This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa File: ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa (raw, json) Hash identifier: 6MRVKUdN0TmbZpchW3YbxHhN5ECpIXnD3S+JTzC3uLc= Subject key identifier: 64:D9:6B:B0:E0:89:6F:3D:59:80:22:D2:40:1A:43:8F:F6:59:4F:EF Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAED3E50736A2244E574F04476840A Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198178 IP address blocks: 138.124.81.0/24 maxlen: 24 138.124.107.0/24 maxlen: 24 138.124.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:3e:50:73:6a:22:44:e5:74:f0:44:76:84:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d96bb0e0896f3d598022d2401a438ff6594fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:19:c2:3e:50:75:b3:57:28:50:1f:76:2d: 62:e8:73:fd:f4:39:ca:83:52:a7:f7:06:ed:b3:47: ba:3f:d3:4e:ef:08:72:cb:e8:11:97:33:f0:b9:3e: 13:a0:d2:af:43:dc:1a:c1:79:ac:bf:3d:86:a8:1c: 30:02:88:1e:d7:ea:c3:d4:bd:45:a8:f9:96:24:80: fc:76:00:fe:5c:c8:c2:34:2e:22:1d:48:6e:66:84: 3a:3d:61:3e:2c:ed:25:fe:3c:25:b6:6b:d4:40:45: 36:6f:ea:a3:13:3a:15:84:de:b8:34:f7:1b:08:f0: 03:42:95:a1:be:a4:a4:37:74:74:53:e4:23:d0:c6: bd:a5:c1:f9:d7:a6:6f:35:8b:79:e7:09:9a:62:f1: 57:29:db:4f:10:a9:c3:2b:27:5f:1e:82:3b:15:af: b8:ac:58:60:35:8c:9d:c8:11:c0:47:57:33:8c:67: 00:39:dc:3b:21:04:6b:13:1f:0b:a5:11:11:63:0c: e6:82:a1:ee:c4:0f:7a:e8:65:de:2b:cc:53:b0:ac: 1c:c0:f6:cf:67:ed:c3:82:b6:ad:37:1d:1a:51:a5: e5:ac:24:ad:f5:07:c6:03:a8:8a:41:0a:3c:40:21: 9c:ee:bd:c4:24:06:e7:d1:c1:2e:b3:09:f6:00:fb: 93:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D9:6B:B0:E0:89:6F:3D:59:80:22:D2:40:1A:43:8F:F6:59:4F:EF X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/ZNlrsOCJbz1ZgCLSQBpDj_ZZT-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.81.0/24 138.124.107.0/24 138.124.111.0/24 Signature Algorithm: sha256WithRSAEncryption bf:4e:73:dc:0c:7d:51:2a:07:7c:d8:c8:ac:74:13:07:d2:7a: 9c:6f:16:61:b5:0b:05:80:46:78:58:4a:14:75:63:a4:27:7b: 6d:e4:01:31:2f:df:97:9d:6d:a3:93:53:51:74:91:d1:9f:e4: 1d:b4:98:56:bf:5e:72:a8:b9:17:1a:1e:63:f0:59:34:73:5e: 89:66:0b:58:b3:68:fc:37:f0:66:a1:af:42:c9:f9:3d:6d:0c: 52:cd:7b:e6:0b:83:45:b2:5b:27:0e:a6:de:52:f9:51:98:71: 62:37:5d:de:bd:ad:3b:d7:70:c9:c8:63:48:30:23:1e:68:77: d7:f7:7b:1c:7a:b4:54:37:e2:81:2b:07:7b:af:3d:1a:6c:28: 5a:9e:f5:2d:73:0a:83:e5:da:1a:1b:3d:98:cd:f3:fd:6c:3c: 00:c9:e5:4e:85:d6:8b:97:82:b3:10:40:88:b4:d7:eb:82:ea: 69:1e:1e:09:ff:0c:95:83:5a:20:1e:e5:92:4d:6c:c0:9b:4c: 73:da:7b:c1:25:cd:d7:45:08:52:21:b8:8f:b2:7e:80:84:42: 9c:ec:dd:70:de:79:3b:b3:a2:bf:af:21:9a:86:24:49:17:c7: a3:75:64:81:3f:3a:15:a0:d8:e6:5c:89:ca:fc:1b:28:29:1c: 30:df:3b:e1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26u0+UHNqIkTldPBEdoQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQ5NmJiMGUwODk2ZjNkNTk4MDIyZDI0MDFhNDM4ZmY2NTk0ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XgZwj5QdbNXKFAfdi1i6HP99DnK g1Kn9wbts0e6P9NO7whyy+gRlzPwuT4ToNKvQ9wawXmsvz2GqBwwAoge1+rD1L1F qPmWJID8dgD+XMjCNC4iHUhuZoQ6PWE+LO0l/jwltmvUQEU2b+qjEzoVhN64NPcb CPADQpWhvqSkN3R0U+Qj0Ma9pcH516ZvNYt55wmaYvFXKdtPEKnDKydfHoI7Fa+4 rFhgNYydyBHAR1czjGcAOdw7IQRrEx8LpRERYwzmgqHuxA966GXeK8xTsKwcwPbP Z+3DgratNx0aUaXlrCSt9QfGA6iKQQo8QCGc7r3EJAbn0cEuswn2APuT6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGTZa7DgiW89WYAi0kAaQ4/2WU/vMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvWk5scnNPQ0piejFaZ0NMU1FCcERqX1paVC04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAinxRAwQA inxrAwQAinxvMA0GCSqGSIb3DQEBCwUAA4IBAQC/TnPcDH1RKgd82MisdBMH0nqc bxZhtQsFgEZ4WEoUdWOkJ3tt5AExL9+XnW2jk1NRdJHRn+QdtJhWv15yqLkXGh5j 8Fk0c16JZgtYs2j8N/Bmoa9Cyfk9bQxSzXvmC4NFslsnDqbeUvlRmHFiN13eva07 13DJyGNIMCMeaHfX93scerRUN+KBKwd7rz0abChanvUtcwqD5doaGz2YzfP9bDwA yeVOhdaLl4KzEECItNfrguppHh4J/wyVg1ogHuWSTWzAm0xz2nvBJc3XRQhSIbiP sn6AhEKc7N1w3nk7s6K/ryGahiRJF8ejdWSBPzoVoNjmXInK/BsoKRww3zvh -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:38 2026 by rpki-client