This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/cq5oEfhpwOAB3SATuFVA2r_HrW0.roa File: cq5oEfhpwOAB3SATuFVA2r_HrW0.roa (raw, json) Hash identifier: AXB6GDcfWkIUxEgaZTV6RBJ8X36uSaSobiHqDrLQUBA= Subject key identifier: 72:AE:68:11:F8:69:C0:E0:01:DD:20:13:B8:55:40:DA:BF:C7:AD:6D Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAEC68299EE502D20ACF5C7B74E66B Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/cq5oEfhpwOAB3SATuFVA2r_HrW0.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44559 IP address blocks: 138.124.0.0/24 maxlen: 24 138.124.1.0/24 maxlen: 24 138.124.5.0/24 maxlen: 24 138.124.6.0/24 maxlen: 24 138.124.7.0/24 maxlen: 24 138.124.8.0/24 maxlen: 24 138.124.9.0/24 maxlen: 24 138.124.11.0/24 maxlen: 24 138.124.12.0/24 maxlen: 24 138.124.17.0/24 maxlen: 24 138.124.28.0/24 maxlen: 24 138.124.32.0/24 maxlen: 24 138.124.33.0/24 maxlen: 24 138.124.36.0/24 maxlen: 24 138.124.37.0/24 maxlen: 24 138.124.38.0/24 maxlen: 24 138.124.39.0/24 maxlen: 24 138.124.40.0/24 maxlen: 24 138.124.41.0/24 maxlen: 24 138.124.42.0/24 maxlen: 24 138.124.43.0/24 maxlen: 24 138.124.44.0/24 maxlen: 24 138.124.45.0/24 maxlen: 24 138.124.46.0/24 maxlen: 24 138.124.47.0/24 maxlen: 24 138.124.48.0/24 maxlen: 24 138.124.56.0/24 maxlen: 24 138.124.57.0/24 maxlen: 24 138.124.62.0/24 maxlen: 24 138.124.63.0/24 maxlen: 24 138.124.64.0/24 maxlen: 24 138.124.65.0/24 maxlen: 24 138.124.66.0/24 maxlen: 24 138.124.67.0/24 maxlen: 24 138.124.68.0/24 maxlen: 24 138.124.69.0/24 maxlen: 24 138.124.70.0/24 maxlen: 24 138.124.71.0/24 maxlen: 24 138.124.72.0/24 maxlen: 24 138.124.73.0/24 maxlen: 24 138.124.74.0/24 maxlen: 24 138.124.75.0/24 maxlen: 24 138.124.76.0/24 maxlen: 24 138.124.77.0/24 maxlen: 24 138.124.79.0/24 maxlen: 24 138.124.80.0/24 maxlen: 24 138.124.82.0/24 maxlen: 24 138.124.83.0/24 maxlen: 24 138.124.84.0/24 maxlen: 24 138.124.85.0/24 maxlen: 24 138.124.86.0/24 maxlen: 24 138.124.87.0/24 maxlen: 24 138.124.88.0/24 maxlen: 24 138.124.94.0/24 maxlen: 24 138.124.95.0/24 maxlen: 24 138.124.96.0/24 maxlen: 24 138.124.97.0/24 maxlen: 24 138.124.98.0/24 maxlen: 24 138.124.100.0/24 maxlen: 24 138.124.104.0/24 maxlen: 24 138.124.105.0/24 maxlen: 24 138.124.106.0/24 maxlen: 24 138.124.120.0/24 maxlen: 24 138.124.121.0/24 maxlen: 24 138.124.122.0/24 maxlen: 24 