This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/4PgTSHyUDt54FZth4FELZy0Znzc.roa File: 4PgTSHyUDt54FZth4FELZy0Znzc.roa (raw, json) Hash identifier: bNKXp78TMhd3dYN+PMRAzCUSpLX4M9RJcX7WDOWl0s8= Subject key identifier: E0:F8:13:48:7C:94:0E:DE:78:15:9B:61:E0:51:0B:67:2D:19:9F:37 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019BEBE02E08B97AB148E139C008F3790F3A Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/4PgTSHyUDt54FZth4FELZy0Znzc.roa Signing time: Fri 23 Jan 2026 17:21:36 +0000 ROA not before: Fri 23 Jan 2026 17:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204610 IP address blocks: 138.249.136.0/24 maxlen: 24 138.249.138.0/24 maxlen: 24 138.249.140.0/24 maxlen: 26 138.249.141.0/24 maxlen: 26 138.249.144.0/24 maxlen: 24 138.249.145.0/24 maxlen: 24 138.249.146.0/24 maxlen: 24 138.249.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:e0:2e:08:b9:7a:b1:48:e1:39:c0:08:f3:79:0f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 23 17:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0f813487c940ede78159b61e0510b672d199f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:7d:44:9e:f5:7f:89:e5:fd:c0:e6:28:93: 35:51:f2:1f:dd:14:ed:5a:a5:d1:de:05:db:fb:af: 80:ff:4d:38:30:4f:61:99:1b:83:7a:ef:fc:8d:13: 1e:d7:61:7e:f5:0c:c6:bf:62:8c:32:ec:ff:e6:14: 39:5d:13:5a:6a:56:1b:de:48:9e:1c:1c:37:2b:ca: 21:4d:a6:37:78:75:c8:40:19:87:08:76:88:3d:a8: 53:69:82:c7:6d:7c:b9:0a:68:e9:15:8a:93:de:50: 69:30:eb:f5:0c:f4:8c:72:3b:82:04:f8:88:fd:b6: 47:9f:1b:c7:45:31:1a:51:26:35:1c:27:62:5a:a5: 95:44:79:49:42:41:d9:53:08:31:a6:9c:d8:8c:fd: ef:60:78:c8:5d:77:b5:b6:56:11:d8:aa:5b:96:2f: de:67:e0:df:1e:ef:4e:d5:c1:b7:6c:40:37:1f:4c: 50:c9:9e:7e:98:4a:52:3c:1c:c7:e8:4d:04:ca:1b: a7:0c:b0:6a:46:0b:ab:ac:b3:22:64:8e:38:92:f4: c3:b6:33:0a:17:22:3c:00:ae:c7:23:3b:aa:43:be: 6e:0e:3e:63:41:90:5a:d9:a4:f9:9f:8d:12:c8:ca: 65:6f:87:8e:42:59:e2:c2:8b:78:05:1a:ac:9a:41: cc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F8:13:48:7C:94:0E:DE:78:15:9B:61:E0:51:0B:67:2D:19:9F:37 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/4PgTSHyUDt54FZth4FELZy0Znzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.136.0/24 138.249.138.0/24 138.249.140.0/23 138.249.144.0/22 Signature Algorithm: sha256WithRSAEncryption 59:ca:bc:5f:74:f6:55:cf:3e:10:f3:01:8f:18:3a:cf:1e:a9: f5:bd:d0:91:e0:65:46:6d:b7:15:b5:3e:60:8d:ce:7e:64:fe: 72:21:bf:cb:d7:b1:8a:ae:ec:97:07:54:44:8c:8c:34:83:b5: 5f:44:d8:34:ff:36:ca:4a:5a:0d:fa:4c:54:66:10:e2:4d:79: b2:c3:b3:db:a8:75:1b:99:59:fa:04:54:16:02:09:a8:ae:aa: f4:bd:19:c5:90:34:1d:1a:ea:69:48:77:56:2d:a9:5c:f3:f7: 7b:bd:e5:2d:37:29:2a:34:31:e8:2b:6b:42:5d:db:bd:c4:1a: de:19:78:fb:a3:3f:38:1b:57:ae:a5:3e:05:07:ab:cc:cb:1e: ee:b7:3f:ad:e1:13:6d:3c:e7:88:ca:00:5e:41:ec:9b:9a:ae: 06:46:6c:bf:10:5f:28:02:43:56:c8:ca:2f:6e:37:d3:99:38: a2:c4:3b:6d:e1:98:5d:13:9c:6e:40:a4:11:4f:56:4c:a0:a6: 8f:98:51:d0:2f:7d:b5:c9:b6:b3:da:30:9e:98:1b:ae:02:04: 5a:ea:b2:6d:2e:45:64:0c:19:01:10:ed:36:3c:17:a7:cb:7c: c1:6a:32:a3:fa:6d:a8:65:b7:ca:5a:67:93:98:1f:9a:e1:43: c5:51:41:ae -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvr4C4IuXqxSOE5wAjzeQ86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTIzMTcyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGY4MTM0ODdjOTQwZWRlNzgxNTliNjFlMDUxMGI2NzJkMTk5ZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVt9RJ71f4nl/cDmKJM1UfIf3RTt WqXR3gXb+6+A/004ME9hmRuDeu/8jRMe12F+9QzGv2KMMuz/5hQ5XRNaalYb3kie HBw3K8ohTaY3eHXIQBmHCHaIPahTaYLHbXy5CmjpFYqT3lBpMOv1DPSMcjuCBPiI /bZHnxvHRTEaUSY1HCdiWqWVRHlJQkHZUwgxppzYjP3vYHjIXXe1tlYR2Kpbli/e Z+DfHu9O1cG3bEA3H0xQyZ5+mEpSPBzH6E0EyhunDLBqRgurrLMiZI44kvTDtjMK FyI8AK7HIzuqQ75uDj5jQZBa2aT5n40SyMplb4eOQlniwot4BRqsmkHMQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOD4E0h8lA7eeBWbYeBRC2ctGZ83MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNFBnVFNIeVVEdDU0Rlp0aDRGRUxaeTBabnpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAivmIAwQA ivmKAwQBivmMAwQCivmQMA0GCSqGSIb3DQEBCwUAA4IBAQBZyrxfdPZVzz4Q8wGP GDrPHqn1vdCR4GVGbbcVtT5gjc5+ZP5yIb/L17GKruyXB1REjIw0g7VfRNg0/zbK SloN+kxUZhDiTXmyw7PbqHUbmVn6BFQWAgmorqr0vRnFkDQdGuppSHdWLalc8/d7 veUtNykqNDHoK2tCXdu9xBreGXj7oz84G1eupT4FB6vMyx7utz+t4RNtPOeIygBe Qeybmq4GRmy/EF8oAkNWyMovbjfTmTiixDtt4ZhdE5xuQKQRT1ZMoKaPmFHQL321 ybaz2jCemBuuAgRa6rJtLkVkDBkBEO02PBeny3zBajKj+m2oZbfKWmeTmB+a4UPF UUGu -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:32 2026 by rpki-client