This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/u5OJcAyxXqVdXI6_czaVfj1EejM.roa File: u5OJcAyxXqVdXI6_czaVfj1EejM.roa (raw, json) Hash identifier: t2Z9GDdetSIV2Qs3dbUX4iVW8S3Gt7a3O86Jkfr44UQ= Subject key identifier: BB:93:89:70:0C:B1:5E:A5:5D:5C:8E:BF:73:36:95:7E:3D:44:7A:33 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019B76EAEEE1656CB49E6D4C7655ED5E3A87 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/u5OJcAyxXqVdXI6_czaVfj1EejM.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 138.124.13.0/24 maxlen: 24 138.124.14.0/24 maxlen: 24 138.124.18.0/24 maxlen: 24 138.124.24.0/24 maxlen: 24 138.124.25.0/24 maxlen: 24 138.124.26.0/24 maxlen: 24 138.124.29.0/24 maxlen: 24 138.124.34.0/24 maxlen: 24 138.124.35.0/24 maxlen: 24 138.124.49.0/24 maxlen: 24 138.124.50.0/24 maxlen: 24 138.124.51.0/24 maxlen: 24 138.124.52.0/24 maxlen: 24 138.124.53.0/24 maxlen: 24 138.124.54.0/24 maxlen: 24 138.124.55.0/24 maxlen: 24 138.124.58.0/24 maxlen: 24 138.124.59.0/24 maxlen: 24 138.124.60.0/24 maxlen: 24 138.124.61.0/24 maxlen: 24 138.124.78.0/24 maxlen: 24 138.124.89.0/24 maxlen: 24 138.124.90.0/24 maxlen: 24 138.124.91.0/24 maxlen: 24 138.124.92.0/24 maxlen: 24 138.124.93.0/24 maxlen: 24 138.124.99.0/24 maxlen: 24 138.124.101.0/24 maxlen: 24 138.124.102.0/24 maxlen: 24 138.124.103.0/24 maxlen: 24 138.124.108.0/24 maxlen: 24 138.124.109.0/24 maxlen: 24 138.124.110.0/24 maxlen: 24 138.124.112.0/24 maxlen: 24 138.124.113.0/24 maxlen: 24 138.124.114.0/24 maxlen: 24 138.124.115.0/24 maxlen: 24 138.124.116.0/24 maxlen: 24 138.124.117.0/24 maxlen: 24 138.124.118.0/24 maxlen: 24 138.124.119.0/24 maxlen: 24 138.124.123.0/24 maxlen: 24 138.124.124.0/24 maxlen: 24 138.124.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ee:e1:65:6c:b4:9e:6d:4c:76:55:ed:5e:3a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb9389700cb15ea55d5c8ebf7336957e3d447a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c4:3b:c2:a6:32:4c:13:c1:f1:89:bb:86:31: fa:de:8c:63:cf:2c:46:2c:46:ec:64:17:1e:f8:86: ee:36:4f:48:ea:e4:49:a9:b2:ff:9c:02:f0:6e:dc: 5d:66:6e:47:a4:53:f1:83:45:ea:da:4f:43:8d:44: 86:36:6c:29:86:26:3d:86:bd:2a:01:43:31:cd:b0: bc:68:61:46:67:0d:19:0e:a3:a9:1e:57:03:15:d1: 33:3d:60:41:25:72:3f:62:62:a1:07:d7:09:0f:54: 14:ef:9f:57:0c:21:13:5a:be:5c:6b:32:8a:cc:3d: 74:76:af:30:75:95:c1:23:be:87:e9:e6:13:74:54: 17:ef:a6:30:8d:f0:a7:ee:34:d2:98:92:56:4d:42: 41:82:bd:6f:30:a7:f3:38:16:81:3d:4f:ca:f6:1e: c9:a1:4e:a8:78:6a:1e:2b:e5:24:64:86:8c:61:c1: 0b:28:6a:73:aa:9a:4e:7d:43:79:d9:53:3c:89:db: a5:cc:bd:36:b5:d9:09:c5:64:f1:91:4c:a5:02:f5: b2:6e:a1:0e:9a:13:4d:a7:b2:bc:32:9e:bf:bf:fa: 27:18:ef:57:9c:96:05:5a:36:e2:c4:84:9f:d9:22: 61:5e:7e:12:c0:c5:8d:04:a6:7b:39:45:45:f5:56: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:93:89:70:0C:B1:5E:A5:5D:5C:8E:BF:73:36:95:7E:3D:44:7A:33 