This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa File: CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa (raw, json) Hash identifier: 9Hs9+9hllW24VkNsrEOAjRUnft2CZTNY/e59yHFhQNg= Subject key identifier: 08:2B:03:27:50:BF:3E:CB:30:7E:49:62:A4:E1:D1:FC:B9:BB:0E:DD Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c Certificate serial: 019B7F82A3DA6D29C79E1408BCF2DC5DE735 Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa Signing time: Fri 02 Jan 2026 16:20:26 +0000 ROA not before: Fri 02 Jan 2026 16:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54994 IP address blocks: 140.150.0.0/24 maxlen: 24 140.150.1.0/24 maxlen: 24 140.150.2.0/24 maxlen: 24 140.150.3.0/24 maxlen: 24 140.150.4.0/24 maxlen: 24 140.150.5.0/24 maxlen: 24 140.150.6.0/24 maxlen: 24 140.150.7.0/24 maxlen: 24 140.150.8.0/24 maxlen: 24 140.150.10.0/24 maxlen: 24 140.150.11.0/24 maxlen: 24 140.150.12.0/24 maxlen: 24 140.150.14.0/24 maxlen: 24 140.150.15.0/24 maxlen: 24 140.150.16.0/24 maxlen: 24 140.150.18.0/24 maxlen: 24 140.150.19.0/24 maxlen: 24 140.150.20.0/24 maxlen: 24 140.150.21.0/24 maxlen: 24 140.150.22.0/24 maxlen: 24 140.150.23.0/24 maxlen: 24 140.150.24.0/24 maxlen: 24 140.150.25.0/24 maxlen: 24 140.150.26.0/24 maxlen: 24 140.150.27.0/24 maxlen: 24 140.150.28.0/24 maxlen: 24 140.150.29.0/24 maxlen: 24 140.150.30.0/24 maxlen: 24 140.150.31.0/24 maxlen: 24 140.150.32.0/24 maxlen: 24 140.150.33.0/24 maxlen: 24 140.150.34.0/24 maxlen: 24 140.150.35.0/24 maxlen: 24 140.150.36.0/24 maxlen: 24 140.150.37.0/24 maxlen: 24 140.150.38.0/24 maxlen: 24 140.150.40.0/24 maxlen: 24 140.150.41.0/24 maxlen: 24 140.150.42.0/24 maxlen: 24 140.150.43.0/24 maxlen: 24 140.150.44.0/24 maxlen: 24 140.150.46.0/24 maxlen: 24 140.150.47.0/24 maxlen: 24 146.103.64.0/24 maxlen: 24 146.103.65.0/24 maxlen: 24 146.103.66.0/24 maxlen: 24 146.103.67.0/24 maxlen: 24 146.103.68.0/24 maxlen: 24 146.103.71.0/24 maxlen: 24 146.103.72.0/24 maxlen: 24 146.103.73.0/24 maxlen: 24 146.103.74.0/24 maxlen: 24 146.103.75.0/24 maxlen: 24 146.103.76.0/24 maxlen: 24 146.103.77.0/24 maxlen: 24 146.103.78.0/24 maxlen: 24 146.103.79.0/24 maxlen: 24 146.103.80.0/24 maxlen: 24 146.103.81.0/24 maxlen: 24 146.103.82.0/24 maxlen: 24 146.103.83.0/24 maxlen: 24 146.103.84.0/24 maxlen: 24 146.103.85.0/24 maxlen: 24 146.103.86.0/24 maxlen: 24 146.103.87.0/24 maxlen: 24 146.103.88.0/24 maxlen: 24 146.103.89.0/24 maxlen: 24 146.103.90.0/24 maxlen: 24 146.103.91.0/24 maxlen: 24 146.103.92.0/24 maxlen: 24 146.103.93.0/24 maxlen: 24 146.103.94.0/24 maxlen: 24 146.103.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:a3:da:6d:29:c7:9e:14:08:bc:f2:dc:5d:e7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c Validity Not Before: Jan 2 16:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=082b032750bf3ecb307e4962a4e1d1fcb9bb0edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ac:0f:bd:73:5f:3b:ff:fd:3b:56:63:f2:18: e1:9b:bb:63:0a:a9:73:54:b8:2d:45:7e:9d:b4:b1: b5:f6:ad:2b:00:81:61:15:e0:08:39:73:82:3e:5a: d1:62:f2:9a:56:c1:5e:4f:8c:ee:ec:e9:40:2c:18: bb:89:ec:80:2b:6c:78:68:3e:3e:95:d4:e3:36:16: fb:78:4d:25:b4:0a:95:8e:ca:09:f8:d7:0c:fb:87: b7:fa:98:84:df:99:3b:59:9c:08:58:e8:c3:22:49: 66:dd:a6:09:46:2a:7b:7f:7b:f0:d6:07:b1:14:30: 