This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/R96emqY6ncQoUAU51OVYuWj0FD4.roa File: R96emqY6ncQoUAU51OVYuWj0FD4.roa (raw, json) Hash identifier: DJiJZV+nXxqVKXP60yIaGjvvzDv5GqmmKMPLo4GDtRA= Subject key identifier: 47:DE:9E:9A:A6:3A:9D:C4:28:50:05:39:D4:E5:58:B9:68:F4:14:3E Certificate issuer: /CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c Certificate serial: 019B7C804733AF0FDA62542E468E591CDA3B Authority key identifier: 9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/R96emqY6ncQoUAU51OVYuWj0FD4.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201471 IP address blocks: 84.40.40.0/21 maxlen: 24 84.40.58.0/23 maxlen: 24 84.40.60.0/22 maxlen: 24 185.90.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.mft rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:47:33:af:0f:da:62:54:2e:46:8e:59:1c:da:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a70b051e5cdf962dbc26b352488d0831bdf9a3c Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47de9e9aa63a9dc428500539d4e558b968f4143e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d0:fd:84:de:2e:69:2a:84:42:85:a8:f2:9c: 64:6a:ff:a9:9a:c5:c8:05:3f:fe:77:50:6c:f9:2e: 06:e4:15:ff:65:e1:35:22:fc:e1:2d:81:95:9b:d6: 27:40:10:69:22:65:a9:01:1e:1d:2b:74:2b:8a:70: 38:23:da:8d:6b:4a:f2:4c:6f:bb:84:f7:d1:b2:4a: ab:99:71:54:59:19:24:fe:85:c5:76:f2:fb:42:da: 7c:ff:1a:51:6c:f7:9e:ac:7e:0b:14:fa:cc:ca:0d: 69:0e:4a:85:cd:d7:8a:d0:a8:9c:81:c0:31:d5:8c: 52:9a:00:d4:da:89:e6:ad:15:e8:e8:c6:16:0a:44: 6d:93:87:91:47:03:8d:c3:d2:10:e1:f1:fb:aa:66: ad:71:e7:c5:6c:5b:87:68:77:5e:ec:5d:f4:ff:c2: 73:34:72:77:bd:41:18:56:f6:fc:3d:f2:a4:58:e9: 4f:98:bd:04:08:f6:f4:2d:d6:48:2c:5e:e8:03:8d: be:50:a6:c2:3f:91:0f:95:09:b1:08:24:49:2b:a3: dd:99:04:ac:4c:57:85:06:5f:11:33:2d:0f:52:ba: b1:fb:24:23:04:e1:4e:88:a7:fb:cb:86:d2:99:80: 2c:2f:c3:63:fa:9d:e9:1e:b3:3f:12:3c:6a:f4:c3: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DE:9E:9A:A6:3A:9D:C4:28:50:05:39:D4:E5:58:B9:68:F4:14:3E X509v3 Authority Key Identifier: keyid:9A:70:B0:51:E5:CD:F9:62:DB:C2:6B:35:24:88:D0:83:1B:DF:9A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnCwUeXN-WLbwms1JIjQgxvfmjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/R96emqY6ncQoUAU51OVYuWj0FD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f9691d-afb2-41f2-8d22-fa46b4f9a20c/1/mnCwUeXN-WLbwms1JIjQgxvfmjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.40.40.0/21 84.40.58.0-84.40.63.255 185.90.48.