138.124.126.0/24 maxlen: 24 138.124.228.0/24 maxlen: 24 138.124.229.0/24 maxlen: 24 138.124.230.0/24 maxlen: 24 138.124.231.0/24 maxlen: 24 138.124.240.0/24 maxlen: 24 138.124.241.0/24 maxlen: 24 138.124.242.0/24 maxlen: 24 138.124.243.0/24 maxlen: 24 138.124.244.0/24 maxlen: 24 138.124.245.0/24 maxlen: 24 138.124.246.0/24 maxlen: 24 138.124.247.0/24 maxlen: 24 138.124.248.0/24 maxlen: 24 138.124.249.0/24 maxlen: 24 138.124.250.0/24 maxlen: 24 138.124.251.0/24 maxlen: 24 138.124.252.0/24 maxlen: 24 138.124.253.0/24 maxlen: 24 138.124.254.0/24 maxlen: 24 138.124.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ec:68:29:9e:e5:02:d2:0a:cf:5c:7b:74:e6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72ae6811f869c0e001dd2013b85540dabfc7ad6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4b:11:ba:30:cc:0a:4c:86:b7:90:0f:45:8a: 2a:13:2a:8f:95:ac:08:08:6f:1b:3f:44:f2:1d:e4: c7:75:88:1d:0c:91:a0:f5:0f:56:a5:36:cd:2e:2e: df:c7:2c:e1:12:92:f7:61:f8:40:fe:3a:6e:8d:ee: a8:5c:76:0c:fd:b6:18:41:d1:06:ec:4a:18:35:40: 1c:c3:03:d4:38:9e:58:95:ee:29:de:f9:47:6e:7a: b9:bb:bc:a1:8b:52:56:9d:35:ae:b5:d0:27:d2:30: 73:e3:52:f3:45:fd:9d:93:7c:52:59:29:be:86:cd: 06:53:47:0f:7d:36:b7:95:16:ec:2a:e4:bd:7e:e3: 74:d7:70:08:88:75:e7:d6:b1:5b:7d:38:53:94:1d: 0f:d2:14:9d:8d:04:a3:f6:e0:31:23:8c:8a:23:89: b9:1e:10:23:ca:b0:bf:e8:be:85:f8:0b:00:d4:4e: 78:e4:9c:f1:7d:f4:ad:54:c3:b3:a6:21:63:d9:22: 42:2e:de:24:a3:a6:0a:c4:8d:a2:83:a7:6c:d5:86: 1c:8b:3d:d9:bc:a7:17:d0:88:6c:1e:dd:e4:f3:36: fe:e7:af:76:31:93:b7:4b:ec:a3:de:35:2a:3b:b5: b8:98:68:ee:61:65:94:e7:fb:a0:db:ad:c0:26:6d: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AE:68:11:F8:69:C0:E0:01:DD:20:13:B8:55:40:DA:BF:C7:AD:6D X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/cq5oEfhpwOAB3SATuFVA2r_HrW0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.0.0/23 138.124.5.0-138.124.9.255 138.124.11.0-138.124.12.255 138.124.17.0/24 138.124.28.0/24 138.124.32.0/23 138.124.36.0-138.124.48.255 138.124.56.0/23 138.124.62.0-138.124.77.255 138.124.79.0-138.124.80.255 138.124.82.0-138.124.88.255 138.124.94.0-138.124.98.255 138.124.100.0/24 138.124.104.0-138.124.106.255 138.124.120.0-138.124.122.255 138.124.126.0/24 138.124.228.0/22 138.124.240.0/20 Signature Algorithm: sha256WithRSAEncryption 