This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fpecmxG0VMtGgv-6xShhSv2fVUQ.roa File: fpecmxG0VMtGgv-6xShhSv2fVUQ.roa (raw, json) Hash identifier: YuQZpm+KQKB8n4AcGZ5pFQZxnIRYIA48UAhBTDa/dNE= Subject key identifier: 7E:97:9C:9B:11:B4:54:CB:46:82:FF:BA:C5:28:61:4A:FD:9F:55:44 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C801A8D712414236E1A61F24BD36E50 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fpecmxG0VMtGgv-6xShhSv2fVUQ.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 5.253.246.0/24 maxlen: 24 45.13.227.0/24 maxlen: 24 185.117.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1a:8d:71:24:14:23:6e:1a:61:f2:4b:d3:6e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e979c9b11b454cb4682ffbac528614afd9f5544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:e0:08:0f:12:db:dd:d7:48:2a:32:03:d7: ba:98:38:0e:47:08:a0:e4:74:eb:e0:db:e6:f9:1f: a0:89:01:73:52:f9:f8:c1:97:0e:ca:49:51:ff:9e: b8:c3:a3:a8:f2:71:c3:03:ba:ce:b8:5d:d6:1a:35: 30:21:d6:68:b0:06:29:1a:c3:9e:f0:fe:7e:ee:75: 50:a0:1d:cc:47:66:12:39:83:ce:1d:be:a5:e3:1c: 0f:43:36:14:d8:24:a8:a4:14:b8:eb:cb:90:32:b9: 7f:df:b4:1b:66:9a:ea:07:b4:6e:e2:ef:3a:bf:2b: 80:42:a6:f5:80:19:bb:3f:f1:98:1a:e9:ae:04:cf: f7:c7:bd:5f:b4:83:e1:15:a7:d9:c7:4f:df:60:26: 4b:02:fc:e8:4e:16:f6:cd:58:47:f5:4c:09:62:49: e0:78:4f:c0:45:a9:5b:9d:28:22:41:c8:31:5e:41: cd:b8:e1:15:ae:48:57:50:a4:09:db:38:fa:7b:56: d9:94:f4:e6:4d:ae:a1:32:08:a6:eb:e6:ca:22:54: ab:4e:cd:57:73:26:5f:5e:eb:53:57:6c:ca:6e:7a: 35:9f:aa:d0:31:0d:24:18:59:3a:8c:ba:aa:1e:f7: c3:cf:a3:36:bb:3c:6a:3d:17:49:07:bf:34:79:f3: 13:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:97:9C:9B:11:B4:54:CB:46:82:FF:BA:C5:28:61:4A:FD:9F:55:44 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fpecmxG0VMtGgv-6xShhSv2fVUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.246.0/24 45.13.227.0/24 185.117.3.0/24 Signature Algorithm: sha256WithRSAEncryption 78:8b:59:aa:e6:11:7f:56:5c:15:d1:98:8b:ea:de:9f:90:2b: 85:7d:db:d4:be:ae:02:43:51:bf:09:a3:fb:96:0b:90:33:cf: b4:b6:91:1f:ad:6b:e2:62:cb:9c:d2:79:a6:49:25:30:14:4c: 98:48:cc:53:5a:6a:03:fc:e1:14:c4:47:17:26:72:66:49:52: 55:b9:ba:21:f1:c0:55:9b:d2:88:a3:34:fe:e2:29:d2:83:ad: 51:2f:f8:82:7e:1d:98:ef:d5:7b:65:e0:f6:fe:31:1d:4e:29: c3:f2:de:ba:89:f5:cf:47:0b:7a:6a:38:a5:99:e9:9c:72:c3: 02:31:e2:29:ba:57:9e:4f:d3:b5:bb:81:55:3b:df:0f:1a:0a: ed:de:ac:bb:a3:00:c3:12:bf:15:f3:53:3a:c0:06:e0:88:55: 45:58:5b:84:af:14:d4:3a:1b:de:00:91:49:64:86:bd:c4:f4: ca:57:b7:c8:96:15:59:69:a7:ba:ac:d4:a9:4f:b4:17:15:d5: 23:3a:dd:a9:a5:de:ea:90:c1:3a:b6:4e:75:b7:21:cb:4a:b0: 97:4e:cf:61:9f:25:07:3f:e6:e3:65:26:ed:a3:e4:07:b2:a8: 9d:33:48:4c:01:d9:8f:7c:d6:3e:5d:0e:eb:cd:b1:39:7a:d1: ec:55:a4:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gBqNcSQUI24aYfJL025QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk3OWM5YjExYjQ1NGNiNDY4MmZmYmFjNTI4NjE0YWZkOWY1NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquzgCA8S293XSCoyA9e6mDgORwig 5HTr4Nvm+R+giQFzUvn4wZcOyklR/564w6Oo8nHDA7rOuF3WGjUwIdZosAYpGsOe 8P5+7nVQoB3MR2YSOYPOHb6l4xwPQzYU2CSopBS468uQMrl/37QbZprqB7Ru4u86 vyuAQqb1gBm7P/GYGumuBM/3x71ftIPhFafZx0/fYCZLAvzoThb2zVhH9UwJYkng eE/ARalbnSgiQcgxXkHNuOEVrkhXUKQJ2zj6e1bZlPTmTa6hMgim6+bKIlSrTs1X cyZfXutTV2zKbno1n6rQMQ0kGFk6jLqqHvfDz6M2uzxqPRdJB780efMTNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH6XnJsRtFTLRoL/usUoYUr9n1VEMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvZnBlY214RzBWTXRHZ3YtNnhTaGhTdjJmVlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf32AwQA LQ3jAwQAuXUDMA0GCSqGSIb3DQEBCwUAA4IBAQB4i1mq5hF/VlwV0ZiL6t6fkCuF fdvUvq4CQ1G/CaP7lguQM8+0tpEfrWviYsuc0nmmSSUwFEyYSMxTWmoD/OEUxEcX JnJmSVJVuboh8cBVm9KIozT+4inSg61RL/iCfh2Y79V7ZeD2/jEdTinD8t66ifXP Rwt6ajilmemccsMCMeIpuleeT9O1u4FVO98PGgrt3qy7owDDEr8V81M6wAbgiFVF WFuErxTUOhveAJFJZIa9xPTKV7fIlhVZaae6rNSpT7QXFdUjOt2ppd7qkME6tk51 tyHLSrCXTs9hnyUHP+bjZSbto+QHsqidM0hMAdmPfNY+XQ7rzbE5etHsVaTd -----END CERTIFICATE-----Generated at Mon Jan 19 17:48:10 2026 by rpki-client