This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/hC_sKjfpJSWIOqCJwlsGyvo6N4w.roa File: hC_sKjfpJSWIOqCJwlsGyvo6N4w.roa (raw, json) Hash identifier: OOYOWz2G4m3FFRMrCNHPvogLHfi53TOFEQWueZF5XRA= Subject key identifier: 84:2F:EC:2A:37:E9:25:25:88:3A:A0:89:C2:5B:06:CA:FA:3A:37:8C Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019BB642DF3867A3ADCAAAC84A2A695976C7 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/hC_sKjfpJSWIOqCJwlsGyvo6N4w.roa Signing time: Tue 13 Jan 2026 07:29:54 +0000 ROA not before: Tue 13 Jan 2026 07:29:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 138.124.62.0/24 maxlen: 24 138.124.63.0/24 maxlen: 24 138.124.64.0/24 maxlen: 24 138.124.65.0/24 maxlen: 24 138.124.66.0/24 maxlen: 24 138.124.67.0/24 maxlen: 24 138.124.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:42:df:38:67:a3:ad:ca:aa:c8:4a:2a:69:59:76:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 13 07:29:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=842fec2a37e92525883aa089c25b06cafa3a378c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:c1:9a:24:0c:18:86:3c:84:57:00:59:17: 48:27:02:e7:f6:ea:31:ba:32:99:7c:57:fb:a3:c5: c3:9e:a5:ad:65:80:88:53:fd:2d:38:54:91:a8:9e: c5:0e:1e:7c:09:54:84:56:24:b2:79:b4:48:89:8f: ec:8f:db:d3:c0:cd:9b:f1:08:b3:70:ea:49:af:d8: fb:41:40:7a:ed:9e:92:15:8d:9c:90:c1:cf:54:44: 2e:21:c9:c9:ad:98:d5:8c:22:16:15:ac:fb:5e:a4: 03:00:8f:11:bf:34:87:9b:03:13:08:b8:9d:41:15: e1:ce:6b:6b:d2:0f:e8:74:69:b7:95:57:69:1b:ba: 8b:b8:0e:f7:14:4a:69:3a:c8:f6:0f:88:e9:b1:1d: 8b:20:3f:ef:b4:4e:02:d8:93:9d:99:53:fa:23:2b: f5:99:d7:55:4e:44:2d:70:13:15:cb:2f:e9:25:c1: ca:83:27:db:14:ef:95:1a:65:cf:77:30:0a:53:e1: e8:df:d8:25:60:d5:b8:ab:57:1b:61:5d:0a:f7:88: 6e:ab:52:45:68:a9:db:23:81:f6:1b:99:6d:5b:3f: bf:b1:af:fe:3e:d9:5a:5f:fe:e9:eb:94:5a:96:67: e7:6b:4e:f7:22:12:83:0f:97:d5:54:6b:f2:bf:12: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2F:EC:2A:37:E9:25:25:88:3A:A0:89:C2:5B:06:CA:FA:3A:37:8C X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/hC_sKjfpJSWIOqCJwlsGyvo6N4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.62.0-138.124.67.255 138.124.79.0/24 Signature Algorithm: sha256WithRSAEncryption 61:78:e3:8c:eb:71:cf:fc:77:57:6e:b2:ae:72:aa:ed:45:6f: 7b:5a:2a:94:fe:36:00:9c:12:91:7b:02:6b:b9:40:eb:09:b0: 55:51:e0:b3:27:47:39:51:09:2c:fc:4d:5f:06:60:4a:29:8d: 33:7e:59:ed:ca:86:14:19:ab:15:47:36:30:2b:0e:b8:51:d1: fc:35:92:47:f2:d3:40:9f:4a:da:7e:20:0f:a1:01:f9:76:17: 05:4d:d7:37:59:06:1c:2d:f1:33:5e:c2:da:6e:e5:6a:bc:ff: 14:47:d1:1e:75:87:7b:70:54:e3:12:f2:b4:be:af:63:0b:e0: ac:fd:a9:ac:fa:a7:40:1f:02:36:5f:f9:46:02:93:e0:b0:86: 00:77:31:10:72:2f:62:7a:97:00:32:f1:9b:b3:aa:f1:4b:7f: 37:18:b9:0f:d5:36:ca:4c:a4:99:25:bd:12:03:66:b3:97:e2: 7e:e7:e5:5a:31:e7:0a:b2:97:ff:0c:77:79:07:32:eb:86:93: 2c:58:f0:d0:12:79:fa:19:b1:80:89:3e:2a:1b:10:e3:37:68: 0d:e1:55:ad:4d:45:d4:6a:b7:2b:0b:1c:c2:16:37:c7:61:57: da:9c:19:93:96:71:3b:bf:33:f7:55:c6:06:e9:f4:0d:3f:73: 8e:93:f0:f2 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZu2Qt84Z6OtyqrISippWXbHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTEzMDcyOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDJmZWMyYTM3ZTkyNTI1ODgzYWEwODljMjViMDZjYWZhM2EzNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEXBmiQMGIY8hFcAWRdIJwLn9uox ujKZfFf7o8XDnqWtZYCIU/0tOFSRqJ7FDh58CVSEViSyebRIiY/sj9vTwM2b8Qiz cOpJr9j7QUB67Z6SFY2ckMHPVEQuIcnJrZjVjCIWFaz7XqQDAI8RvzSHmwMTCLid QRXhzmtr0g/odGm3lVdpG7qLuA73FEppOsj2D4jpsR2LID/vtE4C2JOdmVP6Iyv1 mddVTkQtcBMVyy/pJcHKgyfbFO+VGmXPdzAKU+Ho39glYNW4q1cbYV0K94huq1JF aKnbI4H2G5ltWz+/sa/+PtlaX/7p65Ralmfna073IhKDD5fVVGvyvxIJVwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIQv7Co36SUliDqgicJbBsr6OjeMMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvaENfc0tqZnBKU1dJT3FDSndsc0d5dm82TjR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAGKfD4D BAKKfEADBACKfE8wDQYJKoZIhvcNAQELBQADggEBAGF444zrcc/8d1dusq5yqu1F b3taKpT+NgCcEpF7Amu5QOsJsFVR4LMnRzlRCSz8TV8GYEopjTN+We3KhhQZqxVH NjArDrhR0fw1kkfy00CfStp+IA+hAfl2FwVN1zdZBhwt8TNewtpu5Wq8/xRH0R51 h3twVOMS8rS+r2ML4Kz9qaz6p0AfAjZf+UYCk+CwhgB3MRByL2J6lwAy8ZuzqvFL fzcYuQ/VNspMpJklvRIDZrOX4n7n5Vox5wqyl/8Md3kHMuuGkyxY8NASefoZsYCJ PiobEOM3aA3hVa1NRdRqtysLHMIWN8dhV9qcGZOWcTu/M/dVxgbp9A0/c46T8PI= -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:39 2026 by rpki-client