This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WSrZ9SAhof4ksEJC9yYDoqU4h6w.roa File: WSrZ9SAhof4ksEJC9yYDoqU4h6w.roa (raw, json) Hash identifier: q/wrRTwVnFvUs7bHBaduCb4GNvXdh1t9M5e/XDofGE4= Subject key identifier: 59:2A:D9:F5:20:21:A1:FE:24:B0:42:42:F7:26:03:A2:A5:38:87:AC Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019ACBF0836D23C85FAE1F9BD05BAFBFFDE4 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WSrZ9SAhof4ksEJC9yYDoqU4h6w.roa Signing time: Fri 28 Nov 2025 19:28:48 +0000 ROA not before: Fri 28 Nov 2025 19:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204610 IP address blocks: 138.249.14.0/24 maxlen: 24 138.249.15.0/24 maxlen: 24 170.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:f0:83:6d:23:c8:5f:ae:1f:9b:d0:5b:af:bf:fd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 28 19:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=592ad9f52021a1fe24b04242f72603a2a53887ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:50:4e:ba:f3:e8:01:2a:7d:b1:d4:30:7d:aa: 32:50:34:79:58:1e:3f:74:69:f9:50:d7:46:a0:17: d8:99:0c:26:47:ed:5a:c3:c4:78:8d:15:c7:3e:00: ad:f7:0d:e7:f0:8f:22:1d:3a:22:10:18:04:3b:9a: af:73:6e:25:c8:5c:2a:af:10:5f:f4:d8:a4:f5:b6: 31:01:5e:ba:55:78:0b:37:b8:27:09:96:c6:9c:9f: ce:a2:01:4d:1f:02:70:14:06:18:c8:96:4b:47:6c: 50:ee:49:ff:04:c8:b4:51:7c:f5:5b:bb:4a:1a:5b: 21:d0:7b:2c:3c:ee:4a:5e:08:8e:2a:c6:86:ee:de: 91:bc:b7:b2:f8:78:89:16:df:d5:b4:d6:d9:95:11: 18:77:e1:30:ac:ef:d2:89:ba:73:e9:c8:55:8a:3f: 47:5b:d0:0e:c7:bd:3f:52:91:bf:f8:e9:4d:5c:78: e6:96:b0:33:ab:16:f5:ee:31:95:db:31:8a:76:0b: 15:00:e0:65:be:35:e4:90:25:99:09:78:a3:ea:c5: ad:be:12:cf:70:3b:7d:8b:bc:4b:87:d2:01:b9:b4: cd:5f:8f:5f:cf:75:67:1d:af:44:19:3f:75:5f:de: 3b:4b:0e:02:35:d6:bf:4d:f8:14:f6:d5:54:a9:52: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2A:D9:F5:20:21:A1:FE:24:B0:42:42:F7:26:03:A2:A5:38:87:AC X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/WSrZ9SAhof4ksEJC9yYDoqU4h6w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.14.0/23 170.168.88.0/24 Signature Algorithm: sha256WithRSAEncryption 88:24:f6:91:25:e6:52:31:4f:69:f9:0c:2e:f5:44:b5:25:f7: c0:9d:f5:e6:83:aa:7e:f3:65:09:fb:1f:0a:c4:2a:2a:de:1c: 31:38:de:f7:28:be:27:13:02:d1:47:62:2e:ef:ee:67:88:23: 4a:41:aa:29:d2:41:36:32:d7:6c:5b:66:a2:09:23:8c:aa:1a: 56:00:4c:45:ad:b2:06:10:48:6a:a4:12:1c:49:b9:0b:b8:e3: 52:e2:67:f4:cc:4d:3d:91:9f:fd:ab:76:e2:0f:2e:20:1d:0a: 71:d8:15:e5:9a:3e:1e:56:a5:87:32:74:76:9c:03:2d:da:74: a5:8b:1b:26:ab:ea:4d:7d:e9:5d:7d:40:3d:ef:65:0f:88:b7: 06:87:e5:24:af:63:82:2f:a6:06:28:13:27:82:7a:e9:d5:d0: 1a:03:2b:d3:30:eb:1a:6d:3b:59:c4:1f:5c:5a:91:77:0c:92: 73:ed:80:39:45:06:ee:e3:e6:7d:c8:62:b2:57:eb:e9:a5:79: 29:37:6f:c1:44:46:d4:5f:b5:de:50:7a:da:38:02:fc:48:00: 4e:56:c8:69:42:7b:89:73:c6:2f:e2:3a:eb:2e:9f:43:bb:d1: 41:40:23:e5:2b:ad:70:5d:b4:20:70:fe:74:4a:71:b1:ee:6c: ae:bf:00:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrL8INtI8hfrh+b0Fuvv/3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI4MTkyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTJhZDlmNTIwMjFhMWZlMjRiMDQyNDJmNzI2MDNhMmE1Mzg4N2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lBOuvPoASp9sdQwfaoyUDR5WB4/ dGn5UNdGoBfYmQwmR+1aw8R4jRXHPgCt9w3n8I8iHToiEBgEO5qvc24lyFwqrxBf 9Nik9bYxAV66VXgLN7gnCZbGnJ/OogFNHwJwFAYYyJZLR2xQ7kn/BMi0UXz1W7tK Glsh0HssPO5KXgiOKsaG7t6RvLey+HiJFt/VtNbZlREYd+EwrO/Sibpz6chVij9H W9AOx70/UpG/+OlNXHjmlrAzqxb17jGV2zGKdgsVAOBlvjXkkCWZCXij6sWtvhLP cDt9i7xLh9IBubTNX49fz3VnHa9EGT91X947Sw4CNda/TfgU9tVUqVKnewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFkq2fUgIaH+JLBCQvcmA6KlOIesMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvV1NyWjlTQWhvZjRrc0VKQzl5WURvcVU0aDZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBivkOAwQA qqhYMA0GCSqGSIb3DQEBCwUAA4IBAQCIJPaRJeZSMU9p+Qwu9US1JffAnfXmg6p+ 82UJ+x8KxCoq3hwxON73KL4nEwLRR2Iu7+5niCNKQaop0kE2MtdsW2aiCSOMqhpW AExFrbIGEEhqpBIcSbkLuONS4mf0zE09kZ/9q3biDy4gHQpx2BXlmj4eVqWHMnR2 nAMt2nSlixsmq+pNfeldfUA972UPiLcGh+Ukr2OCL6YGKBMngnrp1dAaAyvTMOsa bTtZxB9cWpF3DJJz7YA5RQbu4+Z9yGKyV+vppXkpN2/BREbUX7XeUHraOAL8SABO VshpQnuJc8Yv4jrrLp9Du9FBQCPlK61wXbQgcP50SnGx7myuvwDE -----END CERTIFICATE-----Generated at Sat Dec 6 08:04:43 2025 by rpki-client