This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/dL_9twvmgLzMs895oA64iiDmIEY.roa File: dL_9twvmgLzMs895oA64iiDmIEY.roa (raw, json) Hash identifier: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk= Subject key identifier: 74:BF:FD:B7:0B:E6:80:BC:CC:B3:CF:79:A0:0E:B8:8A:20:E6:20:46 Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd Certificate serial: 019B7B36277AFB57BC67A525264D2E85BBA0 Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/dL_9twvmgLzMs895oA64iiDmIEY.roa Signing time: Thu 01 Jan 2026 20:18:25 +0000 ROA not before: Thu 01 Jan 2026 20:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214791 IP address blocks: 213.140.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:27:7a:fb:57:bc:67:a5:25:26:4d:2e:85:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd Validity Not Before: Jan 1 20:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74bffdb70be680bcccb3cf79a00eb88a20e62046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:24:98:4a:90:bb:2b:38:c5:8d:81:35:b6: 64:85:68:4c:ca:65:7c:56:76:b6:17:4e:d4:8b:08: ae:f1:9a:37:9b:6c:f2:7f:7f:66:56:88:93:e6:eb: 6c:92:d0:03:21:59:69:b8:89:d8:61:8b:8e:dc:95: 49:3b:73:5b:6b:78:67:6d:3a:2f:55:75:a7:29:07: fc:b7:d1:ec:2a:eb:57:26:15:c1:07:6b:b8:62:8d: 6d:ef:01:c5:69:97:64:e6:10:a2:fc:4b:80:f6:5c: 92:fb:99:5f:53:06:c6:2b:40:82:a9:b5:4d:fc:7c: db:7f:f2:4f:f8:62:ac:6c:5e:3b:a5:d7:fa:f8:3a: 42:53:00:69:d9:59:03:c6:c6:2e:e7:ff:aa:72:61: 04:fb:a0:65:0b:a4:44:1f:55:b0:3f:73:12:73:16: 81:c8:ed:cf:6e:38:fa:1f:9d:5d:dd:8d:2c:c4:1c: c6:4a:2f:33:82:02:76:ea:94:2b:8f:7d:dc:37:d9: 68:39:bc:a5:fe:99:a1:ae:a7:75:e8:c8:f8:c8:61: 2a:0a:7c:bd:c2:aa:1d:98:b0:a4:39:08:85:8f:15: 1e:01:f7:71:b0:7a:3c:4b:05:29:f2:ff:d7:f7:b0: 67:b9:dd:1a:e5:6a:d4:be:df:fe:e2:94:3a:02:7f: db:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BF:FD:B7:0B:E6:80:BC:CC:B3:CF:79:A0:0E:B8:8A:20:E6:20:46 X509v3 Authority Key Identifier: keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/dL_9twvmgLzMs895oA64iiDmIEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.140.147.0/24 Signature Algorithm: sha256WithRSAEncryption 78:88:d9:30:35:f8:cd:b3:ed:cd:93:69:8e:19:95:8f:61:c2: 8b:dd:3e:9b:8c:44:c0:43:e7:cc:e4:0c:b0:3c:56:72:b1:c9: 47:6b:f1:36:7b:c1:a3:03:dc:df:d9:bc:6e:ee:69:19:8a:50: a9:3b:3d:80:e4:49:e0:d2:90:7b:38:e5:48:79:c0:3e:9b:92: ef:db:d9:02:c4:22:a1:c9:62:d3:02:5b:70:72:12:b8:12:d0: f6:35:c2:be:51:ad:47:b0:75:dd:3a:bd:2e:cf:3d:d8:15:4c: 72:3e:aa:25:a0:2f:26:4b:0d:26:97:47:48:9d:2f:cf:6c:9a: a2:5c:59:55:42:2b:ad:45:73:93:f3:ba:94:26:22:e5:6f:48: 36:26:0a:e1:59:88:42:a1:70:55:73:cb:e9:f1:03:0f:e6:36: 62:6c:04:e8:44:ce:1d:f4:2c:15:c6:f9:f3:8e:91:8d:9a:f4: d9:06:03:67:e5:fa:59:06:c0:c3:a6:ba:73:83:6d:f7:6d:77: 3d:b4:ee:9b:49:6f:e1:35:d7:4a:19:b2:4f:cd:30:05:1a:e4: 90:06:cc:8f:05:c7:cb:3f:3b:4c:d7:64:33:60:c8:ee:40:68: 4a:cb:12:ca:09:fe:72:ab:09:bc:e7:b8:6f:98:4d:62:39:2f: 5a:cf:e2:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nid6+1e8Z6UlJk0uhbugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGE5ZmQ3YzUxOTI2ZTIyZWE4YWEzM2IzYjg4MzhlOTNl OGJlZGQwHhcNMjYwMTAxMjAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGJmZmRiNzBiZTY4MGJjY2NiM2NmNzlhMDBlYjg4YTIwZTYyMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupgkmEqQuys4xY2BNbZkhWhMymV8 Vna2F07Uiwiu8Zo3m2zyf39mVoiT5utsktADIVlpuInYYYuO3JVJO3Nba3hnbTov VXWnKQf8t9HsKutXJhXBB2u4Yo1t7wHFaZdk5hCi/EuA9lyS+5lfUwbGK0CCqbVN /Hzbf/JP+GKsbF47pdf6+DpCUwBp2VkDxsYu5/+qcmEE+6BlC6REH1WwP3MScxaB yO3Pbjj6H51d3Y0sxBzGSi8zggJ26pQrj33cN9loObyl/pmhrqd16Mj4yGEqCny9 wqodmLCkOQiFjxUeAfdxsHo8SwUp8v/X97Bnud0a5WrUvt/+4pQ6An/bBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHS//bcL5oC8zLPPeaAOuIog5iBGMB8GA1UdIwQY MBaAFF2Kn9fFGSbiLqiqM7O4g46T6L7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMt NjZjNTNmMmIxZjAyLzEvZExfOXR3dm1nTHpNczg5NW9BNjRpaURtSUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMtNjZjNTNmMmIxZjAy LzEvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YyTMA0G CSqGSIb3DQEBCwUAA4IBAQB4iNkwNfjNs+3Nk2mOGZWPYcKL3T6bjETAQ+fM5Ayw PFZysclHa/E2e8GjA9zf2bxu7mkZilCpOz2A5Eng0pB7OOVIecA+m5Lv29kCxCKh yWLTAltwchK4EtD2NcK+Ua1HsHXdOr0uzz3YFUxyPqoloC8mSw0ml0dInS/PbJqi XFlVQiutRXOT87qUJiLlb0g2JgrhWYhCoXBVc8vp8QMP5jZibAToRM4d9CwVxvnz jpGNmvTZBgNn5fpZBsDDprpzg233bXc9tO6bSW/hNddKGbJPzTAFGuSQBsyPBcfL PztM12QzYMjuQGhKyxLKCf5yqwm857hvmE1iOS9az+Jh -----END CERTIFICATE-----Generated at Tue Feb 10 02:26:13 2026 by rpki-client