This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/f4W9THEIhSMQlVB7wW0OJAN9icY.roa File: f4W9THEIhSMQlVB7wW0OJAN9icY.roa (raw, json) Hash identifier: 6zoXkf8w7/VwNfRCeLRUhCWU6NfwtJY9O72c8BLnCSI= Subject key identifier: 7F:85:BD:4C:71:08:85:23:10:95:50:7B:C1:6D:0E:24:03:7D:89:C6 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E371FC2DCBF0BD2DD997E7C004A9502 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/f4W9THEIhSMQlVB7wW0OJAN9icY.roa Signing time: Fri 02 Jan 2026 10:18:20 +0000 ROA not before: Fri 02 Jan 2026 10:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198774 IP address blocks: 128.127.144.0/24 maxlen: 24 128.127.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:1f:c2:dc:bf:0b:d2:dd:99:7e:7c:00:4a:95:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f85bd4c710885231095507bc16d0e24037d89c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:1e:a8:86:97:f1:11:d1:73:f1:13:22:8c: e7:5c:51:a8:c5:39:e4:ff:fb:92:aa:52:ff:75:4d: 23:ba:c2:9c:7e:18:4b:b6:a1:23:33:d7:64:4f:87: 54:16:3d:a2:d1:7a:37:89:d0:80:12:b9:55:dd:9a: bd:d4:62:a8:9a:3e:3a:97:51:77:b1:2d:b0:77:66: 29:74:a4:e9:f2:c2:76:1f:f1:91:b6:b3:44:32:86: 4a:28:53:6e:bc:27:69:ed:f1:1b:f0:93:b5:3b:3d: fc:03:75:9a:74:3e:c2:f4:01:a9:af:29:e6:bc:f1: 74:eb:03:fa:bd:3a:b3:23:01:1e:95:12:21:8a:a1: 4c:d4:a9:d9:5f:01:01:98:d0:40:53:66:1c:dc:aa: af:36:02:8b:42:a7:d4:5e:93:16:48:88:cc:6b:9e: 56:51:70:e3:a0:30:e1:86:af:e0:07:2e:70:55:72: 7c:bd:00:ca:41:5c:87:62:a8:ea:ec:e4:80:74:50: 33:b1:f8:ef:3b:23:d7:a0:11:47:4b:19:3f:87:26: a3:ac:7d:1b:08:d3:4d:b8:ac:b6:cc:fc:a3:e3:7c: 21:61:4a:b3:39:1f:02:f6:02:63:a4:08:94:c3:e1: 9b:f9:0f:e5:bf:fb:6b:ce:fc:d5:18:23:03:a8:21: 95:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:85:BD:4C:71:08:85:23:10:95:50:7B:C1:6D:0E:24:03:7D:89:C6 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/f4W9THEIhSMQlVB7wW0OJAN9icY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.127.144.0/23 Signature Algorithm: sha256WithRSAEncryption 19:c2:d4:44:ee:c9:5e:91:47:8f:83:2e:17:69:9b:01:f5:8a: 91:ee:e2:c2:40:90:c2:b7:c6:19:29:d5:69:21:4a:ba:44:35: a3:cc:7f:99:58:fd:6a:27:1a:78:c8:02:58:f8:4a:1c:05:34: 2f:a0:74:54:74:dc:34:fd:d6:8b:0c:fd:c6:5c:79:15:ec:1b: 68:8d:5e:fe:7f:52:62:68:86:4f:c0:17:9d:b9:dd:77:38:1b: 3a:d8:91:b7:41:a6:61:f9:19:02:89:ed:cc:2b:0a:9f:91:d0: 98:94:8b:db:50:63:a1:a7:89:a0:72:a3:72:a1:22:64:64:1e: 9e:57:e1:be:17:74:08:e5:de:d3:53:50:09:00:bb:89:10:fc: 6d:16:c9:8c:ef:6d:0b:93:ef:cf:c6:d1:47:57:31:e8:be:db: 83:dc:1c:89:b4:01:34:df:05:d6:49:0c:d3:fe:cc:93:81:85: 05:9c:88:e5:fc:6a:60:15:57:16:cb:a8:f2:1d:2b:2a:27:f4: 1b:95:df:65:45:91:e7:23:a9:1c:6e:d7:2e:4c:da:2d:5d:f1: 6d:8e:18:d2:2a:2a:85:e5:8a:06:2f:3f:55:34:a9:7d:0d:8b: 87:9f:f1:f7:b0:49:e1:c2:0e:e2:27:e8:ef:8b:20:b6:ad:7a: aa:56:00:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+Nx/C3L8L0t2ZfnwASpUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjg1YmQ0YzcxMDg4NTIzMTA5NTUwN2JjMTZkMGUyNDAzN2Q4OWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ceqIaX8RHRc/ETIoznXFGoxTnk //uSqlL/dU0jusKcfhhLtqEjM9dkT4dUFj2i0Xo3idCAErlV3Zq91GKomj46l1F3 sS2wd2YpdKTp8sJ2H/GRtrNEMoZKKFNuvCdp7fEb8JO1Oz38A3WadD7C9AGprynm vPF06wP6vTqzIwEelRIhiqFM1KnZXwEBmNBAU2Yc3KqvNgKLQqfUXpMWSIjMa55W UXDjoDDhhq/gBy5wVXJ8vQDKQVyHYqjq7OSAdFAzsfjvOyPXoBFHSxk/hyajrH0b CNNNuKy2zPyj43whYUqzOR8C9gJjpAiUw+Gb+Q/lv/trzvzVGCMDqCGVNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+FvUxxCIUjEJVQe8FtDiQDfYnGMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvZjRXOVRIRUloU01RbFZCN3dXME9KQU45aWNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgH+QMA0G CSqGSIb3DQEBCwUAA4IBAQAZwtRE7slekUePgy4XaZsB9YqR7uLCQJDCt8YZKdVp IUq6RDWjzH+ZWP1qJxp4yAJY+EocBTQvoHRUdNw0/daLDP3GXHkV7BtojV7+f1Ji aIZPwBedud13OBs62JG3QaZh+RkCie3MKwqfkdCYlIvbUGOhp4mgcqNyoSJkZB6e V+G+F3QI5d7TU1AJALuJEPxtFsmM720Lk+/PxtFHVzHovtuD3ByJtAE03wXWSQzT /syTgYUFnIjl/GpgFVcWy6jyHSsqJ/Qbld9lRZHnI6kcbtcuTNotXfFtjhjSKiqF 5YoGLz9VNKl9DYuHn/H3sEnhwg7iJ+jviyC2rXqqVgC3 -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:05 2026 by rpki-client