This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/440C9nJzfAwzFQHbbTSsKGKGkig.roa File: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (raw, json) Hash identifier: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI= Subject key identifier: E3:8D:02:F6:72:73:7C:0C:33:15:01:DB:6D:34:AC:28:62:86:92:28 Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Certificate serial: 019B7D5C49FDE244782BBA45C83ED92142F5 Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/440C9nJzfAwzFQHbbTSsKGKGkig.roa Signing time: Fri 02 Jan 2026 06:19:18 +0000 ROA not before: Fri 02 Jan 2026 06:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 141.74.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:49:fd:e2:44:78:2b:ba:45:c8:3e:d9:21:42:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Validity Not Before: Jan 2 06:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e38d02f672737c0c331501db6d34ac2862869228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:22:12:07:42:fe:31:31:74:3c:ba:03:a0:02: 59:dc:58:12:04:f7:e4:13:52:f3:99:4d:c6:0d:53: 5a:9c:de:12:a7:d1:44:2e:89:72:a6:39:c8:b1:0c: 3e:93:32:04:86:be:35:83:aa:e4:22:e2:ea:7e:24: 14:e6:59:21:8a:19:19:69:af:f5:c5:57:9a:1b:21: 86:64:cb:70:9e:4c:fc:4a:39:8f:80:cd:60:91:51: 18:8f:e6:b4:d0:4c:14:76:51:e5:8d:a7:56:b0:7a: 50:51:9f:41:1e:7f:07:5d:a7:9e:38:da:fb:0d:a7: 1e:a4:9b:17:40:bb:13:0d:5c:6f:29:c5:7b:a4:fe: 25:28:b0:3a:c8:68:05:f8:f1:a0:35:cb:d4:d6:3d: 73:2e:5d:d6:b1:95:f3:ba:c2:2a:8f:14:57:bf:f0: 70:1e:11:e4:fd:03:ae:74:85:79:2a:da:51:52:d6: 28:3d:95:3b:64:ea:03:cb:50:9b:23:a0:3a:16:d8: 66:61:b6:50:c5:5a:bc:dd:53:6c:a6:63:64:e0:38: a5:aa:fe:4f:f2:46:08:98:a2:00:d7:52:34:7e:2b: b9:ec:43:3c:a7:c9:7b:d5:4d:38:8d:ec:22:82:f4: 2d:bf:66:8c:50:68:ca:c2:4e:7a:c2:c7:cc:d6:1d: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8D:02:F6:72:73:7C:0C:33:15:01:DB:6D:34:AC:28:62:86:92:28 X509v3 Authority Key Identifier: keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/440C9nJzfAwzFQHbbTSsKGKGkig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.74.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:8f:00:ce:62:0f:71:fd:29:11:34:f7:f4:87:93:73:31:4f: 6b:55:d8:00:14:e6:43:1d:9d:aa:cf:5f:80:f5:a6:36:9f:e7: 2c:b7:40:a1:7f:f5:f8:12:7d:46:f0:9c:2b:3e:11:e5:81:cc: 7b:ed:ca:96:da:71:fd:83:ac:c0:1a:62:5f:58:9f:e2:dc:f9: cb:ee:e7:38:e5:1c:fb:b6:b9:1b:81:54:f6:31:ef:cf:1e:72: 8b:ea:ef:a7:46:ff:e4:63:18:c2:ee:fa:41:02:f0:49:76:10: b4:c3:f0:32:59:4c:7a:ca:67:c3:48:16:7e:ed:e3:52:49:37: 43:c6:fe:2f:97:91:72:a0:5b:1c:8a:77:40:34:1e:41:53:2f: 52:4e:41:4d:1b:f5:47:0f:5b:57:c5:0f:57:92:cd:be:05:b6: a0:9e:06:4e:ab:5d:4a:93:a1:5a:09:1f:b5:5d:81:82:a3:48: 24:0c:91:31:14:1c:ae:ba:f5:6c:9f:23:79:70:5e:25:0c:7f: ba:d1:5e:bb:bf:0d:f1:7f:d3:45:f7:a2:76:f9:91:a9:80:ac: eb:dd:40:5e:1e:a5:59:66:24:99:b7:a3:b3:3f:81:2b:4e:1b: 8d:41:c2:45:4e:68:7b:89:a7:8a:33:e7:2b:93:c3:27:de:40: c5:80:65:d7 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt9XEn94kR4K7pFyD7ZIUL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl YzIxNDkwHhcNMjYwMTAyMDYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzhkMDJmNjcyNzM3YzBjMzMxNTAxZGI2ZDM0YWMyODYyODY5MjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iISB0L+MTF0PLoDoAJZ3FgSBPfk E1LzmU3GDVNanN4Sp9FELolypjnIsQw+kzIEhr41g6rkIuLqfiQU5lkhihkZaa/1 xVeaGyGGZMtwnkz8SjmPgM1gkVEYj+a00EwUdlHljadWsHpQUZ9BHn8HXaeeONr7 DacepJsXQLsTDVxvKcV7pP4lKLA6yGgF+PGgNcvU1j1zLl3WsZXzusIqjxRXv/Bw HhHk/QOudIV5KtpRUtYoPZU7ZOoDy1CbI6A6FthmYbZQxVq83VNspmNk4Dilqv5P 8kYImKIA11I0fiu57EM8p8l71U04jewigvQtv2aMUGjKwk56wsfM1h3FpQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFOONAvZyc3wMMxUB2200rChihpIoMB8GA1UdIwQY MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et ZTQzNTIzOTgzNzkzLzEvNDQwQzluSnpmQXd6RlFIYmJUU3NLR0tHa2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjUowDQYJ KoZIhvcNAQELBQADggEBAAOPAM5iD3H9KRE09/SHk3MxT2tV2AAU5kMdnarPX4D1 pjaf5yy3QKF/9fgSfUbwnCs+EeWBzHvtypbacf2DrMAaYl9Yn+Lc+cvu5zjlHPu2 uRuBVPYx788ecovq76dG/+RjGMLu+kEC8El2ELTD8DJZTHrKZ8NIFn7t41JJN0PG /i+XkXKgWxyKd0A0HkFTL1JOQU0b9UcPW1fFD1eSzb4FtqCeBk6rXUqToVoJH7Vd gYKjSCQMkTEUHK669WyfI3lwXiUMf7rRXru/DfF/00X3onb5kamArOvdQF4epVlm JJm3o7M/gStOG41BwkVOaHuJp4oz5yuTwyfeQMWAZdc= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:38 2026 by rpki-client