This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa File: n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa (raw, json) Hash identifier: 4lMwGlH5lrGUibaDmIf2SptMviWc/ApHUJVaOyRTYKs= Subject key identifier: 9F:E9:C5:28:B2:A4:1F:F6:BC:50:89:26:8C:01:BC:5A:17:9E:32:44 Certificate issuer: /CN=38203463eb944b25c65135ca47bdbdab646f3984 Certificate serial: 019B7B366B32B8099563B708785B55E52B7E Authority key identifier: 38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57872 IP address blocks: 37.140.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:32:b8:09:95:63:b7:08:78:5b:55:e5:2b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38203463eb944b25c65135ca47bdbdab646f3984 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe9c528b2a41ff6bc5089268c01bc5a179e3244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:33:cd:eb:2e:af:ac:82:77:a5:a2:80:5e:92: 4b:c6:56:d3:06:76:f2:a5:13:ec:cd:0e:b4:b1:49: 0a:bb:7e:69:c4:67:60:85:b8:76:c9:e9:c7:ca:f8: e6:97:3f:e8:93:8e:db:56:15:36:2c:4b:6c:68:10: d4:48:be:e4:28:5a:09:24:36:1e:c1:6a:3d:bb:bb: 17:4c:b8:3b:6c:a8:e9:42:b9:c2:4f:bd:3f:39:55: 62:80:84:d6:17:27:06:7c:fe:44:7d:71:8a:f3:ad: 74:cf:56:68:8d:32:44:3b:8c:be:fd:3c:97:66:b9: 96:bd:b0:80:18:57:7e:65:37:ed:24:4f:18:c9:e0: 11:9e:67:55:0c:6c:88:32:46:d1:87:61:cc:67:67: 56:bb:4f:b0:45:3f:21:ee:d5:d3:ae:14:72:63:42: 76:76:91:bd:d3:01:f3:71:e4:4d:36:4b:51:57:d6: 5c:c4:58:90:ce:df:5b:03:ef:cc:69:a2:f4:e3:15: ef:1a:d2:b1:6d:68:32:8f:94:6d:12:2f:52:a6:ca: 3b:92:3a:94:5f:c7:36:5c:4c:b6:96:f1:5c:39:57: 58:c9:88:16:ff:c7:04:53:95:0f:83:9b:7e:6a:95: 09:d4:27:f1:57:85:03:fe:0f:11:52:69:cb:8c:c6: fe:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:C5:28:B2:A4:1F:F6:BC:50:89:26:8C:01:BC:5A:17:9E:32:44 X509v3 Authority Key Identifier: keyid:38:20:34:63:EB:94:4B:25:C6:51:35:CA:47:BD:BD:AB:64:6F:39:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCA0Y-uUSyXGUTXKR729q2RvOYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/n-nFKLKkH_a8UIkmjAG8WheeMkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0a2984-a869-440d-b578-58935179b985/1/OCA0Y-uUSyXGUTXKR729q2RvOYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.140.232.0/21 Signature Algorithm: sha256WithRSAEncryption 77:a0:85:b7:0a:97:7f:3d:3c:90:ad:af:30:43:be:72:cf:98: b7:73:bc:d4:5c:0b:82:2d:b5:2d:2c:61:ff:47:42:3c:e0:ca: 62:9d:15:7f:4f:15:db:39:dc:be:42:8f:31:0d:f7:b0:75:21: 7c:7d:71:c8:1f:e1:67:87:0c:7a:46:11:a9:3c:fb:64:34:33: b3:bc:1e:3a:c7:94:2d:e1:87:7e:12:7e:56:6b:18:6b:d9:24: 6c:c9:6e:a4:c4:62:b9:73:b3:18:11:3a:5e:ca:97:f0:a5:dd: fe:e4:91:19:4a:c8:20:27:f4:64:ed:37:86:3a:ba:d9:06:cb: 8d:f5:16:e5:14:2a:b6:cf:a0:12:bf:7c:25:76:23:3f:3a:7d: b5:d3:aa:44:07:65:fb:9f:8d:b1:30:29:ad:fa:78:f8:e6:38: b4:ae:db:7f:f6:1f:2e:bf:b6:92:8a:3c:40:e0:f9:46:cc:0d: d7:fc:56:51:77:f9:d8:5d:36:99:e7:71:69:7b:2f:ce:a7:ab: 0c:bf:17:6e:19:a6:05:a0:1f:46:a5:e4:03:ac:ef:68:75:29: 79:f8:1d:35:3c:5d:63:70:63:aa:8b:e6:5c:1b:16:ec:d1:50: 6f:7b:2c:48:41:71:69:55:8b:af:b8:98:f6:e0:49:3d:d1:ff: 7f:a8:37:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmsyuAmVY7cIeFtV5St+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MjAzNDYzZWI5NDRiMjVjNjUxMzVjYTQ3YmRiZGFiNjQ2 ZjM5ODQwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU5YzUyOGIyYTQxZmY2YmM1MDg5MjY4YzAxYmM1YTE3OWUzMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zPN6y6vrIJ3paKAXpJLxlbTBnby pRPszQ60sUkKu35pxGdghbh2yenHyvjmlz/ok47bVhU2LEtsaBDUSL7kKFoJJDYe wWo9u7sXTLg7bKjpQrnCT70/OVVigITWFycGfP5EfXGK8610z1ZojTJEO4y+/TyX ZrmWvbCAGFd+ZTftJE8YyeARnmdVDGyIMkbRh2HMZ2dWu0+wRT8h7tXTrhRyY0J2 dpG90wHzceRNNktRV9ZcxFiQzt9bA+/MaaL04xXvGtKxbWgyj5RtEi9Spso7kjqU X8c2XEy2lvFcOVdYyYgW/8cEU5UPg5t+apUJ1CfxV4UD/g8RUmnLjMb+vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/pxSiypB/2vFCJJowBvFoXnjJEMB8GA1UdIwQY MBaAFDggNGPrlEslxlE1yke9vatkbzmEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1Nzgt NTg5MzUxNzliOTg1LzEvbi1uRktMS2tIX2E4VUlrbWpBRzhXaGVlTWtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYTI5ODQtYTg2OS00NDBkLWI1NzgtNTg5MzUxNzliOTg1 LzEvT0NBMFktdVVTeVhHVVRYS1I3MjlxMlJ2T1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDJYzoMA0G CSqGSIb3DQEBCwUAA4IBAQB3oIW3Cpd/PTyQra8wQ75yz5i3c7zUXAuCLbUtLGH/ R0I84MpinRV/TxXbOdy+Qo8xDfewdSF8fXHIH+Fnhwx6RhGpPPtkNDOzvB46x5Qt 4Yd+En5Waxhr2SRsyW6kxGK5c7MYETpeypfwpd3+5JEZSsggJ/Rk7TeGOrrZBsuN 9RblFCq2z6ASv3wldiM/On2106pEB2X7n42xMCmt+nj45ji0rtt/9h8uv7aSijxA 4PlGzA3X/FZRd/nYXTaZ53Fpey/Op6sMvxduGaYFoB9GpeQDrO9odSl5+B01PF1j cGOqi+ZcGxbs0VBveyxIQXFpVYuvuJj24Ek90f9/qDdl -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:10 2026 by rpki-client