This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/fMKyf5QsTFLvG0T4zt9iERuJPYE.roa File: fMKyf5QsTFLvG0T4zt9iERuJPYE.roa (raw, json) Hash identifier: vMcyvkuZGIeblXhGPjZRPWdSAOkA0ino94f3lLlOGuY= Subject key identifier: 7C:C2:B2:7F:94:2C:4C:52:EF:1B:44:F8:CE:DF:62:11:1B:89:3D:81 Certificate issuer: /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Certificate serial: 019B7FF21A4D8A66A5D1A6DB2A35691010E2 Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/fMKyf5QsTFLvG0T4zt9iERuJPYE.roa Signing time: Fri 02 Jan 2026 18:22:11 +0000 ROA not before: Fri 02 Jan 2026 18:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31736 IP address blocks: 192.162.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:1a:4d:8a:66:a5:d1:a6:db:2a:35:69:10:10:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63 Validity Not Before: Jan 2 18:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc2b27f942c4c52ef1b44f8cedf62111b893d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:eb:1e:61:04:79:45:9e:d1:79:89:74:36:f1: 35:51:0d:cd:f3:70:c6:d6:c7:76:4e:e9:07:bd:cb: ef:ba:76:2b:1d:89:3e:ec:ad:38:c6:8e:65:12:66: 38:e1:7f:0c:98:d0:3f:76:8d:f3:1f:02:5e:9e:9a: 37:fd:7d:ca:c8:07:b5:b8:76:7b:4c:ab:05:9f:d9: 81:ff:e4:35:5e:f5:74:f9:65:51:27:db:21:ba:18: 35:2e:1e:72:fe:e6:0b:9e:33:b7:e5:b7:3e:3f:16: 94:f2:3c:43:05:c0:2a:1c:d4:da:3e:0b:8a:36:ec: cd:f4:e0:cd:f4:95:3e:d2:c8:d8:3b:a5:ba:d4:21: 44:bd:6c:56:6a:70:e8:e4:c4:88:34:03:10:f3:40: ed:70:9e:7c:bd:24:e1:46:78:cd:aa:51:2a:21:aa: ee:36:aa:54:af:aa:4a:0e:d8:70:79:af:2f:27:a6: bf:38:fd:cf:56:6e:41:b9:d5:93:f3:1b:3a:70:78: ea:67:b9:e6:61:e8:2e:7f:ab:3d:54:17:cf:c6:a8: 77:a2:c5:91:35:b0:c9:0a:8a:58:20:89:a0:24:82: 2e:4f:28:d7:6c:2a:7b:12:55:32:88:40:8e:36:0b: 06:7e:cb:2d:e8:3c:c9:e8:a7:a9:6e:6f:b1:e5:ae: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C2:B2:7F:94:2C:4C:52:EF:1B:44:F8:CE:DF:62:11:1B:89:3D:81 X509v3 Authority Key Identifier: keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/fMKyf5QsTFLvG0T4zt9iERuJPYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.28.0/22 Signature Algorithm: sha256WithRSAEncryption c1:b1:c7:0b:d3:da:38:1d:9f:30:a7:a7:20:88:28:f7:3c:a8: 89:b3:9e:49:d9:ac:2c:59:8e:f3:07:20:f2:93:56:f0:86:53: 3a:66:0e:91:15:db:84:db:30:ee:ec:ce:df:6f:c5:98:95:3e: 1b:56:a2:01:47:a9:ac:76:c6:bc:a8:c6:ce:75:62:92:93:58: 1b:00:1e:24:25:4e:dc:06:d9:93:48:b1:19:bc:ee:5b:38:bc: 8e:3f:be:d2:68:8e:59:68:d4:dd:5e:45:28:2c:e2:b8:a9:fe: 27:98:2e:8c:06:c1:e9:2c:9f:c7:40:66:37:ca:8e:cf:33:da: 41:49:0a:e8:7d:30:f3:ba:82:ac:f4:29:fa:ae:a6:d3:eb:73: b1:89:3a:3f:71:6e:4a:fc:5e:48:ee:dd:c9:8d:7d:41:cb:49: b9:fc:06:a4:c0:b5:02:ec:61:75:89:fa:ec:c3:0a:fa:32:ff: c9:14:e5:a9:46:43:53:44:da:95:97:b8:51:72:6e:41:be:17: 5d:e4:cf:fb:60:57:44:1d:31:5b:be:a6:03:96:2f:ab:f1:3b: 3b:31:9d:b8:76:93:7e:48:83:e1:13:67:41:79:48:7c:26:56: 64:46:db:21:c9:4e:20:08:73:be:7a:08:c8:c3:e6:de:60:5f: 6c:d7:ab:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hpNimal0abbKjVpEBDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZTUzNWVmMjE2ZWJlNmY3ZmM1NWNmYmRjMzE1MzJiOTEy ZDhlNjMwHhcNMjYwMTAyMTgyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2MyYjI3Zjk0MmM0YzUyZWYxYjQ0ZjhjZWRmNjIxMTFiODkzZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOseYQR5RZ7ReYl0NvE1UQ3N83DG 1sd2TukHvcvvunYrHYk+7K04xo5lEmY44X8MmNA/do3zHwJenpo3/X3KyAe1uHZ7 TKsFn9mB/+Q1XvV0+WVRJ9shuhg1Lh5y/uYLnjO35bc+PxaU8jxDBcAqHNTaPguK NuzN9ODN9JU+0sjYO6W61CFEvWxWanDo5MSINAMQ80DtcJ58vSThRnjNqlEqIaru NqpUr6pKDthwea8vJ6a/OP3PVm5BudWT8xs6cHjqZ7nmYeguf6s9VBfPxqh3osWR NbDJCopYIImgJIIuTyjXbCp7ElUyiECONgsGfsst6DzJ6Kepbm+x5a768QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzCsn+ULExS7xtE+M7fYhEbiT2BMB8GA1UdIwQY MBaAFNblNe8hbr5vf8Vc+9wxUyuRLY5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2Qt MDc3MTFlZDAyYjc1LzEvZk1LeWY1UXNURkx2RzBUNHp0OWlFUnVKUFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9iZDBkN2QtZjQyNS00MDhhLWIwN2QtMDc3MTFlZDAyYjc1 LzEvMXVVMTd5RnV2bTlfeFZ6NzNERlRLNUV0am1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwKIcMA0G CSqGSIb3DQEBCwUAA4IBAQDBsccL09o4HZ8wp6cgiCj3PKiJs55J2awsWY7zByDy k1bwhlM6Zg6RFduE2zDu7M7fb8WYlT4bVqIBR6msdsa8qMbOdWKSk1gbAB4kJU7c BtmTSLEZvO5bOLyOP77SaI5ZaNTdXkUoLOK4qf4nmC6MBsHpLJ/HQGY3yo7PM9pB SQrofTDzuoKs9Cn6rqbT63OxiTo/cW5K/F5I7t3JjX1By0m5/AakwLUC7GF1ifrs wwr6Mv/JFOWpRkNTRNqVl7hRcm5Bvhdd5M/7YFdEHTFbvqYDli+r8Ts7MZ24dpN+ SIPhE2dBeUh8JlZkRtshyU4gCHO+egjIw+beYF9s16vX -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:27 2026 by rpki-client