This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/TUJfUZ1C6AVUTkApJcMIop5vQLE.roa File: TUJfUZ1C6AVUTkApJcMIop5vQLE.roa (raw, json) Hash identifier: 19Ah/XGkNGiCO99Jf7P8HQSUuyigvJ3sN9PnRIrIxdo= Subject key identifier: 4D:42:5F:51:9D:42:E8:05:54:4E:40:29:25:C3:08:A2:9E:6F:40:B1 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019BE35D22944535622A749BF3DB9B971054 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/TUJfUZ1C6AVUTkApJcMIop5vQLE.roa Signing time: Thu 22 Jan 2026 01:41:30 +0000 ROA not before: Thu 22 Jan 2026 01:41:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206336 IP address blocks: 138.124.60.0/24 maxlen: 24 138.124.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e3:5d:22:94:45:35:62:2a:74:9b:f3:db:9b:97:10:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Jan 22 01:41:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d425f519d42e805544e402925c308a29e6f40b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:22:8e:c8:8d:c1:6e:e7:20:f1:29:17:e6: f4:e6:bc:56:06:38:a5:16:80:19:95:da:80:56:c8: 0e:a7:cc:71:93:cf:39:b0:af:0a:24:44:e5:79:77: 71:05:8b:a7:fd:f7:58:83:0c:ac:74:4e:66:37:1f: 00:27:48:b4:2f:d4:43:d2:cc:d3:ed:9d:77:e0:bc: eb:7b:23:fb:47:e5:03:2e:e4:fc:e4:26:ae:00:f3: 8f:4b:2f:cf:dc:3d:68:5b:2e:84:6f:ec:be:25:a3: 91:7e:de:81:f3:cf:a2:92:df:8b:e8:9f:14:83:43: d9:1f:7e:ab:c8:9a:e3:f5:10:86:ff:62:a4:0b:60: 09:bf:fd:87:c3:b8:9a:3b:54:77:23:00:47:c6:b1: 8d:aa:45:95:45:b1:30:4e:50:0d:57:ca:1f:e0:e1: 2b:c6:c5:05:7a:7b:14:02:de:58:44:54:28:78:99: 41:29:71:0e:3e:15:ec:9d:46:58:fe:7c:82:90:3c: 6b:46:74:80:64:b0:8d:dc:7f:29:cd:e6:4c:da:d9: bb:88:34:6d:b0:d4:fd:59:41:af:b7:de:d7:70:a2: 90:2d:ab:f1:6d:9e:fc:c3:5a:2f:1e:a5:22:92:4b: b4:64:5f:03:26:3b:90:ad:10:2e:23:8e:0a:ba:03: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:42:5F:51:9D:42:E8:05:54:4E:40:29:25:C3:08:A2:9E:6F:40:B1 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/TUJfUZ1C6AVUTkApJcMIop5vQLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.60.0/24 138.124.123.0/24 Signature Algorithm: sha256WithRSAEncryption c8:a9:06:83:d5:e8:01:56:0d:3b:09:5b:8c:c4:1e:6f:ef:08: 2b:96:ca:96:ee:8c:76:0b:52:1b:db:ea:86:74:00:ef:40:d9: a5:68:dc:02:ec:56:24:de:ac:fa:50:06:46:3d:61:da:39:1c: e5:3f:7f:c3:00:f5:e9:51:38:b6:ea:4e:13:9a:a2:eb:c9:5f: a4:1a:fb:cf:b9:1d:5a:70:73:91:d5:33:c0:10:90:29:dc:c8: ac:f3:91:14:12:95:5d:7a:f3:45:91:58:71:05:6f:2b:ec:70: 6c:f9:9a:cc:f3:04:46:d5:dc:56:8e:5c:85:ed:89:67:e8:94: ac:54:ff:80:fb:73:cd:15:17:44:a4:f7:db:e5:28:70:a3:ae: ca:92:37:18:59:15:1a:6b:ca:62:de:b6:5a:9b:64:83:c8:17: 2e:5f:b8:e1:ef:b3:99:e3:86:44:40:40:b7:48:4a:a6:c3:67: 8d:6e:04:96:aa:dd:47:5c:39:d2:a4:67:e7:7c:0e:5b:fb:52: 00:4c:c0:f8:2a:6a:31:83:b2:c6:05:5f:a4:ee:5f:da:7f:f6: 8c:97:76:97:bf:22:68:e6:c8:cf:cc:f2:cd:eb:b9:01:24:d5: 72:86:dd:7f:6d:d7:c9:9a:b0:47:2e:74:99:ca:26:0f:d4:f6: 5e:69:27:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvjXSKURTViKnSb89ublxBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjYwMTIyMDE0MTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDQyNWY1MTlkNDJlODA1NTQ0ZTQwMjkyNWMzMDhhMjllNmY0MGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDMijsiNwW7nIPEpF+b05rxWBjil FoAZldqAVsgOp8xxk885sK8KJETleXdxBYun/fdYgwysdE5mNx8AJ0i0L9RD0szT 7Z134LzreyP7R+UDLuT85CauAPOPSy/P3D1oWy6Eb+y+JaORft6B88+ikt+L6J8U g0PZH36ryJrj9RCG/2KkC2AJv/2Hw7iaO1R3IwBHxrGNqkWVRbEwTlANV8of4OEr xsUFensUAt5YRFQoeJlBKXEOPhXsnUZY/nyCkDxrRnSAZLCN3H8pzeZM2tm7iDRt sNT9WUGvt97XcKKQLavxbZ78w1ovHqUikku0ZF8DJjuQrRAuI44KugNXqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE1CX1GdQugFVE5AKSXDCKKeb0CxMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvVFVKZlVaMUM2QVZVVGtBcEpjTUlvcDV2UUxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAinw8AwQA inx7MA0GCSqGSIb3DQEBCwUAA4IBAQDIqQaD1egBVg07CVuMxB5v7wgrlsqW7ox2 C1Ib2+qGdADvQNmlaNwC7FYk3qz6UAZGPWHaORzlP3/DAPXpUTi26k4TmqLryV+k GvvPuR1acHOR1TPAEJAp3Mis85EUEpVdevNFkVhxBW8r7HBs+ZrM8wRG1dxWjlyF 7Yln6JSsVP+A+3PNFRdEpPfb5Shwo67KkjcYWRUaa8pi3rZam2SDyBcuX7jh77OZ 44ZEQEC3SEqmw2eNbgSWqt1HXDnSpGfnfA5b+1IATMD4Kmoxg7LGBV+k7l/af/aM l3aXvyJo5sjPzPLN67kBJNVyht1/bdfJmrBHLnSZyiYP1PZeaSei -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:59 2026 by rpki-client