This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cJibbCrRsOGUzMFc8ovOqw2q0H0.roa File: cJibbCrRsOGUzMFc8ovOqw2q0H0.roa (raw, json) Hash identifier: zyUnKMvy9Soq/SWJDfTSH6LZI1gHi5XNBeUbiKjJf40= Subject key identifier: 70:98:9B:6C:2A:D1:B0:E1:94:CC:C1:5C:F2:8B:CE:AB:0D:AA:D0:7D Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3BE635F2F138F99FCA01AC45612C Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cJibbCrRsOGUzMFc8ovOqw2q0H0.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209728 IP address blocks: 138.249.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3b:e6:35:f2:f1:38:f9:9f:ca:01:ac:45:61:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70989b6c2ad1b0e194ccc15cf28bceab0daad07d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:44:12:ef:90:07:b8:45:d8:79:b3:63:d6: d8:12:7c:74:fc:b5:0a:34:66:9a:4f:d2:bb:2c:ac: 14:80:96:4a:6c:bb:27:4b:69:90:a7:63:35:ae:e2: f6:c5:f8:c6:5d:c7:ac:44:4c:ba:bd:cd:fc:65:da: 7e:76:e8:f8:9a:8f:8f:dd:21:97:c5:b3:35:43:68: a8:c7:a8:91:dc:ab:f6:3b:1c:fd:8b:81:c3:49:35: 37:58:d1:4f:c4:fa:23:66:2d:48:ba:f6:91:a2:bd: 71:ec:48:a2:56:20:92:c2:ad:05:96:8c:cf:a6:59: 18:0a:6d:1e:56:6c:fb:44:84:87:2b:9a:91:43:88: f6:4e:41:89:2a:c0:2d:38:70:27:ef:b0:6c:8a:19: 8e:9f:58:30:a4:f2:90:6c:f5:2e:9b:05:3a:2f:77: f8:6e:5e:15:51:be:7b:24:a5:55:ab:96:d5:57:c9: e6:87:55:ad:c4:be:b4:5d:d3:5e:d6:eb:e9:73:67: 18:57:b5:07:2c:3d:1e:93:51:3b:03:16:e0:b7:fb: b8:46:9e:9a:6f:e5:a9:4e:b4:a4:5e:1c:69:3d:d0: 58:f5:4d:41:26:c6:b4:bd:9a:87:e6:8f:05:ab:fb: 25:40:f5:a0:26:1b:45:c6:30:6b:2c:f8:7d:dd:f8: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:98:9B:6C:2A:D1:B0:E1:94:CC:C1:5C:F2:8B:CE:AB:0D:AA:D0:7D X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cJibbCrRsOGUzMFc8ovOqw2q0H0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.17.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:43:25:30:2b:93:5f:bd:a8:c0:1e:b1:1f:59:92:56:0e:2f: 96:f4:99:dd:5c:6b:e7:59:7d:3e:eb:5a:eb:59:1c:c9:f6:32: 0e:01:2b:5e:fc:57:27:b0:f9:28:5d:db:17:e4:2c:c9:91:a2: 90:9e:ee:77:a0:46:b5:cb:39:53:d1:9f:1d:2c:33:e7:da:4a: 88:5d:8e:d8:9c:75:18:27:e6:70:2f:64:c7:4c:e7:e9:2e:4e: ad:76:dd:a8:b2:83:c2:d6:da:f1:bb:e0:3a:7a:51:19:a9:48: 1d:87:86:64:62:86:d2:3d:e5:9f:73:5a:bb:60:85:a1:71:50: 44:ed:12:0f:76:e2:ad:67:fc:98:57:9d:ec:4f:71:d3:e2:e9: 45:26:be:48:f1:1a:56:28:b5:4b:86:fe:0a:5b:f2:d2:f2:2f: 96:fb:6a:9e:5f:b4:52:2f:60:91:c9:a8:9d:a5:6f:8d:4f:9d: 18:a5:8a:37:6e:39:f0:f1:68:52:c2:bb:ad:6e:2e:b5:75:74: fc:38:7f:f2:5c:f3:67:ee:6a:38:59:bc:bd:98:c5:ff:99:2a: 46:b1:e0:5c:58:ab:bc:42:14:78:20:0f:8c:ee:8e:13:f6:cc: f1:c7:f6:f8:db:fa:c3:f2:1c:87:13:1e:77:5b:1f:a7:21:8e: 74:58:20:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzvmNfLxOPmfygGsRWEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk4OWI2YzJhZDFiMGUxOTRjY2MxNWNmMjhiY2VhYjBkYWFkMDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9FEEu+QB7hF2HmzY9bYEnx0/LUK NGaaT9K7LKwUgJZKbLsnS2mQp2M1ruL2xfjGXcesREy6vc38Zdp+duj4mo+P3SGX xbM1Q2iox6iR3Kv2Oxz9i4HDSTU3WNFPxPojZi1IuvaRor1x7EiiViCSwq0FlozP plkYCm0eVmz7RISHK5qRQ4j2TkGJKsAtOHAn77BsihmOn1gwpPKQbPUumwU6L3f4 bl4VUb57JKVVq5bVV8nmh1WtxL60XdNe1uvpc2cYV7UHLD0ek1E7Axbgt/u4Rp6a b+WpTrSkXhxpPdBY9U1BJsa0vZqH5o8Fq/slQPWgJhtFxjBrLPh93fhfyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCYm2wq0bDhlMzBXPKLzqsNqtB9MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvY0ppYmJDclJzT0dVek1GYzhvdk9xdzJxMEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkRMA0G CSqGSIb3DQEBCwUAA4IBAQAfQyUwK5NfvajAHrEfWZJWDi+W9JndXGvnWX0+61rr WRzJ9jIOASte/FcnsPkoXdsX5CzJkaKQnu53oEa1yzlT0Z8dLDPn2kqIXY7YnHUY J+ZwL2THTOfpLk6tdt2osoPC1trxu+A6elEZqUgdh4ZkYobSPeWfc1q7YIWhcVBE 7RIPduKtZ/yYV53sT3HT4ulFJr5I8RpWKLVLhv4KW/LS8i+W+2qeX7RSL2CRyaid pW+NT50YpYo3bjnw8WhSwrutbi61dXT8OH/yXPNn7mo4Wby9mMX/mSpGseBcWKu8 QhR4IA+M7o4T9szxx/b42/rD8hyHEx53Wx+nIY50WCAC -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:59 2026 by rpki-client