This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/fMecL_p_XorOu-OBjgfyWEuIE2g.roa File: fMecL_p_XorOu-OBjgfyWEuIE2g.roa (raw, json) Hash identifier: E6t0K2Pr40cejujMiJaL8HUBY8+SoeQqKn7sy6Ra0fA= Subject key identifier: 7C:C7:9C:2F:FA:7F:5E:8A:CE:BB:E3:81:8E:07:F2:58:4B:88:13:68 Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E389646E9A74BBCEE795D765BC280BB Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/fMecL_p_XorOu-OBjgfyWEuIE2g.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215483 IP address blocks: 194.44.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:96:46:e9:a7:4b:bc:ee:79:5d:76:5b:c2:80:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc79c2ffa7f5e8acebbe3818e07f2584b881368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:eb:5b:8c:c0:8f:a3:bc:32:6a:e7:ce:de: e8:94:76:4f:b3:13:95:3e:01:aa:21:c1:6a:5f:57: 5d:fd:28:38:de:7f:9d:af:43:20:1b:e7:39:26:c0: fc:e7:5a:ed:15:2b:d2:67:b0:74:14:1e:15:c8:f4: bd:a4:ef:12:02:13:7f:92:e7:e1:f9:73:81:4b:c9: b8:63:70:01:fc:4f:bf:59:bd:0e:2e:74:97:43:9c: ce:20:09:8a:db:b3:77:53:4f:2f:98:7a:bd:c4:3e: 70:b2:20:99:de:02:5f:1c:d6:f4:25:1d:e2:a7:c3: bf:4a:6a:a2:b1:12:1c:09:f5:a2:ad:ed:57:f8:44: c7:0f:df:b7:2f:b2:b2:22:75:12:4e:80:c6:1c:7b: be:cb:27:3b:03:5b:af:57:59:fd:fe:e2:a1:11:b9: d4:b6:85:74:11:c9:56:a0:57:b6:31:1c:55:45:de: 24:ef:6a:b6:a3:36:0c:93:96:e4:ca:be:da:a3:a4: 3e:eb:60:82:68:ee:92:2a:c4:52:55:de:0f:19:a8: 9d:d7:34:37:8c:50:e4:8c:2b:c4:65:45:cc:45:4c: 8f:eb:b3:23:90:0e:e7:90:e1:1c:fa:3f:9d:cd:c4: f8:ea:57:cb:9b:f7:12:bb:06:dd:b7:68:11:bb:e9: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C7:9C:2F:FA:7F:5E:8A:CE:BB:E3:81:8E:07:F2:58:4B:88:13:68 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/fMecL_p_XorOu-OBjgfyWEuIE2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.231.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:1d:f9:51:e5:26:fa:8b:7a:8c:fb:47:da:c5:c9:0c:1c:ae: a3:c4:e6:fd:6a:e0:37:1a:17:5e:ea:35:40:30:64:ae:7a:a4: 9b:9f:c5:59:d4:8c:4f:c9:c1:b2:16:e0:d6:cc:eb:27:73:f7: 0d:84:bb:26:e4:10:09:61:6d:4a:28:29:19:28:7b:67:9b:15: 61:60:46:f6:2e:60:02:57:09:c2:03:ab:59:84:01:e3:80:b9: 90:ad:91:ae:e5:2a:28:86:09:d6:60:86:1b:20:2f:00:4e:8f: dd:8e:f4:90:df:bc:42:61:7b:9b:dd:8f:f2:3a:31:54:34:4b: f7:f0:49:3d:28:4e:ed:bb:95:27:42:e0:d1:bd:91:3a:98:63: 1c:b7:3f:42:64:8d:6c:67:f8:76:95:b6:ba:ed:d0:3b:e7:ac: ea:ca:fc:0c:dd:ff:a5:fe:db:a9:51:72:8c:77:57:39:8f:51: 1a:ad:54:78:2e:f1:eb:71:a3:43:4e:27:9d:0d:d7:84:e8:68: 07:fe:d1:7d:3e:e4:1a:9f:5c:d7:e9:f9:d1:ff:8e:03:ee:f6: 48:c3:e7:40:2b:c9:09:22:7a:98:ad:4c:9c:41:9e:35:3c:dc: d2:be:e7:c1:a6:50:f2:23:a6:62:32:4d:b6:36:b9:83:36:10: d4:eb:83:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJZG6adLvO55XXZbwoC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2M3OWMyZmZhN2Y1ZThhY2ViYmUzODE4ZTA3ZjI1ODRiODgxMzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKDrW4zAj6O8Mmrnzt7olHZPsxOV PgGqIcFqX1dd/Sg43n+dr0MgG+c5JsD851rtFSvSZ7B0FB4VyPS9pO8SAhN/kufh +XOBS8m4Y3AB/E+/Wb0OLnSXQ5zOIAmK27N3U08vmHq9xD5wsiCZ3gJfHNb0JR3i p8O/SmqisRIcCfWire1X+ETHD9+3L7KyInUSToDGHHu+yyc7A1uvV1n9/uKhEbnU toV0EclWoFe2MRxVRd4k72q2ozYMk5bkyr7ao6Q+62CCaO6SKsRSVd4PGaid1zQ3 jFDkjCvEZUXMRUyP67MjkA7nkOEc+j+dzcT46lfLm/cSuwbdt2gRu+lHpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzHnC/6f16KzrvjgY4H8lhLiBNoMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvZk1lY0xfcF9Yb3JPdS1PQmpnZnlXRXVJRTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiznMA0G CSqGSIb3DQEBCwUAA4IBAQA8HflR5Sb6i3qM+0faxckMHK6jxOb9auA3Ghde6jVA MGSueqSbn8VZ1IxPycGyFuDWzOsnc/cNhLsm5BAJYW1KKCkZKHtnmxVhYEb2LmAC VwnCA6tZhAHjgLmQrZGu5SoohgnWYIYbIC8ATo/djvSQ37xCYXub3Y/yOjFUNEv3 8Ek9KE7tu5UnQuDRvZE6mGMctz9CZI1sZ/h2lba67dA756zqyvwM3f+l/tupUXKM d1c5j1EarVR4LvHrcaNDTiedDdeE6GgH/tF9PuQan1zX6fnR/44D7vZIw+dAK8kJ InqYrUycQZ41PNzSvufBplDyI6ZiMk22NrmDNhDU64NZ -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:42 2026 by rpki-client