This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9myGapApVrb4JbejkloU4P66zLc.roa File: 9myGapApVrb4JbejkloU4P66zLc.roa (raw, json) Hash identifier: 6EFV77uWAJvDV9lSFY6CsxJphPSKH4/4PVdWuftIQJ8= Subject key identifier: F6:6C:86:6A:90:29:56:B6:F8:25:B7:A3:92:5A:14:E0:FE:BA:CC:B7 Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Certificate serial: 019B7F840C6EC2B9163FDDE49EFCAE15C0DF Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9myGapApVrb4JbejkloU4P66zLc.roa Signing time: Fri 02 Jan 2026 16:21:58 +0000 ROA not before: Fri 02 Jan 2026 16:21:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 146.255.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0c:6e:c2:b9:16:3f:dd:e4:9e:fc:ae:15:c0:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b Validity Not Before: Jan 2 16:21:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f66c866a902956b6f825b7a3925a14e0febaccb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f1:37:e2:2c:b4:6c:3a:48:8f:bb:e7:60:8f: 2d:0d:6a:d6:30:2a:b0:6c:b9:32:9d:58:4e:8e:07: bd:62:57:48:bf:6e:0a:a4:61:f4:47:68:7e:3e:13: f2:b0:fa:bb:28:f0:ab:e2:c7:03:df:11:95:41:38: da:7d:67:6a:81:06:5e:4f:30:a9:9a:0e:fd:71:39: 75:00:7f:d1:29:ae:21:1e:52:72:31:a0:7c:ec:13: 34:1c:1b:e7:1a:d7:dd:81:3e:ff:20:c8:e8:67:0a: 9a:58:e6:3a:91:d8:e4:a0:2e:b5:4f:2f:20:a4:08: ad:d6:54:ef:1e:89:27:1c:f6:16:38:5d:51:51:86: 56:ab:ac:aa:64:1d:b4:43:9d:a5:72:86:01:ed:bb: e3:3f:3b:dc:4d:d4:81:ab:6f:23:d7:0d:97:76:92: 4a:b0:66:af:2c:1a:58:22:85:20:3a:f4:c7:3c:1d: b5:60:3c:55:11:2e:2f:9a:d2:b0:9c:fd:49:f1:55: c7:d5:e6:1c:80:43:7c:dd:c0:9e:11:a6:47:3c:07: d9:28:7b:a9:61:7d:2f:a0:bf:b2:a7:9e:21:49:8f: a2:25:cc:c3:0d:42:87:97:21:4d:85:b9:dc:16:37: a8:53:73:94:d0:b1:a2:21:2d:70:f9:8d:ef:8f:80: 52:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:6C:86:6A:90:29:56:B6:F8:25:B7:A3:92:5A:14:E0:FE:BA:CC:B7 X509v3 Authority Key Identifier: keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/9myGapApVrb4JbejkloU4P66zLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.255.32.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:18:e2:b3:13:ae:bb:16:9b:ed:e5:cc:9e:b4:ee:61:86:0a: 52:3d:e2:d0:ac:94:d4:fa:54:af:fa:40:ab:72:be:81:e3:2b: 89:7f:cd:3a:ca:2d:10:8e:76:64:c0:55:4a:44:5f:d6:ee:ee: aa:91:f3:3c:0d:f8:f9:8e:fd:68:6a:23:5f:31:36:7e:90:51: 53:0b:ec:3b:8b:ba:5b:68:11:01:a9:ac:76:61:48:93:9c:92: 18:e1:49:4c:97:7a:ad:db:15:9b:5d:fd:3d:a8:7d:72:62:46: 25:5c:f4:b8:e1:94:d6:2d:16:1a:20:ac:f7:d6:8c:f8:05:2f: 3f:87:79:84:75:b0:83:12:c1:1d:22:74:ba:f8:fc:d1:8f:f0: 81:d0:c4:7a:c3:c8:9d:75:d3:8c:11:88:58:9e:32:cc:aa:1b: 8c:9a:7f:93:e3:88:78:04:b8:1c:af:de:61:6d:51:e8:ee:81: 33:0a:04:66:ab:1e:f7:9f:07:1b:a5:70:6b:7f:72:eb:09:5a: c5:57:02:72:65:91:a5:ba:32:75:d1:91:50:06:70:66:b3:f2: ec:99:ea:db:da:0c:dd:08:c7:a4:a7:f6:27:49:0b:87:59:ef: 98:5b:64:b5:cb:2e:18:b0:41:b7:9c:99:7d:4b:26:95:b2:f9: 1a:4e:dd:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hAxuwrkWP93knvyuFcDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0 ZTk4MWIwHhcNMjYwMTAyMTYyMTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjZjODY2YTkwMjk1NmI2ZjgyNWI3YTM5MjVhMTRlMGZlYmFjY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPE34iy0bDpIj7vnYI8tDWrWMCqw bLkynVhOjge9YldIv24KpGH0R2h+PhPysPq7KPCr4scD3xGVQTjafWdqgQZeTzCp mg79cTl1AH/RKa4hHlJyMaB87BM0HBvnGtfdgT7/IMjoZwqaWOY6kdjkoC61Ty8g pAit1lTvHoknHPYWOF1RUYZWq6yqZB20Q52lcoYB7bvjPzvcTdSBq28j1w2XdpJK sGavLBpYIoUgOvTHPB21YDxVES4vmtKwnP1J8VXH1eYcgEN83cCeEaZHPAfZKHup YX0voL+yp54hSY+iJczDDUKHlyFNhbncFjeoU3OU0LGiIS1w+Y3vj4BSqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZshmqQKVa2+CW3o5JaFOD+usy3MB8GA1UdIwQY MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt MTYxZjM0MjM4N2QxLzEvOW15R2FwQXBWcmI0SmJlamtsb1U0UDY2ekxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkv8gMA0G CSqGSIb3DQEBCwUAA4IBAQBtGOKzE667Fpvt5cyetO5hhgpSPeLQrJTU+lSv+kCr cr6B4yuJf806yi0QjnZkwFVKRF/W7u6qkfM8Dfj5jv1oaiNfMTZ+kFFTC+w7i7pb aBEBqax2YUiTnJIY4UlMl3qt2xWbXf09qH1yYkYlXPS44ZTWLRYaIKz31oz4BS8/ h3mEdbCDEsEdInS6+PzRj/CB0MR6w8idddOMEYhYnjLMqhuMmn+T44h4BLgcr95h bVHo7oEzCgRmqx73nwcbpXBrf3LrCVrFVwJyZZGlujJ10ZFQBnBms/Lsmerb2gzd CMekp/YnSQuHWe+YW2S1yy4YsEG3nJl9SyaVsvkaTt08 -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:02 2026 by rpki-client