This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/62lbrs8ytFBlEMaMjmfYjt2w3QY.roa File: 62lbrs8ytFBlEMaMjmfYjt2w3QY.roa (raw, json) Hash identifier: oGDMF82ASHEdzJ1yJCQ3KSsqryUg2Xy1nN7BURbfWrU= Subject key identifier: EB:69:5B:AE:CF:32:B4:50:65:10:C6:8C:8E:67:D8:8E:DD:B0:DD:06 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019BC27B9B505440EC95F86D806252E8E185 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/62lbrs8ytFBlEMaMjmfYjt2w3QY.roa Signing time: Thu 15 Jan 2026 16:27:19 +0000 ROA not before: Thu 15 Jan 2026 16:27:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 150345 IP address blocks: 138.249.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:7b:9b:50:54:40:ec:95:f8:6d:80:62:52:e8:e1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 15 16:27:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb695baecf32b4506510c68c8e67d88eddb0dd06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:3d:c5:47:7a:7f:ef:5c:b4:b5:5f:cc:12: 5e:47:06:aa:5f:77:6e:1a:87:fd:ce:d2:b4:99:bf: 61:f1:de:6e:95:a0:35:06:59:37:55:30:30:31:42: 1f:9b:34:68:ae:a9:61:4f:22:ec:d2:7f:af:82:93: b0:20:47:bc:04:cc:d7:98:40:29:d6:86:b2:5c:45: 85:b3:f6:93:69:9a:c7:d8:99:e6:35:e6:c0:0d:3a: 1d:48:c7:fe:12:46:be:19:99:66:f4:96:48:c6:90: 8a:db:8d:db:13:a7:be:1c:37:23:0f:9a:b3:7b:27: f5:59:f2:df:b5:da:7c:fb:a9:e6:4d:8a:aa:50:74: d9:02:88:c7:31:d2:23:1a:8a:d8:5a:13:ea:4b:36: af:16:f3:55:e9:37:da:00:cc:2f:5a:44:4b:48:e6: 00:3d:5b:ea:5d:da:79:20:4e:4c:ba:54:e0:7b:16: 2c:e9:36:8e:0c:8d:e1:bf:04:35:3d:fb:1f:c7:e0: 42:de:04:c5:96:05:2c:45:b9:b2:91:f9:51:c8:65: ac:0d:09:bc:d7:0e:b2:17:1a:59:2e:4c:c4:11:5c: c4:77:ae:18:76:ba:7c:37:a4:12:9c:07:36:8f:c5: 5b:c8:da:82:7e:ab:af:5e:14:86:d3:6d:f3:cd:a3: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:69:5B:AE:CF:32:B4:50:65:10:C6:8C:8E:67:D8:8E:DD:B0:DD:06 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/62lbrs8ytFBlEMaMjmfYjt2w3QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.134.0/24 Signature Algorithm: sha256WithRSAEncryption 78:7b:2f:19:a6:46:4c:03:46:05:21:32:11:ba:17:03:df:00: b3:1d:0d:88:1b:a4:e1:9e:c1:22:22:e0:d6:35:5d:bb:ef:13: 02:92:be:4c:c4:96:e2:1d:70:ef:98:00:de:bb:72:74:d3:82: aa:3c:66:99:34:64:d1:e2:c1:04:9f:89:b7:e5:09:86:e0:5d: 71:15:ff:0a:4f:a9:a3:e3:da:b1:c7:99:f4:7d:fc:0c:d2:6f: 2a:6f:3b:3f:7a:70:37:76:61:f5:be:c6:63:5c:82:68:b9:de: c3:a5:cb:cc:cb:36:6c:85:0f:24:8e:b6:42:87:65:12:e3:10: 48:4e:94:c8:b6:6b:3b:83:95:04:2a:9f:33:ab:63:27:de:5f: 8b:d3:8d:fd:ee:5b:f7:4d:b1:5c:a3:08:53:c1:70:20:e5:75: a1:62:56:ee:1a:2a:dd:69:ea:5c:0b:b9:1f:b5:70:fe:48:e6: 08:56:bb:e7:32:a0:25:17:a0:b7:70:aa:0d:a4:4e:0c:7f:a0: 10:9b:53:51:2a:b4:5b:e2:a1:1a:39:1b:bf:49:85:24:60:e3: f3:8f:31:4f:f1:86:c4:63:78:13:c8:48:44:71:b1:42:fc:9c: da:17:c9:a9:02:08:e4:d6:cf:9a:53:06:90:0f:a7:cd:56:e8: e7:52:e7:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvCe5tQVEDslfhtgGJS6OGFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTE1MTYyNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjY5NWJhZWNmMzJiNDUwNjUxMGM2OGM4ZTY3ZDg4ZWRkYjBkZDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1s9xUd6f+9ctLVfzBJeRwaqX3du Gof9ztK0mb9h8d5ulaA1Blk3VTAwMUIfmzRorqlhTyLs0n+vgpOwIEe8BMzXmEAp 1oayXEWFs/aTaZrH2JnmNebADTodSMf+Eka+GZlm9JZIxpCK243bE6e+HDcjD5qz eyf1WfLftdp8+6nmTYqqUHTZAojHMdIjGorYWhPqSzavFvNV6TfaAMwvWkRLSOYA PVvqXdp5IE5MulTgexYs6TaODI3hvwQ1Pfsfx+BC3gTFlgUsRbmykflRyGWsDQm8 1w6yFxpZLkzEEVzEd64Ydrp8N6QSnAc2j8VbyNqCfquvXhSG023zzaOAfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOtpW67PMrRQZRDGjI5n2I7dsN0GMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNjJsYnJzOHl0RkJsRU1hTWptZllqdDJ3M1FZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivmGMA0G CSqGSIb3DQEBCwUAA4IBAQB4ey8ZpkZMA0YFITIRuhcD3wCzHQ2IG6ThnsEiIuDW NV277xMCkr5MxJbiHXDvmADeu3J004KqPGaZNGTR4sEEn4m35QmG4F1xFf8KT6mj 49qxx5n0ffwM0m8qbzs/enA3dmH1vsZjXIJoud7DpcvMyzZshQ8kjrZCh2US4xBI TpTItms7g5UEKp8zq2Mn3l+L04397lv3TbFcowhTwXAg5XWhYlbuGirdaepcC7kf tXD+SOYIVrvnMqAlF6C3cKoNpE4Mf6AQm1NRKrRb4qEaORu/SYUkYOPzjzFP8YbE Y3gTyEhEcbFC/JzaF8mpAgjk1s+aUwaQD6fNVujnUueR -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:23 2026 by rpki-client