This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/z8jkcsVGt66_sClw6OoCA4fxiD0.roa File: z8jkcsVGt66_sClw6OoCA4fxiD0.roa (raw, json) Hash identifier: O/OxXPCdKehv6qCJUwydClm29EJLOL6Thakr4fdICZo= Subject key identifier: CF:C8:E4:72:C5:46:B7:AE:BF:B0:29:70:E8:EA:02:03:87:F1:88:3D Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA3350AEDF02824DA38738F703A0D1 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/z8jkcsVGt66_sClw6OoCA4fxiD0.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60891 IP address blocks: 5.144.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:33:50:ae:df:02:82:4d:a3:87:38:f7:03:a0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfc8e472c546b7aebfb02970e8ea020387f1883d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9f:ae:62:ce:ae:6d:57:74:56:9e:62:fd:63: c6:4e:18:41:da:74:cb:4b:82:30:2e:69:52:03:c6: c3:e9:55:ac:bf:ec:7f:11:ad:54:06:1b:79:c4:2b: 2f:cc:6f:01:e7:65:4d:ce:20:68:f2:64:6d:36:4f: 80:9f:b7:bd:32:6f:75:75:c4:a6:ae:3d:30:1d:18: 6a:03:9c:1e:95:0b:7f:c2:4f:68:28:67:df:a1:75: f3:9a:2f:f6:3c:12:36:e3:b6:22:e2:eb:37:a3:1a: 2e:0f:2c:d2:44:3c:11:97:7c:eb:4e:ee:53:3d:88: 38:aa:9e:67:23:fe:9e:37:a8:61:f9:30:4b:91:ae: 31:d4:9e:c6:08:30:29:d8:7e:5c:a9:bd:a7:d1:b5: 64:1c:91:e9:b8:11:f9:d4:5c:03:64:a8:58:ca:d5: e5:e1:61:4a:8e:22:f3:39:0a:84:6b:f4:49:54:e7: 07:df:00:f2:48:aa:10:3b:58:a0:d4:64:69:26:96: f8:82:03:bb:61:02:b3:fb:8f:9b:da:ae:6d:48:1c: 39:95:02:e4:dc:63:5d:3b:8b:ca:11:dc:80:fd:59: ae:7c:27:c2:4a:ad:f7:b3:b0:21:3f:ff:6d:06:ea: e6:c9:5d:81:75:b7:32:e4:97:b0:f8:4d:c6:91:68: 6e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C8:E4:72:C5:46:B7:AE:BF:B0:29:70:E8:EA:02:03:87:F1:88:3D X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/z8jkcsVGt66_sClw6OoCA4fxiD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.126.0/23 Signature Algorithm: sha256WithRSAEncryption 26:2e:e4:5d:cc:c5:ba:d6:87:7d:b1:b9:1d:63:2a:dc:c8:2f: 59:48:ca:b1:38:31:0c:b7:4e:c5:8c:2a:68:69:e7:0d:d5:f4: 52:c2:69:38:0d:a2:79:f9:99:74:61:81:cd:e9:4b:8d:0f:2a: e6:4c:b0:87:ec:b9:75:60:5a:4b:96:55:85:4a:3c:07:b8:c1: af:c7:ba:43:46:5b:d4:af:cc:07:30:ab:27:2c:7e:49:e0:d0: 3e:60:bf:50:3c:10:fa:30:9c:49:60:98:a1:8f:18:9a:34:1a: d3:5d:d2:31:4a:8a:07:2e:57:b1:ae:47:32:31:3a:7f:09:63: 3c:6e:6b:59:8e:45:f5:02:aa:9b:b4:b5:23:c0:61:cc:50:47: 62:2c:08:5f:5f:30:c3:37:b8:d1:1e:6c:0c:88:4c:c7:2e:59: e4:e2:1d:b7:7a:17:63:b5:40:ab:3a:61:f6:11:6a:22:fe:ae: 2e:c1:28:c5:91:a9:f8:05:72:c2:9e:1d:67:c6:d5:f2:5c:15: 87:09:92:f1:11:d0:59:80:eb:1c:ef:78:d8:68:5b:12:03:21: 58:fb:6e:b1:9b:a7:3c:4a:bd:2b:70:c7:b0:94:8b:8a:0e:10: ab:4a:3b:0e:b5:51:de:33:89:dc:8e:79:7f:5c:37:91:38:bd: 1d:d7:e6:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjNQrt8Cgk2jhzj3A6DRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmM4ZTQ3MmM1NDZiN2FlYmZiMDI5NzBlOGVhMDIwMzg3ZjE4ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ+uYs6ubVd0Vp5i/WPGThhB2nTL S4IwLmlSA8bD6VWsv+x/Ea1UBht5xCsvzG8B52VNziBo8mRtNk+An7e9Mm91dcSm rj0wHRhqA5welQt/wk9oKGffoXXzmi/2PBI247Yi4us3oxouDyzSRDwRl3zrTu5T PYg4qp5nI/6eN6hh+TBLka4x1J7GCDAp2H5cqb2n0bVkHJHpuBH51FwDZKhYytXl 4WFKjiLzOQqEa/RJVOcH3wDySKoQO1ig1GRpJpb4ggO7YQKz+4+b2q5tSBw5lQLk 3GNdO4vKEdyA/VmufCfCSq33s7AhP/9tBurmyV2Bdbcy5Jew+E3GkWhuKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/I5HLFRreuv7ApcOjqAgOH8Yg9MB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvejhqa2NzVkd0NjZfc0NsdzZPb0NBNGZ4aUQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBZB+MA0G CSqGSIb3DQEBCwUAA4IBAQAmLuRdzMW61od9sbkdYyrcyC9ZSMqxODEMt07FjCpo aecN1fRSwmk4DaJ5+Zl0YYHN6UuNDyrmTLCH7Ll1YFpLllWFSjwHuMGvx7pDRlvU r8wHMKsnLH5J4NA+YL9QPBD6MJxJYJihjxiaNBrTXdIxSooHLlexrkcyMTp/CWM8 bmtZjkX1AqqbtLUjwGHMUEdiLAhfXzDDN7jRHmwMiEzHLlnk4h23ehdjtUCrOmH2 EWoi/q4uwSjFkan4BXLCnh1nxtXyXBWHCZLxEdBZgOsc73jYaFsSAyFY+26xm6c8 Sr0rcMewlIuKDhCrSjsOtVHeM4ncjnl/XDeROL0d1+YT -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:16 2026 by rpki-client