This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/k0uiX_PSGOLpmHbIawhjH3EL4VU.roa File: k0uiX_PSGOLpmHbIawhjH3EL4VU.roa (raw, json) Hash identifier: bIgcQVO40YbjY2beu9BGZjDPrIJm2Cv7wEtLZBhcVvU= Subject key identifier: 93:4B:A2:5F:F3:D2:18:E2:E9:98:76:C8:6B:08:63:1F:71:0B:E1:55 Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019B7758FD7609B1582209F4AB345AED591A Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/k0uiX_PSGOLpmHbIawhjH3EL4VU.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 128.139.4.0/24 maxlen: 24 128.139.6.0/24 maxlen: 24 128.139.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fd:76:09:b1:58:22:09:f4:ab:34:5a:ed:59:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=934ba25ff3d218e2e99876c86b08631f710be155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:e7:8b:cd:90:8b:04:cc:17:76:65:d1:08: 09:8a:18:f1:19:aa:81:65:37:da:fb:59:71:c0:fc: d9:2c:10:4b:2d:ed:ec:d0:55:0a:73:1d:57:05:98: 22:af:d2:5b:99:f6:6c:60:f9:6b:7d:8e:06:58:d6: 39:6e:59:55:c6:41:d5:5d:87:8f:75:e0:65:d7:bb: aa:8a:c3:8d:6e:50:39:f4:4b:93:4c:52:5f:cd:e1: f4:27:5d:80:fb:67:d8:ad:ce:c8:d7:a2:44:b2:a8: a4:44:69:3f:8d:4c:cc:0f:f3:c5:16:21:c9:e1:62: ce:a2:6d:7a:32:06:83:00:cd:57:d4:c4:23:93:3d: 02:34:5d:83:da:76:62:ed:22:b8:96:bf:93:6a:9d: 74:c3:58:48:3c:54:bc:72:94:fa:18:33:9f:b4:e4: bb:97:5c:47:8d:34:c2:7f:11:6b:ba:9c:a4:a9:4d: 56:30:3d:ee:50:17:41:8f:d2:cc:62:47:50:48:e4: eb:53:ea:4d:77:01:4c:5e:35:93:87:ad:d0:d5:3d: 2a:63:55:7f:8f:c7:02:e9:93:d7:52:3f:52:22:e4: 20:f1:f1:0e:ad:33:25:ad:b5:4e:bf:e8:d3:bc:a5: f5:b8:b4:9f:d9:1a:ee:d8:1d:b0:74:c0:29:bb:4f: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:4B:A2:5F:F3:D2:18:E2:E9:98:76:C8:6B:08:63:1F:71:0B:E1:55 X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/k0uiX_PSGOLpmHbIawhjH3EL4VU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.139.4.0/24 128.139.6.0/23 Signature Algorithm: sha256WithRSAEncryption 77:32:69:ad:e5:65:6e:9f:de:3b:39:88:b5:1a:73:3c:1e:c6: 89:14:c0:0b:28:ea:82:52:9f:88:6d:1e:d4:0b:06:a3:f5:57: e3:00:fb:c2:7a:4a:03:08:f9:da:6a:56:f6:38:91:72:a8:20: 89:64:60:44:29:6a:d8:6f:be:8f:35:9c:c9:c1:cc:9e:c8:42: 00:bf:7e:ad:c3:7c:c3:af:8c:f1:12:8d:26:df:73:5d:a3:b9: 8c:87:03:be:db:e9:f2:7c:83:92:c1:f5:f3:66:81:c5:f2:fd: f3:18:ac:e1:db:06:7f:3c:81:ec:0a:e5:85:ce:2e:f7:f2:83: c9:b2:7e:ce:5f:73:33:5a:77:ab:47:16:db:7d:87:da:01:c2: df:08:06:22:e7:e6:49:9c:61:87:c0:ee:b3:69:a7:c7:28:7e: 55:6b:47:8c:93:7f:24:63:f1:dc:c8:f9:dd:ed:f0:35:c3:0d: 10:90:d3:43:3d:8e:35:43:8d:7c:99:99:46:34:0e:34:75:1b: 90:88:71:bb:a4:01:51:cd:ac:ef:88:90:30:2d:7d:c2:71:4f: 3d:37:21:5f:d0:48:63:8a:1e:b0:dc:9a:5f:ef:3b:b6:d8:04: 3e:2d:e1:56:66:51:9b:c1:fc:7a:8a:8b:90:51:91:63:b9:bb: df:4c:5b:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WP12CbFYIgn0qzRa7VkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzRiYTI1ZmYzZDIxOGUyZTk5ODc2Yzg2YjA4NjMxZjcxMGJlMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmvni82QiwTMF3Zl0QgJihjxGaqB ZTfa+1lxwPzZLBBLLe3s0FUKcx1XBZgir9JbmfZsYPlrfY4GWNY5bllVxkHVXYeP deBl17uqisONblA59EuTTFJfzeH0J12A+2fYrc7I16JEsqikRGk/jUzMD/PFFiHJ 4WLOom16MgaDAM1X1MQjkz0CNF2D2nZi7SK4lr+Tap10w1hIPFS8cpT6GDOftOS7 l1xHjTTCfxFrupykqU1WMD3uUBdBj9LMYkdQSOTrU+pNdwFMXjWTh63Q1T0qY1V/ j8cC6ZPXUj9SIuQg8fEOrTMlrbVOv+jTvKX1uLSf2Rru2B2wdMApu08SRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJNLol/z0hji6Zh2yGsIYx9xC+FVMB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvazB1aVhfUFNHT0xwbUhiSWF3aGpIM0VMNFZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgIsEAwQB gIsGMA0GCSqGSIb3DQEBCwUAA4IBAQB3Mmmt5WVun947OYi1GnM8HsaJFMALKOqC Up+IbR7UCwaj9VfjAPvCekoDCPnaalb2OJFyqCCJZGBEKWrYb76PNZzJwcyeyEIA v36tw3zDr4zxEo0m33Ndo7mMhwO+2+nyfIOSwfXzZoHF8v3zGKzh2wZ/PIHsCuWF zi738oPJsn7OX3MzWnerRxbbfYfaAcLfCAYi5+ZJnGGHwO6zaafHKH5Va0eMk38k Y/HcyPnd7fA1ww0QkNNDPY41Q418mZlGNA40dRuQiHG7pAFRzazviJAwLX3CcU89 NyFf0Ehjih6w3Jpf7zu22AQ+LeFWZlGbwfx6iouQUZFjubvfTFuM -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:32 2026 by rpki-client