This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa File: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (raw, json) Hash identifier: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y= Subject key identifier: 44:C9:81:9D:F7:75:4C:21:94:98:40:B6:3B:A2:68:92:99:D0:55:0F Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592 Certificate serial: 019B7A5B0EAED98833E4A62611A1074F1807 Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa Signing time: Thu 01 Jan 2026 16:19:06 +0000 ROA not before: Thu 01 Jan 2026 16:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 156.148.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0e:ae:d9:88:33:e4:a6:26:11:a1:07:4f:18:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592 Validity Not Before: Jan 1 16:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44c9819df7754c21949840b63ba2689299d0550f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9d:e2:94:de:69:0d:50:a6:76:02:3e:94:1c: 28:c0:d7:95:17:cd:c6:fa:6c:2b:dc:58:50:51:eb: 96:23:c0:aa:c1:a6:57:08:7c:f0:d1:22:d6:7b:a2: 26:f9:ec:99:9e:15:36:bc:3b:ab:9d:67:4c:13:52: ee:a8:95:b2:61:7b:67:c7:d3:60:4a:6f:df:a8:83: 5f:41:5b:96:e0:e8:10:27:07:d9:0f:5a:af:1f:3b: 8b:0f:45:79:e2:80:15:b1:4d:74:18:79:85:ef:fb: 61:3a:9d:48:cc:ca:a8:24:00:25:9d:38:33:f7:be: a5:6a:30:e9:ae:63:28:90:b9:f1:e7:53:17:3f:20: cd:cd:1b:fc:75:6f:2d:1b:f5:f7:bf:0c:c8:47:f6: e3:b2:0e:e9:16:e7:f2:7b:d0:0b:3b:74:aa:d0:97: a9:71:dd:58:82:fe:4c:db:13:68:79:7f:3a:af:27: 18:81:8f:4a:7c:e2:83:04:e5:60:5f:f3:a3:69:96: 58:bb:96:cb:97:a7:90:bd:ff:7f:1a:fe:df:a7:69: 2f:34:a5:ac:92:c4:66:2d:b8:75:ff:86:ad:ff:46: a3:35:68:0c:ea:a6:ad:34:8d:17:32:bf:da:2b:8e: 58:3a:94:b3:81:d8:81:75:17:49:ab:93:1c:0a:50: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:81:9D:F7:75:4C:21:94:98:40:B6:3B:A2:68:92:99:D0:55:0F X509v3 Authority Key Identifier: keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.148.0.0/16 Signature Algorithm: sha256WithRSAEncryption 31:3e:77:e6:19:24:28:40:33:0e:3a:92:0f:8d:2a:7b:cd:3e: 3e:6b:ce:bb:ac:22:6c:5d:f5:18:07:f4:2d:36:96:7a:e1:b7: 8b:43:bd:8d:0c:43:1c:63:0a:31:5f:03:6e:6d:fe:30:f2:3d: ff:01:87:da:f0:0f:a0:f2:bd:e9:de:d4:c4:32:96:dc:9d:e7: c9:b0:78:aa:7b:c0:d3:09:19:85:70:a3:9f:72:03:ae:20:c4: 6d:e5:4e:eb:7d:5a:0f:27:80:a6:0e:3f:2f:b3:97:8c:b9:ac: 35:bf:1c:f3:bc:ee:34:c6:49:39:25:a2:35:80:49:43:2f:0a: 51:dd:96:1b:e0:ca:ce:46:02:99:be:36:a4:ac:4a:db:f9:30: b7:ce:5e:2e:49:17:84:e1:06:6d:6a:c1:0c:9d:ad:b2:49:25: 6a:83:79:f1:8f:58:c3:9e:b8:7e:42:c8:9f:8f:57:39:5f:e5: 1e:9c:fd:f3:34:d4:4c:e5:11:08:d0:f2:52:57:46:0c:cc:56: e3:7d:4d:e7:d5:73:6d:d7:54:ec:3a:2f:e0:b7:19:16:f4:f8: f2:a6:c5:49:46:ff:c1:c9:11:a6:c2:cd:8e:86:78:cd:49:09: ac:8b:9b:ba:ac:17:b7:10:42:36:f6:72:87:e3:90:a3:ae:20: be:24:89:22 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt6Ww6u2Ygz5KYmEaEHTxgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyYzA5NTkwMTE2MjdkZGQwZDA1N2Q3MzFlOGZhNWE1MTAy OTY1OTIwHhcNMjYwMTAxMTYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGM5ODE5ZGY3NzU0YzIxOTQ5ODQwYjYzYmEyNjg5Mjk5ZDA1NTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp3ilN5pDVCmdgI+lBwowNeVF83G +mwr3FhQUeuWI8CqwaZXCHzw0SLWe6Im+eyZnhU2vDurnWdME1LuqJWyYXtnx9Ng Sm/fqINfQVuW4OgQJwfZD1qvHzuLD0V54oAVsU10GHmF7/thOp1IzMqoJAAlnTgz 976lajDprmMokLnx51MXPyDNzRv8dW8tG/X3vwzIR/bjsg7pFufye9ALO3Sq0Jep cd1Ygv5M2xNoeX86rycYgY9KfOKDBOVgX/OjaZZYu5bLl6eQvf9/Gv7fp2kvNKWs ksRmLbh1/4at/0ajNWgM6qatNI0XMr/aK45YOpSzgdiBdRdJq5McClCj8QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFETJgZ33dUwhlJhAtjuiaJKZ0FUPMB8GA1UdIwQY MBaAFELAlZARYn3dDQV9cx6PpaUQKWWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgt MjQ4YjU5YzM2OTZiLzEvUk1tQm5mZDFUQ0dVbUVDMk82Sm9rcG5RVlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgtMjQ4YjU5YzM2OTZi LzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnJQwDQYJ KoZIhvcNAQELBQADggEBADE+d+YZJChAMw46kg+NKnvNPj5rzrusImxd9RgH9C02 lnrht4tDvY0MQxxjCjFfA25t/jDyPf8Bh9rwD6Dyvene1MQyltyd58mweKp7wNMJ GYVwo59yA64gxG3lTut9Wg8ngKYOPy+zl4y5rDW/HPO87jTGSTklojWASUMvClHd lhvgys5GApm+NqSsStv5MLfOXi5JF4ThBm1qwQydrbJJJWqDefGPWMOeuH5CyJ+P Vzlf5R6c/fM01EzlEQjQ8lJXRgzMVuN9TefVc23XVOw6L+C3GRb0+PKmxUlG/8HJ EabCzY6GeM1JCayLm7qsF7cQQjb2cofjkKOuIL4kiSI= -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:51 2026 by rpki-client