This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/OERjcS7Rw1B3YwF3LbMJxl0ZHr0.roa File: OERjcS7Rw1B3YwF3LbMJxl0ZHr0.roa (raw, json) Hash identifier: 5YMxc8IZjSMCAMLJ7p1kC6KLy0CuGvuCZUftU7gkKeM= Subject key identifier: 38:44:63:71:2E:D1:C3:50:77:63:01:77:2D:B3:09:C6:5D:19:1E:BD Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019BDC45D30C47C0A5248CFE4415E22E69CA Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/OERjcS7Rw1B3YwF3LbMJxl0ZHr0.roa Signing time: Tue 20 Jan 2026 16:38:41 +0000 ROA not before: Tue 20 Jan 2026 16:38:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39900 IP address blocks: 138.249.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:45:d3:0c:47:c0:a5:24:8c:fe:44:15:e2:2e:69:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 20 16:38:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=384463712ed1c350776301772db309c65d191ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7e:74:f1:82:4c:42:ee:92:dc:10:61:41:f0: 04:c6:b8:17:ce:b0:6f:ba:1b:d0:6f:c2:c9:06:ae: 23:72:30:d2:3b:de:2d:da:82:24:16:e2:fb:f0:cf: 1f:85:b0:5d:d3:ab:52:f7:f3:1f:a4:e6:c5:bb:31: c6:6e:b6:a6:59:d2:eb:e9:b8:1f:e1:56:91:9d:09: 8f:32:c0:ff:31:e6:08:db:cc:a4:8f:46:a9:47:f2: 94:66:b7:5b:50:cd:35:5b:ca:7f:3f:e5:ee:ed:e3: 18:e6:e1:6d:a0:7b:c5:3d:27:9e:12:73:e8:25:77: fa:cf:b9:da:35:5d:e3:cc:1b:6e:02:da:7a:8a:3f: 51:1b:96:db:97:3e:88:1f:e0:d4:67:70:2a:05:c0: 8f:9c:da:ec:fa:e0:92:f7:b0:49:01:2d:ce:86:02: 35:b0:89:dc:e3:67:58:36:1f:90:9e:30:8b:d1:f2: 53:b2:10:b0:3c:86:9d:c7:6a:cc:6d:82:80:23:04: b2:9b:f5:b5:5d:18:c5:18:bd:dc:c2:a4:28:ca:35: 15:e9:36:68:34:ef:8a:16:1e:af:ef:11:ae:f2:9b: 71:95:db:46:04:c9:df:cc:36:05:5c:8f:18:36:5b: 81:c9:db:93:a2:cb:29:e7:40:e8:42:7d:d3:8d:e8: a2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:44:63:71:2E:D1:C3:50:77:63:01:77:2D:B3:09:C6:5D:19:1E:BD X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/OERjcS7Rw1B3YwF3LbMJxl0ZHr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.142.0/23 Signature Algorithm: sha256WithRSAEncryption 38:37:25:4a:bd:7f:47:d1:4e:f8:35:d9:55:86:43:d4:87:41: 21:a4:21:02:39:67:a6:2e:9e:ea:0e:0c:98:92:46:c8:a5:15: f6:81:63:1d:74:76:f9:a2:40:ce:5f:8a:2d:a7:21:fb:cf:78: a2:02:c3:5a:90:9f:01:09:2a:e3:0c:1a:64:f9:a3:f9:38:ab: d3:bc:27:4c:1e:6f:5a:b5:68:00:cd:5a:98:e3:ca:78:19:6e: 7f:f6:1f:5d:8b:71:81:a9:22:d7:a8:a7:55:16:51:a1:60:14: bf:58:30:9b:7a:cb:18:01:8f:eb:c5:c6:a7:c2:0f:bd:45:15: c1:85:e1:bf:24:c0:81:40:73:fb:99:79:d4:10:1d:75:a4:16: 4a:48:73:8e:27:35:65:86:c0:33:e3:7b:18:fe:de:90:7d:36: 20:80:23:5f:ff:09:f4:61:df:53:c2:bd:ac:cc:ba:0d:30:98: 4d:57:cb:d1:8a:8e:fc:9b:01:19:49:19:8a:af:8b:83:ab:70: 1a:e8:82:52:4a:21:70:5d:f5:29:f3:aa:19:c8:65:b6:f0:c7: 62:71:42:9b:24:2d:e5:d3:5f:3e:e3:a5:f2:f4:fa:05:5a:b6: b9:ff:c4:6c:d1:63:c6:7d:74:03:9e:39:97:3f:56:22:b0:35: 0f:44:4d:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcRdMMR8ClJIz+RBXiLmnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTIwMTYzODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODQ0NjM3MTJlZDFjMzUwNzc2MzAxNzcyZGIzMDljNjVkMTkxZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn508YJMQu6S3BBhQfAExrgXzrBv uhvQb8LJBq4jcjDSO94t2oIkFuL78M8fhbBd06tS9/MfpObFuzHGbramWdLr6bgf 4VaRnQmPMsD/MeYI28ykj0apR/KUZrdbUM01W8p/P+Xu7eMY5uFtoHvFPSeeEnPo JXf6z7naNV3jzBtuAtp6ij9RG5bblz6IH+DUZ3AqBcCPnNrs+uCS97BJAS3OhgI1 sInc42dYNh+QnjCL0fJTshCwPIadx2rMbYKAIwSym/W1XRjFGL3cwqQoyjUV6TZo NO+KFh6v7xGu8ptxldtGBMnfzDYFXI8YNluByduTossp50DoQn3TjeiiGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhEY3Eu0cNQd2MBdy2zCcZdGR69MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvT0VSamNTN1J3MUIzWXdGM0xiTUp4bDBaSHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivmOMA0G CSqGSIb3DQEBCwUAA4IBAQA4NyVKvX9H0U74NdlVhkPUh0EhpCECOWemLp7qDgyY kkbIpRX2gWMddHb5okDOX4otpyH7z3iiAsNakJ8BCSrjDBpk+aP5OKvTvCdMHm9a tWgAzVqY48p4GW5/9h9di3GBqSLXqKdVFlGhYBS/WDCbessYAY/rxcanwg+9RRXB heG/JMCBQHP7mXnUEB11pBZKSHOOJzVlhsAz43sY/t6QfTYggCNf/wn0Yd9Twr2s zLoNMJhNV8vRio78mwEZSRmKr4uDq3Aa6IJSSiFwXfUp86oZyGW28MdicUKbJC3l 018+46Xy9PoFWra5/8Rs0WPGfXQDnjmXP1YisDUPRE3W -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:24 2026 by rpki-client