This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/SpB_KTlIVnRBfxO4HSVb8NmLqRg.roa File: SpB_KTlIVnRBfxO4HSVb8NmLqRg.roa (raw, json) Hash identifier: yJWOGjWhGH4V6dZvS0G2XkAOXVlNzvno86kqhv5xibQ= Subject key identifier: 4A:90:7F:29:39:48:56:74:41:7F:13:B8:1D:25:5B:F0:D9:8B:A9:18 Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019B76EB0C327FF4820136DEFFB0D67D17AD Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/SpB_KTlIVnRBfxO4HSVb8NmLqRg.roa Signing time: Thu 01 Jan 2026 00:17:54 +0000 ROA not before: Thu 01 Jan 2026 00:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35039 IP address blocks: 139.66.0.0/23 maxlen: 23 139.66.2.0/23 maxlen: 23 139.66.4.0/23 maxlen: 23 139.66.6.0/23 maxlen: 23 139.66.8.0/23 maxlen: 23 139.66.10.0/23 maxlen: 23 139.66.12.0/23 maxlen: 23 139.66.14.0/23 maxlen: 23 139.66.16.0/23 maxlen: 23 139.66.18.0/23 maxlen: 23 139.66.26.0/23 maxlen: 23 139.66.28.0/23 maxlen: 23 139.66.30.0/23 maxlen: 23 139.66.122.0/23 maxlen: 23 139.66.124.0/23 maxlen: 23 139.66.126.0/23 maxlen: 23 155.56.128.0/23 maxlen: 23 155.56.210.0/24 maxlen: 24 155.56.227.0/24 maxlen: 24 155.56.228.0/23 maxlen: 23 155.56.248.0/24 maxlen: 24 217.77.240.0/22 maxlen: 22 217.77.244.0/22 maxlen: 22 217.77.252.0/24 maxlen: 24 217.77.253.0/24 maxlen: 24 217.77.254.0/24 maxlen: 24 217.77.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:0c:32:7f:f4:82:01:36:de:ff:b0:d6:7d:17:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Jan 1 00:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a907f2939485674417f13b81d255bf0d98ba918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:42:a7:bd:e3:9c:99:d3:56:2d:a4:10:ed: fe:7a:3b:32:95:e5:0d:ef:29:26:0b:6f:10:31:7b: 87:c8:3b:29:5a:81:7f:b2:9a:ac:05:66:b0:3a:9c: c0:ba:5f:4c:49:d9:83:fc:be:fa:3b:5a:f6:0a:30: 2d:8f:e3:15:a4:7c:d9:f8:36:e7:0b:65:22:4a:59: d7:74:0c:3b:1c:44:70:ab:8f:d2:97:73:e6:86:91: f2:6c:7b:22:14:80:fc:28:da:7e:74:e3:26:88:5f: c5:f0:ec:b6:62:9d:a1:bd:41:cc:e9:f3:ef:5a:58: 23:c3:39:74:5e:3e:35:f9:1a:55:93:0f:d7:14:ac: 8f:b2:f9:52:9a:1a:63:e8:14:da:1b:92:63:c8:cb: b2:c4:af:01:f1:b5:27:aa:cc:64:91:fa:3e:d5:78: f6:a8:b8:41:c7:fe:b5:80:a5:22:5e:32:c8:21:80: 06:e0:c2:a3:a7:77:8b:5d:62:a0:92:56:92:ca:f8: 79:66:e1:14:10:e3:c2:f6:5e:75:81:40:57:01:7a: 86:38:b7:f0:c4:f7:8b:dd:66:e5:ce:b4:ac:44:ac: 1d:56:ba:c1:5a:d2:4e:54:51:c5:1d:88:85:c1:d6: 8d:a0:24:db:97:83:f3:63:6f:28:08:80:62:83:59: ae:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:90:7F:29:39:48:56:74:41:7F:13:B8:1D:25:5B:F0:D9:8B:A9:18 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/SpB_KTlIVnRBfxO4HSVb8NmLqRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.66.0.0-139.66.19.255 139.66.26.0-139.66.31.255 139.66.122.0-139.66.127.255 155.56.128.0/23 155.56.210.0/24 155.56.227.0-155.56.229.255 155.56.248.0/24 217.77.240.0/21 217.77.