This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xNgHyTv8M-AzTkzZo7oe4_yw1ZA.roa File: xNgHyTv8M-AzTkzZo7oe4_yw1ZA.roa (raw, json) Hash identifier: utF52dxNmlsMYXDyFFPD8JT8t3DeH12wFVqSBfudvT0= Subject key identifier: C4:D8:07:C9:3B:FC:33:E0:33:4E:4C:D9:A3:BA:1E:E3:FC:B0:D5:90 Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Certificate serial: 019B77C67B8F14E76E4F7EDF0EE6BF861ADB Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xNgHyTv8M-AzTkzZo7oe4_yw1ZA.roa Signing time: Thu 01 Jan 2026 04:17:35 +0000 ROA not before: Thu 01 Jan 2026 04:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10515 IP address blocks: 81.19.195.30/32 maxlen: 32 81.19.195.31/32 maxlen: 32 185.100.0.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7b:8f:14:e7:6e:4f:7e:df:0e:e6:bf:86:1a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52 Validity Not Before: Jan 1 04:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d807c93bfc33e0334e4cd9a3ba1ee3fcb0d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:7d:0c:fb:20:67:bf:b4:7e:0f:7b:53:93: c5:8b:15:ce:c1:68:15:8a:ef:0b:7c:1d:80:13:25: b6:63:7d:dc:de:2b:a7:3c:f9:da:87:1b:7c:d6:2a: a0:41:f5:f9:42:e7:a3:0e:90:ed:29:9a:df:73:33: 98:81:91:75:da:3a:dd:cb:dd:8a:ee:7a:d9:44:8c: db:dd:7a:a2:75:c4:05:c3:7a:30:ac:9a:7d:ea:d8: 08:8f:a8:63:e4:91:25:16:e8:6a:e1:64:48:46:51: d8:ba:46:18:87:63:bb:0f:01:f4:86:36:c2:55:45: d7:6c:aa:3e:cf:2a:57:69:17:96:f4:ad:12:38:7a: 97:af:7b:d7:b7:05:fd:a0:b9:9d:ab:c3:fb:42:2e: e8:d4:41:50:46:61:51:8d:18:44:8f:0c:30:43:42: f2:47:1f:45:b1:34:b4:27:bb:67:83:1a:b6:d8:6e: b1:b5:8d:9e:41:a0:03:15:fd:07:83:3c:5d:2f:ea: 5a:77:ac:4c:f1:cc:75:e4:7a:03:7b:d9:6c:f9:e7: f8:73:ce:b8:5f:2f:ef:c1:e0:ee:2e:9c:aa:f9:c9: 29:bd:ac:51:ad:e0:ea:1d:57:8a:5c:a6:54:3b:15: fa:0a:d5:c7:53:67:b8:21:8b:f8:3a:6f:e2:5e:95: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D8:07:C9:3B:FC:33:E0:33:4E:4C:D9:A3:BA:1E:E3:FC:B0:D5:90 X509v3 Authority Key Identifier: keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/xNgHyTv8M-AzTkzZo7oe4_yw1ZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.19.195.30/31 185.100.0.53/32 Signature Algorithm: sha256WithRSAEncryption 7b:61:8c:3f:af:2b:9e:9a:52:5f:ea:e8:73:04:71:40:25:18: 95:24:f6:6c:77:7d:f4:c8:9f:c4:53:84:6a:94:9a:77:ec:74: e5:73:06:cd:f7:11:7b:08:9e:5d:98:08:fd:89:f0:67:75:11: 2f:42:49:9f:49:1d:7a:08:a7:98:2a:38:89:8b:82:7a:26:3b: 68:b2:78:e8:59:24:0f:58:d7:c3:d0:31:c3:e1:6c:fe:20:11: f4:6c:a0:40:bc:02:e5:ad:17:74:90:39:a6:51:27:66:7a:f3: 8d:52:0a:39:20:2f:ae:9d:ac:58:d5:2c:b4:c8:ad:d2:e9:d8: dc:fc:72:d3:8c:20:3b:8e:ab:a3:d1:97:a8:7c:29:be:a6:d4: d5:3c:1f:37:d0:e1:b5:f6:82:87:3c:ca:e7:9f:42:76:98:61: 0b:91:3b:7f:43:94:0c:65:fc:2c:29:97:56:ed:01:e6:5a:bf: 31:f8:23:61:dc:bd:d5:5c:82:9b:5e:c3:cc:f7:d4:17:0b:05: 3d:25:f8:ac:00:b6:45:63:5c:ca:39:2a:85:cf:58:84:45:eb: 0e:a6:b2:84:07:72:c9:2f:e2:23:f8:2d:b2:62:80:73:9d:80: 40:43:cb:b5:8a:56:2f:f3:5f:0a:7d:e1:44:e0:2f:b3:97:5c: 9a:2a:c8:62 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xnuPFOduT37fDua/hhrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MzgwYjliOGMwNzA0NTdlZDU0YmM0NWQxMmRkZGQyNDRl MDZkNTIwHhcNMjYwMTAxMDQxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ4MDdjOTNiZmMzM2UwMzM0ZTRjZDlhM2JhMWVlM2ZjYjBkNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJ9DPsgZ7+0fg97U5PFixXOwWgV iu8LfB2AEyW2Y33c3iunPPnahxt81iqgQfX5QuejDpDtKZrfczOYgZF12jrdy92K 7nrZRIzb3XqidcQFw3owrJp96tgIj6hj5JElFuhq4WRIRlHYukYYh2O7DwH0hjbC VUXXbKo+zypXaReW9K0SOHqXr3vXtwX9oLmdq8P7Qi7o1EFQRmFRjRhEjwwwQ0Ly Rx9FsTS0J7tngxq22G6xtY2eQaADFf0HgzxdL+pad6xM8cx15HoDe9ls+ef4c864 Xy/vweDuLpyq+ckpvaxRreDqHVeKXKZUOxX6CtXHU2e4IYv4Om/iXpUPcQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMTYB8k7/DPgM05M2aO6HuP8sNWQMB8GA1UdIwQY MBaAFLQ4C5uMBwRX7VS8RdEt3dJE4G1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2Yt MzZjY2I1YTA2MTk1LzEveE5nSHlUdjhNLUF6VGt6Wm83b2U0X3l3MVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9iYzkyZTYtYzhlZS00OGYwLWFlN2YtMzZjY2I1YTA2MTk1 LzEvdERnTG00d0hCRmZ0Vkx4RjBTM2Qwa1RnYlZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOAwUBURPDHgMF ALlkADUwDQYJKoZIhvcNAQELBQADggEBAHthjD+vK56aUl/q6HMEcUAlGJUk9mx3 ffTIn8RThGqUmnfsdOVzBs33EXsInl2YCP2J8Gd1ES9CSZ9JHXoIp5gqOImLgnom O2iyeOhZJA9Y18PQMcPhbP4gEfRsoEC8AuWtF3SQOaZRJ2Z6841SCjkgL66drFjV LLTIrdLp2Nz8ctOMIDuOq6PRl6h8Kb6m1NU8HzfQ4bX2goc8yuefQnaYYQuRO39D lAxl/Cwpl1btAeZavzH4I2HcvdVcgptew8z31BcLBT0l+KwAtkVjXMo5KoXPWIRF 6w6msoQHcskv4iP4LbJigHOdgEBDy7WKVi/zXwp94UTgL7OXXJoqyGI= -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:46 2026 by rpki-client