This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/rc_UgEQuERXAcFu0ryqIqFlvKe8.roa File: rc_UgEQuERXAcFu0ryqIqFlvKe8.roa (raw, json) Hash identifier: dFsLxVGQ4UAiyb+zv8JS9ufJDb8KzppW9TIIyizF/Sc= Subject key identifier: AD:CF:D4:80:44:2E:11:15:C0:70:5B:B4:AF:2A:88:A8:59:6F:29:EF Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Certificate serial: 019B7B3548E03CEACD6273745A6F83043169 Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/rc_UgEQuERXAcFu0ryqIqFlvKe8.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2200 IP address blocks: 138.195.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:48:e0:3c:ea:cd:62:73:74:5a:6f:83:04:31:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adcfd480442e1115c0705bb4af2a88a8596f29ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:16:36:14:1a:5e:af:5d:46:99:fd:1c:c0:c4: ee:81:a0:fb:f1:bd:ba:88:bb:95:d1:55:22:76:c4: 23:2a:e7:5d:08:2a:08:5b:eb:ca:df:f0:0c:a7:ff: d3:ef:01:24:8e:c8:69:f6:47:91:c7:d2:8b:e6:2a: 1a:6d:e0:bb:33:92:e8:97:dd:8b:0f:46:5d:67:de: 01:05:d4:6b:f8:88:fa:4d:31:97:56:4a:81:7e:05: da:dd:0d:60:6a:ea:93:77:32:a9:4c:be:37:75:76: 4a:58:dc:52:af:d6:ae:d2:85:24:bf:f7:91:79:1d: 90:f1:6c:14:27:d0:f3:ca:e3:30:fa:b4:da:37:c8: d7:4f:4e:09:8d:28:54:c7:89:a1:25:fa:13:76:b6: d6:26:22:3e:90:2b:3d:a6:40:af:e9:65:a8:b5:4c: dc:6b:bb:3d:2d:4d:60:00:a4:98:ad:14:0c:39:da: a1:57:c5:ce:1a:70:c4:b2:84:a4:64:bb:43:f7:5b: 3a:02:64:0e:e2:b3:b9:e3:6f:52:b1:09:71:00:a3: a4:65:08:1c:5d:09:20:f6:47:9b:22:07:91:e0:0f: 0c:ca:cb:a7:70:a0:74:32:12:69:e2:ab:1d:6f:ae: fe:61:84:f7:61:b9:71:80:b5:69:b7:7e:f1:8c:53: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:D4:80:44:2E:11:15:C0:70:5B:B4:AF:2A:88:A8:59:6F:29:EF X509v3 Authority Key Identifier: keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/rc_UgEQuERXAcFu0ryqIqFlvKe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.195.0.0/16 Signature Algorithm: sha256WithRSAEncryption e9:c9:e2:49:e1:e1:b1:c1:3f:e8:75:91:a6:42:b7:be:f6:cb: 59:bf:f9:4f:21:b2:44:5d:41:40:04:69:b9:66:de:bc:dc:1c: fa:46:6d:c9:2b:27:ec:56:d2:ec:86:7d:47:38:b1:eb:e6:74: a1:b8:96:44:a9:50:5c:17:fa:b4:9d:99:f4:78:5a:ab:01:c4: a3:17:8b:3b:9c:49:42:ee:51:ec:8a:a6:18:a0:77:d9:59:26: 09:6c:67:af:57:e7:ed:bf:e7:2b:6e:1e:8d:ec:72:db:1e:c1: 8a:57:58:bb:e3:71:25:93:89:a3:03:df:45:a9:1b:ce:ae:fe: 37:4f:89:bb:e8:49:e1:e1:25:dc:30:e3:48:84:85:d7:cd:66: 41:b9:55:ad:3e:e3:6a:64:40:38:8a:c9:49:51:c4:cb:cd:cf: 7c:fb:58:6c:79:93:36:71:6a:62:88:91:9b:28:09:e1:cc:81: ab:57:bc:60:a8:2a:8d:08:46:cd:33:a3:6c:76:c1:e3:81:c8: 57:2a:06:33:a0:75:cd:67:c3:39:db:32:7b:7c:d4:0c:fa:e1: 62:10:55:9a:90:e1:e4:20:a1:63:37:99:a3:ec:5a:20:e1:30: 7e:de:d5:54:af:6f:10:76:28:de:92:f3:1b:5e:39:e4:4b:13: d9:06:61:6b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7NUjgPOrNYnN0Wm+DBDFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3 ZmYzNjQwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGNmZDQ4MDQ0MmUxMTE1YzA3MDViYjRhZjJhODhhODU5NmYyOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRY2FBper11Gmf0cwMTugaD78b26 iLuV0VUidsQjKuddCCoIW+vK3/AMp//T7wEkjshp9keRx9KL5ioabeC7M5Lol92L D0ZdZ94BBdRr+Ij6TTGXVkqBfgXa3Q1gauqTdzKpTL43dXZKWNxSr9au0oUkv/eR eR2Q8WwUJ9DzyuMw+rTaN8jXT04JjShUx4mhJfoTdrbWJiI+kCs9pkCv6WWotUzc a7s9LU1gAKSYrRQMOdqhV8XOGnDEsoSkZLtD91s6AmQO4rO5429SsQlxAKOkZQgc XQkg9kebIgeR4A8MysuncKB0MhJp4qsdb67+YYT3YblxgLVpt37xjFNHMwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFK3P1IBELhEVwHBbtK8qiKhZbynvMB8GA1UdIwQY MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt YWIyZDVlN2Q0YTdiLzEvcmNfVWdFUXVFUlhBY0Z1MHJ5cUlxRmx2S2U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAisMwDQYJ KoZIhvcNAQELBQADggEBAOnJ4knh4bHBP+h1kaZCt772y1m/+U8hskRdQUAEablm 3rzcHPpGbckrJ+xW0uyGfUc4sevmdKG4lkSpUFwX+rSdmfR4WqsBxKMXizucSULu UeyKphigd9lZJglsZ69X5+2/5ytuHo3sctsewYpXWLvjcSWTiaMD30WpG86u/jdP ibvoSeHhJdww40iEhdfNZkG5Va0+42pkQDiKyUlRxMvNz3z7WGx5kzZxamKIkZso CeHMgatXvGCoKo0IRs0zo2x2weOByFcqBjOgdc1nwznbMnt81Az64WIQVZqQ4eQg oWM3maPsWiDhMH7e1VSvbxB2KN6S8xteOeRLE9kGYWs= -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:47 2026 by rpki-client