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/u5OJcAyxXqVdXI6_czaVfj1EejM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.13.0-138.124.14.255 138.124.18.0/24 138.124.24.0-138.124.26.255 138.124.29.0/24 138.124.34.0/23 138.124.49.0-138.124.55.255 138.124.58.0-138.124.61.255 138.124.78.0/24 138.124.89.0-138.124.93.255 138.124.99.0/24 138.124.101.0-138.124.103.255 138.124.108.0-138.124.110.255 138.124.112.0/21 138.124.123.0-138.124.124.255 138.124.127.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:08:43:f8:d8:46:87:8d:f0:18:28:34:74:73:bd:5d:88:4e: 79:0d:0b:c6:77:9d:93:2b:70:12:59:dc:e0:8d:45:c1:c1:cb: 6a:1f:e6:8f:8d:33:51:63:c9:7c:c4:39:9c:09:ee:38:3d:e8: 23:17:99:55:6e:6d:9b:c6:42:f4:93:7f:c3:cc:88:de:c7:ae: fb:85:8f:69:79:18:4f:a3:89:b5:de:9b:f2:fe:f2:a3:15:20: e1:03:8a:9a:2f:e6:98:b7:44:81:5b:59:a2:1c:f7:7b:b9:e1: f1:78:d5:e4:98:4c:8f:37:bb:e8:c6:a9:c3:7c:64:f3:f3:ad: 81:de:ee:23:c3:15:0c:ab:f9:1a:f1:36:18:be:8b:fb:82:3b: 09:c6:b6:9b:74:e6:3b:68:d2:ea:7b:8d:1e:84:3b:8c:23:f7: 2f:4f:a6:85:2e:c4:42:35:a4:c5:8a:e1:de:41:0a:55:4a:79: 62:72:48:ee:29:e3:79:ab:31:0c:f0:4d:fb:2e:f4:a4:dc:b9: eb:90:15:f5:5b:09:2a:e5:8f:e8:44:b7:f3:c8:a9:f0:bc:c9: 4a:6b:29:97:4b:1a:86:7a:aa:65:92:cb:02:5c:ae:fe:78:d4: f3:4d:fb:a7:4b:07:19:6a:ca:19:32:ad:72:1c:3a:9e:c0:db: f6:e4:1c:4e -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgISAZt26u7hZWy0nm1MdlXtXjqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjkzODk3MDBjYjE1ZWE1NWQ1YzhlYmY3MzM2OTU3ZTNkNDQ3YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Q7wqYyTBPB8Ym7hjH63oxjzyxG LEbsZBce+IbuNk9I6uRJqbL/nALwbtxdZm5HpFPxg0Xq2k9DjUSGNmwphiY9hr0q AUMxzbC8aGFGZw0ZDqOpHlcDFdEzPWBBJXI/YmKhB9cJD1QU759XDCETWr5cazKK zD10dq8wdZXBI76H6eYTdFQX76YwjfCn7jTSmJJWTUJBgr1vMKfzOBaBPU/K9h7J oU6oeGoeK+UkZIaMYcELKGpzqppOfUN52VM8idulzL02tdkJxWTxkUylAvWybqEO mhNNp7K8Mp6/v/onGO9XnJYFWjbixISf2SJhXn4SwMWNBKZ7OUVF9Va+ewIDAQAB o4ICojCCAp4wHQYDVR0OBBYEFLuTiXAMsV6lXVyOv3M2lX49RHozMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvdTVPSmNBeXhYcVZkWEk2X2N6YVZmajFFZWpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG3BggrBgEFBQcBBwEB/wSBpzCBpDCBoQQCAAEwgZowDAME AIp8DQMEAIp8DgMEAIp8EjAMAwQDinwYAwQAinwaAwQAinwdAwQBinwiMAwDBACK fDEDBAOKfDAwDAMEAYp8OgMEAYp8PAMEAIp8TjAMAwQAinxZAwQBinxcAwQAinxj MAwDBACKfGUDBAOKfGAwDAMEAop8bAMEAIp8bgMEA4p8cDAMAwQAinx7AwQAinx8 AwQAinx/MA0GCSqGSIb3DQEBCwUAA4IBAQB/CEP42EaHjfAYKDR0c71diE55DQvG d52TK3ASWdzgjUXBwctqH+aPjTNRY8l8xDmcCe44PegjF5lVbm2bxkL0k3/DzIje x677hY9peRhPo4m13pvy/vKjFSDhA4qaL+aYt0SBW1miHPd7ueHxeNXkmEyPN7vo xqnDfGTz862B3u4jwxUMq/ka8TYYvov7gjsJxrabdOY7aNLqe40ehDuMI/cvT6aF LsRCNaTFiuHeQQpVSnlickjuKeN5qzEM8E37LvSk3LnrkBX1Wwkq5Y/oRLfzyKnw vMlKaymXSxqGeqplkssCXK7+eNTzTfunSwcZasoZMq1yHDqewNv25BxO -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:48 2026 by rpki-client