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:c5:d1:1f:a8:68:44:5f:12:52:a7:af:5f:61:31:d2:56:1d: 8d:2c:37:d1:c5:ac:11:7b:93:2d:ad:78:2d:81:5e:5d:60:1d: bd:2e:e7:71:b6:0a:39:25:f6:d2:e6:78:50:b0:d8:19:dc:06: 3b:85:45:5e:96:d8:70:ed:01:15:90:9e:2b:d1:33:fa:f6:fe: d6:f3:98:75:b6:9c:59:60:ab:be:5b:37:0d:66:07:7d:5b:8b: 8a:24:99:65:7b:79:7b:b8:18:b2:14:c7:66:b1:fb:8f:fb:b7: 6c:ff:cf:7f:e1:49:be:3e:4f:65:ee:24:90:d0:d1:5f:f2:ce: 25:90:68:f4:4e:25:07:fc:9f:fe:32:9b:51:f8:dd:3f:ca:66: 80:4a:41:62:04:9c:24:79:98:9f:38:8d:36:ac:b9:5a:31:fd: 16:c8:22:50:1b:1a:46:cb:4f:c2:d2:eb:2e:77:9c:59:35:dd: 36:4d:d0:a0:72:28:6d:d1:ff:5f:af:d0:15:d1:13:44:88:02: 09:65:06:4b:5c:0a:26:97:8f:a7:e9:b9:c7:c1:f3:86:74:11: 4d:4d:b6:d4:e8:71:9c:01:0a:73:12:98:21:8d:e9:e9:16:fa: e3:8c:80:dd:e0:73:7b:a2:c9:84:33:31:b9:f0:b7:eb:8f:ac: 79:2b:e8:ff -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt26wwyf/SCATbe/7DWfRetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwMTAxMDAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTkwN2YyOTM5NDg1Njc0NDE3ZjEzYjgxZDI1NWJmMGQ5OGJhOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx5Cp73jnJnTVi2kEO3+ejsyleUN 7ykmC28QMXuHyDspWoF/spqsBWawOpzAul9MSdmD/L76O1r2CjAtj+MVpHzZ+Dbn C2UiSlnXdAw7HERwq4/Sl3PmhpHybHsiFID8KNp+dOMmiF/F8Oy2Yp2hvUHM6fPv Wlgjwzl0Xj41+RpVkw/XFKyPsvlSmhpj6BTaG5JjyMuyxK8B8bUnqsxkkfo+1Xj2 qLhBx/61gKUiXjLIIYAG4MKjp3eLXWKgklaSyvh5ZuEUEOPC9l51gUBXAXqGOLfw xPeL3WblzrSsRKwdVrrBWtJOVFHFHYiFwdaNoCTbl4PzY28oCIBig1muvQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFEqQfyk5SFZ0QX8TuB0lW/DZi6kYMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvU3BCX0tUbElWblJCZnhPNEhTVmI4Tm1McVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVMAsDAwGLQgME AotCEDAMAwQBi0IaAwQFi0IAMAwDBAGLQnoDBAeLQgADBAGbOIADBACbONIwDAME AJs44wMEAZs45AMEAJs4+AMEA9lN8AMEAtlN/DANBgkqhkiG9w0BAQsFAAOCAQEA XsXRH6hoRF8SUqevX2Ex0lYdjSw30cWsEXuTLa14LYFeXWAdvS7ncbYKOSX20uZ4 ULDYGdwGO4VFXpbYcO0BFZCeK9Ez+vb+1vOYdbacWWCrvls3DWYHfVuLiiSZZXt5 e7gYshTHZrH7j/u3bP/Pf+FJvj5PZe4kkNDRX/LOJZBo9E4lB/yf/jKbUfjdP8pm gEpBYgScJHmYnziNNqy5WjH9FsgiUBsaRstPwtLrLnecWTXdNk3QoHIobdH/X6/Q FdETRIgCCWUGS1wKJpePp+m5x8HzhnQRTU221OhxnAEKcxKYIY3p6Rb644yA3eBz e6LJhDMxufC364+seSvo/w== -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:49 2026 by rpki-client