This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/938dS9c-QRXfXOf6JcruWbcOa6c.roa File: 938dS9c-QRXfXOf6JcruWbcOa6c.roa (raw, json) Hash identifier: nqHqmEXqe7w10WiV2xvFiZQWKqkwscZ9a7efriG6nbU= Subject key identifier: F7:7F:1D:4B:D7:3E:41:15:DF:5C:E7:FA:25:CA:EE:59:B7:0E:6B:A7 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA420B27B64BB85A0BA97F5680284A8 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/938dS9c-QRXfXOf6JcruWbcOa6c.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215115 IP address blocks: 94.142.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:20:b2:7b:64:bb:85:a0:ba:97:f5:68:02:84:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f77f1d4bd73e4115df5ce7fa25caee59b70e6ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b4:3a:79:17:d0:21:b3:47:08:c4:bf:d9:09: e2:18:55:ec:1b:50:c4:59:02:6a:00:52:ec:56:2a: cc:eb:ed:68:05:85:be:f4:34:9a:3e:99:ee:6f:cb: e4:c5:81:40:bc:5e:a2:2c:7e:ae:ac:2c:c8:12:bd: b9:47:e5:3c:1f:7b:7c:bd:8d:b8:29:b1:6f:04:cb: a2:b2:56:8b:13:50:93:b0:a9:5e:3f:80:47:00:48: 4b:89:cf:79:b6:14:ee:29:a9:4d:e8:13:3c:64:90: b3:55:34:ab:d5:b2:9b:9e:1c:85:df:2e:53:1b:78: 34:dc:44:05:25:9a:4b:a7:af:df:4e:4a:65:a6:15: 32:97:a4:99:2f:c7:80:c0:ed:62:b8:8d:10:10:23: f0:d5:72:a9:cf:8e:6e:52:77:12:6c:96:82:41:3b: 4a:50:1b:a3:b1:74:c0:28:8b:4c:b2:99:f3:e8:1e: 3d:0a:97:f6:bd:6a:20:14:00:ac:93:5a:b3:b7:03: dd:aa:8d:d7:59:49:d6:24:5c:b5:46:d3:e6:47:96: 31:38:85:f3:39:c9:f9:f2:fa:f2:7c:95:8a:03:ce: c0:2f:f5:32:fe:e8:f1:77:12:c7:c4:d6:dd:e0:62: 26:c0:f4:61:e6:e0:cb:55:e8:11:ed:f8:9a:6b:8f: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7F:1D:4B:D7:3E:41:15:DF:5C:E7:FA:25:CA:EE:59:B7:0E:6B:A7 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/938dS9c-QRXfXOf6JcruWbcOa6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.143.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2e:95:ff:66:71:9b:21:8a:d4:07:df:ef:0e:5d:d8:2b:d8: c9:e3:42:be:42:db:80:ad:13:33:9b:ed:71:a8:63:db:a9:7d: 80:17:83:0e:c8:fc:8e:2a:05:e8:21:ea:68:ca:7f:30:91:54: a0:53:af:c3:f6:25:eb:d6:05:49:59:99:3e:af:22:55:09:51: 9b:0d:82:f4:a7:58:fd:65:d7:13:1d:80:ae:ef:13:02:83:ad: e6:f4:88:eb:a0:64:71:58:dc:04:0d:ed:b9:44:56:51:bb:7c: 8a:16:19:8d:43:23:d4:39:44:08:b0:a0:51:d5:0a:9f:51:8b: c6:f9:fa:17:46:7e:94:0b:10:76:78:f3:c1:11:58:19:55:85: 7d:a3:ef:c5:d8:03:e8:04:fd:b3:a2:a2:27:bc:33:39:c5:d4: 66:59:6c:90:90:7a:4f:6f:8b:38:fc:78:62:7e:f0:65:89:51: ad:41:e4:5f:a9:e1:2e:e9:f4:97:13:14:50:df:bf:8a:ad:e0: 28:be:77:26:8f:1e:f7:fc:d6:ce:0f:31:a3:5d:77:53:1c:65: 38:f3:83:be:8f:14:62:34:91:0a:a5:de:31:15:8a:90:c4:cd: d6:a5:4a:5f:9d:87:66:99:40:78:2b:75:a8:cf:d8:37:d5:f0: 38:bb:18:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pCCye2S7haC6l/VoAoSoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzdmMWQ0YmQ3M2U0MTE1ZGY1Y2U3ZmEyNWNhZWU1OWI3MGU2YmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLQ6eRfQIbNHCMS/2QniGFXsG1DE WQJqAFLsVirM6+1oBYW+9DSaPpnub8vkxYFAvF6iLH6urCzIEr25R+U8H3t8vY24 KbFvBMuislaLE1CTsKleP4BHAEhLic95thTuKalN6BM8ZJCzVTSr1bKbnhyF3y5T G3g03EQFJZpLp6/fTkplphUyl6SZL8eAwO1iuI0QECPw1XKpz45uUncSbJaCQTtK UBujsXTAKItMspnz6B49Cpf2vWogFACsk1qztwPdqo3XWUnWJFy1RtPmR5YxOIXz Ocn58vryfJWKA87AL/Uy/ujxdxLHxNbd4GImwPRh5uDLVegR7fiaa4/IkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPd/HUvXPkEV31zn+iXK7lm3DmunMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvOTM4ZFM5Yy1RUlhmWE9mNkpjcnVXYmNPYTZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo6PMA0G CSqGSIb3DQEBCwUAA4IBAQAmLpX/ZnGbIYrUB9/vDl3YK9jJ40K+QtuArRMzm+1x qGPbqX2AF4MOyPyOKgXoIepoyn8wkVSgU6/D9iXr1gVJWZk+ryJVCVGbDYL0p1j9 ZdcTHYCu7xMCg63m9IjroGRxWNwEDe25RFZRu3yKFhmNQyPUOUQIsKBR1QqfUYvG +foXRn6UCxB2ePPBEVgZVYV9o+/F2APoBP2zoqInvDM5xdRmWWyQkHpPb4s4/Hhi fvBliVGtQeRfqeEu6fSXExRQ37+KreAovncmjx73/NbODzGjXXdTHGU484O+jxRi NJEKpd4xFYqQxM3WpUpfnYdmmUB4K3Woz9g31fA4uxh/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:53 2026 by rpki-client