQ8= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:43 2026 by rpki-client