45:a3:ad:cd:0f:2b:3d:8d:87:7b:27:3b:55:73:7c:70:e2:c6: ce:9f:20:a8:99:52:df:bc:db:45:27:9b:4d:21:5b:14:c0:07: b0:f6:67:d9:60:8c:70:06:05:c9:64:e5:c5:17:60:21:b1:0a: 81:07:05:0f:6f:65:73:14:03:c5:8e:4e:b0:d4:b4:11:77:e2: e1:a2:9a:d5:20:02:11:74:71:c4:13:42:73:42:c5:76:90:60: 4f:eb:21:88:0f:54:d2:95:0b:2f:32:9e:ec:d2:8b:f6:e9:1c: be:78:e4:35:40:20:ea:ab:65:8c:ea:42:13:3f:09:b5:ca:11: 3c:57:c0:53:27:9f:8f:dd:71:c4:ba:4b:0c:0b:65:4a:d6:e2: 60:c6:8d:8b:84:6d:43:13:70:48:9a:d1:05:7a:85:7d:e1:90: 0e:4c:e0:10:4a:b5:df:38:6f:97:5e:b7:f7:46:a0:62:b6:39: 73:54:d2:43:a6:6b:ba:4f:84:59:fc:38:c2:d0:fc:09:10:27: e4:76:3d:8b:b5:30:18:50:94:20:59:9b:41:16:e0:eb:93:3e: 7b:07:1d:c4:be:d6:7e:bc:ba:16:f4:88:1d:82:5e:b4:64:80: 51:9b:3f:57:6f:24:37:67:dc:1e:ca:80:f7:a2:47:76:51:b9: 45:f4:6c:d6 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgISAZt26uxoKZ7lAtIKz1x7dOZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmFlNjgxMWY4NjljMGUwMDFkZDIwMTNiODU1NDBkYWJmYzdhZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0sRujDMCkyGt5APRYoqEyqPlawI CG8bP0TyHeTHdYgdDJGg9Q9WpTbNLi7fxyzhEpL3YfhA/jpuje6oXHYM/bYYQdEG 7EoYNUAcwwPUOJ5Yle4p3vlHbnq5u7yhi1JWnTWutdAn0jBz41LzRf2dk3xSWSm+ hs0GU0cPfTa3lRbsKuS9fuN013AIiHXn1rFbfThTlB0P0hSdjQSj9uAxI4yKI4m5 HhAjyrC/6L6F+AsA1E545JzxffStVMOzpiFj2SJCLt4ko6YKxI2ig6ds1YYciz3Z vKcX0IhsHt3k8zb+5692MZO3S+yj3jUqO7W4mGjuYWWU5/ug263AJm1hhQIDAQAB o4ICvDCCArgwHQYDVR0OBBYEFHKuaBH4acDgAd0gE7hVQNq/x61tMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvY3E1b0VmaHB3T0FCM1NBVHVGVkEycl9IclcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHRBggrBgEFBQcBBwEB/wSBwTCBvjCBuwQCAAEwgbQDBAGK fAAwDAMEAIp8BQMEAYp8CDAMAwQAinwLAwQAinwMAwQAinwRAwQAinwcAwQBinwg MAwDBAKKfCQDBACKfDADBAGKfDgwDAMEAYp8PgMEAYp8TDAMAwQAinxPAwQAinxQ MAwDBAGKfFIDBACKfFgwDAMEAYp8XgMEAIp8YgMEAIp8ZDAMAwQDinxoAwQAinxq MAwDBAOKfHgDBACKfHoDBACKfH4DBAKKfOQDBASKfPAwDQYJKoZIhvcNAQELBQAD ggEBAEWjrc0PKz2Nh3snO1VzfHDixs6fIKiZUt+820Unm00hWxTAB7D2Z9lgjHAG Bclk5cUXYCGxCoEHBQ9vZXMUA8WOTrDUtBF34uGimtUgAhF0ccQTQnNCxXaQYE/r IYgPVNKVCy8ynuzSi/bpHL545DVAIOqrZYzqQhM/CbXKETxXwFMnn4/dccS6SwwL ZUrW4mDGjYuEbUMTcEia0QV6hX3hkA5M4BBKtd84b5det/dGoGK2OXNU0kOma7pP hFn8OMLQ/AkQJ+R2PYu1MBhQlCBZm0EW4OuTPnsHHcS+1n68uhb0iB2CXrRkgFGb P1dvJDdn3B7KgPeiR3ZRuUX0bNY= -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:51 2026 by rpki-client