This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/YWNcwd41RpRA7xgpt7KBYYNpmLo.roa File: YWNcwd41RpRA7xgpt7KBYYNpmLo.roa (raw, json) Hash identifier: Z/YiQmms85XQHI3WICsesmpbSRUq/suFEGF/feadUT8= Subject key identifier: 61:63:5C:C1:DE:35:46:94:40:EF:18:29:B7:B2:81:61:83:69:98:BA Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019BB642DE89555626ADE777F8BAC2DD3344 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/YWNcwd41RpRA7xgpt7KBYYNpmLo.roa Signing time: Tue 13 Jan 2026 07:29:54 +0000 ROA not before: Tue 13 Jan 2026 07:29:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 138.124.76.0/24 maxlen: 24 138.124.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 14:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:42:de:89:55:56:26:ad:e7:77:f8:ba:c2:dd:33:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 13 07:29:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61635cc1de35469440ef1829b7b28161836998ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:ce:7e:c7:86:cb:a5:82:35:0b:4d:ae:fa: 70:ca:bc:b1:53:7c:05:b4:5c:34:92:e0:b8:e5:d4: 62:d6:8d:0e:3b:ad:3f:59:bb:47:a4:bf:3f:50:a8: b4:3f:65:e0:00:56:92:ee:b0:f6:8b:e4:e2:e7:a1: 62:5a:fe:68:d1:63:b9:95:42:d8:fa:cc:59:e7:69: 21:c8:8c:65:06:01:3e:34:dc:ef:45:7d:40:7e:fa: a4:07:bd:20:bd:7d:29:9b:0f:5d:fa:97:25:d4:ed: b9:86:30:00:06:66:ed:be:32:46:ba:f3:13:c7:52: ad:2e:a3:07:89:d8:1d:7b:a9:97:93:66:96:08:ae: a8:f0:5d:f2:8d:15:61:59:d0:a0:9d:41:d1:e3:2c: 7d:c5:2d:ba:01:69:e2:5d:64:08:4d:f2:fa:29:a2: be:bc:6d:57:01:f8:3d:38:3b:85:3a:6e:31:aa:b5: 49:c2:4b:a0:37:55:a3:17:f4:f8:51:88:24:00:7e: f4:ee:72:ba:2a:9b:7c:45:47:d8:83:fd:e3:63:2e: ed:d8:c5:87:6b:3f:a5:58:ce:fc:55:53:1d:d3:64: bc:ea:85:bf:7f:f4:7d:83:87:c1:59:db:90:0e:24: 60:81:75:2b:77:22:26:c0:91:d5:10:52:a1:11:43: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:63:5C:C1:DE:35:46:94:40:EF:18:29:B7:B2:81:61:83:69:98:BA X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/YWNcwd41RpRA7xgpt7KBYYNpmLo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.76.0/23 Signature Algorithm: sha256WithRSAEncryption 37:57:6e:48:8c:6b:b1:18:8a:51:79:51:12:bf:80:2f:c0:67: 2e:44:25:6a:c6:21:26:89:80:ad:40:34:69:05:5c:5e:2f:71: 41:c8:a1:09:8d:51:73:e1:45:8f:9e:b2:36:60:12:a6:0a:0d: 15:84:52:a1:c1:e8:3a:01:1b:bf:a6:76:35:19:85:80:8b:6c: 91:89:19:b0:13:c7:89:c9:02:10:47:f5:95:04:7e:68:92:66: 8b:17:5b:85:95:b4:95:94:3e:85:3e:9e:1b:01:2e:6e:1d:d4: 6c:d9:3e:bb:35:d1:50:74:e8:97:d2:99:f1:84:68:9a:27:b8: b3:1d:2a:26:ef:45:5a:2e:0f:10:62:bf:ea:87:00:4a:1c:a5: 7f:1b:ff:28:32:db:d6:07:0e:2c:9e:2f:8f:22:99:4d:ff:f6: dd:bf:34:20:74:5b:61:60:3f:91:9a:0f:90:e8:ed:dd:fb:a4: 5f:42:bb:83:5e:d8:24:c6:21:cf:17:0d:c7:68:f6:73:bb:b5: 85:7d:49:05:85:e0:f1:ee:20:14:bb:2b:d3:33:69:e9:bf:6e: a1:94:cd:d1:bb:75:11:26:fb:e3:6a:f5:a6:d4:dd:67:e7:9d: f1:ff:bf:8a:ba:25:8e:f5:f1:c4:6e:6b:9a:2d:4f:3a:22:27: fd:a4:a5:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2Qt6JVVYmred3+LrC3TNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTEzMDcyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MTYzNWNjMWRlMzU0Njk0NDBlZjE4MjliN2IyODE2MTgzNjk5OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOTOfseGy6WCNQtNrvpwyryxU3wF tFw0kuC45dRi1o0OO60/WbtHpL8/UKi0P2XgAFaS7rD2i+Ti56FiWv5o0WO5lULY +sxZ52khyIxlBgE+NNzvRX1AfvqkB70gvX0pmw9d+pcl1O25hjAABmbtvjJGuvMT x1KtLqMHidgde6mXk2aWCK6o8F3yjRVhWdCgnUHR4yx9xS26AWniXWQITfL6KaK+ vG1XAfg9ODuFOm4xqrVJwkugN1WjF/T4UYgkAH707nK6Kpt8RUfYg/3jYy7t2MWH az+lWM78VVMd02S86oW/f/R9g4fBWduQDiRggXUrdyImwJHVEFKhEUN9ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGFjXMHeNUaUQO8YKbeygWGDaZi6MB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvWVdOY3dkNDFScFJBN3hncHQ3S0JZWU5wbUxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBinxMMA0G CSqGSIb3DQEBCwUAA4IBAQA3V25IjGuxGIpReVESv4AvwGcuRCVqxiEmiYCtQDRp BVxeL3FByKEJjVFz4UWPnrI2YBKmCg0VhFKhweg6ARu/pnY1GYWAi2yRiRmwE8eJ yQIQR/WVBH5okmaLF1uFlbSVlD6FPp4bAS5uHdRs2T67NdFQdOiX0pnxhGiaJ7iz HSom70VaLg8QYr/qhwBKHKV/G/8oMtvWBw4sni+PIplN//bdvzQgdFthYD+Rmg+Q 6O3d+6RfQruDXtgkxiHPFw3HaPZzu7WFfUkFheDx7iAUuyvTM2npv26hlM3Ru3UR JvvjavWm1N1n553x/7+KuiWO9fHEbmuaLU86Iif9pKX0 -----END CERTIFICATE-----Generated at Thu Jan 15 00:51:44 2026 by rpki-client