This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/UIBThPUEcj6LnpRG2MnS-aGJKgM.roa File: UIBThPUEcj6LnpRG2MnS-aGJKgM.roa (raw, json) Hash identifier: dEqWp9wzW1ABIq5nj2ElgRA3GfF+UJC9nr0VSvXV3jc= Subject key identifier: 50:80:53:84:F5:04:72:3E:8B:9E:94:46:D8:C9:D2:F9:A1:89:2A:03 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F324CC8E32CF62E09823FF2089ED6 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/UIBThPUEcj6LnpRG2MnS-aGJKgM.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197309 IP address blocks: 138.249.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:32:4c:c8:e3:2c:f6:2e:09:82:3f:f2:08:9e:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50805384f504723e8b9e9446d8c9d2f9a1892a03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:81:4f:bc:b2:da:0c:9f:58:98:a3:43:c5: 93:b6:13:5f:f9:0e:ff:00:22:1b:59:47:2e:1a:5a: 3b:33:5f:6f:c6:17:44:b0:e0:e2:f5:f2:9c:0c:37: e5:1f:50:a4:9b:63:51:db:3a:49:04:12:b7:2f:69: 6f:b0:71:9f:a2:6b:a2:50:70:ac:d8:4d:66:5a:54: 11:f8:db:6e:07:46:ab:67:30:5a:2e:79:6f:3c:bf: 92:f9:0a:17:bb:8c:81:7d:f1:24:ac:c8:4d:42:81: 57:c5:79:49:77:8a:6d:39:36:42:86:6b:f0:5e:6c: b5:de:5f:ae:4d:fa:a5:10:77:0d:64:77:b0:04:74: c0:87:90:6e:18:3c:c2:ba:22:12:a6:65:96:d4:39: ca:a2:0e:3a:51:38:ac:d7:d3:58:10:23:1d:e0:a2: 80:3a:2b:2a:f4:48:80:5d:d5:86:3a:ca:8c:ac:7b: 6a:0e:e0:ff:ab:80:21:3e:4c:90:e1:98:f6:74:e9: 85:16:cf:1d:03:fb:2b:ff:d5:38:39:7c:8f:e3:16: 42:7e:47:b3:9a:60:1b:91:9f:d3:19:82:00:fe:20: 62:9f:18:dd:41:3c:f1:a2:55:81:2b:58:18:35:f1: 29:4b:18:64:c9:06:2e:40:9a:4e:fe:c0:f9:26:ef: 73:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:80:53:84:F5:04:72:3E:8B:9E:94:46:D8:C9:D2:F9:A1:89:2A:03 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/UIBThPUEcj6LnpRG2MnS-aGJKgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.16.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:e9:a7:8f:1f:b8:f2:a4:1e:23:18:b9:1d:82:42:8b:fe:f7: 3b:5a:4f:fd:59:94:1d:56:2d:91:a3:5f:0b:41:df:79:c6:73: d5:80:95:39:d1:40:a7:b4:4f:ae:41:01:a3:07:75:3f:7f:44: 29:36:90:19:e3:df:90:cf:9f:1e:71:fe:7d:15:fa:b7:80:d3: 8f:13:db:b9:9d:ac:36:e7:40:b6:27:d6:fe:e9:ea:25:9c:6f: 4f:b2:ee:11:79:27:f0:aa:de:e7:d5:ec:18:61:d7:6d:84:84: b4:62:0d:c4:ef:a9:fc:5e:f2:29:5a:be:b5:bc:85:04:e6:0f: e6:94:e0:7a:d7:03:6b:9b:d2:e8:e6:cb:31:d7:32:4c:50:c9: a2:ea:39:57:9f:95:4a:8c:48:01:28:8f:24:c6:2d:76:64:4d: 9e:16:9b:23:20:8e:40:77:88:a5:2a:78:14:16:8b:03:be:dd: 4f:69:04:39:ae:0b:b2:2b:8b:5a:16:48:43:f7:33:1a:0d:20: 97:93:b5:95:e3:73:e2:d0:ec:3e:69:26:7a:48:14:2c:cb:28: 09:ba:9c:50:4d:f9:54:9c:1c:b8:6d:af:77:9d:e8:f0:48:87: 35:75:9f:6a:ba:c5:05:37:fd:8d:fa:57:f1:f1:a2:32:46:eb: a6:86:03:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzJMyOMs9i4Jgj/yCJ7WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDgwNTM4NGY1MDQ3MjNlOGI5ZTk0NDZkOGM5ZDJmOWExODkyYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0juBT7yy2gyfWJijQ8WTthNf+Q7/ ACIbWUcuGlo7M19vxhdEsODi9fKcDDflH1Ckm2NR2zpJBBK3L2lvsHGfomuiUHCs 2E1mWlQR+NtuB0arZzBaLnlvPL+S+QoXu4yBffEkrMhNQoFXxXlJd4ptOTZChmvw Xmy13l+uTfqlEHcNZHewBHTAh5BuGDzCuiISpmWW1DnKog46UTis19NYECMd4KKA Oisq9EiAXdWGOsqMrHtqDuD/q4AhPkyQ4Zj2dOmFFs8dA/sr/9U4OXyP4xZCfkez mmAbkZ/TGYIA/iBinxjdQTzxolWBK1gYNfEpSxhkyQYuQJpO/sD5Ju9zPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFCAU4T1BHI+i56URtjJ0vmhiSoDMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvVUlCVGhQVUVjajZMbnBSRzJNblMtYUdKS2dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkQMA0G CSqGSIb3DQEBCwUAA4IBAQBd6aePH7jypB4jGLkdgkKL/vc7Wk/9WZQdVi2Ro18L Qd95xnPVgJU50UCntE+uQQGjB3U/f0QpNpAZ49+Qz58ecf59Ffq3gNOPE9u5naw2 50C2J9b+6eolnG9Psu4ReSfwqt7n1ewYYddthIS0Yg3E76n8XvIpWr61vIUE5g/m lOB61wNrm9Lo5ssx1zJMUMmi6jlXn5VKjEgBKI8kxi12ZE2eFpsjII5Ad4ilKngU FosDvt1PaQQ5rguyK4taFkhD9zMaDSCXk7WV43Pi0Ow+aSZ6SBQsyygJupxQTflU nBy4ba93nejwSIc1dZ9qusUFN/2N+lfx8aIyRuumhgO4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:24 2026 by rpki-client