This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/m_fA9JV4UbPXvhLhsaGYJOi5eq0.roa File: m_fA9JV4UbPXvhLhsaGYJOi5eq0.roa (raw, json) Hash identifier: RK7A9Vb2xwxqtK3XxCZOKxVeAKSGlwepdjvL35LN7+g= Subject key identifier: 9B:F7:C0:F4:95:78:51:B3:D7:BE:12:E1:B1:A1:98:24:E8:B9:7A:AD Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7531E8DD0DACDF443F7B329EF9292 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/m_fA9JV4UbPXvhLhsaGYJOi5eq0.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400072 IP address blocks: 62.164.224.0/19 maxlen: 20 212.32.96.0/19 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:53:1e:8d:d0:da:cd:f4:43:f7:b3:29:ef:92:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bf7c0f4957851b3d7be12e1b1a19824e8b97aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:66:34:e1:1b:9b:de:47:41:d0:de:48:83: fe:5f:fc:de:47:c3:83:60:5a:3b:31:f8:e9:39:a1: 55:c9:4e:6e:5d:cd:da:03:f6:ec:64:6b:bf:3d:7e: fd:3f:73:80:69:4a:0f:8c:f3:7e:0c:28:1f:98:aa: 67:db:98:b0:5b:53:3d:fe:78:4f:19:43:0c:7e:0a: bf:a4:09:80:33:b4:77:c9:41:8f:ab:c9:64:6e:56: 43:98:70:db:3b:16:cb:98:88:29:91:a3:d6:c3:37: c7:d7:43:6e:10:39:ec:1a:5a:4b:a4:6c:6a:8b:c2: fb:ed:c3:6b:ca:e4:53:19:ab:eb:3f:fb:c0:3b:3d: 03:28:0a:a9:1e:87:40:3f:54:61:1c:87:9c:82:33: 34:9d:bd:5a:2f:d8:0d:c4:06:51:ea:19:a9:99:6e: 41:8a:ae:32:da:31:00:e9:54:91:ae:63:11:18:06: 71:70:f5:23:fd:20:26:04:54:d2:c3:15:62:ca:7c: fc:3b:73:bc:a1:82:63:01:8d:19:fa:7e:76:9b:81: 38:8b:5b:32:89:f3:10:cc:62:62:08:59:ab:32:bb: ca:4b:3d:46:79:02:fc:22:c2:b6:8c:f6:c4:d3:1e: fc:69:62:7d:c9:be:f8:58:4a:13:16:78:4d:f7:b2: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F7:C0:F4:95:78:51:B3:D7:BE:12:E1:B1:A1:98:24:E8:B9:7A:AD X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/m_fA9JV4UbPXvhLhsaGYJOi5eq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.164.224.0/19 212.32.96.0/19 Signature Algorithm: sha256WithRSAEncryption 79:ff:e1:c8:a1:3e:92:3a:6c:9b:cb:4d:59:ed:7c:5a:78:c6: f9:c5:4f:36:a5:3b:a6:ac:e6:76:b0:90:f4:5f:66:14:4b:51: 4c:da:02:e5:af:36:71:4d:6e:e4:9b:c9:78:97:2f:52:59:33: 30:4c:3c:b9:11:31:b8:6d:8b:9b:e9:cb:c4:af:1a:c1:23:0c: 4b:b2:9f:d5:2e:e2:07:ee:f6:29:e7:3f:24:c6:58:84:26:68: 43:26:3b:66:3e:60:03:3a:7a:b0:b1:1f:50:76:b6:5c:d6:20: 27:b8:91:d1:b6:84:e4:06:96:f9:03:21:02:c0:36:26:9f:c7: 6d:7e:e1:5e:3b:bc:41:73:32:0f:99:b0:50:67:a0:7b:9e:b1: f6:e6:2c:b8:90:36:c3:ba:32:6d:1b:4d:91:ec:d7:6a:cf:41: ff:ba:ae:c3:e4:35:6c:f6:bc:e8:f4:dc:87:a0:89:cd:0e:bf: 5e:ca:b8:4f:f2:ec:5c:00:3f:3b:6c:4c:54:a4:97:f4:1e:bb: 88:ae:07:ed:5a:16:c9:44:32:e8:c7:23:79:70:3d:f7:e6:d9: fc:4c:86:e4:d6:dc:3b:9c:7c:2f:00:b6:62:fd:46:a3:92:e0: 6e:95:15:e4:bc:87:5b:e8:e7:ef:8d:18:ce:9c:c7:18:b1:8c: 4e:04:e9:70 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x1MejdDazfRD97Mp75KSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmY3YzBmNDk1Nzg1MWIzZDdiZTEyZTFiMWExOTgyNGU4Yjk3YWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GdmNOEbm95HQdDeSIP+X/zeR8OD YFo7MfjpOaFVyU5uXc3aA/bsZGu/PX79P3OAaUoPjPN+DCgfmKpn25iwW1M9/nhP GUMMfgq/pAmAM7R3yUGPq8lkblZDmHDbOxbLmIgpkaPWwzfH10NuEDnsGlpLpGxq i8L77cNryuRTGavrP/vAOz0DKAqpHodAP1RhHIecgjM0nb1aL9gNxAZR6hmpmW5B iq4y2jEA6VSRrmMRGAZxcPUj/SAmBFTSwxViynz8O3O8oYJjAY0Z+n52m4E4i1sy ifMQzGJiCFmrMrvKSz1GeQL8IsK2jPbE0x78aWJ9yb74WEoTFnhN97InMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJv3wPSVeFGz174S4bGhmCTouXqtMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvbV9mQTlKVjRVYlBYdmhMaHNhR1lKT2k1ZXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFPqTgAwQF 1CBgMA0GCSqGSIb3DQEBCwUAA4IBAQB5/+HIoT6SOmyby01Z7XxaeMb5xU82pTum rOZ2sJD0X2YUS1FM2gLlrzZxTW7km8l4ly9SWTMwTDy5ETG4bYub6cvErxrBIwxL sp/VLuIH7vYp5z8kxliEJmhDJjtmPmADOnqwsR9QdrZc1iAnuJHRtoTkBpb5AyEC wDYmn8dtfuFeO7xBczIPmbBQZ6B7nrH25iy4kDbDujJtG02R7Ndqz0H/uq7D5DVs 9rzo9NyHoInNDr9eyrhP8uxcAD87bExUpJf0HruIrgftWhbJRDLoxyN5cD335tn8 TIbk1tw7nHwvALZi/UajkuBulRXkvIdb6OfvjRjOnMcYsYxOBOlw -----END CERTIFICATE-----Generated at Thu Jan 1 20:23:16 2026 by rpki-client