This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/fmfMKVUT1v23IOfvxsOu3DSMyz8.roa File: fmfMKVUT1v23IOfvxsOu3DSMyz8.roa (raw, json) Hash identifier: u2kyNqDKTbLApMvC0LB9zT5i0g/bvpJwVbX+TwLXl+g= Subject key identifier: 7E:67:CC:29:55:13:D6:FD:B7:20:E7:EF:C6:C3:AE:DC:34:8C:CB:3F Certificate issuer: /CN=2065ced829c011cdb5abb381c164782ded1627e0 Certificate serial: 019B7B357D001EA16A59D065D4D9DA2D1DDE Authority key identifier: 20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/fmfMKVUT1v23IOfvxsOu3DSMyz8.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31027 IP address blocks: 91.224.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.mft rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7d:00:1e:a1:6a:59:d0:65:d4:d9:da:2d:1d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2065ced829c011cdb5abb381c164782ded1627e0 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e67cc295513d6fdb720e7efc6c3aedc348ccb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:62:2f:f2:96:79:eb:4d:dd:39:72:39:2c:5a: 36:aa:cf:55:46:ee:82:e4:c8:d3:b3:84:02:99:ed: d6:ec:a0:e6:fe:68:42:a4:65:72:b6:c9:95:8e:aa: 61:6f:db:20:f3:8b:22:7e:ae:68:36:ab:a1:4c:f9: b5:3e:89:2a:df:03:a9:27:62:e0:9e:d6:b7:c8:1c: b0:ea:51:b3:a3:23:eb:a6:cf:7b:1d:06:44:89:b8: 74:22:f7:62:79:fe:82:19:08:df:68:5b:8a:1a:93: 2f:29:53:2e:61:86:4f:da:03:2a:c4:e7:38:86:64: c3:cc:df:af:d9:80:b8:a8:dd:d7:8b:3c:8e:10:c3: 64:86:78:2a:24:94:ac:38:72:9e:77:a2:6c:31:02: 8b:ab:cb:2d:f0:12:5f:fe:79:fa:6f:73:1d:91:e9: 62:14:40:e5:db:4f:ee:43:56:7c:e8:a0:9d:15:d3: e3:b4:fa:67:c0:38:7b:28:e1:92:2d:24:3b:1e:89: 32:63:5f:78:95:52:b5:e2:fe:18:48:21:c8:4f:a1: df:cf:f9:1a:0c:02:b5:4d:62:ff:38:0f:2a:6b:aa: c8:c8:fd:dd:90:fa:18:de:26:b0:2f:e8:8c:e5:41: 19:dc:3f:a8:8c:64:f8:13:4f:98:ae:95:42:60:b5: 4b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:67:CC:29:55:13:D6:FD:B7:20:E7:EF:C6:C3:AE:DC:34:8C:CB:3F X509v3 Authority Key Identifier: keyid:20:65:CE:D8:29:C0:11:CD:B5:AB:B3:81:C1:64:78:2D:ED:16:27:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IGXO2CnAEc21q7OBwWR4Le0WJ-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/fmfMKVUT1v23IOfvxsOu3DSMyz8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/949b8b-cd51-4370-ae7d-38f8ed0001ed/1/IGXO2CnAEc21q7OBwWR4Le0WJ-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.174.0/23 Signature Algorithm: sha256WithRSAEncryption 25:58:ae:8a:53:1d:de:06:a4:a0:8b:07:dd:52:8b:f0:8b:02: 7e:87:f5:05:3c:7c:9f:1b:c1:8b:73:4e:4e:b8:32:b4:6f:2d: d6:06:00:47:18:10:6d:39:f5:56:02:89:6b:db:55:ef:14:09: 92:71:42:4d:35:9f:46:cc:1f:1d:06:e3:12:b6:cb:92:ca:0b: 09:80:ab:57:1e:a1:7c:64:6a:d0:76:1e:c9:2f:db:5d:71:bd: b6:12:b3:31:94:d9:72:6e:c7:01:26:4e:d7:a5:53:3f:b4:4e: 86:a9:f6:29:c0:8b:09:91:99:ef:81:37:ab:28:91:66:bd:d2: 33:41:f9:47:2f:24:2d:50:6a:30:85:08:3e:7c:51:5b:2d:a2: 52:5d:d5:5a:40:b4:02:88:dd:39:15:ab:5d:95:44:26:23:da: 5c:c8:5c:47:d6:29:88:b7:1e:10:3c:ca:f5:2d:58:9d:7a:8d: 42:a9:4d:18:01:ec:95:9a:b6:ca:a1:5c:f7:34:05:ff:5f:41: a6:1f:71:2c:70:50:0f:cb:79:4a:8f:fb:af:52:09:0a:0c:48: aa:1e:a9:d8:80:8b:dc:15:11:aa:48:95:f2:53:00:ab:7f:c8: 95:a0:e1:73:07:2a:d0:9a:fb:12:45:5a:e8:d6:69:69:e1:52: b2:0c:18:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NX0AHqFqWdBl1NnaLR3eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNjVjZWQ4MjljMDExY2RiNWFiYjM4MWMxNjQ3ODJkZWQx NjI3ZTAwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTY3Y2MyOTU1MTNkNmZkYjcyMGU3ZWZjNmMzYWVkYzM0OGNjYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WIv8pZ5603dOXI5LFo2qs9VRu6C 5MjTs4QCme3W7KDm/mhCpGVytsmVjqphb9sg84sifq5oNquhTPm1Pokq3wOpJ2Lg nta3yByw6lGzoyPrps97HQZEibh0Ivdief6CGQjfaFuKGpMvKVMuYYZP2gMqxOc4 hmTDzN+v2YC4qN3XizyOEMNkhngqJJSsOHKed6JsMQKLq8st8BJf/nn6b3Mdkeli FEDl20/uQ1Z86KCdFdPjtPpnwDh7KOGSLSQ7HokyY194lVK14v4YSCHIT6Hfz/ka DAK1TWL/OA8qa6rIyP3dkPoY3iawL+iM5UEZ3D+ojGT4E0+YrpVCYLVL8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5nzClVE9b9tyDn78bDrtw0jMs/MB8GA1UdIwQY MBaAFCBlztgpwBHNtauzgcFkeC3tFifgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2Qt MzhmOGVkMDAwMWVkLzEvZm1mTUtWVVQxdjIzSU9mdnhzT3UzRFNNeXo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85NDliOGItY2Q1MS00MzcwLWFlN2QtMzhmOGVkMDAwMWVk LzEvSUdYTzJDbkFFYzIxcTdPQndXUjRMZTBXSi1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+CuMA0G CSqGSIb3DQEBCwUAA4IBAQAlWK6KUx3eBqSgiwfdUovwiwJ+h/UFPHyfG8GLc05O uDK0by3WBgBHGBBtOfVWAolr21XvFAmScUJNNZ9GzB8dBuMStsuSygsJgKtXHqF8 ZGrQdh7JL9tdcb22ErMxlNlybscBJk7XpVM/tE6GqfYpwIsJkZnvgTerKJFmvdIz QflHLyQtUGowhQg+fFFbLaJSXdVaQLQCiN05FatdlUQmI9pcyFxH1imItx4QPMr1 LVideo1CqU0YAeyVmrbKoVz3NAX/X0GmH3EscFAPy3lKj/uvUgkKDEiqHqnYgIvc FRGqSJXyUwCrf8iVoOFzByrQmvsSRVro1mlp4VKyDBgk -----END CERTIFICATE-----Generated at Fri Jan 9 22:36:04 2026 by rpki-client