This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9A-TabfTAA09RxnREkiJHjSV0Lo.roa File: 9A-TabfTAA09RxnREkiJHjSV0Lo.roa (raw, json) Hash identifier: R685NCu7F4UrvgdscqY4FdykmFayOTGR4qJgNvNUggc= Subject key identifier: F4:0F:93:69:B7:D3:00:0D:3D:47:19:D1:12:48:89:1E:34:95:D0:BA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BC629B3E0191F173ACAC41BA22AC25A87 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9A-TabfTAA09RxnREkiJHjSV0Lo.roa Signing time: Fri 16 Jan 2026 09:36:20 +0000 ROA not before: Fri 16 Jan 2026 09:36:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17497 IP address blocks: 151.240.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:29:b3:e0:19:1f:17:3a:ca:c4:1b:a2:2a:c2:5a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 16 09:36:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f40f9369b7d3000d3d4719d11248891e3495d0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:de:20:62:ed:f9:cb:90:a8:7d:30:f5:9b:98: f0:e2:4a:f3:e8:d9:7e:fe:56:7c:42:8f:5e:1a:e7: d1:54:f4:c7:e4:ac:c5:91:fc:ff:d4:0a:f6:79:b6: 80:f9:3a:93:a1:e6:f8:31:f5:4d:81:ef:f0:df:41: 07:89:56:0c:8a:d2:08:3c:c1:a2:ca:27:4b:56:f8: fe:0a:42:36:ff:b3:ba:2b:75:4c:81:a1:7d:64:9e: 85:83:3f:da:af:d3:59:ed:f2:be:3f:11:27:bc:c7: 79:38:7c:35:63:e9:66:a9:6f:a8:ea:0d:29:a1:a5: 63:96:eb:3b:cb:11:88:0b:69:19:b6:ab:38:ca:d3: 74:69:8c:e3:58:15:ab:cc:ea:c6:6e:66:c1:6c:f6: 65:d4:90:71:04:2d:01:8d:9b:26:36:47:ed:a6:4c: 22:2f:7a:ad:c8:ea:c9:8f:5b:c4:71:99:13:24:1b: 22:d4:7c:b8:6d:8a:bc:c6:cc:e6:65:4a:29:53:02: 98:e8:f4:47:e1:dd:6b:be:33:10:4e:26:39:06:9f: d5:d5:ba:f3:1c:3d:0a:99:75:e4:95:a6:8d:d9:85: 75:40:c8:dc:10:a1:0d:99:0d:65:02:a5:32:10:1e: 19:d2:9e:89:3f:61:4a:26:00:23:cc:a6:6e:10:93: 61:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0F:93:69:B7:D3:00:0D:3D:47:19:D1:12:48:89:1E:34:95:D0:BA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9A-TabfTAA09RxnREkiJHjSV0Lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.14.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:3e:de:7c:d0:aa:46:fe:88:ad:3a:3b:4b:21:1d:15:7e:80: f4:fd:d0:04:da:b9:7d:9a:4d:f7:ec:08:4d:b2:f5:09:10:d4: f4:1a:33:ad:69:58:e0:be:87:36:e2:ea:1d:a7:81:40:d0:93: 93:1e:4a:2f:b6:31:2e:33:b5:e8:3f:44:a7:36:a2:3d:35:bd: bc:e0:71:61:24:3b:8c:b9:81:f1:94:2e:1e:c9:a1:ad:fd:89: dc:d2:08:24:0a:37:b0:dc:7b:10:cd:60:75:97:89:fb:7a:06: 6e:41:8e:fe:72:b8:4f:0f:0c:24:bb:42:13:f1:86:76:d1:53: 9f:b4:4f:fe:e4:1e:85:08:d0:67:09:fa:a6:37:c1:1e:dd:f1: 10:6a:c0:1c:21:81:b2:ea:33:1f:db:b0:99:e5:61:33:8c:29: a6:23:40:6a:58:7e:b7:dd:73:1d:3a:91:17:0c:01:d7:e5:45: 89:b5:72:f8:c0:2f:b6:26:f5:17:a7:50:e9:d9:c2:a4:0e:40: dc:ec:d8:3e:e5:80:4b:b3:22:55:2f:be:b9:2a:bb:e2:61:c3: 0b:cb:eb:eb:57:32:5f:43:51:fb:d8:fc:c5:20:40:34:31:ec: 64:65:f5:35:2c:bf:1a:84:6e:1e:77:5e:c1:a0:db:68:61:48: 4f:6f:c4:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGKbPgGR8XOsrEG6IqwlqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE2MDkzNjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDBmOTM2OWI3ZDMwMDBkM2Q0NzE5ZDExMjQ4ODkxZTM0OTVkMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N4gYu35y5CofTD1m5jw4krz6Nl+ /lZ8Qo9eGufRVPTH5KzFkfz/1Ar2ebaA+TqToeb4MfVNge/w30EHiVYMitIIPMGi yidLVvj+CkI2/7O6K3VMgaF9ZJ6Fgz/ar9NZ7fK+PxEnvMd5OHw1Y+lmqW+o6g0p oaVjlus7yxGIC2kZtqs4ytN0aYzjWBWrzOrGbmbBbPZl1JBxBC0BjZsmNkftpkwi L3qtyOrJj1vEcZkTJBsi1Hy4bYq8xszmZUopUwKY6PRH4d1rvjMQTiY5Bp/V1brz HD0KmXXklaaN2YV1QMjcEKENmQ1lAqUyEB4Z0p6JP2FKJgAjzKZuEJNhUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPQPk2m30wANPUcZ0RJIiR40ldC6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOUEtVGFiZlRBQTA5UnhuUkVraUpIalNWMExvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/AOMA0G CSqGSIb3DQEBCwUAA4IBAQAbPt580KpG/oitOjtLIR0VfoD0/dAE2rl9mk337AhN svUJENT0GjOtaVjgvoc24uodp4FA0JOTHkovtjEuM7XoP0SnNqI9Nb284HFhJDuM uYHxlC4eyaGt/Ync0ggkCjew3HsQzWB1l4n7egZuQY7+crhPDwwku0IT8YZ20VOf tE/+5B6FCNBnCfqmN8Ee3fEQasAcIYGy6jMf27CZ5WEzjCmmI0BqWH633XMdOpEX DAHX5UWJtXL4wC+2JvUXp1Dp2cKkDkDc7Ng+5YBLsyJVL765KrviYcMLy+vrVzJf Q1H72PzFIEA0MexkZfU1LL8ahG4ed17BoNtoYUhPb8Rt -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:52 2026 by rpki-client