This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FCwIxiEEDY1PleIvLIa6TTqCKsw.roa File: FCwIxiEEDY1PleIvLIa6TTqCKsw.roa (raw, json) Hash identifier: lecQNWWmvhO3cnwmwlTqpFfyjhIxcOjNyiOGPXfVcKA= Subject key identifier: 14:2C:08:C6:21:04:0D:8D:4F:95:E2:2F:2C:86:BA:4D:3A:82:2A:CC Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED28D39A7AB0B2A22997EB4FFD261C Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FCwIxiEEDY1PleIvLIa6TTqCKsw.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210271 IP address blocks: 193.59.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:28:d3:9a:7a:b0:b2:a2:29:97:eb:4f:fd:26:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=142c08c621040d8d4f95e22f2c86ba4d3a822acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:58:09:8a:09:00:a5:c0:cd:8c:a8:e9:f1:ee: 29:1d:c0:1b:35:9e:f8:8b:1c:10:81:38:75:cb:68: fb:3e:65:c9:87:45:01:63:d5:82:fb:9e:b1:17:d7: 4a:8b:4a:7f:ce:10:ed:99:8e:52:71:4d:2c:2e:96: f3:b4:4a:43:16:6a:3c:5f:26:3a:7a:d2:c4:0e:4b: 74:8e:7f:99:86:fa:73:c9:9f:13:0b:61:9a:a0:43: 5e:ff:61:50:9b:2a:55:8b:68:b9:e4:7c:a2:aa:b9: 39:57:e4:99:f7:dd:c7:e6:9c:e4:1c:af:b6:d0:9f: f5:8c:ad:3a:ad:91:1e:bc:9c:52:85:46:f7:c9:75: 74:09:a2:9f:63:44:9c:84:37:a8:78:e6:c5:66:2c: 05:96:00:89:a9:27:d8:c7:77:db:55:3e:13:e9:75: 9b:3a:4f:a8:f6:f0:9c:47:5e:39:98:1f:e1:b1:75: 86:bc:8a:d2:f8:c6:b9:bb:ea:51:ac:6e:ac:1d:06: 5e:54:bb:ed:30:9a:2e:40:e8:ff:e3:f4:c2:75:e2: 23:1c:de:3a:f8:2d:ac:c5:ce:e9:a2:81:2d:3f:fd: bd:5e:f0:d7:4b:f9:c7:3c:ad:18:29:ca:53:49:d0: a1:19:9e:a0:23:d0:6b:23:9a:0e:ec:7c:e4:7a:e4: 98:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2C:08:C6:21:04:0D:8D:4F:95:E2:2F:2C:86:BA:4D:3A:82:2A:CC X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/FCwIxiEEDY1PleIvLIa6TTqCKsw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.59.80.0/24 Signature Algorithm: sha256WithRSAEncryption 14:7c:db:e7:31:1c:36:dd:79:7c:53:40:30:ec:4f:00:8c:ed: 82:a8:02:64:ef:0d:ab:2e:ff:fa:ac:81:c7:83:66:93:1c:da: ea:94:64:1a:ef:28:3a:31:e8:b7:10:68:1b:45:57:b9:3b:d9: 4e:7a:dd:90:b4:b9:c4:6c:93:c3:79:e8:d6:bd:a5:10:9b:50: 14:75:1f:79:dd:bf:29:7c:ff:ec:30:96:8f:15:f1:22:09:15: e4:af:3a:93:c8:0d:ad:7c:47:0e:9a:f6:80:06:47:34:bd:7d: b8:3a:d2:15:cc:f2:a0:3e:ec:44:46:a4:a5:5d:54:20:10:9e: 6c:41:75:aa:55:ed:c2:b9:8f:24:20:da:62:5f:30:4a:bf:2b: 82:38:62:30:1a:c1:1b:00:7a:f3:17:6a:02:80:5e:3b:e1:55: 63:27:78:cb:89:88:bf:f4:bc:c3:f5:ff:30:e9:00:4b:c3:0b: 90:2c:07:d3:16:f7:83:af:30:f7:e3:ab:fc:8f:3d:01:c6:69: d5:0c:40:23:10:43:a7:2b:29:e9:a6:33:54:d7:38:4c:2b:4d: 0d:ff:30:84:7a:89:e9:08:a1:36:fb:4b:c8:f3:42:12:4c:83: b5:7b:62:fc:a6:4e:ef:ea:d6:06:58:98:17:89:58:ec:c7:d0: 62:11:f8:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57SjTmnqwsqIpl+tP/SYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDJjMDhjNjIxMDQwZDhkNGY5NWUyMmYyYzg2YmE0ZDNhODIyYWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1gJigkApcDNjKjp8e4pHcAbNZ74 ixwQgTh1y2j7PmXJh0UBY9WC+56xF9dKi0p/zhDtmY5ScU0sLpbztEpDFmo8XyY6 etLEDkt0jn+ZhvpzyZ8TC2GaoENe/2FQmypVi2i55Hyiqrk5V+SZ993H5pzkHK+2 0J/1jK06rZEevJxShUb3yXV0CaKfY0SchDeoeObFZiwFlgCJqSfYx3fbVT4T6XWb Ok+o9vCcR145mB/hsXWGvIrS+Ma5u+pRrG6sHQZeVLvtMJouQOj/4/TCdeIjHN46 +C2sxc7pooEtP/29XvDXS/nHPK0YKcpTSdChGZ6gI9BrI5oO7HzkeuSYMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQsCMYhBA2NT5XiLyyGuk06girMMB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvRkN3SXhpRUVEWTFQbGVJdkxJYTZUVHFDS3N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTtQMA0G CSqGSIb3DQEBCwUAA4IBAQAUfNvnMRw23Xl8U0Aw7E8AjO2CqAJk7w2rLv/6rIHH g2aTHNrqlGQa7yg6Mei3EGgbRVe5O9lOet2QtLnEbJPDeejWvaUQm1AUdR953b8p fP/sMJaPFfEiCRXkrzqTyA2tfEcOmvaABkc0vX24OtIVzPKgPuxERqSlXVQgEJ5s QXWqVe3CuY8kINpiXzBKvyuCOGIwGsEbAHrzF2oCgF474VVjJ3jLiYi/9LzD9f8w 6QBLwwuQLAfTFveDrzD346v8jz0BxmnVDEAjEEOnKynppjNU1zhMK00N/zCEeonp CKE2+0vI80ISTIO1e2L8pk7v6tYGWJgXiVjsx9BiEfjz -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:43 2026 by rpki-client