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:cf:12:f6:39:05:9b:f7:67:f5:e5:88:25:17:4f:4e:a7:eb: 07:a3:2e:5f:90:27:43:e6:36:22:3c:5e:07:e6:08:de:0c:56: 71:4e:af:c9:a8:6b:d5:31:63:bd:0f:90:78:b8:4e:a8:4f:4e: dc:e1:42:50:13:29:76:ef:a0:15:3a:63:fa:e7:8b:4e:64:5c: a6:39:96:44:02:ba:4e:06:7a:0d:e4:20:dc:72:70:53:67:ea: b1:b5:e0:6c:eb:31:64:be:3c:41:ac:ba:d8:f1:ea:28:be:aa: e5:67:ac:64:2f:cb:1f:25:26:2f:b6:d0:8d:6e:3b:38:50:f1: fd:88:83:74:64:bd:db:4b:1c:1d:6a:c8:e8:ba:3c:f7:77:d4: 26:4d:58:9a:b7:2b:bf:c6:af:2d:b3:aa:22:80:7f:8b:7e:ac: f3:bd:eb:e0:d2:4a:e0:a9:bb:c7:08:11:4d:6c:b6:1a:8d:21: ee:bf:08:8c:87:d9:62:03:f8:02:4c:0d:ec:ca:4d:41:06:cd: 88:bf:c1:f2:9f:34:02:18:f8:5d:d5:8c:e5:9e:9b:d1:07:90: 73:65:74:b3:3c:39:d8:22:e2:6e:d9:be:e0:04:a4:5f:81:a3: 4e:ce:ac:86:42:b0:25:29:2d:3e:5f:c3:90:4b:29:ab:f0:cf: 28:f2:e8:d7 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt8gEczrw/aYlQuRo5ZHNo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzBiMDUxZTVjZGY5NjJkYmMyNmIzNTI0ODhkMDgzMWJk ZjlhM2MwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RlOWU5YWE2M2E5ZGM0Mjg1MDA1MzlkNGU1NThiOTY4ZjQxNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtD9hN4uaSqEQoWo8pxkav+pmsXI BT/+d1Bs+S4G5BX/ZeE1IvzhLYGVm9YnQBBpImWpAR4dK3QrinA4I9qNa0ryTG+7 hPfRskqrmXFUWRkk/oXFdvL7Qtp8/xpRbPeerH4LFPrMyg1pDkqFzdeK0KicgcAx 1YxSmgDU2onmrRXo6MYWCkRtk4eRRwONw9IQ4fH7qmatcefFbFuHaHde7F30/8Jz NHJ3vUEYVvb8PfKkWOlPmL0ECPb0LdZILF7oA42+UKbCP5EPlQmxCCRJK6PdmQSs TFeFBl8RMy0PUrqx+yQjBOFOiKf7y4bSmYAsL8Nj+p3pHrM/Ejxq9MMBVQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEfenpqmOp3EKFAFOdTlWLlo9BQ+MB8GA1UdIwQY MBaAFJpwsFHlzfli28JrNSSI0IMb35o8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjIt ZmE0NmI0ZjlhMjBjLzEvUjk2ZW1xWTZuY1FvVUFVNTFPVll1V2owRkQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9mOTY5MWQtYWZiMi00MWYyLThkMjItZmE0NmI0ZjlhMjBj LzEvbW5Dd1VlWE4tV0xid21zMUpJalFneHZmbWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDVCgoMAwD BAFUKDoDBAZUKAADBAK5WjAwDQYJKoZIhvcNAQELBQADggEBAArPEvY5BZv3Z/Xl iCUXT06n6wejLl+QJ0PmNiI8XgfmCN4MVnFOr8moa9UxY70PkHi4TqhPTtzhQlAT KXbvoBU6Y/rni05kXKY5lkQCuk4Geg3kINxycFNn6rG14GzrMWS+PEGsutjx6ii+ quVnrGQvyx8lJi+20I1uOzhQ8f2Ig3RkvdtLHB1qyOi6PPd31CZNWJq3K7/Gry2z qiKAf4t+rPO96+DSSuCpu8cIEU1sthqNIe6/CIyH2WID+AJMDezKTUEGzYi/wfKf NAIY+F3VjOWem9EHkHNldLM8Odgi4m7ZvuAEpF+Bo07OrIZCsCUpLT5fw5BLKavw zyjy6Nc= -----END CERTIFICATE-----Generated at Tue Feb 10 09:02:42 2026 by rpki-client