This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RzKVmPieUxG4xIJs_R1ahq0u364.roa File: RzKVmPieUxG4xIJs_R1ahq0u364.roa (raw, json) Hash identifier: NbG0jRv5E1+AuIncYElfN6Gg5QKvYuquD8TlFhynA7c= Subject key identifier: 47:32:95:98:F8:9E:53:11:B8:C4:82:6C:FD:1D:5A:86:AD:2E:DF:AE Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019ABFA642D47B07BDAB2500EC9C933A2E47 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RzKVmPieUxG4xIJs_R1ahq0u364.roa Signing time: Wed 26 Nov 2025 10:12:15 +0000 ROA not before: Wed 26 Nov 2025 10:12:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203523 IP address blocks: 138.249.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:a6:42:d4:7b:07:bd:ab:25:00:ec:9c:93:3a:2e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 26 10:12:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=47329598f89e5311b8c4826cfd1d5a86ad2edfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:43:b5:73:6a:9c:4e:a2:5d:d9:c3:09:e4: 25:03:3c:38:0c:ce:aa:f2:56:e3:ab:fc:b8:19:e5: ad:00:5b:fd:0f:f5:50:df:56:46:c1:eb:37:3f:5c: ac:b5:61:5a:d8:f5:cb:1d:60:cd:04:9d:29:bb:24: d3:21:04:94:28:df:9d:a0:e6:b1:fa:19:9f:ea:97: 48:c9:b8:52:56:8e:88:a9:d4:4c:f5:28:aa:0a:fd: ce:7e:fa:fc:f0:70:b0:0c:c7:33:ff:2c:c7:5f:5c: c9:88:25:7d:f6:c2:7b:98:b8:42:ab:22:c1:54:62: b1:0f:24:99:73:68:f8:20:fd:f7:84:90:07:6f:0d: 5a:ab:5b:c2:ab:ca:5f:80:e6:75:f6:76:92:79:95: 35:61:fa:b0:84:fc:63:aa:02:7b:c4:b6:57:b1:fd: 86:4d:ac:e1:a2:d7:c6:bf:68:f4:4d:c7:0b:ce:10: 3a:11:39:e2:a3:94:31:0d:bf:c4:57:29:c5:56:dd: 40:22:88:8e:84:36:cb:f3:7d:dc:78:2f:53:ff:5a: 3c:c0:8b:ff:39:46:1e:26:01:b5:c3:71:ac:10:bd: e6:dd:18:e2:cf:bb:d0:98:93:b6:17:fd:b4:db:2e: a9:c6:f0:59:d7:79:73:67:76:ad:ea:b3:da:b8:80: fd:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:32:95:98:F8:9E:53:11:B8:C4:82:6C:FD:1D:5A:86:AD:2E:DF:AE X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RzKVmPieUxG4xIJs_R1ahq0u364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.6.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:71:13:e0:d8:de:20:ac:92:7a:88:e4:8a:1b:c3:3d:f6:03: 3a:17:47:cf:d5:f2:16:65:e8:76:c8:60:38:42:0e:71:28:eb: e5:11:bc:3f:2a:48:08:fc:8d:1d:03:a9:d9:14:17:07:2f:f4: b4:0e:81:99:49:02:f6:df:65:8f:4f:f6:1a:e1:c8:52:54:b6: 5f:12:c3:e6:06:6e:c3:39:8c:e9:b3:f7:72:31:1f:23:e2:ab: 3b:66:05:70:76:e3:80:55:12:59:71:cd:4e:ac:ee:cc:d8:de: b6:15:c6:a6:f8:0f:0f:48:58:59:d7:bb:1b:70:3d:64:ae:08: 41:19:11:43:e3:87:be:d4:2c:c4:ba:46:ca:8e:e6:b0:07:66: 54:e6:ca:9a:ae:bd:78:4b:a9:f2:f0:a2:f7:d7:10:99:57:79: 16:f6:97:a2:29:5b:ae:a3:71:1e:8d:8c:7d:98:91:04:87:62: 1b:06:46:e2:95:24:b1:48:55:b6:f7:1b:eb:ae:4f:27:f9:94: c4:ad:33:04:a5:31:02:40:8f:74:19:3f:16:fe:3f:35:f6:81: 03:8b:7e:c0:86:10:4d:40:05:96:cb:a7:fe:cb:7e:f0:6b:eb: 8e:3f:5b:1e:79:4b:bc:13:48:0b:6b:c0:80:d6:e4:04:ba:a6: 45:96:a1:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq/pkLUewe9qyUA7JyTOi5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI2MTAxMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzMyOTU5OGY4OWU1MzExYjhjNDgyNmNmZDFkNWE4NmFkMmVkZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYJDtXNqnE6iXdnDCeQlAzw4DM6q 8lbjq/y4GeWtAFv9D/VQ31ZGwes3P1ystWFa2PXLHWDNBJ0puyTTIQSUKN+doOax +hmf6pdIybhSVo6IqdRM9SiqCv3Ofvr88HCwDMcz/yzHX1zJiCV99sJ7mLhCqyLB VGKxDySZc2j4IP33hJAHbw1aq1vCq8pfgOZ19naSeZU1YfqwhPxjqgJ7xLZXsf2G TazhotfGv2j0TccLzhA6ETnio5QxDb/EVynFVt1AIoiOhDbL833ceC9T/1o8wIv/ OUYeJgG1w3GsEL3m3Rjiz7vQmJO2F/202y6pxvBZ13lzZ3at6rPauID9bwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEcylZj4nlMRuMSCbP0dWoatLt+uMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvUnpLVm1QaWVVeEc0eElKc19SMWFocTB1MzY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkGMA0G CSqGSIb3DQEBCwUAA4IBAQBacRPg2N4grJJ6iOSKG8M99gM6F0fP1fIWZeh2yGA4 Qg5xKOvlEbw/KkgI/I0dA6nZFBcHL/S0DoGZSQL232WPT/Ya4chSVLZfEsPmBm7D OYzps/dyMR8j4qs7ZgVwduOAVRJZcc1OrO7M2N62Fcam+A8PSFhZ17sbcD1krghB GRFD44e+1CzEukbKjuawB2ZU5sqarr14S6ny8KL31xCZV3kW9peiKVuuo3EejYx9 mJEEh2IbBkbilSSxSFW29xvrrk8n+ZTErTMEpTECQI90GT8W/j819oEDi37AhhBN QAWWy6f+y37wa+uOP1seeUu8E0gLa8CA1uQEuqZFlqG0 -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:18 2025 by rpki-client