This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DyizkprBbh8BNVN2RKknx4Wz8Bs.roa File: DyizkprBbh8BNVN2RKknx4Wz8Bs.roa (raw, json) Hash identifier: EiYPwjF0OV634i6Wo/ZY4kBqqS/cj9gpmn9/LGaoPW4= Subject key identifier: 0F:28:B3:92:9A:C1:6E:1F:01:35:53:76:44:A9:27:C7:85:B3:F0:1B Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AC6DC769157A67B781315ECA37ADEB546 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DyizkprBbh8BNVN2RKknx4Wz8Bs.roa Signing time: Thu 27 Nov 2025 19:48:48 +0000 ROA not before: Thu 27 Nov 2025 19:48:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203382 IP address blocks: 138.249.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c6:dc:76:91:57:a6:7b:78:13:15:ec:a3:7a:de:b5:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 27 19:48:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f28b3929ac16e1f0135537644a927c785b3f01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:17:a7:e4:e7:ae:31:3d:ff:89:41:c5:74: 28:6d:bc:09:d7:5b:15:f8:bc:7b:78:5a:66:a6:1f: 63:56:3e:76:e8:70:fe:bc:80:f7:29:61:96:a0:37: 48:b9:3e:71:5d:76:34:53:db:0c:03:0b:3f:62:f3: db:04:3f:b9:bf:de:3c:42:fa:ad:26:10:e2:cf:b3: 34:fe:df:f1:4f:9a:dd:94:13:6d:e8:21:d1:a5:c6: cb:76:a9:2e:28:8f:b4:f6:c4:a4:49:2c:3f:7e:9d: ab:87:73:33:0f:c5:de:a7:30:a8:b8:ef:0d:84:09: a8:c5:9b:86:da:07:77:d7:36:0c:7f:d5:3d:dc:a8: d2:01:be:b2:de:36:15:7b:88:07:dc:2b:be:85:3b: c4:4d:af:64:3a:81:5e:bf:c5:f2:c4:f8:5f:0a:66: 1c:a3:88:23:93:03:f2:d4:cd:61:e1:5b:c6:77:e7: 9f:e0:33:8c:89:fd:7e:59:ff:27:41:81:f2:c2:b1: d9:d5:c6:c4:06:91:18:18:82:39:56:05:01:6d:64: 8b:7f:91:0a:0f:c6:c2:d3:e8:cf:ca:bd:eb:58:b8: 50:97:97:0d:12:ac:07:97:0e:d3:1f:46:3a:9a:71: 9f:4b:f3:ba:c7:a8:9d:5b:2b:74:50:86:e9:42:f3: 8b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:28:B3:92:9A:C1:6E:1F:01:35:53:76:44:A9:27:C7:85:B3:F0:1B X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DyizkprBbh8BNVN2RKknx4Wz8Bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.12.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:1d:96:8d:81:a7:bb:2a:cc:e9:01:ef:9e:32:e8:3e:e9:76: 83:a9:8f:a7:30:41:10:ec:98:4f:ed:c7:31:39:b2:9f:5b:da: cc:d4:8f:67:4f:db:bc:0b:00:49:8d:8d:23:96:28:4f:5c:1c: 7b:5e:b1:aa:1b:77:bd:fc:23:03:a5:aa:53:88:ca:aa:6c:42: 4e:17:d7:a5:5e:5b:bf:f6:32:24:7f:50:e2:f3:d8:f4:77:36: 8a:6c:d6:c9:14:de:64:5e:01:80:3f:0f:9b:b0:1f:96:84:30: 74:88:c5:0e:57:70:0c:58:3a:2e:06:76:9b:5f:c3:8b:d9:1d: f8:d2:79:01:04:fa:d6:65:fc:ec:e0:d0:f4:7d:20:33:e5:75: 44:a6:96:53:b6:17:09:05:7c:b1:1d:31:32:7c:3a:5f:45:f8: 20:ac:56:4a:ec:09:d4:55:25:ca:17:70:a0:98:ee:f8:cd:ae: af:0b:95:7a:6f:da:fc:27:db:cf:29:1c:8d:b4:56:13:02:d1: 6c:e3:88:bb:5a:a6:67:32:75:87:df:d2:b9:9f:87:0a:b8:04: f1:92:03:22:09:2c:9e:23:70:25:5e:24:70:36:c1:cd:56:99: c9:64:c1:8d:d1:0b:8c:32:82:c0:f7:fc:00:07:16:9a:46:c8: c4:6d:49:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrG3HaRV6Z7eBMV7KN63rVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI3MTk0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjI4YjM5MjlhYzE2ZTFmMDEzNTUzNzY0NGE5MjdjNzg1YjNmMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOEXp+TnrjE9/4lBxXQobbwJ11sV +Lx7eFpmph9jVj526HD+vID3KWGWoDdIuT5xXXY0U9sMAws/YvPbBD+5v948Qvqt JhDiz7M0/t/xT5rdlBNt6CHRpcbLdqkuKI+09sSkSSw/fp2rh3MzD8XepzCouO8N hAmoxZuG2gd31zYMf9U93KjSAb6y3jYVe4gH3Cu+hTvETa9kOoFev8XyxPhfCmYc o4gjkwPy1M1h4VvGd+ef4DOMif1+Wf8nQYHywrHZ1cbEBpEYGII5VgUBbWSLf5EK D8bC0+jPyr3rWLhQl5cNEqwHlw7TH0Y6mnGfS/O6x6idWyt0UIbpQvOLXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA8os5KawW4fATVTdkSpJ8eFs/AbMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvRHlpemtwckJiaDhCTlZOMlJLa254NFd6OEJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivkMMA0G CSqGSIb3DQEBCwUAA4IBAQCbHZaNgae7KszpAe+eMug+6XaDqY+nMEEQ7JhP7ccx ObKfW9rM1I9nT9u8CwBJjY0jlihPXBx7XrGqG3e9/CMDpapTiMqqbEJOF9elXlu/ 9jIkf1Di89j0dzaKbNbJFN5kXgGAPw+bsB+WhDB0iMUOV3AMWDouBnabX8OL2R34 0nkBBPrWZfzs4ND0fSAz5XVEppZTthcJBXyxHTEyfDpfRfggrFZK7AnUVSXKF3Cg mO74za6vC5V6b9r8J9vPKRyNtFYTAtFs44i7WqZnMnWH39K5n4cKuATxkgMiCSye I3AlXiRwNsHNVpnJZMGN0QuMMoLA9/wABxaaRsjEbUmH -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:00 2025 by rpki-client