This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/rtaxspuDF4uli6my-kG3x-CfzyM.roa File: rtaxspuDF4uli6my-kG3x-CfzyM.roa (raw, json) Hash identifier: Mbr6HPYPHlUpdc2sSsGgV2VBSnLTCf311AToZ6BeZWw= Subject key identifier: AE:D6:B1:B2:9B:83:17:8B:A5:8B:A9:B2:FA:41:B7:C7:E0:9F:CF:23 Certificate issuer: /CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Certificate serial: 019B7A5B926C688A2EDDDD7D71BC7A4457FC Authority key identifier: DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/rtaxspuDF4uli6my-kG3x-CfzyM.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212550 IP address blocks: 141.138.13.0/24 maxlen: 24 141.138.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.mft rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:6c:68:8a:2e:dd:dd:7d:71:bc:7a:44:57:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc5c532f3cd5e11e19feb19655d4f19926f02020 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aed6b1b29b83178ba58ba9b2fa41b7c7e09fcf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e2:40:20:cb:65:d4:39:be:8b:d4:88:74:cb: 5c:a7:e2:5a:ca:7b:43:09:35:19:ed:90:ec:d2:28: d2:14:68:b0:8e:6c:f6:b1:69:80:0f:c8:ec:fb:60: 40:69:4c:72:d9:0b:25:08:8c:e7:43:03:ac:a1:f0: 41:ac:f0:29:e3:91:16:98:47:a1:67:c8:ce:c3:7f: 4c:a9:84:d1:d5:2e:41:fd:06:b0:9e:dc:5b:33:28: 8e:07:79:7f:e7:47:ef:2b:40:e7:32:82:2d:c3:51: 1f:f8:d2:e1:bb:b1:25:74:1c:f8:9d:a2:3b:9b:4f: 72:49:21:50:00:6b:56:8f:db:e8:5f:ec:5b:79:09: 18:f1:71:f9:b2:6c:84:5e:3f:4e:53:9a:7b:cc:c9: a7:a1:e7:c3:8e:4f:84:6f:d4:65:29:71:8b:b1:ae: bd:1a:4d:2b:d8:5f:a5:02:ba:9d:89:4b:68:23:5d: 55:12:c9:40:ac:49:23:c4:67:7c:b0:aa:df:af:dd: b3:c2:ce:f7:3e:fb:c5:17:71:2a:d5:9b:02:fe:d0: a7:bd:07:5d:bb:4f:bf:57:3a:f8:60:75:20:bf:08: ee:00:18:07:18:c2:e7:35:46:99:94:6a:a0:6f:df: f8:06:a4:7e:3d:87:e5:72:2d:f0:40:dd:09:c1:31: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D6:B1:B2:9B:83:17:8B:A5:8B:A9:B2:FA:41:B7:C7:E0:9F:CF:23 X509v3 Authority Key Identifier: keyid:DC:5C:53:2F:3C:D5:E1:1E:19:FE:B1:96:55:D4:F1:99:26:F0:20:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3FxTLzzV4R4Z_rGWVdTxmSbwICA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/rtaxspuDF4uli6my-kG3x-CfzyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/db26ba-754d-4118-be31-4b6c1cf9fe4f/1/3FxTLzzV4R4Z_rGWVdTxmSbwICA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.138.13.0/24 141.138.15.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:44:bb:e5:5d:25:9f:e1:fa:b2:59:cd:9c:93:25:79:5a:89: 5b:f5:d7:ee:ba:3d:c4:99:24:5d:a0:9e:3b:0e:d1:b2:04:f5: 58:21:8e:39:33:f8:ce:f9:ed:2a:78:84:5b:60:3f:36:40:73: 2f:24:38:2b:aa:24:68:1e:f0:0f:f4:5e:c0:58:04:89:8c:84: 2f:14:4a:ea:a6:d6:c7:7f:fb:b1:28:c9:eb:59:6b:72:f0:ff: cf:a9:25:f7:10:d7:dd:15:90:09:e8:8c:95:75:5a:13:c0:56: 28:07:c5:30:ee:51:d0:16:9d:3d:20:05:95:8b:5e:f7:25:f4: 77:2e:1f:73:2a:75:9c:ec:33:f1:a5:06:2c:c3:e3:c0:16:51: 9d:73:96:76:08:33:08:12:90:f0:13:b8:0f:49:21:80:83:84: da:33:cc:6a:2a:9b:24:20:a7:1c:38:0c:d0:65:f5:be:e7:a7: a5:80:84:2a:04:36:b3:07:ed:a8:81:be:32:9f:f5:a9:15:e5: a4:0f:a8:97:a4:74:62:92:e5:b6:08:e4:5c:2d:43:b1:6c:a9: 5f:3d:45:58:3b:38:60:ec:ed:44:52:df:e5:cf:5b:b3:67:7f: 43:61:98:6a:62:52:87:a9:27:16:2f:1a:2b:79:bf:b4:f2:3c: 88:e2:5b:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W5JsaIou3d19cbx6RFf8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNWM1MzJmM2NkNWUxMWUxOWZlYjE5NjU1ZDRmMTk5MjZm MDIwMjAwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWQ2YjFiMjliODMxNzhiYTU4YmE5YjJmYTQxYjdjN2UwOWZjZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OJAIMtl1Dm+i9SIdMtcp+JayntD CTUZ7ZDs0ijSFGiwjmz2sWmAD8js+2BAaUxy2QslCIznQwOsofBBrPAp45EWmEeh Z8jOw39MqYTR1S5B/QawntxbMyiOB3l/50fvK0DnMoItw1Ef+NLhu7EldBz4naI7 m09ySSFQAGtWj9voX+xbeQkY8XH5smyEXj9OU5p7zMmnoefDjk+Eb9RlKXGLsa69 Gk0r2F+lArqdiUtoI11VEslArEkjxGd8sKrfr92zws73PvvFF3Eq1ZsC/tCnvQdd u0+/Vzr4YHUgvwjuABgHGMLnNUaZlGqgb9/4BqR+PYflci3wQN0JwTHufQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK7WsbKbgxeLpYupsvpBt8fgn88jMB8GA1UdIwQY MBaAFNxcUy881eEeGf6xllXU8Zkm8CAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEt NGI2YzFjZjlmZTRmLzEvcnRheHNwdURGNHVsaTZteS1rRzN4LUNmenlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9kYjI2YmEtNzU0ZC00MTE4LWJlMzEtNGI2YzFjZjlmZTRm LzEvM0Z4VEx6elY0UjRaX3JHV1ZkVHhtU2J3SUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjYoNAwQA jYoPMA0GCSqGSIb3DQEBCwUAA4IBAQBPRLvlXSWf4fqyWc2ckyV5Wolb9dfuuj3E mSRdoJ47DtGyBPVYIY45M/jO+e0qeIRbYD82QHMvJDgrqiRoHvAP9F7AWASJjIQv FErqptbHf/uxKMnrWWty8P/PqSX3ENfdFZAJ6IyVdVoTwFYoB8Uw7lHQFp09IAWV i173JfR3Lh9zKnWc7DPxpQYsw+PAFlGdc5Z2CDMIEpDwE7gPSSGAg4TaM8xqKpsk IKccOAzQZfW+56elgIQqBDazB+2ogb4yn/WpFeWkD6iXpHRikuW2CORcLUOxbKlf PUVYOzhg7O1EUt/lz1uzZ39DYZhqYlKHqScWLxoreb+08jyI4lvb -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:44 2026 by rpki-client