This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/81eHHbv2rPJYI93isZ476W6B7zM.roa File: 81eHHbv2rPJYI93isZ476W6B7zM.roa (raw, json) Hash identifier: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8= Subject key identifier: F3:57:87:1D:BB:F6:AC:F2:58:23:DD:E2:B1:9E:3B:E9:6E:81:EF:33 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C7268AAE525F57023264CAF6D35574 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/81eHHbv2rPJYI93isZ476W6B7zM.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 138.124.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:8a:ae:52:5f:57:02:32:64:ca:f6:d3:55:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f357871dbbf6acf25823dde2b19e3be96e81ef33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:f1:fd:99:08:e6:c2:c4:3d:27:bb:46:8a: 9c:84:9e:af:91:b7:e8:a0:c1:7d:51:65:f7:29:c0: 65:a7:2b:11:68:84:ef:bf:df:28:aa:ac:15:d7:d8: cd:29:96:1f:9e:37:d7:91:9b:bd:01:d3:d1:4d:0a: 08:94:14:ee:95:2c:86:09:85:3a:44:3c:ce:49:4a: 47:2d:56:9d:31:65:f5:1d:17:3c:90:6b:95:f0:68: 9e:99:3d:fc:8d:11:c3:0a:ae:e3:c6:19:41:9d:40: e6:4a:05:55:8d:a8:90:8e:c6:48:c3:c1:15:f0:f4: ca:59:44:83:40:c3:e2:5f:44:ed:f3:82:b3:7e:63: 66:42:00:61:12:96:f1:7c:29:6d:a0:c8:2a:37:a8: a4:21:5b:cc:36:92:50:6a:54:3e:0e:17:18:f4:03: de:69:ef:4c:ca:22:10:06:15:21:10:61:a8:9c:82: 2a:bc:58:e1:a3:b2:c7:22:61:cb:35:ab:dc:fc:67: 05:72:e3:d0:aa:e0:0e:00:1b:0d:74:c1:ec:22:cb: a4:9e:79:ab:91:a2:1d:80:43:b5:55:a2:fb:a2:a7: c4:bd:1e:80:04:fb:13:2f:69:51:02:6e:7b:fa:16: f9:02:a6:48:34:31:35:61:85:7f:ee:4e:5d:7d:ec: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:57:87:1D:BB:F6:AC:F2:58:23:DD:E2:B1:9E:3B:E9:6E:81:EF:33 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/81eHHbv2rPJYI93isZ476W6B7zM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.185.0/24 Signature Algorithm: sha256WithRSAEncryption 08:bf:f7:e4:cc:ee:99:93:dd:2c:ef:22:38:5c:97:dc:6d:e7: c6:53:d4:aa:7f:7f:bf:80:f9:ac:23:22:a4:34:ac:2d:ed:7c: f3:6c:5d:e8:0d:ac:40:dc:60:f5:35:b4:82:e1:ef:5a:b0:fe: 62:14:08:bb:98:f3:14:38:84:74:78:0e:7f:b9:da:64:5a:dc: 05:bf:a5:d5:d5:42:1c:c1:04:7b:c4:3d:b4:91:20:a3:e2:4e: 91:75:49:67:f0:83:6f:a2:39:08:a7:e1:60:51:62:da:11:a6: b6:31:69:f0:16:94:d5:26:00:59:61:04:3c:ed:41:59:30:b0: 22:fa:10:1e:44:44:ad:fe:31:3f:74:e1:f7:1a:58:01:1f:7b: c5:b5:9a:c3:c9:d1:d4:ef:f9:63:f9:50:d4:91:08:d2:3c:62: 68:52:c8:cd:10:43:46:72:59:2e:5c:17:ec:af:ae:74:58:70: d8:e7:cc:53:db:fd:45:2d:3e:2c:be:a8:d9:da:de:39:35:45: 2c:96:f7:e8:38:10:2b:dc:49:34:aa:22:34:47:31:88:56:72: 2b:cd:52:b2:a5:7c:89:0d:9f:42:a2:8b:34:da:47:00:4a:ef: c6:62:32:09:e1:3c:ce:54:41:b8:41:b4:83:e6:eb:93:3f:6d: 49:f5:b7:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyaKrlJfVwIyZMr201V0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzU3ODcxZGJiZjZhY2YyNTgyM2RkZTJiMTllM2JlOTZlODFlZjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+Hx/ZkI5sLEPSe7RoqchJ6vkbfo oMF9UWX3KcBlpysRaITvv98oqqwV19jNKZYfnjfXkZu9AdPRTQoIlBTulSyGCYU6 RDzOSUpHLVadMWX1HRc8kGuV8GiemT38jRHDCq7jxhlBnUDmSgVVjaiQjsZIw8EV 8PTKWUSDQMPiX0Tt84KzfmNmQgBhEpbxfCltoMgqN6ikIVvMNpJQalQ+DhcY9APe ae9MyiIQBhUhEGGonIIqvFjho7LHImHLNavc/GcFcuPQquAOABsNdMHsIsuknnmr kaIdgEO1VaL7oqfEvR6ABPsTL2lRAm57+hb5AqZINDE1YYV/7k5dfewgqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPNXhx279qzyWCPd4rGeO+luge8zMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvODFlSEhidjJyUEpZSTkzaXNaNDc2VzZCN3pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiny5MA0G CSqGSIb3DQEBCwUAA4IBAQAIv/fkzO6Zk90s7yI4XJfcbefGU9Sqf3+/gPmsIyKk NKwt7XzzbF3oDaxA3GD1NbSC4e9asP5iFAi7mPMUOIR0eA5/udpkWtwFv6XV1UIc wQR7xD20kSCj4k6RdUln8INvojkIp+FgUWLaEaa2MWnwFpTVJgBZYQQ87UFZMLAi +hAeRESt/jE/dOH3GlgBH3vFtZrDydHU7/lj+VDUkQjSPGJoUsjNEENGclkuXBfs r650WHDY58xT2/1FLT4svqjZ2t45NUUslvfoOBAr3Ek0qiI0RzGIVnIrzVKypXyJ DZ9Coos02kcASu/GYjIJ4TzOVEG4QbSD5uuTP21J9bdS -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:34 2026 by rpki-client