This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/n-RcDYfPEHRG-eX6d__Iei5yzPM.roa File: n-RcDYfPEHRG-eX6d__Iei5yzPM.roa (raw, json) Hash identifier: K8QxMOk9uQIJxh1nzrIqq5LMo/ZGuRbN59GoRIA2470= Subject key identifier: 9F:E4:5C:0D:87:CF:10:74:46:F9:E5:FA:77:FF:C8:7A:2E:72:CC:F3 Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019B7F15CE9CF04DB6B4C2E0B95C830EC4E4 Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/n-RcDYfPEHRG-eX6d__Iei5yzPM.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401650 IP address blocks: 141.138.72.0/24 maxlen: 24 141.138.73.0/24 maxlen: 24 141.138.75.0/24 maxlen: 24 141.138.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:9c:f0:4d:b6:b4:c2:e0:b9:5c:83:0e:c4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe45c0d87cf107446f9e5fa77ffc87a2e72ccf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:33:e6:2f:4f:cb:53:45:91:5a:96:4b:82: c0:55:60:bb:2e:e8:61:56:c6:4e:33:ad:48:ca:19: fa:6e:ba:45:24:73:9e:25:19:0a:f5:ea:81:29:bc: 7d:45:a8:09:5b:f2:ed:c1:fb:ca:da:1d:cf:dd:e7: 70:e4:c0:b0:21:38:80:fd:62:5a:ec:aa:a3:52:d0: 61:04:78:63:aa:4a:0d:17:78:d1:1e:46:1d:a5:af: ae:38:9e:cd:a7:fb:1b:60:8c:2d:09:04:8f:3d:6f: b5:2b:a8:61:aa:dc:10:23:c2:84:da:2d:eb:04:ee: fe:a8:cc:e5:c9:14:26:73:23:f3:2a:b1:4a:5d:cb: 37:16:66:0a:6c:43:0f:48:09:ab:95:87:42:45:70: 8e:06:1e:88:c3:91:e3:b3:b6:ee:64:be:67:0e:98: b5:df:5b:0f:61:a9:cd:e1:eb:2b:46:3a:28:ee:71: fa:b6:3a:cc:89:be:c8:e4:77:d7:f3:03:8e:c2:00: 06:52:02:d8:35:17:7d:dd:f4:c0:fc:15:21:83:6d: d1:12:c8:16:2b:54:fc:58:8a:57:fe:1d:d1:67:81: 46:22:a7:53:dd:bb:2a:a2:88:ed:e9:06:87:6d:f2: 5c:9e:ee:38:05:87:26:33:cb:40:df:b8:40:0c:de: b4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:5C:0D:87:CF:10:74:46:F9:E5:FA:77:FF:C8:7A:2E:72:CC:F3 X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/n-RcDYfPEHRG-eX6d__Iei5yzPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.72.0/23 141.138.75.0-141.138.76.255 Signature Algorithm: sha256WithRSAEncryption 23:d1:6c:4b:ea:a8:cb:a1:2a:ea:59:b6:51:53:43:a5:74:72: d5:f3:c2:59:3b:dd:46:31:1e:55:3a:6c:d8:6d:78:f5:b1:33: 3d:81:7b:c7:21:8f:bf:99:31:c4:95:d2:d7:58:66:f1:a4:c6: 89:ab:d2:e3:6f:50:79:a4:b2:c9:fa:69:1d:27:b6:0f:a7:2e: 3a:1c:2e:f4:37:f5:90:b9:ea:01:6e:a2:11:5e:03:7c:ad:0b: bb:56:dc:97:c0:f5:c5:bd:2b:e4:fa:f3:85:48:c1:3f:2f:49: fe:cd:5a:b4:c9:a8:e2:21:c0:9d:b0:0a:eb:20:e1:7d:ce:ee: d4:a9:b5:51:ef:d6:4a:49:a3:e3:78:99:45:6a:a1:de:80:2b: ea:cf:e8:28:4d:75:02:f0:bf:26:2e:91:e8:5a:ba:44:58:a4: 3e:58:ff:db:4f:91:a9:3f:1c:c7:86:a0:ed:f4:26:a8:a7:8c: 83:b5:e6:9a:0e:97:e4:72:c8:f1:0a:da:bf:3a:99:92:68:be: e0:c0:01:cb:a1:d0:5f:55:6c:6a:ba:35:59:b7:ed:62:f5:9a: c2:ac:12:aa:30:9b:77:af:77:f9:a0:72:59:3b:65:e9:bf:d4: ee:48:f7:ee:ad:87:fa:53:2b:3b:29:af:42:fa:af:d5:9a:8a: 63:4f:dd:e7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt/Fc6c8E22tMLguVyDDsTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU0NWMwZDg3Y2YxMDc0NDZmOWU1ZmE3N2ZmYzg3YTJlNzJjY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L4z5i9Py1NFkVqWS4LAVWC7Luhh VsZOM61Iyhn6brpFJHOeJRkK9eqBKbx9RagJW/LtwfvK2h3P3edw5MCwITiA/WJa 7KqjUtBhBHhjqkoNF3jRHkYdpa+uOJ7Np/sbYIwtCQSPPW+1K6hhqtwQI8KE2i3r BO7+qMzlyRQmcyPzKrFKXcs3FmYKbEMPSAmrlYdCRXCOBh6Iw5Hjs7buZL5nDpi1 31sPYanN4esrRjoo7nH6tjrMib7I5HfX8wOOwgAGUgLYNRd93fTA/BUhg23REsgW K1T8WIpX/h3RZ4FGIqdT3bsqoojt6QaHbfJcnu44BYcmM8tA37hADN60uQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFJ/kXA2HzxB0Rvnl+nf/yHoucszzMB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEvbi1SY0RZZlBFSFJHLWVYNmRfX0llaTV5elBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBjYpIMAwD BACNiksDBACNikwwDQYJKoZIhvcNAQELBQADggEBACPRbEvqqMuhKupZtlFTQ6V0 ctXzwlk73UYxHlU6bNhtePWxMz2Be8chj7+ZMcSV0tdYZvGkxomr0uNvUHmkssn6 aR0ntg+nLjocLvQ39ZC56gFuohFeA3ytC7tW3JfA9cW9K+T684VIwT8vSf7NWrTJ qOIhwJ2wCusg4X3O7tSptVHv1kpJo+N4mUVqod6AK+rP6ChNdQLwvyYukehaukRY pD5Y/9tPkak/HMeGoO30JqinjIO15poOl+RyyPEK2r86mZJovuDAAcuh0F9VbGq6 NVm37WL1msKsEqowm3evd/mgclk7Zem/1O5I9+6th/pTKzspr0L6r9WaimNP3ec= -----END CERTIFICATE-----Generated at Sun Jan 11 03:36:20 2026 by rpki-client