This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NsG39U1Nli8XFVIwhqR8Bmf1KVA.roa File: NsG39U1Nli8XFVIwhqR8Bmf1KVA.roa (raw, json) Hash identifier: j/Pu8oZ5ebpgqWXNspRN9Qd9n6QlOwE9ziSYIjKnf7M= Subject key identifier: 36:C1:B7:F5:4D:4D:96:2F:17:15:52:30:86:A4:7C:06:67:F5:29:50 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67AEF6A756AC9A4446BC571DF7ED4 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NsG39U1Nli8XFVIwhqR8Bmf1KVA.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 81.19.194.0/24 maxlen: 24 185.100.1.0/24 maxlen: 24 185.100.2.0/24 maxlen: 24 217.30.89.0/24 maxlen: 24 217.30.90.0/24 maxlen: 24 2a10:eec0:d::/48 maxlen: 48 2a10:eec0:e::/47 maxlen: 47 2a10:eec0:10::/44 maxlen: 44 2a10:eec0:20::/43 maxlen: 43 2a10:eec0:40::/42 maxlen: 42 2a10:eec0:80::/41 maxlen: 41 2a10:eec0:100::/40 maxlen: 40 2a10:eec0:200::/39 maxlen: 39 2a10:eec0:400::/38 maxlen: 38 2a10:eec0:800::/37 maxlen: 37 2a10:eec0:1000::/36 maxlen: 36 2a10:eec0:2000::/35 maxlen: 35 2a10:eec0:4000::/34 maxlen: 34 2a10:eec0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7a:ef:6a:75:6a:c9:a4:44:6b:c5:71:df:7e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36c1b7f54d4d962f1715523086a47c0667f52950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:8b:a1:58:61:2e:b9:e5:3c:bf:a4:20:40: 7b:5e:6a:4b:88:aa:51:a7:54:74:7f:76:41:79:f7: fc:06:4f:e3:6b:9a:3f:7c:6f:f5:a3:26:c5:f9:1a: d9:57:96:60:c0:84:a1:b1:ef:43:fc:52:b9:72:62: f5:55:3c:78:a6:47:24:79:48:ac:75:af:4c:c6:0c: 9f:b4:ed:50:70:f3:2f:9b:15:42:87:81:81:ce:4b: 56:0e:de:c0:ab:01:d2:25:7d:65:88:11:db:c5:08: 8c:4c:8f:bc:68:e0:ff:7e:31:5b:28:0a:b0:11:ef: bb:f6:b4:bd:3e:11:03:60:9e:28:b4:ff:70:73:2a: 53:41:e5:40:71:5b:6e:74:e6:5c:bd:71:02:a8:e9: 03:9e:e6:21:5f:0a:06:42:a2:cb:53:30:f2:0e:41: 69:d1:78:19:91:76:9f:f9:61:73:de:4b:40:57:19: 2f:5f:74:71:d6:d6:0a:98:1e:cc:03:98:41:ab:fb: bb:a3:51:63:fc:af:4f:bb:45:d2:d7:77:a2:b2:0d: 8a:39:5f:db:b3:78:85:ea:1d:57:56:3b:27:c3:8d: 22:23:1b:82:76:cc:11:04:fb:ac:bc:f8:80:7a:94: 18:33:c1:04:d4:53:bf:3c:ea:8b:5a:f2:e8:a1:8f: 66:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C1:B7:F5:4D:4D:96:2F:17:15:52:30:86:A4:7C:06:67:F5:29:50 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/NsG39U1Nli8XFVIwhqR8Bmf1KVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.194.0/24 185.100.1.0-185.100.2.255 217.30.89.0-217.30.90.255 IPv6: 2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5f:26:a6:da:0f:4f:d0:78:f7:14:31:99:98:fe:30:2f:ae:e5: 88:c3:3f:c2:66:24:7e:66:36:0b:f4:8e:2a:f8:ff:9e:dc:61: 80:06:b2:2a:b3:c0:2e:1a:85:4d:48:6b:60:97:84:b2:51:42: 8c:70:69:3f:f3:8e:2f:d2:c6:43:bb:e5:6b:b1:43:9c:e3:91: c3:5e:66:14:f5:93:98:24:aa:df:a7:48:de:b6:9c:61:26:01: e3:3c:a1:31:a8:ef:58:f2:62:f1:22:d0:bb:74:c7:8c:06:23: 68:94:ee:ed:bb:fc:90:ec:a9:a9:bc:68:64:eb:83:a7:e5:b8: b6:4f:31:40:de:c4:dd:59:30:b8:de:37:7f:7c:d2:ec:b9:43: ed:dc:12:6a:b6:3a:c3:43:2f:86:73:3a:75:90:63:da:35:a6: ee:56:9b:5c:85:4c:9f:8e:72:65:06:15:6f:af:69:2e:a5:c8: 2e:4c:fb:8b:f7:7a:82:7e:0c:13:fd:f3:b7:89:ae:f5:70:db: f9:c7:13:64:8a:ad:98:b5:92:01:31:05:6a:a1:80:20:85:78: f2:1c:c9:d7:f3:84:d7:6b:e6:b8:4b:a4:eb:63:d1:47:61:6d: 20:9f:70:d0:fa:a7:78:22:2a:7e:97:0d:0e:c4:b5:61:3b:04: e7:57:a0:f6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt3xnrvanVqyaREa8Vx337UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmMxYjdmNTRkNGQ5NjJmMTcxNTUyMzA4NmE0N2MwNjY3ZjUyOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLmLoVhhLrnlPL+kIEB7XmpLiKpR p1R0f3ZBeff8Bk/ja5o/fG/1oybF+RrZV5ZgwIShse9D/FK5cmL1VTx4pkckeUis da9MxgyftO1QcPMvmxVCh4GBzktWDt7AqwHSJX1liBHbxQiMTI+8aOD/fjFbKAqw Ee+79rS9PhEDYJ4otP9wcypTQeVAcVtudOZcvXECqOkDnuYhXwoGQqLLUzDyDkFp 0XgZkXaf+WFz3ktAVxkvX3Rx1tYKmB7MA5hBq/u7o1Fj/K9Pu0XS13eisg2KOV/b s3iF6h1XVjsnw40iIxuCdswRBPusvPiAepQYM8EE1FO/POqLWvLooY9mnQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFDbBt/VNTZYvFxVSMIakfAZn9SlQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvTnNHMzlVMU5saThYRlZJd2hxUjhCbWYxS1ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAoBAIAATAiAwQAURPCMAwD BAC5ZAEDBAC5ZAIwDAMEANkeWQMEANkeWjAYBAIAAjASMBADBwAqEO7AAA0DBQAq EO7AMA0GCSqGSIb3DQEBCwUAA4IBAQBfJqbaD0/QePcUMZmY/jAvruWIwz/CZiR+ ZjYL9I4q+P+e3GGABrIqs8AuGoVNSGtgl4SyUUKMcGk/844v0sZDu+VrsUOc45HD XmYU9ZOYJKrfp0jetpxhJgHjPKExqO9Y8mLxItC7dMeMBiNolO7tu/yQ7KmpvGhk 64On5bi2TzFA3sTdWTC43jd/fNLsuUPt3BJqtjrDQy+Gczp1kGPaNabuVptchUyf jnJlBhVvr2kupcguTPuL93qCfgwT/fO3ia71cNv5xxNkiq2YtZIBMQVqoYAghXjy HMnX84TXa+a4S6TrY9FHYW0gn3DQ+qd4Iip+lw0OxLVhOwTnV6D2 -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:13 2026 by rpki-client