This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7rKQ4lbcpMQPnrpLMnCX5FIQH4g.roa File: 7rKQ4lbcpMQPnrpLMnCX5FIQH4g.roa (raw, json) Hash identifier: IM9arq55qezG97kCrlRIE644tdEn7LvEEWUuMRPYWsY= Subject key identifier: EE:B2:90:E2:56:DC:A4:C4:0F:9E:BA:4B:32:70:97:E4:52:10:1F:88 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F2BC55AA260112FA4F596EBB86B7C Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7rKQ4lbcpMQPnrpLMnCX5FIQH4g.roa Signing time: Thu 01 Jan 2026 12:18:56 +0000 ROA not before: Thu 01 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 138.249.117.0/24 maxlen: 24 170.168.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2b:c5:5a:a2:60:11:2f:a4:f5:96:eb:b8:6b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeb290e256dca4c40f9eba4b327097e452101f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ad:78:74:e2:fb:ee:af:41:38:ed:95:f1:ad: 04:c1:ae:45:f7:89:f8:a5:3b:35:d7:b7:c3:60:8f: dc:8d:4f:f7:fb:e3:71:a6:81:d8:f6:dc:e9:9a:22: 4f:4a:dc:54:ff:55:02:9b:d4:5c:e2:cc:db:de:d2: d8:76:38:15:73:0a:12:0b:65:36:66:87:fd:98:1f: 09:a4:9e:64:f8:45:04:cc:45:87:c1:da:bc:31:b5: 13:4e:bc:12:f0:49:3f:8a:1d:0a:47:75:03:01:e0: 58:88:86:11:de:5c:bd:84:75:27:a9:e0:07:4c:10: 75:4c:09:91:7f:f4:ba:dd:a5:91:a7:04:97:7d:da: 51:2c:97:4b:91:de:bd:ae:fe:54:f6:3e:19:ba:5a: b8:ed:bd:26:55:f1:ee:1c:0e:c6:15:5e:44:ea:c7: 60:fb:85:8e:34:25:4f:b8:c2:dc:60:71:62:d6:bb: b1:17:f6:8d:78:11:c5:ca:86:43:ef:01:84:b8:ed: cc:a0:d4:cf:3a:a7:82:88:5d:ca:ec:96:3a:5a:bd: f3:48:ef:e9:7c:0a:d1:12:aa:88:09:8c:8e:a1:06: 45:72:78:42:9d:e3:bd:85:ee:10:ee:e7:ef:6d:71: 59:9e:0c:51:54:8a:00:d5:e0:2f:92:20:81:2d:00: 6c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B2:90:E2:56:DC:A4:C4:0F:9E:BA:4B:32:70:97:E4:52:10:1F:88 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7rKQ4lbcpMQPnrpLMnCX5FIQH4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.117.0/24 170.168.91.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:bc:06:2e:bb:fe:57:25:0b:51:62:05:e9:b7:22:61:07:aa: f1:a8:e7:f4:d4:5a:c8:67:9f:db:6c:3b:e0:bd:4e:86:94:ea: 70:e5:51:aa:07:30:df:f2:32:e5:79:a3:e0:6b:5e:61:96:e5: 67:5b:e9:dd:bd:bd:e1:58:c9:fc:30:4b:83:4c:95:d3:65:ca: c5:54:56:7c:52:8d:b5:df:ba:27:db:35:94:54:fd:07:e4:c4: bc:f5:e6:86:b9:7f:97:d3:93:51:ef:82:67:d4:76:da:46:09: 99:14:24:19:63:52:2f:36:c9:8b:50:e7:e2:a8:11:1e:c6:a6: e3:ee:a3:dd:f2:53:50:c3:35:b4:54:99:67:f1:fa:8e:8a:6c: 2b:d1:49:4a:dd:0a:a4:4e:80:de:c8:15:10:1f:1a:05:4c:b8: 9e:bd:31:a5:48:de:1a:4d:5a:c9:dd:cf:40:73:ff:6f:91:86: 24:33:cd:60:26:12:23:56:c0:c0:48:f1:91:85:69:3a:99:a3: 8a:a1:16:c0:c8:97:cc:a4:6a:3a:ed:51:cb:41:5d:94:ab:1b: 49:2b:bc:20:95:e8:a2:8c:aa:19:b7:31:49:e2:3d:63:30:77: e9:1c:8f:fa:ed:eb:4b:e7:d7:e3:b5:77:a3:e3:e8:fd:29:c9: c5:e1:cb:9e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fyvFWqJgES+k9ZbruGt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWIyOTBlMjU2ZGNhNGM0MGY5ZWJhNGIzMjcwOTdlNDUyMTAxZjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjq14dOL77q9BOO2V8a0Ewa5F94n4 pTs117fDYI/cjU/3++NxpoHY9tzpmiJPStxU/1UCm9Rc4szb3tLYdjgVcwoSC2U2 Zof9mB8JpJ5k+EUEzEWHwdq8MbUTTrwS8Ek/ih0KR3UDAeBYiIYR3ly9hHUnqeAH TBB1TAmRf/S63aWRpwSXfdpRLJdLkd69rv5U9j4Zulq47b0mVfHuHA7GFV5E6sdg +4WONCVPuMLcYHFi1ruxF/aNeBHFyoZD7wGEuO3MoNTPOqeCiF3K7JY6Wr3zSO/p fArREqqICYyOoQZFcnhCneO9he4Q7ufvbXFZngxRVIoA1eAvkiCBLQBsXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO6ykOJW3KTED566SzJwl+RSEB+IMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvN3JLUTRsYmNwTVFQbnJwTE1uQ1g1RklRSDRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAivl1AwQA qqhbMA0GCSqGSIb3DQEBCwUAA4IBAQA/vAYuu/5XJQtRYgXptyJhB6rxqOf01FrI Z5/bbDvgvU6GlOpw5VGqBzDf8jLleaPga15hluVnW+ndvb3hWMn8MEuDTJXTZcrF VFZ8Uo2137on2zWUVP0H5MS89eaGuX+X05NR74Jn1HbaRgmZFCQZY1IvNsmLUOfi qBEexqbj7qPd8lNQwzW0VJln8fqOimwr0UlK3QqkToDeyBUQHxoFTLievTGlSN4a TVrJ3c9Ac/9vkYYkM81gJhIjVsDASPGRhWk6maOKoRbAyJfMpGo67VHLQV2UqxtJ K7wgleiijKoZtzFJ4j1jMHfpHI/67etL59fjtXej4+j9KcnF4cue -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:05 2026 by rpki-client