This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sfN1EzVrqzsV-ecejcZMUQcF0cE.roa File: sfN1EzVrqzsV-ecejcZMUQcF0cE.roa (raw, json) Hash identifier: xCho/wA03gdkEJt04uHhajR6w8xNO7eSx3sRaM2YYf8= Subject key identifier: B1:F3:75:13:35:6B:AB:3B:15:F9:E7:1E:8D:C6:4C:51:07:05:D1:C1 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6A7A574A6FC5B74EA8D54D1B5BB65 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sfN1EzVrqzsV-ecejcZMUQcF0cE.roa Signing time: Thu 01 Jan 2026 04:17:46 +0000 ROA not before: Thu 01 Jan 2026 04:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396613 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a7:a5:74:a6:fc:5b:74:ea:8d:54:d1:b5:bb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1f37513356bab3b15f9e71e8dc64c510705d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:42:5c:83:f8:86:34:55:0b:87:31:0b:be: 75:bc:78:0a:d3:70:c1:53:49:56:43:02:02:10:3a: 66:53:6d:8e:5c:81:01:f0:90:76:ac:b0:18:5c:dd: 29:60:27:d5:c9:73:7e:69:69:b5:0e:37:19:99:de: 05:12:6a:ff:51:ea:54:e9:00:e5:9f:3c:2e:6f:7b: a7:63:10:be:9e:f4:6d:81:0f:19:e5:fb:fe:46:f4: ad:e9:6f:ed:88:5b:35:94:e8:93:32:f3:2c:37:89: 1f:79:4b:20:eb:fe:1d:bf:75:d1:af:c4:ed:1c:2c: 00:9d:50:88:eb:c4:0d:55:0f:f7:8d:f6:8d:09:7f: ed:ba:d0:c1:c9:1d:70:aa:ef:93:22:3f:bb:09:b0: 4a:80:b6:63:c1:a8:34:9c:bf:bf:9a:d0:f5:da:a4: ed:39:bc:84:9b:b5:2a:66:d7:97:22:96:5e:4e:6a: b7:44:fb:45:80:c0:f3:9b:98:09:50:70:5c:05:2c: 9c:35:75:ea:fb:6b:42:82:3e:0f:c3:ed:e5:2f:b7: fa:6e:d5:e1:2c:39:a2:94:34:e9:fa:e1:32:af:e9: d6:e9:be:89:f4:d9:94:ec:a0:24:be:8c:7c:17:58: af:bd:e6:94:15:77:84:05:76:87:3f:a7:6b:bc:00: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F3:75:13:35:6B:AB:3B:15:F9:E7:1E:8D:C6:4C:51:07:05:D1:C1 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/sfN1EzVrqzsV-ecejcZMUQcF0cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 64:fd:b1:96:05:a9:10:71:65:ca:a3:15:ad:e2:df:50:dd:29: 61:24:99:bb:45:a4:39:d3:47:f3:12:f6:dc:fe:df:04:8e:2b: 96:da:43:11:41:dc:4d:66:db:a6:68:47:19:9b:10:a4:15:17: 6f:f9:6a:0e:ed:4e:71:bf:06:db:d9:c2:ff:0a:50:c5:71:da: ed:48:08:cf:73:f9:5e:b7:e8:0f:0c:7f:51:6b:c5:d8:63:e5: 06:ba:01:0f:8a:53:b2:dd:4d:c1:a2:48:67:c1:87:da:4d:82: 3c:2a:ba:2b:14:13:9b:45:9b:34:3b:24:31:18:f6:02:0f:f1: b3:36:84:af:07:f9:bf:67:a1:10:a6:53:a9:02:6f:f1:04:fc: a8:c9:4a:bb:26:b5:bd:48:15:c7:a0:ef:43:e8:a1:bf:ac:51: 3e:bd:1e:3e:77:38:9f:52:ac:f9:93:db:8d:81:92:06:31:c4: e2:90:5b:3a:3f:ee:b7:08:92:ae:72:17:23:6f:4e:f2:97:1c: e0:59:9f:7d:ae:18:27:d5:d1:2e:64:de:8e:73:64:6f:b0:68: a2:b1:c6:64:b4:28:f9:49:f8:c4:0a:8b:e7:b9:fa:88:d7:b4: f3:36:81:75:bd:e4:c2:b8:c1:6c:02:11:62:ea:5d:fa:57:c9: b0:42:17:92 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xqeldKb8W3TqjVTRtbtlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWYzNzUxMzM1NmJhYjNiMTVmOWU3MWU4ZGM2NGM1MTA3MDVkMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyVCXIP4hjRVC4cxC751vHgK03DB U0lWQwICEDpmU22OXIEB8JB2rLAYXN0pYCfVyXN+aWm1DjcZmd4FEmr/UepU6QDl nzwub3unYxC+nvRtgQ8Z5fv+RvSt6W/tiFs1lOiTMvMsN4kfeUsg6/4dv3XRr8Tt HCwAnVCI68QNVQ/3jfaNCX/tutDByR1wqu+TIj+7CbBKgLZjwag0nL+/mtD12qTt ObyEm7UqZteXIpZeTmq3RPtFgMDzm5gJUHBcBSycNXXq+2tCgj4Pw+3lL7f6btXh LDmilDTp+uEyr+nW6b6J9NmU7KAkvox8F1ivveaUFXeEBXaHP6drvADGvQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLHzdRM1a6s7FfnnHo3GTFEHBdHBMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvc2ZOMUV6VnJxenNWLWVjZWpjWk1VUWNGMGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAGT9sZYFqRBxZcqjFa3i31DdKWEkmbtF pDnTR/MS9tz+3wSOK5baQxFB3E1m26ZoRxmbEKQVF2/5ag7tTnG/BtvZwv8KUMVx 2u1ICM9z+V636A8Mf1Frxdhj5Qa6AQ+KU7LdTcGiSGfBh9pNgjwquisUE5tFmzQ7 JDEY9gIP8bM2hK8H+b9noRCmU6kCb/EE/KjJSrsmtb1IFceg70Poob+sUT69Hj53 OJ9SrPmT242BkgYxxOKQWzo/7rcIkq5yFyNvTvKXHOBZn32uGCfV0S5k3o5zZG+w aKKxxmS0KPlJ+MQKi+e5+ojXtPM2gXW95MK4wWwCEWLqXfpXybBCF5I= -----END CERTIFICATE-----Generated at Mon Feb 9 20:45:44 2026 by rpki-client