33:b5:be:e9:ad:a9:e5:b9:bc:0e:e5:da:4f:a7:2a: cf:f4:8d:0a:ea:23:ca:86:48:7b:4a:3c:aa:22:cd: 5d:8a:97:2a:ea:9c:ca:c2:90:dd:4f:20:70:d6:e7: a6:98:13:ab:3f:35:7b:7e:63:64:92:0b:e8:bd:2a: 92:a9:0a:55:a1:47:8a:4b:c9:3c:b0:08:79:5f:dd: 6c:3f:a4:dd:a4:9a:c9:35:dc:c4:e4:24:95:96:fc: 99:6f:5d:61:ff:89:b6:1d:09:94:67:78:1e:72:db: 87:9c:de:2a:15:d0:ef:64:db:aa:62:6f:35:3a:4f: 1e:51:a3:85:2f:04:5d:02:1f:e4:0f:60:c5:80:94: f7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2B:03:27:50:BF:3E:CB:30:7E:49:62:A4:E1:D1:FC:B9:BB:0E:DD X509v3 Authority Key Identifier: keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/CCsDJ1C_PsswfklipOHR_Lm7Dt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.150.0.0-140.150.8.255 140.150.10.0-140.150.12.255 140.150.14.0-140.150.16.255 140.150.18.0-140.150.38.255 140.150.40.0-140.150.44.255 140.150.46.0/23 146.103.64.0-146.103.68.255 146.103.71.0-146.103.95.255 Signature Algorithm: sha256WithRSAEncryption ba:27:fe:49:4c:41:21:64:55:1a:85:d9:31:44:0d:37:11:2b: 20:f7:08:c2:cc:5a:e1:ce:c0:74:15:4f:4b:d3:14:ae:98:c9: 9b:4e:1a:40:0e:ad:88:b1:c1:13:93:d6:d3:05:8a:1f:0d:0b: 74:5e:92:e8:87:9c:2c:a5:60:02:2c:4d:ff:76:57:c2:42:58: bd:08:00:0d:24:74:e9:69:91:f5:27:ab:f7:85:9e:c0:3e:ad: 1b:ab:db:8f:88:57:c3:bf:37:fc:08:30:67:68:9d:4b:75:34: 60:9b:f6:77:22:65:42:12:0d:71:05:f6:50:31:f2:3d:f3:56: d8:2a:3f:9a:f1:61:1e:7e:77:a2:26:d7:b6:79:e8:1c:67:26: ac:f0:b6:58:d7:88:08:e9:9d:89:3f:18:fa:43:9e:54:0f:8b: 58:03:f8:8e:62:b3:56:39:23:09:b0:6d:09:e9:3a:0f:f5:0d: e0:a4:b9:4c:22:d8:0b:74:3c:01:2f:61:77:c0:77:1c:5f:6b: 28:a6:dc:ce:7a:02:09:4f:e5:48:00:ce:63:49:56:e6:9d:f4: e9:92:e5:95:9b:8b:61:5e:51:3c:aa:37:6b:59:15:18:64:57: 79:44:6f:e3:f7:17:6e:c7:6c:64:ec:ee:4f:b9:68:21:fc:7f: 3f:a7:57:9b -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgISAZt/gqPabSnHnhQIvPLcXec1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx YTU3NWMwHhcNMjYwMTAyMTYyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODJiMDMyNzUwYmYzZWNiMzA3ZTQ5NjJhNGUxZDFmY2I5YmIwZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtawPvXNfO//9O1Zj8hjhm7tjCqlz VLgtRX6dtLG19q0rAIFhFeAIOXOCPlrRYvKaVsFeT4zu7OlALBi7ieyAK2x4aD4+ ldTjNhb7eE0ltAqVjsoJ+NcM+4e3+piE35k7WZwIWOjDIklm3aYJRip7f3vw1gex FDAztb7pranlubwO5dpPpyrP9I0K6iPKhkh7SjyqIs1dipcq6pzKwpDdTyBw1uem mBOrPzV7fmNkkgvovSqSqQpVoUeKS8k8sAh5X91sP6TdpJrJNdzE5CSVlvyZb11h /4m2HQmUZ3gectuHnN4qFdDvZNuqYm81Ok8eUaOFLwRdAh/kD2DFgJT3twIDAQAB o4ICazCCAmcwHQYDVR0OBBYEFAgrAydQvz7LMH5JYqTh0fy5uw7dMB8GA1UdIwQY MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt OGIyYjQ3MzhiMWNjLzEvQ0NzREoxQ19Qc3N3ZmtsaXBPSFJfTG03RHQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wbQQCAAEwZzALAwMBjJYD BACMlggwDAMEAYyWCgMEAIyWDDAMAwQBjJYOAwQAjJYQMAwDBAGMlhIDBACMliYw DAMEA4yWKAMEAIyWLAMEAYyWLjAMAwQGkmdAAwQAkmdEMAwDBACSZ0cDBAWSZ0Aw DQYJKoZIhvcNAQELBQADggEBALon/klMQSFkVRqF2TFEDTcRKyD3CMLMWuHOwHQV T0vTFK6YyZtOGkAOrYixwROT1tMFih8NC3RekuiHnCylYAIsTf92V8JCWL0IAA0k dOlpkfUnq/eFnsA+rRur24+IV8O/N/wIMGdonUt1NGCb9nciZUISDXEF9lAx8j3z VtgqP5rxYR5+d6Im17Z56BxnJqzwtljXiAjpnYk/GPpDnlQPi1gD+I5is1Y5Iwmw bQnpOg/1DeCkuUwi2At0PAEvYXfAdxxfayim3M56AglP5UgAzmNJVuad9OmS5ZWb i2FeUTyqN2tZFRhkV3lEb+P3F27HbGTs7k+5aCH8fz+nV5s= -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:27 2026 by rpki-client