This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa File: cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa (raw, json) Hash identifier: wT8Ut68PEmHJguLhza++gxsB8fpnhz3P88irlMghl78= Subject key identifier: 71:4E:13:08:26:17:A1:A8:E1:64:25:C8:20:9E:6D:71:40:EC:9E:73 Certificate issuer: /CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Certificate serial: 019B7E3825ED6D5663D14754D185E15704DB Authority key identifier: 90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47215 IP address blocks: 185.134.240.0/24 maxlen: 24 2a06:ee40:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.mft rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:25:ed:6d:56:63:d1:47:54:d1:85:e1:57:04:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909ac4b217a08c348fb2dc9fb7422e1de918f517 Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=714e13082617a1a8e16425c8209e6d7140ec9e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:9e:20:04:f0:79:d0:23:73:8a:8b:91:cd: c6:0b:fd:9e:fc:98:51:3d:b5:77:22:67:68:ba:d2: 38:3b:ce:80:7c:f5:11:1f:2a:bf:de:13:2c:ba:14: ef:cf:f0:b1:16:5d:7f:28:35:56:b0:45:7d:b3:68: 41:75:3a:42:01:a2:8c:0d:d4:ad:5b:27:69:24:d7: b0:96:01:c9:70:35:d1:36:45:7f:35:9e:22:31:5a: b0:fa:33:71:d6:96:6a:34:b7:d8:c0:23:7f:9d:73: 6f:10:ea:92:df:18:32:62:4b:ad:19:63:00:13:0d: fb:eb:20:7a:26:d8:2b:ac:78:1f:0b:f6:88:f8:48: 32:9f:ff:85:ca:03:d5:b0:c0:88:ce:bd:fa:20:c2: f0:03:19:d5:d8:19:c3:76:83:f7:93:ec:d1:7e:f0: f1:c4:64:bd:35:54:f0:d4:bb:61:49:40:ee:6d:74: a0:5b:f0:9c:22:7e:de:7c:e4:74:9b:ae:9c:a1:7e: 71:c5:a2:11:cb:42:31:80:93:d0:64:27:29:e7:00: ed:02:8b:88:14:97:17:e6:d9:46:83:0d:75:2f:99: 24:de:36:d7:c2:05:b6:c0:6e:d2:10:05:f5:76:71: 60:84:bc:95:d0:4f:6e:a4:3a:7b:98:c6:cc:d2:6a: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4E:13:08:26:17:A1:A8:E1:64:25:C8:20:9E:6D:71:40:EC:9E:73 X509v3 Authority Key Identifier: keyid:90:9A:C4:B2:17:A0:8C:34:8F:B2:DC:9F:B7:42:2E:1D:E9:18:F5:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJrEshegjDSPstyft0IuHekY9Rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/cU4TCCYXoajhZCXIIJ5tcUDsnnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1743df-0462-4cac-8250-dedc52a2ed8f/1/kJrEshegjDSPstyft0IuHekY9Rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.240.0/24 IPv6: 2a06:ee40:22::/48 Signature Algorithm: sha256WithRSAEncryption 8f:d3:0e:19:02:87:8d:40:dc:33:a6:62:b6:06:33:79:76:4f: 43:06:e6:c2:71:6e:0a:a7:8f:91:67:0a:6d:12:4b:c5:2a:bb: 48:67:cf:aa:f0:09:cc:17:ad:ef:48:b0:d4:5c:98:1f:c1:1a: 40:9c:96:26:01:ee:16:3f:82:8a:db:2f:4a:f7:1b:f3:17:36: d7:6c:6b:c2:91:85:76:02:79:34:9a:3e:d1:47:68:59:58:06: ad:19:00:43:fb:2d:cc:c2:f5:2c:2d:29:1b:b3:72:de:37:7f: df:b1:20:8f:21:84:72:f9:93:d6:bd:fb:bf:fd:66:da:cd:a2: 2b:42:82:57:d7:28:8f:0b:87:39:5f:9b:89:a8:0c:b8:53:79: b0:67:bc:3e:2e:23:dd:38:05:cc:5e:73:94:bd:87:20:74:16: f6:e6:a2:63:66:82:64:27:40:18:6c:f0:29:01:d9:02:49:12: 5f:f4:6f:ab:f1:e6:37:b5:14:d0:80:2c:be:ad:e2:96:12:5e: 35:a9:5e:e3:f7:52:9e:55:42:21:0d:89:cd:f7:56:4e:b1:cc: 4f:05:4a:39:a5:2c:87:bb:19:db:0c:09:69:35:32:04:c7:75: 90:a3:56:eb:3e:fc:2d:b6:d9:27:fa:c3:66:10:4c:ec:ef:b5: 14:51:f7:b4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OCXtbVZj0UdU0YXhVwTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwOWFjNGIyMTdhMDhjMzQ4ZmIyZGM5ZmI3NDIyZTFkZTkx OGY1MTcwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTRlMTMwODI2MTdhMWE4ZTE2NDI1YzgyMDllNmQ3MTQwZWM5ZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua2eIATwedAjc4qLkc3GC/2e/JhR PbV3ImdoutI4O86AfPURHyq/3hMsuhTvz/CxFl1/KDVWsEV9s2hBdTpCAaKMDdSt WydpJNewlgHJcDXRNkV/NZ4iMVqw+jNx1pZqNLfYwCN/nXNvEOqS3xgyYkutGWMA Ew376yB6JtgrrHgfC/aI+Egyn/+FygPVsMCIzr36IMLwAxnV2BnDdoP3k+zRfvDx xGS9NVTw1LthSUDubXSgW/CcIn7efOR0m66coX5xxaIRy0IxgJPQZCcp5wDtAouI FJcX5tlGgw11L5kk3jbXwgW2wG7SEAX1dnFghLyV0E9upDp7mMbM0mrlqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHFOEwgmF6Go4WQlyCCebXFA7J5zMB8GA1UdIwQY MBaAFJCaxLIXoIw0j7Lcn7dCLh3pGPUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAt ZGVkYzUyYTJlZDhmLzEvY1U0VENDWVhvYWpoWkNYSUlKNXRjVURzbm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzQzZGYtMDQ2Mi00Y2FjLTgyNTAtZGVkYzUyYTJlZDhm LzEva0pyRXNoZWdqRFNQc3R5ZnQwSXVIZWtZOVJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuYbwMA8E AgACMAkDBwAqBu5AACIwDQYJKoZIhvcNAQELBQADggEBAI/TDhkCh41A3DOmYrYG M3l2T0MG5sJxbgqnj5FnCm0SS8Uqu0hnz6rwCcwXre9IsNRcmB/BGkCcliYB7hY/ gorbL0r3G/MXNtdsa8KRhXYCeTSaPtFHaFlYBq0ZAEP7LczC9SwtKRuzct43f9+x II8hhHL5k9a9+7/9ZtrNoitCglfXKI8Lhzlfm4moDLhTebBnvD4uI904Bcxec5S9 hyB0FvbmomNmgmQnQBhs8CkB2QJJEl/0b6vx5je1FNCALL6t4pYSXjWpXuP3Up5V QiENic33Vk6xzE8FSjmlLIe7GdsMCWk1MgTHdZCjVus+/C222Sf6w2YQTOzvtRRR 97Q= -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:46 2026 by rpki-client