This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_s-V7WVKlo6kRmIZKFXSAtRljRI.roa File: _s-V7WVKlo6kRmIZKFXSAtRljRI.roa (raw, json) Hash identifier: 5D5BVaKDmZGSdCcvztv4JwUKfZXHzJJfZ4dxgtbGRPw= Subject key identifier: FE:CF:95:ED:65:4A:96:8E:A4:46:62:19:28:55:D2:02:D4:65:8D:12 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019BDC16383EED8450979122C64B3B4796DB Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_s-V7WVKlo6kRmIZKFXSAtRljRI.roa Signing time: Tue 20 Jan 2026 15:46:42 +0000 ROA not before: Tue 20 Jan 2026 15:46:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 138.249.2.0/24 maxlen: 24 138.249.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:16:38:3e:ed:84:50:97:91:22:c6:4b:3b:47:96:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 20 15:46:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fecf95ed654a968ea44662192855d202d4658d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:ad:86:91:99:83:8d:fe:d0:e5:93:80:87: 82:e3:a9:8a:62:51:45:78:07:f2:f2:48:d2:d0:91: 76:28:0e:cf:a5:21:d3:1f:4a:66:38:eb:0a:64:2f: bb:7c:ff:95:f0:50:db:ee:50:5a:12:e3:a6:d1:0d: 7a:90:01:4b:5c:90:33:f6:4d:a2:89:9b:25:eb:e8: ac:c3:59:e8:49:50:c4:74:7c:d6:80:65:9e:d0:37: fb:5c:d6:c0:6d:08:f9:bb:7c:d9:55:6b:7e:24:eb: d3:d0:78:8d:76:84:65:4e:b3:00:ab:12:af:81:64: e5:0e:6c:e0:f3:d0:8c:3d:19:72:b5:47:bf:c1:30: 96:8a:5d:42:20:0e:00:15:0a:c4:68:74:34:9a:7e: a6:bb:ec:81:2e:db:ad:71:b7:ac:89:df:3c:29:0a: e3:5f:10:11:60:d1:9a:53:f4:d4:26:47:81:e5:c9: 4f:ee:3d:3e:8e:44:92:34:d1:99:43:0a:73:61:13: 1a:d9:5a:04:3b:bb:a6:d0:0b:be:d5:3e:4e:e7:09: 00:c3:9c:09:f1:a8:b1:68:fb:80:20:f9:9d:90:4b: 2f:e1:e6:24:86:b7:01:0f:1d:95:93:5e:72:ec:48: 6a:e4:d2:bd:82:9d:3a:d8:cc:76:ca:f9:1a:30:4e: 73:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:CF:95:ED:65:4A:96:8E:A4:46:62:19:28:55:D2:02:D4:65:8D:12 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_s-V7WVKlo6kRmIZKFXSAtRljRI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.2.0/24 138.249.135.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:7f:d9:21:35:5f:07:92:8f:f6:10:f1:64:02:79:d4:27:8e: 3c:b5:ff:59:1c:60:18:20:71:0b:da:07:b0:04:26:e6:d0:0d: fb:6d:f7:55:66:97:5e:e3:18:e5:86:8e:df:fd:2d:6e:6b:07: a3:65:c6:22:65:24:85:45:1d:41:87:49:4a:01:23:23:b7:bc: a7:b7:13:ee:91:30:b7:7b:d8:b1:ae:1e:f4:39:c6:c1:d2:9e: 21:fa:09:34:65:87:77:83:9e:79:c6:a0:05:e4:a8:52:b7:8f: cb:a8:c1:64:83:21:32:25:24:3e:93:68:85:ec:be:d1:e6:c2: b5:fd:5c:6f:88:b9:93:ee:ff:18:79:21:fe:e2:97:cb:c4:b8: 19:c2:06:c0:7b:60:90:a6:d9:7b:2b:82:23:88:33:79:be:67: fd:73:3f:fa:74:77:e6:4d:63:a0:95:ad:f3:5d:02:f6:99:18: aa:be:f4:a3:a2:df:16:5f:1e:c3:3f:bb:5a:e1:3f:bc:c9:52: ad:6f:db:67:01:f0:40:52:5a:af:24:a3:0d:0e:d6:2b:7a:d5: d6:c6:9d:61:98:2c:d2:69:30:71:d1:bf:63:98:ec:ad:a9:02: 5f:d3:e5:80:49:d5:77:a3:61:99:43:49:a6:eb:dc:77:36:fa: fb:01:ec:b7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvcFjg+7YRQl5Eixks7R5bbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTIwMTU0NjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWNmOTVlZDY1NGE5NjhlYTQ0NjYyMTkyODU1ZDIwMmQ0NjU4ZDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB6thpGZg43+0OWTgIeC46mKYlFF eAfy8kjS0JF2KA7PpSHTH0pmOOsKZC+7fP+V8FDb7lBaEuOm0Q16kAFLXJAz9k2i iZsl6+isw1noSVDEdHzWgGWe0Df7XNbAbQj5u3zZVWt+JOvT0HiNdoRlTrMAqxKv gWTlDmzg89CMPRlytUe/wTCWil1CIA4AFQrEaHQ0mn6mu+yBLtutcbesid88KQrj XxARYNGaU/TUJkeB5clP7j0+jkSSNNGZQwpzYRMa2VoEO7um0Au+1T5O5wkAw5wJ 8aixaPuAIPmdkEsv4eYkhrcBDx2Vk15y7Ehq5NK9gp062Mx2yvkaME5zWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP7Ple1lSpaOpEZiGShV0gLUZY0SMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvX3MtVjdXVktsbzZrUm1JWktGWFNBdFJsalJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAivkCAwQA ivmHMA0GCSqGSIb3DQEBCwUAA4IBAQBNf9khNV8Hko/2EPFkAnnUJ448tf9ZHGAY IHEL2gewBCbm0A37bfdVZpde4xjlho7f/S1uawejZcYiZSSFRR1Bh0lKASMjt7yn txPukTC3e9ixrh70OcbB0p4h+gk0ZYd3g555xqAF5KhSt4/LqMFkgyEyJSQ+k2iF 7L7R5sK1/VxviLmT7v8YeSH+4pfLxLgZwgbAe2CQptl7K4IjiDN5vmf9cz/6dHfm TWOgla3zXQL2mRiqvvSjot8WXx7DP7ta4T+8yVKtb9tnAfBAUlqvJKMNDtYretXW xp1hmCzSaTBx0b9jmOytqQJf0+WASdV3o2GZQ0mm69x3Nvr7Aey3 -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:12 2026 by rpki-client