This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/yUv2RfMvy9R3pN_vex3UtFkR-qY.roa File: yUv2RfMvy9R3pN_vex3UtFkR-qY.roa (raw, json) Hash identifier: lPAN24qwmWZ1IkZzOetMyqpr4pK3soxRCSbkbdcczvY= Subject key identifier: C9:4B:F6:45:F3:2F:CB:D4:77:A4:DF:EF:7B:1D:D4:B4:59:11:FA:A6 Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Certificate serial: 019B7B354975695D56743E7E6F0B32ECC46E Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/yUv2RfMvy9R3pN_vex3UtFkR-qY.roa Signing time: Thu 01 Jan 2026 20:17:28 +0000 ROA not before: Thu 01 Jan 2026 20:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212424 IP address blocks: 138.195.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:49:75:69:5d:56:74:3e:7e:6f:0b:32:ec:c4:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Validity Not Before: Jan 1 20:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c94bf645f32fcbd477a4dfef7b1dd4b45911faa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:de:ea:3b:86:bb:2e:65:2f:ce:bb:31:5f:54: c2:7f:76:c5:b6:b7:63:66:10:70:43:75:22:52:fb: 1c:0b:b8:06:5b:2c:c1:c8:b6:9a:55:da:09:57:72: 60:f3:08:4d:ba:2b:ce:a2:3a:a8:d9:55:22:24:7a: fa:a6:72:2c:fb:cc:ad:83:a8:ca:d9:36:94:15:94: f5:01:6b:51:60:d7:cc:70:83:aa:8c:10:f5:a9:8c: 76:a1:ed:51:38:66:71:70:cc:6a:bd:a4:92:d4:d5: 88:40:08:d7:b6:8e:5b:d5:4a:1e:f2:62:c8:ec:6e: 76:e7:1c:c5:6d:aa:bf:7b:59:69:98:b0:9d:4b:ed: 1a:e6:f9:be:1e:a0:0f:27:0e:31:4e:2c:e0:53:48: e4:09:d8:fe:35:13:60:28:0f:a3:10:07:5c:77:77: 11:51:d0:1e:b8:10:bc:39:cd:62:57:61:03:8c:48: 1c:6b:05:2e:ce:b5:1d:70:2f:8e:67:00:8b:9d:08: fa:17:5f:3a:2b:7f:c6:6f:64:15:1b:6e:8a:5b:58: 0f:19:46:8a:95:e8:01:c5:d9:4c:8f:9c:94:c7:70: c4:95:b3:93:4f:fd:b9:78:5e:9a:56:8b:db:49:bf: 33:b8:d9:4f:32:c6:a2:f1:09:b5:1e:35:1e:c5:eb: 7f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4B:F6:45:F3:2F:CB:D4:77:A4:DF:EF:7B:1D:D4:B4:59:11:FA:A6 X509v3 Authority Key Identifier: keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/yUv2RfMvy9R3pN_vex3UtFkR-qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.195.128.0/19 Signature Algorithm: sha256WithRSAEncryption a9:4d:3a:4f:c5:1a:e2:03:dc:23:62:f6:86:dc:4e:11:0d:9e: 53:f1:92:40:a4:41:80:7d:3d:69:94:cf:7a:d1:a7:9f:8f:98: e1:99:a4:a1:71:f7:f5:ca:43:c4:01:54:ec:3d:8f:55:ba:c9: 6e:d9:f8:b1:25:41:26:d0:eb:70:12:01:15:3a:84:b7:79:fe: a9:73:9c:2a:be:0e:37:c8:bd:6b:aa:ba:d5:79:d8:ae:26:ac: 60:73:cc:b2:8c:9d:f5:eb:5b:3e:b0:69:78:82:26:58:8c:0c: 1e:06:aa:0f:27:07:d5:5e:9e:a7:92:11:b0:c3:6e:b3:3e:44: 29:c0:5f:54:ab:51:24:bf:d4:a5:e5:2b:bf:26:2a:b5:3d:2c: 5f:48:64:e4:5f:f1:56:11:13:da:6e:86:b0:c7:8c:ed:e5:50: 69:85:00:2b:04:44:5a:74:df:76:88:bf:11:33:49:26:2e:6c: c4:ea:8b:91:7a:ca:b5:15:9b:22:f1:62:32:eb:fe:49:ea:8e: b3:29:73:0d:44:fd:cb:0e:e4:21:b2:22:0d:a4:a9:ac:c5:f2: 95:ed:f0:b2:1a:3a:c6:9e:79:b9:49:98:13:c3:fb:74:be:d5: 32:83:56:bd:22:29:5c:33:91:f8:a1:fd:98:0e:f1:7c:55:75: 1f:8f:dd:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUl1aV1WdD5+bwsy7MRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3 ZmYzNjQwHhcNMjYwMTAxMjAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTRiZjY0NWYzMmZjYmQ0NzdhNGRmZWY3YjFkZDRiNDU5MTFmYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt7qO4a7LmUvzrsxX1TCf3bFtrdj ZhBwQ3UiUvscC7gGWyzByLaaVdoJV3Jg8whNuivOojqo2VUiJHr6pnIs+8ytg6jK 2TaUFZT1AWtRYNfMcIOqjBD1qYx2oe1ROGZxcMxqvaSS1NWIQAjXto5b1Uoe8mLI 7G525xzFbaq/e1lpmLCdS+0a5vm+HqAPJw4xTizgU0jkCdj+NRNgKA+jEAdcd3cR UdAeuBC8Oc1iV2EDjEgcawUuzrUdcC+OZwCLnQj6F186K3/Gb2QVG26KW1gPGUaK legBxdlMj5yUx3DElbOTT/25eF6aVovbSb8zuNlPMsai8Qm1HjUexet/gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMlL9kXzL8vUd6Tf73sd1LRZEfqmMB8GA1UdIwQY MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt YWIyZDVlN2Q0YTdiLzEveVV2MlJmTXZ5OVIzcE5fdmV4M1V0RmtSLXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFisOAMA0G CSqGSIb3DQEBCwUAA4IBAQCpTTpPxRriA9wjYvaG3E4RDZ5T8ZJApEGAfT1plM96 0aefj5jhmaShcff1ykPEAVTsPY9Vuslu2fixJUEm0OtwEgEVOoS3ef6pc5wqvg43 yL1rqrrVediuJqxgc8yyjJ3161s+sGl4giZYjAweBqoPJwfVXp6nkhGww26zPkQp wF9Uq1Ekv9Sl5Su/Jiq1PSxfSGTkX/FWERPaboawx4zt5VBphQArBERadN92iL8R M0kmLmzE6ouResq1FZsi8WIy6/5J6o6zKXMNRP3LDuQhsiINpKmsxfKV7fCyGjrG nnm5SZgTw/t0vtUyg1a9IilcM5H4of2YDvF8VXUfj93+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:34 2026 by rpki-client