This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tY1Ah1akPhO1i-oD5uPSXWFPmV4.roa File: tY1Ah1akPhO1i-oD5uPSXWFPmV4.roa (raw, json) Hash identifier: 6StVf5i+TPg1PyF/87VaPjKVC9I1O+fLBC5R/LOBB5s= Subject key identifier: B5:8D:40:87:56:A4:3E:13:B5:8B:EA:03:E6:E3:D2:5D:61:4F:99:5E Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C6834F09964FCDF1C1A7E210D8D6F1 Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tY1Ah1akPhO1i-oD5uPSXWFPmV4.roa Signing time: Thu 01 Jan 2026 04:17:37 +0000 ROA not before: Thu 01 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36622 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:83:4f:09:96:4f:cd:f1:c1:a7:e2:10:d8:d6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b58d408756a43e13b58bea03e6e3d25d614f995e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:80:03:66:0b:43:74:a4:80:50:d8:ce:40:21: 0b:c7:70:e2:e4:3c:f5:4b:be:40:7d:6e:5e:f5:a4: b1:37:c2:1b:2a:0b:a6:3a:91:9e:9b:26:72:f6:8b: d5:b0:79:b5:63:c0:8e:c6:e0:ba:41:9d:2c:58:7e: f6:fa:e7:b6:7a:d6:f8:16:c0:59:d1:e3:37:7a:4b: 91:43:fb:74:af:b9:60:26:e1:d3:c7:82:7b:d4:c3: 56:68:cf:64:2b:a5:d6:44:c0:23:cf:e7:e5:66:0d: 95:a4:0c:83:36:34:3c:12:72:62:a9:d3:08:72:a4: fe:82:10:71:8f:a7:66:7f:d4:44:d3:f7:ee:b1:20: 9d:73:a4:f4:81:0e:2c:7b:7d:77:f5:bb:a6:90:ff: 7d:9c:e2:5b:24:f9:c5:0b:55:12:0d:dc:4b:bf:ef: aa:2f:1f:f5:c3:9c:b4:8d:50:b9:72:38:2f:bc:db: e3:19:d4:54:c7:02:4a:6d:7e:c1:16:2c:97:14:a5: 19:27:29:f3:12:42:39:84:10:bc:12:dc:e9:0f:db: d4:4e:e9:a4:94:39:e0:84:a2:c1:0b:0f:3f:23:ea: bc:ea:fd:f1:45:83:da:4d:ab:67:ba:6c:f2:38:9d: af:cc:5b:64:7a:07:46:56:5c:7e:b8:91:a1:35:19: 3d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8D:40:87:56:A4:3E:13:B5:8B:EA:03:E6:E3:D2:5D:61:4F:99:5E X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tY1Ah1akPhO1i-oD5uPSXWFPmV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 49:18:3d:29:1b:8f:bb:50:7a:4a:bb:e1:41:47:23:d2:36:df: ad:a6:23:8d:38:52:01:b2:7e:83:fc:ff:70:64:93:9a:b8:74: 45:7a:72:b5:6c:b4:66:99:c6:00:6d:b9:38:36:70:9c:34:21: a5:0d:99:86:3e:89:e6:4a:c4:08:b3:69:cf:90:ef:83:75:79: 93:e6:e8:3e:dc:34:aa:f3:af:e8:df:65:72:12:df:a9:32:82: db:ad:ac:7a:25:0c:9c:6c:80:7d:e2:09:09:81:87:82:36:33: 24:6e:c3:69:f8:45:35:00:15:1f:37:fc:ac:dc:de:cf:05:28: 43:3c:9a:00:1c:55:b9:d5:92:f4:ec:a1:d7:35:db:4e:07:14: 87:39:ff:cc:1d:b3:45:e0:82:fd:8a:2a:70:01:bd:d6:99:bc: 07:61:41:56:5f:ec:fb:48:ef:2c:5f:ad:08:90:d1:57:16:9b: 06:76:01:17:44:79:12:a1:fe:8e:82:42:ff:ef:07:3e:ba:08: bf:fc:c1:00:bb:fd:e5:37:03:63:38:67:17:b4:58:34:75:15: f8:5a:fb:37:e4:68:b3:35:f5:64:75:00:6f:05:25:95:06:52: ce:5f:40:1d:80:dd:4c:fb:eb:15:2f:25:d5:78:a7:69:fa:52: b6:cc:e6:e3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xoNPCZZPzfHBp+IQ2NbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNThkNDA4NzU2YTQzZTEzYjU4YmVhMDNlNmUzZDI1ZDYxNGY5OTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4ADZgtDdKSAUNjOQCELx3Di5Dz1 S75AfW5e9aSxN8IbKgumOpGemyZy9ovVsHm1Y8COxuC6QZ0sWH72+ue2etb4FsBZ 0eM3ekuRQ/t0r7lgJuHTx4J71MNWaM9kK6XWRMAjz+flZg2VpAyDNjQ8EnJiqdMI cqT+ghBxj6dmf9RE0/fusSCdc6T0gQ4se3139bumkP99nOJbJPnFC1USDdxLv++q Lx/1w5y0jVC5cjgvvNvjGdRUxwJKbX7BFiyXFKUZJynzEkI5hBC8EtzpD9vUTumk lDnghKLBCw8/I+q86v3xRYPaTatnumzyOJ2vzFtkegdGVlx+uJGhNRk9QwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLWNQIdWpD4TtYvqA+bj0l1hT5leMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEvdFkxQWgxYWtQaE8xaS1vRDV1UFNYV0ZQbVY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAEkYPSkbj7tQekq74UFHI9I2362mI404 UgGyfoP8/3Bkk5q4dEV6crVstGaZxgBtuTg2cJw0IaUNmYY+ieZKxAizac+Q74N1 eZPm6D7cNKrzr+jfZXIS36kygtutrHolDJxsgH3iCQmBh4I2MyRuw2n4RTUAFR83 /Kzc3s8FKEM8mgAcVbnVkvTsodc1204HFIc5/8wds0Xggv2KKnABvdaZvAdhQVZf 7PtI7yxfrQiQ0VcWmwZ2ARdEeRKh/o6CQv/vBz66CL/8wQC7/eU3A2M4Zxe0WDR1 Ffha+zfkaLM19WR1AG8FJZUGUs5fQB2A3Uz76xUvJdV4p2n6UrbM5uM= -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:23 2026 by rpki-client