This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa File: m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa (raw, json) Hash identifier: AQFWIEldUOojspkBOhlpdbyceFMGqpqRnivtz2V3WHk= Subject key identifier: 9B:EE:01:CE:09:FF:5C:0E:C0:9C:31:F2:50:20:CC:C6:FE:2D:8F:0B Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f Certificate serial: 019B7C7FC0534B786BA796E5A14B2F195BC4 Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51782 IP address blocks: 149.255.168.0/21 maxlen: 24 185.66.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 02:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c0:53:4b:78:6b:a7:96:e5:a1:4b:2f:19:5b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bee01ce09ff5c0ec09c31f25020ccc6fe2d8f0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:45:fc:93:27:96:d6:66:90:de:1a:b5:02:6d: 6a:48:a3:59:14:e7:63:a2:34:cd:d2:9b:50:48:f9: e1:01:f8:d0:c0:5a:7d:18:31:09:59:17:21:ae:73: e1:e5:79:43:34:d8:4b:22:5a:b9:f7:71:56:4d:8a: 4d:8f:06:58:11:19:b0:85:81:0b:f2:97:27:20:81: 7d:dd:d9:f2:0d:02:25:96:ff:07:63:d7:c9:26:4b: 23:d6:7a:77:90:9a:5a:57:d4:ac:5a:af:21:06:bd: 9a:d4:84:05:ea:8b:24:a2:87:0d:4e:28:5b:38:8a: c8:77:44:ab:f8:e4:f9:a2:f8:31:79:d3:bf:ae:85: 0c:97:bb:87:0f:e7:53:87:e8:25:28:61:0f:36:77: d0:5f:6a:72:6b:5e:0a:f9:3f:14:e9:c4:0b:c8:f7: 2f:a1:cc:40:d7:b7:86:78:a4:49:c3:01:b2:9a:e3: c6:41:e7:58:45:24:79:ca:ca:c2:46:ba:bf:03:9f: 2f:f2:eb:4d:6f:96:d0:2e:b3:b0:e1:38:8c:e8:bd: ca:b3:ad:7c:c9:72:0e:ee:cb:3f:4f:e4:66:dd:cb: 11:d9:0d:0c:7d:67:25:4a:69:ab:9f:5c:13:b4:0d: 1d:47:a3:bf:6a:4f:6a:6c:b9:4e:98:9a:8d:97:b6: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:EE:01:CE:09:FF:5C:0E:C0:9C:31:F2:50:20:CC:C6:FE:2D:8F:0B X509v3 Authority Key Identifier: keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/m-4Bzgn_XA7AnDHyUCDMxv4tjws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 149.255.168.0/21 185.66.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:2e:a5:b8:cc:d6:d0:bb:a6:58:31:85:5a:08:31:c5:08:aa: 76:56:57:74:12:15:2a:33:53:88:ff:22:26:4e:e3:24:5d:1a: e4:27:f5:2d:18:93:da:04:5f:8a:b3:b7:83:2e:e7:76:90:9c: b7:ba:c1:ae:81:a0:3f:3d:1d:7b:d5:f3:61:df:e4:3a:2d:66: e3:56:56:cf:30:cd:e3:0f:ca:af:c5:ee:ab:f8:f4:b4:8a:b2: 73:17:21:4e:72:95:70:6c:6b:68:29:05:b7:1a:78:37:8b:c0: 77:c6:92:b4:99:16:9c:e3:18:f9:40:af:a9:dd:25:2a:90:34: 82:ab:c9:7e:58:68:c4:b6:0c:78:eb:44:ad:95:86:43:02:ed: 20:48:ec:e7:86:02:90:ac:e0:ba:cc:83:1c:08:01:6c:8e:b5: 97:57:b8:14:1a:31:be:8b:81:68:96:08:cc:30:44:f4:ba:26: ea:a7:75:04:5e:33:d1:71:66:62:d6:82:19:56:f1:ce:d3:ac: fa:5a:1a:32:e7:4c:a2:8a:c4:8e:e6:42:a1:d5:ff:d8:bb:0e: c3:e5:84:5d:3d:c2:92:64:ac:cd:6d:e7:e7:d9:dc:64:9b:e6: 64:7d:e3:25:c5:e8:44:62:c2:8a:d9:5c:01:1b:00:91:89:96: 1e:73:00:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f8BTS3hrp5bloUsvGVvEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDA3OWJiNzA3MGVkMGVlZWEzYTFhNDY3Yzc5NDYyYmNj NTQ1NWYwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmVlMDFjZTA5ZmY1YzBlYzA5YzMxZjI1MDIwY2NjNmZlMmQ4ZjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00X8kyeW1maQ3hq1Am1qSKNZFOdj ojTN0ptQSPnhAfjQwFp9GDEJWRchrnPh5XlDNNhLIlq593FWTYpNjwZYERmwhYEL 8pcnIIF93dnyDQIllv8HY9fJJksj1np3kJpaV9SsWq8hBr2a1IQF6oskoocNTihb OIrId0Sr+OT5ovgxedO/roUMl7uHD+dTh+glKGEPNnfQX2pya14K+T8U6cQLyPcv ocxA17eGeKRJwwGymuPGQedYRSR5ysrCRrq/A58v8utNb5bQLrOw4TiM6L3Ks618 yXIO7ss/T+Rm3csR2Q0MfWclSmmrn1wTtA0dR6O/ak9qbLlOmJqNl7ZXdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJvuAc4J/1wOwJwx8lAgzMb+LY8LMB8GA1UdIwQY MBaAFNBAebtwcO0O7qOhpGfHlGK8xUVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVCNXUzQnc3UTd1bzZHa1o4ZVVZcnpGUlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTNkYTAtZTE1NS00MzI0LTliYTkt NjIwOThkMWVjMWU2LzEvbS00Qnpnbl9YQTdBbkRIeVVDRE14djR0andzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hOTNkYTAtZTE1NS00MzI0LTliYTktNjIwOThkMWVjMWU2 LzEvMEVCNXUzQnc3UTd1bzZHa1o4ZVVZcnpGUlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDlf+oAwQC uULMMA0GCSqGSIb3DQEBCwUAA4IBAQA9LqW4zNbQu6ZYMYVaCDHFCKp2Vld0EhUq M1OI/yImTuMkXRrkJ/UtGJPaBF+Ks7eDLud2kJy3usGugaA/PR171fNh3+Q6LWbj VlbPMM3jD8qvxe6r+PS0irJzFyFOcpVwbGtoKQW3Gng3i8B3xpK0mRac4xj5QK+p 3SUqkDSCq8l+WGjEtgx460StlYZDAu0gSOznhgKQrOC6zIMcCAFsjrWXV7gUGjG+ i4FolgjMMET0uibqp3UEXjPRcWZi1oIZVvHO06z6Whoy50yiisSO5kKh1f/Yuw7D 5YRdPcKSZKzNbefn2dxkm+ZkfeMlxehEYsKK2VwBGwCRiZYecwAE -----END CERTIFICATE-----Generated at Tue Feb 10 11:33:26 2026 by rpki-client