This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa File: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (raw, json) Hash identifier: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs= Subject key identifier: 47:D3:4C:F8:15:64:8D:D3:A0:1C:CB:E3:A8:EA:D0:99:E8:91:C1:F7 Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942 Certificate serial: 019B7E38BBA566B561A8821D627C607494CA Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1213 IP address blocks: 140.203.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bb:a5:66:b5:61:a8:82:1d:62:7c:60:74:94:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d34cf815648dd3a01ccbe3a8ead099e891c1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fb:01:c5:02:2a:a1:ac:38:3b:6f:65:f9:41: ff:82:5c:5b:91:c5:10:fb:df:24:c4:94:c5:aa:fc: f8:43:8b:35:0a:10:b9:a8:06:a2:70:81:b5:db:39: d3:91:67:e3:80:ac:cf:c3:28:44:a3:b1:a7:f1:a7: 71:db:01:77:8f:10:6f:9a:02:b9:90:b5:67:a5:28: 54:5b:22:5f:91:bf:bc:84:a3:3c:d8:93:4c:ef:10: c5:24:f3:95:c0:fd:da:5d:30:a3:b6:a9:e1:5d:82: 1d:6d:89:da:99:9e:9b:63:bf:00:1b:a0:08:f2:8c: 96:ff:e6:2d:63:74:39:01:4f:75:ae:e7:f1:63:97: b1:0b:1d:20:e9:5f:d9:02:22:e2:f7:17:12:2c:21: ab:2e:99:b0:4d:e7:6f:25:e6:fc:c9:ac:f7:36:42: 65:03:e8:7e:87:cd:d7:9d:1a:02:0a:7d:f4:63:3a: 10:ee:43:11:fb:6e:aa:6e:98:e2:c0:5d:63:c4:9e: ee:e2:bd:e6:76:b6:8f:7a:b8:9a:0e:df:2a:fe:61: 5b:c2:a7:f3:4e:4b:96:25:43:41:76:70:24:6b:f3: 5d:27:0c:1b:29:4e:9b:e3:01:f4:b0:ba:cb:9e:d0: db:6b:a1:27:bf:d9:7f:8e:aa:c8:c5:c4:d1:a1:61: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D3:4C:F8:15:64:8D:D3:A0:1C:CB:E3:A8:EA:D0:99:E8:91:C1:F7 X509v3 Authority Key Identifier: keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.203.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:70:6f:7b:ad:5c:10:f7:33:94:b3:2e:a6:e8:05:5d:02:fa: 96:45:a4:6e:16:9b:79:81:04:0b:3d:f9:4d:d2:44:96:ea:67: 9d:76:88:73:30:e2:96:18:8d:b5:25:05:5c:ba:75:f4:5d:00: 4f:f7:e8:9a:63:22:ea:2c:5f:d4:33:e4:60:55:ea:7f:12:6e: 03:08:5d:0f:05:0b:50:47:98:d8:e2:c6:a2:3f:00:8a:52:01: 90:8e:aa:64:23:b3:1d:91:3e:8d:ac:33:ea:46:58:94:28:74: 57:37:ce:7c:bf:2e:e7:c3:65:16:b0:0c:f7:69:4a:35:cb:0b: 0b:5b:48:7f:62:5b:c3:11:fc:fe:85:0c:bc:f8:0b:55:d5:d8: 20:57:ce:f1:61:86:fa:a1:db:42:8a:4f:60:5a:d8:cd:da:71: ac:af:ae:7c:82:61:35:b0:35:44:38:53:54:c0:c0:37:6f:5f: fc:04:ca:28:db:63:78:89:c6:5e:f1:72:e4:70:8c:02:7d:aa: c2:1b:6c:22:3a:fe:67:5b:f3:64:f8:67:63:68:7b:90:b0:e7: 8f:2d:a3:7c:53:52:2f:fc:cf:9a:b6:71:9f:5b:fa:24:e5:f2: 03:50:01:71:99:11:5d:75:04:6a:23:3b:ea:e1:13:77:47:14: 8c:3a:58:1a -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt+OLulZrVhqIIdYnxgdJTKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3 NDY5NDIwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2QzNGNmODE1NjQ4ZGQzYTAxY2NiZTNhOGVhZDA5OWU4OTFjMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PsBxQIqoaw4O29l+UH/glxbkcUQ +98kxJTFqvz4Q4s1ChC5qAaicIG12znTkWfjgKzPwyhEo7Gn8adx2wF3jxBvmgK5 kLVnpShUWyJfkb+8hKM82JNM7xDFJPOVwP3aXTCjtqnhXYIdbYnamZ6bY78AG6AI 8oyW/+YtY3Q5AU91rufxY5exCx0g6V/ZAiLi9xcSLCGrLpmwTedvJeb8yaz3NkJl A+h+h83XnRoCCn30YzoQ7kMR+26qbpjiwF1jxJ7u4r3mdraPeriaDt8q/mFbwqfz TkuWJUNBdnAka/NdJwwbKU6b4wH0sLrLntDba6Env9l/jqrIxcTRoWEsIwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFEfTTPgVZI3ToBzL46jq0JnokcH3MB8GA1UdIwQY MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt YzY0OTU4NTNjYzFhLzEvUjlOTS1CVmtqZE9nSE12anFPclFtZWlSd2ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjMswDQYJ KoZIhvcNAQELBQADggEBAGhwb3utXBD3M5SzLqboBV0C+pZFpG4Wm3mBBAs9+U3S RJbqZ512iHMw4pYYjbUlBVy6dfRdAE/36JpjIuosX9Qz5GBV6n8SbgMIXQ8FC1BH mNjixqI/AIpSAZCOqmQjsx2RPo2sM+pGWJQodFc3zny/LufDZRawDPdpSjXLCwtb SH9iW8MR/P6FDLz4C1XV2CBXzvFhhvqh20KKT2Ba2M3acayvrnyCYTWwNUQ4U1TA wDdvX/wEyijbY3iJxl7xcuRwjAJ9qsIbbCI6/mdb82T4Z2Noe5Cw548to3xTUi/8 z5q2cZ9b+iTl8gNQAXGZEV11BGojO+rhE3dHFIw6WBo= -----END CERTIFICATE-----Generated at Mon Jan 26 23:23:00 2026 by rpki-client