This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/tjZ8THIYRXbgLz196DSicii0iXo.roa File: tjZ8THIYRXbgLz196DSicii0iXo.roa (raw, json) Hash identifier: qdVcRzwdZVy+DLw1SJkjSiPfhs6PqNIrsHH3olzJwQA= Subject key identifier: B6:36:7C:4C:72:18:45:76:E0:2F:3D:7D:E8:34:A2:72:28:B4:89:7A Certificate issuer: /CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Certificate serial: 019B7F15CDD11B8380DF2625458047D804EF Authority key identifier: C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/tjZ8THIYRXbgLz196DSicii0iXo.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 141.138.77.0/24 maxlen: 24 141.138.78.0/24 maxlen: 24 141.138.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.mft rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cd:d1:1b:83:80:df:26:25:45:80:47:d8:04:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98adafb1f31f9889aa4735792b6e3db46931bb9 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6367c4c72184576e02f3d7de834a27228b4897a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6f:5a:8c:94:3f:17:33:c2:b1:c1:0f:ab:56: 42:e2:25:02:10:38:b9:79:c2:44:ba:7f:ce:ab:ce: 07:2f:45:eb:b1:b7:c7:27:84:3f:64:a3:2e:93:dd: 61:81:13:96:d0:7e:a3:17:aa:5c:ad:71:be:9e:3d: 30:3f:c1:16:5e:a7:c4:9a:2b:5c:32:f1:52:b0:22: 6e:56:75:d4:70:8b:19:f3:f8:27:ae:30:e5:e3:05: 7f:63:44:03:e6:5b:40:da:b5:06:99:c5:30:99:f8: 89:bc:49:68:cc:7f:0b:42:65:72:90:a0:b2:47:f2: 5c:f8:dc:ba:0a:79:64:fb:4b:ff:2e:8d:49:47:ac: 14:18:ab:d0:b4:26:9a:d6:37:2b:96:a3:b4:13:76: df:71:9d:73:ed:d7:8d:63:50:7b:a8:98:9a:13:d9: 5e:6f:48:2b:3a:21:47:80:71:92:05:26:89:47:ab: 73:6a:b0:70:bd:94:78:c3:28:e0:a8:46:38:10:73: aa:8f:8e:cf:77:8d:82:98:b0:69:47:89:fe:38:26: 4f:fa:7d:2a:51:b0:b1:7e:7f:0f:54:c5:1c:86:55: 73:a4:44:11:bf:98:97:83:3e:62:59:15:d3:0f:ee: 54:37:c8:e5:a3:67:98:34:fc:16:8e:6f:86:08:d3: 4b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:36:7C:4C:72:18:45:76:E0:2F:3D:7D:E8:34:A2:72:28:B4:89:7A X509v3 Authority Key Identifier: keyid:C9:8A:DA:FB:1F:31:F9:88:9A:A4:73:57:92:B6:E3:DB:46:93:1B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYra-x8x-YiapHNXkrbj20aTG7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/tjZ8THIYRXbgLz196DSicii0iXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/cd39be-3e25-4dbc-860f-3b103d5a690a/1/yYra-x8x-YiapHNXkrbj20aTG7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.77.0-141.138.79.255 Signature Algorithm: sha256WithRSAEncryption 01:48:e0:90:7d:4f:aa:23:de:ec:e9:e3:28:be:0f:cc:fa:39: 11:69:fe:66:52:da:1c:54:d2:90:7f:ea:65:d0:48:a2:98:87: d7:6f:38:9e:8d:8b:2b:72:f1:67:31:93:96:56:0a:7d:77:d1: f6:1e:68:14:3d:6a:b2:f5:bd:c2:10:d5:00:26:74:38:6e:94: ca:82:b5:c3:6e:39:0f:8d:17:a7:78:e9:ac:d9:88:37:08:39: 4d:40:55:b2:52:43:b8:00:a0:4e:3e:fc:9f:cc:79:c3:67:48: 44:88:ab:0b:f4:60:18:d3:d0:02:dc:bd:2a:b6:3b:45:e0:f0: b5:75:78:59:01:d2:ad:96:cc:ec:07:a3:07:f6:cc:c6:f9:c6: b1:37:d7:04:60:88:47:24:6a:25:1c:39:be:f5:14:dd:87:74: b1:8d:6d:f9:01:53:c1:d2:5e:60:26:3c:62:44:86:87:cc:b4: ae:94:ff:45:5a:0c:83:39:ef:3d:5a:78:42:de:70:87:5d:ab: 45:8b:18:b5:2a:f8:a7:32:48:8a:fb:9f:92:c2:2a:ee:68:5e: a6:84:68:c7:c3:32:5c:c3:c2:ba:c3:ff:81:76:8c:6c:33:c2: 3a:0d:22:22:1f:3f:4d:9c:29:f5:cf:61:09:e7:c4:96:cd:88: cc:fd:89:f3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/Fc3RG4OA3yYlRYBH2ATvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGFkYWZiMWYzMWY5ODg5YWE0NzM1NzkyYjZlM2RiNDY5 MzFiYjkwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjM2N2M0YzcyMTg0NTc2ZTAyZjNkN2RlODM0YTI3MjI4YjQ4OTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m9ajJQ/FzPCscEPq1ZC4iUCEDi5 ecJEun/Oq84HL0XrsbfHJ4Q/ZKMuk91hgROW0H6jF6pcrXG+nj0wP8EWXqfEmitc MvFSsCJuVnXUcIsZ8/gnrjDl4wV/Y0QD5ltA2rUGmcUwmfiJvElozH8LQmVykKCy R/Jc+Ny6Cnlk+0v/Lo1JR6wUGKvQtCaa1jcrlqO0E3bfcZ1z7deNY1B7qJiaE9le b0grOiFHgHGSBSaJR6tzarBwvZR4wyjgqEY4EHOqj47Pd42CmLBpR4n+OCZP+n0q UbCxfn8PVMUchlVzpEQRv5iXgz5iWRXTD+5UN8jlo2eYNPwWjm+GCNNLiQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFLY2fExyGEV24C89feg0onIotIl6MB8GA1UdIwQY MBaAFMmK2vsfMfmImqRzV5K249tGkxu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYt M2IxMDNkNWE2OTBhLzEvdGpaOFRISVlSWGJnTHoxOTZEU2ljaWkwaVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9jZDM5YmUtM2UyNS00ZGJjLTg2MGYtM2IxMDNkNWE2OTBh LzEveVlyYS14OHgtWWlhcEhOWGtyYmoyMGFURzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACNik0D BASNikAwDQYJKoZIhvcNAQELBQADggEBAAFI4JB9T6oj3uzp4yi+D8z6ORFp/mZS 2hxU0pB/6mXQSKKYh9dvOJ6Niyty8Wcxk5ZWCn130fYeaBQ9arL1vcIQ1QAmdDhu lMqCtcNuOQ+NF6d46azZiDcIOU1AVbJSQ7gAoE4+/J/MecNnSESIqwv0YBjT0ALc vSq2O0Xg8LV1eFkB0q2WzOwHowf2zMb5xrE31wRgiEckaiUcOb71FN2HdLGNbfkB U8HSXmAmPGJEhofMtK6U/0VaDIM57z1aeELecIddq0WLGLUq+KcySIr7n5LCKu5o XqaEaMfDMlzDwrrD/4F2jGwzwjoNIiIfP02cKfXPYQnnxJbNiMz9ifM= -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:38 2026 by rpki-client