This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/f-xwTa_yCR7Ss17S1EwzgQBKMGA.roa File: f-xwTa_yCR7Ss17S1EwzgQBKMGA.roa (raw, json) Hash identifier: TF+ZxPW7XkGmzPufg/x4SjKszDqu5zsH5itje4zw6/M= Subject key identifier: 7F:EC:70:4D:AF:F2:09:1E:D2:B3:5E:D2:D4:4C:33:81:00:4A:30:60 Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019B7F15CD6D87E7F4B6DC5EBF4907EFE0CC Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/f-xwTa_yCR7Ss17S1EwzgQBKMGA.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 141.138.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cd:6d:87:e7:f4:b6:dc:5e:bf:49:07:ef:e0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fec704daff2091ed2b35ed2d44c3381004a3060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b6:b1:3e:28:5b:d4:32:5a:a1:a5:ba:da:04: c3:f9:6a:e9:80:6a:ae:39:38:8a:c1:55:3e:42:6a: 10:f8:56:6a:ed:1d:6d:9f:0c:f3:44:12:86:4c:84: 93:2c:2e:81:82:7f:ce:ec:4d:ef:06:de:55:bf:b0: ab:24:54:4b:f3:7c:92:56:eb:c4:a5:08:95:60:30: 5c:6c:f9:53:a3:fe:9d:0f:5e:8f:ba:30:e3:ab:8c: 82:6f:bf:02:b6:bc:a1:4f:0e:00:3e:87:26:bb:7f: f7:2c:e9:d1:72:dc:96:1a:05:aa:ed:e2:00:92:3d: aa:36:ae:7c:49:fe:f0:9b:7f:34:73:7c:23:95:c3: 5a:7e:fe:98:a7:6b:e0:36:90:8f:a4:2b:02:0c:a5: cb:35:6d:95:dd:9a:11:0f:65:4a:65:ac:85:9f:4d: db:d8:e2:c4:5e:b6:2a:62:ea:1e:8f:1b:ec:45:28: c2:d1:c3:20:6f:a1:86:a7:fa:c0:a2:18:7c:81:21: db:20:d8:99:01:36:b1:b7:ec:bd:f8:37:5b:67:aa: 8e:84:61:1f:64:71:68:61:4f:8d:3b:83:36:5b:49: 26:ef:83:16:2b:0d:8d:22:99:cc:7b:ff:52:51:32: e2:e5:7c:54:de:68:7d:0d:2f:79:0a:0f:1b:0d:87: d0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EC:70:4D:AF:F2:09:1E:D2:B3:5E:D2:D4:4C:33:81:00:4A:30:60 X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/f-xwTa_yCR7Ss17S1EwzgQBKMGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.74.0/24 Signature Algorithm: sha256WithRSAEncryption 50:be:aa:7f:75:2b:05:9f:92:48:b2:c4:a0:5c:a7:36:4e:37: 74:b6:34:a3:51:f4:11:91:92:d1:37:ca:48:1e:42:f9:90:ff: 1c:3b:3e:f3:c9:7b:b5:d7:b4:2e:8e:c1:4e:3f:cb:8f:cf:8a: 01:75:fd:3a:34:06:eb:6c:a8:98:bb:dc:bd:57:02:75:63:e4: 80:cc:72:6e:34:b9:0d:2d:79:c0:81:23:cd:64:c1:49:8c:5b: 29:a2:35:88:5f:13:ba:10:89:22:6d:a3:e4:bb:96:6d:9b:d4: e5:ae:0f:b2:8b:c8:e9:27:e9:21:cb:ff:22:4d:c4:34:55:67: 47:6b:6a:4f:fc:12:fd:ac:47:15:ea:87:8a:e2:d9:37:f3:f9: ee:93:b4:3a:99:2f:cd:72:eb:df:d8:41:b9:a6:45:9e:9d:1e: 82:d0:35:49:8e:36:ec:2c:b5:87:da:f7:00:79:40:8e:d7:c1: ea:01:17:eb:4c:b6:e7:d2:03:0d:c7:06:77:88:72:e5:f6:5e: 53:98:f2:3a:ad:f2:59:71:0b:b0:70:6b:93:6a:c3:6d:9a:c3: 8e:38:b3:1c:06:4b:41:98:52:25:3b:e2:85:58:a3:2e:a0:5b: 1c:f1:5b:11:97:ad:23:60:13:09:b7:48:2d:08:d7:ee:53:cf: 4a:f5:b0:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc1th+f0ttxev0kH7+DMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmVjNzA0ZGFmZjIwOTFlZDJiMzVlZDJkNDRjMzM4MTAwNGEzMDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7axPihb1DJaoaW62gTD+WrpgGqu OTiKwVU+QmoQ+FZq7R1tnwzzRBKGTISTLC6Bgn/O7E3vBt5Vv7CrJFRL83ySVuvE pQiVYDBcbPlTo/6dD16PujDjq4yCb78CtryhTw4APocmu3/3LOnRctyWGgWq7eIA kj2qNq58Sf7wm380c3wjlcNafv6Yp2vgNpCPpCsCDKXLNW2V3ZoRD2VKZayFn03b 2OLEXrYqYuoejxvsRSjC0cMgb6GGp/rAohh8gSHbINiZATaxt+y9+DdbZ6qOhGEf ZHFoYU+NO4M2W0km74MWKw2NIpnMe/9SUTLi5XxU3mh9DS95Cg8bDYfQHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/scE2v8gke0rNe0tRMM4EASjBgMB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEvZi14d1RhX3lDUjdTczE3UzFFd3pnUUJLTUdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYpKMA0G CSqGSIb3DQEBCwUAA4IBAQBQvqp/dSsFn5JIssSgXKc2Tjd0tjSjUfQRkZLRN8pI HkL5kP8cOz7zyXu117QujsFOP8uPz4oBdf06NAbrbKiYu9y9VwJ1Y+SAzHJuNLkN LXnAgSPNZMFJjFspojWIXxO6EIkibaPku5Ztm9Tlrg+yi8jpJ+khy/8iTcQ0VWdH a2pP/BL9rEcV6oeK4tk38/nuk7Q6mS/Ncuvf2EG5pkWenR6C0DVJjjbsLLWH2vcA eUCO18HqARfrTLbn0gMNxwZ3iHLl9l5TmPI6rfJZcQuwcGuTasNtmsOOOLMcBktB mFIlO+KFWKMuoFsc8VsRl60jYBMJt0gtCNfuU89K9bAj -----END CERTIFICATE-----Generated at Sun Jan 11 03:36:19 2026 by rpki-client