This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/McecUEUwqKunvtzepCez6bQQUBk.roa File: McecUEUwqKunvtzepCez6bQQUBk.roa (raw, json) Hash identifier: CYTQm/MUz7dvxmMfHeEUwxreRSRodvZHuJFCFTsDc2E= Subject key identifier: 31:C7:9C:50:45:30:A8:AB:A7:BE:DC:DE:A4:27:B3:E9:B4:10:50:19 Certificate issuer: /CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Certificate serial: 019B77590F1157F90C48FFBD5211EFC458C8 Authority key identifier: 9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/McecUEUwqKunvtzepCez6bQQUBk.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34542 IP address blocks: 156.28.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.mft rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0f:11:57:f9:0c:48:ff:bd:52:11:ef:c4:58:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ce94757ac3f70b40f369307d365ebc9657bab69 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=31c79c504530a8aba7bedcdea427b3e9b4105019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:89:3e:b6:9c:83:8f:3c:14:bc:a8:6a:03:6e: ea:71:ba:09:d0:d2:3c:a8:79:cb:87:0d:e0:19:a4: d3:9f:6b:11:f9:88:4a:72:99:27:77:89:33:4d:8e: 0f:d5:3f:76:fc:46:ae:c3:4b:7f:f6:ea:c4:f3:eb: 72:21:41:7f:14:9d:91:65:31:5a:68:28:70:64:7c: 63:7f:e4:2b:25:c5:2a:27:09:d7:dd:a4:48:84:a6: 88:38:5e:95:86:86:ca:44:25:84:6c:4d:f7:9f:09: 6f:d9:dc:c0:fc:7d:4e:c7:5a:56:2a:65:34:3e:ea: b4:83:cb:ca:75:96:a2:ea:ad:af:fb:68:95:90:07: 63:db:b6:10:a5:a8:91:58:d1:38:a8:1e:48:2c:9b: 41:3f:52:2f:28:0d:34:df:71:23:35:80:12:ee:49: 73:96:86:dc:5a:af:2b:98:7f:1c:a6:88:0a:3e:e8: 2b:a8:c8:23:a5:e6:e5:d9:ab:dc:54:36:d5:fd:2e: 8f:e9:5f:54:6d:a0:35:b9:21:c4:84:76:38:41:9d: 58:42:bf:b6:3e:07:81:76:95:ff:f5:41:22:04:c3: 24:ef:43:08:88:54:86:ef:eb:cb:f6:70:d9:11:df: 74:32:55:13:8a:5a:a3:e2:38:77:5f:4d:f2:0a:d3: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C7:9C:50:45:30:A8:AB:A7:BE:DC:DE:A4:27:B3:E9:B4:10:50:19 X509v3 Authority Key Identifier: keyid:9C:E9:47:57:AC:3F:70:B4:0F:36:93:07:D3:65:EB:C9:65:7B:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOlHV6w_cLQPNpMH02XryWV7q2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/McecUEUwqKunvtzepCez6bQQUBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/481269-dbdb-425e-9642-e1ea41c9a2e6/1/nOlHV6w_cLQPNpMH02XryWV7q2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.28.0.0/16 Signature Algorithm: sha256WithRSAEncryption 27:6e:fb:ed:b9:99:fe:ce:7f:06:f7:6a:79:a8:f1:d8:d8:23: 14:1f:10:f5:23:46:6b:71:7c:c5:b2:8f:e4:73:cf:20:89:be: b7:fd:da:fe:e9:24:c9:47:18:49:a8:e4:da:18:f2:16:e4:48: 6d:69:3b:95:9d:50:41:e4:60:5b:9f:95:02:eb:4c:7c:34:60: d0:62:e5:09:6a:72:65:98:60:a1:16:3c:2a:a5:da:8e:e6:74: 36:2f:02:ce:47:ba:ca:dc:ea:69:94:1a:f5:b8:b9:40:2b:51: 76:76:35:c2:c8:fc:d5:f5:51:bc:3f:9c:d7:01:50:28:8e:d2: 3f:27:65:d0:dc:47:bb:6e:da:8c:5b:85:1f:7c:17:7a:c4:0c: 9a:b0:4d:a9:31:23:1a:d6:24:90:63:4c:38:08:e9:a8:0b:d3: 8d:67:5b:bd:eb:cf:94:78:e3:ab:86:41:12:b7:02:0d:6a:df: 40:10:4c:60:57:16:e0:62:93:e6:e2:6e:ad:48:65:31:b9:59: 5c:23:5a:5a:b9:db:81:d4:c0:d3:d8:ba:2b:29:12:7d:d6:d4: ac:85:04:ef:38:cd:c1:69:12:3e:00:b7:91:ce:07:99:22:07: 78:c1:cd:83:5f:3b:2e:11:49:9b:93:81:63:13:55:33:45:2b: de:c0:59:38 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt3WQ8RV/kMSP+9UhHvxFjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljZTk0NzU3YWMzZjcwYjQwZjM2OTMwN2QzNjVlYmM5NjU3 YmFiNjkwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMWM3OWM1MDQ1MzBhOGFiYTdiZWRjZGVhNDI3YjNlOWI0MTA1MDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Yk+tpyDjzwUvKhqA27qcboJ0NI8 qHnLhw3gGaTTn2sR+YhKcpknd4kzTY4P1T92/Eauw0t/9urE8+tyIUF/FJ2RZTFa aChwZHxjf+QrJcUqJwnX3aRIhKaIOF6VhobKRCWEbE33nwlv2dzA/H1Ox1pWKmU0 Puq0g8vKdZai6q2v+2iVkAdj27YQpaiRWNE4qB5ILJtBP1IvKA0033EjNYAS7klz lobcWq8rmH8cpogKPugrqMgjpebl2avcVDbV/S6P6V9UbaA1uSHEhHY4QZ1YQr+2 PgeBdpX/9UEiBMMk70MIiFSG7+vL9nDZEd90MlUTilqj4jh3X03yCtNx7wIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFDHHnFBFMKirp77c3qQns+m0EFAZMB8GA1UdIwQY MBaAFJzpR1esP3C0DzaTB9Nl68lle6tpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDIt ZTFlYTQxYzlhMmU2LzEvTWNlY1VFVXdxS3VudnR6ZXBDZXo2YlFRVUJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80ODEyNjktZGJkYi00MjVlLTk2NDItZTFlYTQxYzlhMmU2 LzEvbk9sSFY2d19jTFFQTnBNSDAyWHJ5V1Y3cTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnBwwDQYJ KoZIhvcNAQELBQADggEBACdu++25mf7Ofwb3anmo8djYIxQfEPUjRmtxfMWyj+Rz zyCJvrf92v7pJMlHGEmo5NoY8hbkSG1pO5WdUEHkYFuflQLrTHw0YNBi5QlqcmWY YKEWPCql2o7mdDYvAs5Husrc6mmUGvW4uUArUXZ2NcLI/NX1Ubw/nNcBUCiO0j8n ZdDcR7tu2oxbhR98F3rEDJqwTakxIxrWJJBjTDgI6agL041nW73rz5R446uGQRK3 Ag1q30AQTGBXFuBik+bibq1IZTG5WVwjWlq524HUwNPYuispEn3W1KyFBO84zcFp Ej4At5HOB5kiB3jBzYNfOy4RSZuTgWMTVTNFK97AWTg= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:58 2026 by rpki-client