This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/SuLRwfgaA8CqoBDFMmX_ChJInsA.roa File: SuLRwfgaA8CqoBDFMmX_ChJInsA.roa (raw, json) Hash identifier: R9aB5vy+oDwH6RFSg3O7BNc5JQfUJ6LRYIhFiGf0KLQ= Subject key identifier: 4A:E2:D1:C1:F8:1A:03:C0:AA:A0:10:C5:32:65:FF:0A:12:48:9E:C0 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019BE72FD8B59A8576E24919DF1D80014E00 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/SuLRwfgaA8CqoBDFMmX_ChJInsA.roa Signing time: Thu 22 Jan 2026 19:30:31 +0000 ROA not before: Thu 22 Jan 2026 19:30:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 138.249.21.0/24 maxlen: 24 138.249.126.0/24 maxlen: 24 138.249.148.0/24 maxlen: 24 170.168.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e7:2f:d8:b5:9a:85:76:e2:49:19:df:1d:80:01:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 22 19:30:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ae2d1c1f81a03c0aaa010c53265ff0a12489ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:05:55:b2:50:ae:0f:05:ab:3f:38:60:fd:ec: ed:5c:25:28:e1:43:7c:60:df:b6:d7:69:94:1d:f9: b1:69:9b:22:de:dd:c2:aa:a4:66:36:7c:5e:71:59: 10:e5:24:9f:3b:36:2e:36:3f:d9:b3:f7:2a:c8:fb: ea:51:2b:e7:bc:a5:d8:6c:11:f5:ee:08:5c:fd:db: bf:57:96:f1:82:7d:49:99:b4:5d:12:9b:f2:b5:af: 6e:6c:3e:f0:b6:f3:2a:15:1b:90:63:9d:84:8a:c5: d1:23:a3:fd:6b:08:d5:ca:f5:f8:f9:1b:15:b4:1f: d0:29:a2:fd:9c:2f:00:dc:4f:99:1a:cc:51:ab:2f: c7:b8:c5:52:86:88:4f:5c:1f:7d:f6:4a:4f:30:8c: a5:2f:1f:ba:fc:2d:8c:f4:f9:82:33:c6:da:92:02: 84:60:3c:82:c2:30:85:73:03:cd:7b:c8:c3:1d:95: 02:a0:db:e2:77:1d:ce:2c:99:9d:68:57:3a:22:34: 3e:cc:86:e0:60:f9:2f:4b:ec:60:db:27:f8:cb:4b: 1b:89:17:03:d2:84:0c:cc:3a:4d:7f:2c:73:c8:13: 04:8f:30:7c:80:24:09:15:83:da:54:e2:1f:07:d2: 92:74:ad:0d:95:23:70:96:cf:b5:2c:c9:e6:16:9c: 1c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E2:D1:C1:F8:1A:03:C0:AA:A0:10:C5:32:65:FF:0A:12:48:9E:C0 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/SuLRwfgaA8CqoBDFMmX_ChJInsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.21.0/24 138.249.126.0/24 138.249.148.0/24 170.168.7.0/24 Signature Algorithm: sha256WithRSAEncryption 49:c9:a7:c9:b9:4d:c7:20:9c:81:ec:31:01:f8:55:d1:25:68: 38:29:86:80:40:46:d7:c9:ff:f4:f5:71:79:fc:28:55:50:20: ca:2c:a8:9a:18:eb:5c:a6:23:1c:e6:46:92:7a:1b:4a:b7:f9: f5:2f:18:d6:5d:64:c9:90:dc:e2:66:00:4a:8c:c0:e0:9c:21: 14:ab:cc:4e:f8:4c:03:3b:15:ef:1a:66:9f:c6:f6:f0:cc:95: e6:a3:a0:1b:b7:8d:fb:1b:de:9b:94:79:d2:df:6a:75:86:ad: 8f:fd:b2:64:1d:96:27:3a:ec:08:70:c7:03:6c:0c:69:24:ad: 5f:72:e8:d6:47:f4:d2:37:53:9f:1c:59:5b:63:c1:13:8e:d5: 8b:42:5f:c4:dd:fb:64:11:5f:3c:73:3e:58:aa:c1:a6:98:20: 40:b3:12:ff:a9:35:94:c0:05:3c:95:ce:1d:03:cb:ec:c8:4f: bc:27:5d:1a:9d:e2:c4:38:7e:a2:63:bf:2f:96:ef:16:0d:a2: c9:a5:29:75:40:60:89:4b:8f:0e:23:8a:a9:ed:59:5b:ca:6b: bc:64:a2:e4:76:34:bb:b4:67:c9:81:31:d1:99:fc:f3:a9:78: 02:df:bc:34:28:ff:7f:5b:fc:9e:5a:3c:d6:7a:ce:98:68:ed: fc:78:aa:d3 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvnL9i1moV24kkZ3x2AAU4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTIyMTkzMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWUyZDFjMWY4MWEwM2MwYWFhMDEwYzUzMjY1ZmYwYTEyNDg5ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgVVslCuDwWrPzhg/eztXCUo4UN8 YN+212mUHfmxaZsi3t3CqqRmNnxecVkQ5SSfOzYuNj/Zs/cqyPvqUSvnvKXYbBH1 7ghc/du/V5bxgn1JmbRdEpvyta9ubD7wtvMqFRuQY52EisXRI6P9awjVyvX4+RsV tB/QKaL9nC8A3E+ZGsxRqy/HuMVShohPXB999kpPMIylLx+6/C2M9PmCM8bakgKE YDyCwjCFcwPNe8jDHZUCoNvidx3OLJmdaFc6IjQ+zIbgYPkvS+xg2yf4y0sbiRcD 0oQMzDpNfyxzyBMEjzB8gCQJFYPaVOIfB9KSdK0NlSNwls+1LMnmFpwcnQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEri0cH4GgPAqqAQxTJl/woSSJ7AMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvU3VMUndmZ2FBOENxb0JERk1tWF9DaEpJbnNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAivkVAwQA ivl+AwQAivmUAwQAqqgHMA0GCSqGSIb3DQEBCwUAA4IBAQBJyafJuU3HIJyB7DEB +FXRJWg4KYaAQEbXyf/09XF5/ChVUCDKLKiaGOtcpiMc5kaSehtKt/n1LxjWXWTJ kNziZgBKjMDgnCEUq8xO+EwDOxXvGmafxvbwzJXmo6Abt437G96blHnS32p1hq2P /bJkHZYnOuwIcMcDbAxpJK1fcujWR/TSN1OfHFlbY8ETjtWLQl/E3ftkEV88cz5Y qsGmmCBAsxL/qTWUwAU8lc4dA8vsyE+8J10aneLEOH6iY78vlu8WDaLJpSl1QGCJ S48OI4qp7Vlbymu8ZKLkdjS7tGfJgTHRmfzzqXgC37w0KP9/W/yeWjzWes6YaO38 eKrT -----END CERTIFICATE-----Generated at Sun Jan 25 11:54:12 2026 by rpki-client