This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5k-yNw8jxGAvU8_o3jpVXc39OZI.roa File: 5k-yNw8jxGAvU8_o3jpVXc39OZI.roa (raw, json) Hash identifier: eEFdgq29t0VSenWIoYerjIDFT0Vnqo4qlygOUFxhKLg= Subject key identifier: E6:4F:B2:37:0F:23:C4:60:2F:53:CF:E8:DE:3A:55:5D:CD:FD:39:92 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F2B7FD7D43256F372F445DDAB1574 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5k-yNw8jxGAvU8_o3jpVXc39OZI.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57013 IP address blocks: 138.249.9.0/24 maxlen: 24 170.168.0.0/24 maxlen: 24 170.168.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2b:7f:d7:d4:32:56:f3:72:f4:45:dd:ab:15:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e64fb2370f23c4602f53cfe8de3a555dcdfd3992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:99:44:b3:9e:10:3e:80:f5:3e:b2:e4:59: 47:d2:22:36:63:99:d7:e8:c1:bc:38:a7:e2:0c:54: 0f:e5:44:a1:14:0d:f8:87:f0:a8:88:ce:6d:a7:1f: ad:b9:ac:08:de:ab:2e:bf:ff:ea:56:1a:81:13:b7: 36:3b:e6:53:48:b5:61:58:b4:b4:19:0c:8c:f9:f8: 99:40:ed:49:f3:28:fb:63:ed:ae:fc:83:35:78:5d: 8f:40:29:1d:67:ed:8b:fb:75:f8:8a:90:89:78:8f: c0:d7:f0:f9:b1:06:f0:34:18:cf:90:26:19:ec:81: f4:ed:a0:95:eb:d0:9d:6a:58:42:30:5f:e4:64:3f: 1a:3e:53:97:75:b8:6b:3a:b2:00:71:dd:6f:6f:d0: 6e:4c:19:d1:b2:92:60:a9:a0:04:8f:5b:c5:77:42: 9b:d5:cf:b7:6d:df:0c:00:b7:da:bb:92:90:be:e3: 08:84:88:7f:80:43:be:de:00:55:49:97:55:c8:3f: c9:71:fe:77:e9:87:7c:3c:d1:39:33:73:82:71:f3: 51:71:ac:60:e9:db:23:f9:db:fa:c9:c4:8a:7b:69: d0:90:bc:9e:1a:b9:a1:2c:eb:04:8b:fa:c4:3c:5f: 6e:42:c6:97:75:7d:9b:83:d5:9e:f7:47:ea:61:30: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:4F:B2:37:0F:23:C4:60:2F:53:CF:E8:DE:3A:55:5D:CD:FD:39:92 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5k-yNw8jxGAvU8_o3jpVXc39OZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.9.0/24 170.168.0.0/24 170.168.67.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:94:63:7d:f2:93:e9:8e:94:66:1e:9e:51:af:7d:e4:4b:05: f9:53:6d:0d:31:75:ed:4f:a4:42:c7:81:3b:e7:c6:b5:d7:b5: 7b:62:75:2f:24:99:06:5b:d4:bc:48:52:82:ed:8f:ca:ff:a4: e3:7d:d5:f7:3e:02:c7:1d:5c:56:e6:0a:d9:55:82:d4:ad:eb: 91:ff:42:ca:e9:57:40:e4:b8:2e:ab:df:a6:6b:1b:23:3a:2c: df:87:ec:b0:fa:19:ec:08:fc:4e:a3:40:bc:d3:aa:bd:8c:f9: 8b:7f:a3:fe:ae:57:88:c8:8b:59:8b:85:6f:26:1d:c5:34:94: 5b:50:81:9e:36:df:57:7e:f7:88:99:dd:e5:dc:68:e9:ef:0b: 0d:c7:24:88:cd:99:ca:42:29:81:81:10:5f:10:c6:4c:fb:da: 22:48:c3:50:4f:db:df:9f:14:2c:12:d9:55:fe:44:bf:84:5d: 87:db:83:be:49:04:05:fd:4f:87:41:00:85:a6:3d:18:af:ce: c4:9a:2e:29:20:d7:e9:dc:76:d0:f4:b6:13:ba:91:c7:4b:e7: 29:aa:94:15:4c:39:0c:ce:f3:18:90:dc:9c:b3:04:5f:40:c4: 30:fe:ac:86:26:45:69:b0:bd:ab:f8:4a:62:cb:a1:d4:6b:5b: 28:b5:28:5a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fyt/19QyVvNy9EXdqxV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjRmYjIzNzBmMjNjNDYwMmY1M2NmZThkZTNhNTU1ZGNkZmQzOTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppWZRLOeED6A9T6y5FlH0iI2Y5nX 6MG8OKfiDFQP5UShFA34h/CoiM5tpx+tuawI3qsuv//qVhqBE7c2O+ZTSLVhWLS0 GQyM+fiZQO1J8yj7Y+2u/IM1eF2PQCkdZ+2L+3X4ipCJeI/A1/D5sQbwNBjPkCYZ 7IH07aCV69CdalhCMF/kZD8aPlOXdbhrOrIAcd1vb9BuTBnRspJgqaAEj1vFd0Kb 1c+3bd8MALfau5KQvuMIhIh/gEO+3gBVSZdVyD/Jcf536Yd8PNE5M3OCcfNRcaxg 6dsj+dv6ycSKe2nQkLyeGrmhLOsEi/rEPF9uQsaXdX2bg9We90fqYTBibQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOZPsjcPI8RgL1PP6N46VV3N/TmSMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNWsteU53OGp4R0F2VThfbzNqcFZYYzM5T1pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAivkJAwQA qqgAAwQAqqhDMA0GCSqGSIb3DQEBCwUAA4IBAQBPlGN98pPpjpRmHp5Rr33kSwX5 U20NMXXtT6RCx4E758a117V7YnUvJJkGW9S8SFKC7Y/K/6TjfdX3PgLHHVxW5grZ VYLUreuR/0LK6VdA5Lguq9+maxsjOizfh+yw+hnsCPxOo0C806q9jPmLf6P+rleI yItZi4VvJh3FNJRbUIGeNt9XfveImd3l3Gjp7wsNxySIzZnKQimBgRBfEMZM+9oi SMNQT9vfnxQsEtlV/kS/hF2H24O+SQQF/U+HQQCFpj0Yr87Emi4pINfp3HbQ9LYT upHHS+cpqpQVTDkMzvMYkNycswRfQMQw/qyGJkVpsL2r+Epiy6HUa1sotSha -----END CERTIFICATE-----Generated at Sun Jan 25 20:01:19 2026 by rpki-client