This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/sN3nanuzELsiTRZZnMMhpzRL9CQ.roa File: sN3nanuzELsiTRZZnMMhpzRL9CQ.roa (raw, json) Hash identifier: iIsUfUIoF5P1otrI7EzZzKCaeejtCwHBloYzwegYqT4= Subject key identifier: B0:DD:E7:6A:7B:B3:10:BB:22:4D:16:59:9C:C3:21:A7:34:4B:F4:24 Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a Certificate serial: 019B7D5C02EC0B4837DED6E102DB144462BA Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/sN3nanuzELsiTRZZnMMhpzRL9CQ.roa Signing time: Fri 02 Jan 2026 06:19:00 +0000 ROA not before: Fri 02 Jan 2026 06:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29687 IP address blocks: 128.140.188.0/22 maxlen: 22 128.140.188.0/24 maxlen: 24 128.140.189.0/24 maxlen: 24 128.140.190.0/24 maxlen: 24 128.140.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:02:ec:0b:48:37:de:d6:e1:02:db:14:44:62:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a Validity Not Before: Jan 2 06:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0dde76a7bb310bb224d16599cc321a7344bf424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:3e:12:50:3e:b6:27:96:3f:11:3a:b0:92: 7b:e3:2d:75:69:c3:0f:d8:5e:52:8b:29:25:64:b3: 2a:87:f0:d1:f5:91:67:41:d5:61:87:05:26:8e:7d: e8:ed:a2:27:72:ee:2d:67:fb:c9:1f:9e:57:74:3b: ee:65:35:70:78:17:8f:60:e5:d0:88:ec:e1:e8:e2: c4:f1:76:98:ca:e1:c1:86:5a:a4:0a:87:1d:33:b0: c5:2e:9b:6f:d6:72:81:84:6a:92:fb:96:83:02:78: 42:35:c7:f3:9c:e6:11:04:6a:e2:24:cc:d2:d9:0a: 86:bf:22:ea:cc:32:f8:7d:54:d7:b6:9a:85:ee:c4: d1:d7:08:c0:84:4d:58:1e:4a:5a:13:ed:36:b0:4b: 67:cc:83:df:1b:ca:de:11:4a:34:62:64:19:49:ca: a4:3f:96:8a:74:9a:07:7f:f5:a4:65:92:ce:11:5c: d6:0b:49:2c:9b:47:33:3e:41:ee:79:b8:b1:53:f3: 27:b5:b4:a5:fc:27:9f:04:04:fd:e7:df:07:47:86: c6:44:e1:48:29:a2:e6:ff:51:3e:61:1e:74:1e:3e: 87:50:d9:6a:5f:76:aa:c8:52:a8:9c:cc:d0:c1:d6: 00:34:da:0c:01:80:5b:b6:4c:4a:61:07:94:7e:1a: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DD:E7:6A:7B:B3:10:BB:22:4D:16:59:9C:C3:21:A7:34:4B:F4:24 X509v3 Authority Key Identifier: keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/sN3nanuzELsiTRZZnMMhpzRL9CQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.140.188.0/22 Signature Algorithm: sha256WithRSAEncryption 94:1b:3b:8c:d5:66:8e:bb:7d:74:d9:b1:d8:ea:11:a9:c2:1f: e5:86:cc:81:53:c5:7f:ff:aa:35:f8:93:4b:79:fa:fa:63:e4: c1:80:99:72:3d:91:84:81:ea:98:1b:ba:a4:2a:5c:9e:d2:89: 10:13:f3:a7:ff:cb:cc:50:a0:b0:12:ee:ef:4d:b4:cf:c5:e6: 77:18:30:37:ac:f7:80:d0:21:2d:3d:75:48:2f:a6:0c:04:a5: 6e:a4:40:1c:82:84:00:7d:3f:56:0f:63:c6:87:e8:57:7e:71: 0d:a3:a6:18:2b:a4:87:65:de:ac:7d:07:39:dd:4d:a3:88:7c: ab:d9:97:01:d3:fc:11:1b:ba:09:3a:a3:59:2a:6c:3f:78:94: c3:24:b0:fb:64:0e:81:67:20:39:32:41:69:30:28:59:b4:f6: 61:65:df:8a:6a:4e:31:be:59:cb:27:26:ba:e7:2e:1d:df:9c: 82:59:30:8d:d0:51:72:f4:15:e8:d4:88:f5:5f:f8:ba:9d:39: 7a:33:6e:ba:63:93:d9:32:c6:f9:10:56:4b:95:61:04:00:0a: 82:b2:e0:f8:02:3e:5c:c9:9f:e3:8d:d7:85:07:98:bb:9e:93: c6:5e:22:47:6d:82:53:97:4e:b4:68:28:44:6b:1a:c4:d8:a9: e7:dc:49:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XALsC0g33tbhAtsURGK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNTJkYjgyMDkwYjM0M2Y4OWY3YzYzN2NmNDFhOTRiY2Zk NDM0NmEwHhcNMjYwMTAyMDYxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGRkZTc2YTdiYjMxMGJiMjI0ZDE2NTk5Y2MzMjFhNzM0NGJmNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA4+ElA+tieWPxE6sJJ74y11acMP 2F5SiyklZLMqh/DR9ZFnQdVhhwUmjn3o7aIncu4tZ/vJH55XdDvuZTVweBePYOXQ iOzh6OLE8XaYyuHBhlqkCocdM7DFLptv1nKBhGqS+5aDAnhCNcfznOYRBGriJMzS 2QqGvyLqzDL4fVTXtpqF7sTR1wjAhE1YHkpaE+02sEtnzIPfG8reEUo0YmQZScqk P5aKdJoHf/WkZZLOEVzWC0ksm0czPkHuebixU/MntbSl/CefBAT9598HR4bGROFI KaLm/1E+YR50Hj6HUNlqX3aqyFKonMzQwdYANNoMAYBbtkxKYQeUfho/XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLDd52p7sxC7Ik0WWZzDIac0S/QkMB8GA1UdIwQY MBaAFK5S24IJCzQ/iffGN89BqUvP1DRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUt ZDdiNjA2M2RjYTM3LzEvc04zbmFudXpFTHNpVFJaWm5NTWhwelJMOUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUtZDdiNjA2M2RjYTM3 LzEvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgIy8MA0G CSqGSIb3DQEBCwUAA4IBAQCUGzuM1WaOu3102bHY6hGpwh/lhsyBU8V//6o1+JNL efr6Y+TBgJlyPZGEgeqYG7qkKlye0okQE/On/8vMUKCwEu7vTbTPxeZ3GDA3rPeA 0CEtPXVIL6YMBKVupEAcgoQAfT9WD2PGh+hXfnENo6YYK6SHZd6sfQc53U2jiHyr 2ZcB0/wRG7oJOqNZKmw/eJTDJLD7ZA6BZyA5MkFpMChZtPZhZd+Kak4xvlnLJya6 5y4d35yCWTCN0FFy9BXo1Ij1X/i6nTl6M266Y5PZMsb5EFZLlWEEAAqCsuD4Aj5c yZ/jjdeFB5i7npPGXiJHbYJTl060aChEaxrE2Knn3EnI -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:03 2026 by rpki-client