This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa File: 9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa (raw, json) Hash identifier: jkRYU37RE8ZKYId1y2rgWa5Ij1FGdMuhHsJM5SV9bJo= Subject key identifier: F6:6E:D1:78:11:58:16:F2:F2:14:B7:8E:72:DE:C7:F6:12:7A:A4:00 Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c Certificate serial: 019B7F82A364ABE8E895C5A6268D71435F40 Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa Signing time: Fri 02 Jan 2026 16:20:26 +0000 ROA not before: Fri 02 Jan 2026 16:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48503 IP address blocks: 140.150.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a3:64:ab:e8:e8:95:c5:a6:26:8d:71:43:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c Validity Not Before: Jan 2 16:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f66ed178115816f2f214b78e72dec7f6127aa400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:12:c0:43:b1:48:ad:dc:51:5c:11:28:90: 98:19:38:27:10:2f:11:d1:50:26:3d:3b:3b:5f:9f: 16:17:b6:85:91:4c:81:ac:6a:35:a9:92:2c:62:a7: be:7a:64:55:e6:ef:ef:9c:8b:42:84:a3:41:3a:bc: 1b:ef:2a:49:19:e3:f6:f1:f6:66:1b:38:17:35:2e: 74:f6:ee:36:3b:bc:10:35:d9:d9:ec:1c:47:65:10: ca:e1:8f:ea:d9:bb:59:ba:16:fe:3a:fc:7a:7d:c2: 32:7b:ea:87:3a:fb:dd:d1:21:41:30:7e:e4:71:2c: bc:7c:fd:80:46:f4:7c:bb:d7:3b:27:8f:80:61:22: 60:ba:a7:0d:b6:aa:53:cc:2a:f2:f7:e0:1c:20:b7: 0b:4a:96:79:2d:ad:85:63:b5:c3:35:66:eb:23:a7: 7a:0c:0d:e4:12:55:d1:ff:8f:1e:95:82:67:6c:dd: e8:16:0c:96:32:e7:70:ca:fb:c4:02:ef:5d:b0:1a: 32:49:d0:1c:63:c6:bc:62:99:19:ee:cf:73:3a:ed: 91:03:e6:f7:01:d3:71:61:e1:b6:2a:2b:f7:19:df: a9:9a:25:34:f5:a8:d6:47:fd:aa:5f:65:a1:90:55: fb:85:aa:5d:65:75:3f:02:bd:9b:12:6c:29:7e:a6: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6E:D1:78:11:58:16:F2:F2:14:B7:8E:72:DE:C7:F6:12:7A:A4:00 X509v3 Authority Key Identifier: keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/9m7ReBFYFvLyFLeOct7H9hJ6pAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.35.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c6:fa:cc:6c:93:5f:3c:97:a2:53:14:9b:fb:11:00:03:09: 8e:38:a4:0b:fb:5d:90:b3:36:40:f9:61:6e:31:ea:4b:2b:d7: 80:21:4e:f0:c4:80:93:fa:82:70:3c:f5:e2:e7:77:ee:4d:ef: 62:54:e8:4c:37:09:4d:ef:10:03:e5:8e:31:28:2d:49:eb:f7: 17:13:35:19:c3:83:60:69:9b:41:a1:9b:c6:66:ba:ff:8c:01: 7a:66:38:13:80:0e:fb:99:77:78:89:9b:99:86:e1:ca:50:9e: 40:53:56:1c:e5:35:97:01:af:25:08:bf:44:c7:0e:a2:9f:08: 2a:62:98:e3:4a:3e:18:f9:51:ac:13:41:34:06:33:54:8f:f5: 28:e2:9c:da:7b:ab:ba:da:d4:65:aa:20:96:45:5f:b7:64:25: 1f:8f:e2:31:ba:cc:bc:b8:e9:79:10:2e:b5:6e:51:34:82:83: dd:8e:2e:de:00:6a:bd:ba:ae:9a:36:cf:b3:64:68:dd:83:08: ca:48:2d:d8:f6:60:48:08:4d:63:49:11:70:e4:d0:19:bd:81: 9c:ff:4d:0b:9c:03:00:55:b6:96:d0:d3:73:c5:5d:d6:09:10: ce:17:67:74:89:2e:b6:1e:27:92:79:40:64:1f:c8:73:b5:6b: 85:2c:7c:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gqNkq+jolcWmJo1xQ19AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx YTU3NWMwHhcNMjYwMTAyMTYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjZlZDE3ODExNTgxNmYyZjIxNGI3OGU3MmRlYzdmNjEyN2FhNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruISwEOxSK3cUVwRKJCYGTgnEC8R 0VAmPTs7X58WF7aFkUyBrGo1qZIsYqe+emRV5u/vnItChKNBOrwb7ypJGeP28fZm GzgXNS509u42O7wQNdnZ7BxHZRDK4Y/q2btZuhb+Ovx6fcIye+qHOvvd0SFBMH7k cSy8fP2ARvR8u9c7J4+AYSJguqcNtqpTzCry9+AcILcLSpZ5La2FY7XDNWbrI6d6 DA3kElXR/48elYJnbN3oFgyWMudwyvvEAu9dsBoySdAcY8a8YpkZ7s9zOu2RA+b3 AdNxYeG2Kiv3Gd+pmiU09ajWR/2qX2WhkFX7hapdZXU/Ar2bEmwpfqYq8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZu0XgRWBby8hS3jnLex/YSeqQAMB8GA1UdIwQY MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt OGIyYjQ3MzhiMWNjLzEvOW03UmVCRllGdkx5RkxlT2N0N0g5aEo2cEFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjJYjMA0G CSqGSIb3DQEBCwUAA4IBAQBNxvrMbJNfPJeiUxSb+xEAAwmOOKQL+12QszZA+WFu MepLK9eAIU7wxICT+oJwPPXi53fuTe9iVOhMNwlN7xAD5Y4xKC1J6/cXEzUZw4Ng aZtBoZvGZrr/jAF6ZjgTgA77mXd4iZuZhuHKUJ5AU1Yc5TWXAa8lCL9Exw6inwgq YpjjSj4Y+VGsE0E0BjNUj/Uo4pzae6u62tRlqiCWRV+3ZCUfj+Ixusy8uOl5EC61 blE0goPdji7eAGq9uq6aNs+zZGjdgwjKSC3Y9mBICE1jSRFw5NAZvYGc/00LnAMA VbaW0NNzxV3WCRDOF2d0iS62HieSeUBkH8hztWuFLHx3 -----END CERTIFICATE-----Generated at Sun Jan 25 10:28:59 2026 by rpki-client