This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cU0sLbPNMwKg9gwxi6qqgcogzAY.roa File: cU0sLbPNMwKg9gwxi6qqgcogzAY.roa (raw, json) Hash identifier: zflu9U0WCw0gyb4aWLbh6YEUJdMORIqWL4P7tF5nMD8= Subject key identifier: 71:4D:2C:2D:B3:CD:33:02:A0:F6:0C:31:8B:AA:AA:81:CA:20:CC:06 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AF004FBF692567263234E81318D72ACD7 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cU0sLbPNMwKg9gwxi6qqgcogzAY.roa Signing time: Fri 05 Dec 2025 19:37:29 +0000 ROA not before: Fri 05 Dec 2025 19:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51396 IP address blocks: 138.249.24.0/24 maxlen: 24 138.249.25.0/24 maxlen: 24 138.249.26.0/24 maxlen: 24 138.249.27.0/24 maxlen: 24 138.249.32.0/24 maxlen: 24 138.249.33.0/24 maxlen: 24 138.249.34.0/24 maxlen: 24 138.249.35.0/24 maxlen: 24 138.249.40.0/24 maxlen: 24 138.249.41.0/24 maxlen: 24 138.249.42.0/24 maxlen: 24 138.249.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:04:fb:f6:92:56:72:63:23:4e:81:31:8d:72:ac:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 5 19:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=714d2c2db3cd3302a0f60c318baaaa81ca20cc06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:98:4d:7d:60:43:1b:82:0c:56:0b:a3:86: 31:84:c1:64:af:0b:85:af:34:f2:6d:9d:1a:ac:69: 1e:dc:e6:7f:05:4e:ad:22:4c:8c:bb:cf:91:24:65: 65:a1:a4:2b:4d:74:08:27:13:46:c3:9d:3e:b0:3c: c8:21:37:59:0e:54:f8:71:42:9a:fd:08:e6:47:23: 28:25:ab:fd:52:74:16:36:63:23:c2:df:a2:f6:7a: bf:81:ee:4d:c8:cc:9f:0b:81:7a:75:cf:7d:7b:da: 54:0a:f3:01:bd:74:4d:c6:08:72:0d:b8:78:f2:e9: a4:a3:36:f6:37:fe:7c:f8:8c:1d:0e:4d:86:f1:45: d6:9b:ed:13:d8:22:70:ba:d3:0d:3c:63:46:2a:ec: 74:7c:f1:91:a5:7c:af:aa:00:be:58:0a:b3:ab:f1: c8:45:4b:ae:ab:0d:da:a9:d5:f6:3c:37:3e:28:59: 4b:81:14:9a:84:0d:f8:e6:2a:6c:72:a7:6f:33:8d: c1:4c:05:bf:11:bf:0b:0e:91:10:c6:61:df:74:49: 7b:c7:fb:c6:01:bb:3c:6d:6b:0a:02:01:90:7c:42: b9:c4:6a:f5:2f:54:f7:5f:96:87:c1:5c:86:fb:4f: d4:41:9f:3c:e8:d1:f9:07:e3:d3:13:4e:14:1e:3a: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4D:2C:2D:B3:CD:33:02:A0:F6:0C:31:8B:AA:AA:81:CA:20:CC:06 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/cU0sLbPNMwKg9gwxi6qqgcogzAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.24.0/22 138.249.32.0/22 138.249.40.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:07:a0:b5:89:0e:41:a6:16:87:59:3f:9d:54:f9:3f:20:4f: 92:f8:2c:b2:70:ca:d8:ac:4e:cb:84:ef:26:ca:b0:1d:5f:cc: a4:68:38:9b:0f:68:91:3a:1a:48:9f:71:20:37:bb:e8:6b:52: 9a:80:46:17:7a:45:2d:3b:cf:0e:c0:02:58:dd:41:c9:3c:5b: db:3f:68:cf:68:d9:b1:42:5b:3c:73:42:61:d1:c8:02:d8:b0: b0:44:74:70:e5:ee:21:55:83:42:37:b0:5b:6e:7d:3b:1e:91: 4e:13:ae:f6:c1:18:61:a5:6d:75:f2:22:1b:5f:10:87:a8:00: ef:78:4d:b4:c5:08:c1:eb:9b:8e:a7:e0:66:39:a3:ec:71:50: f3:56:c2:87:0f:ad:0e:f9:30:b2:1a:aa:71:be:3c:af:a5:ee: 97:b4:2c:e5:b4:87:0a:09:01:e5:bc:55:7d:d8:c2:a9:93:a8: dc:b7:de:53:60:5d:67:72:ba:67:e7:81:15:79:49:d6:17:ae: c2:7e:9c:f4:40:ae:53:3c:34:6c:ce:d3:b6:63:3a:b9:8c:c4: c2:bc:e2:d3:dc:fe:15:98:b0:9f:32:a9:b8:06:d8:88:b8:a2: bb:12:55:e1:b8:5d:7a:09:92:8f:46:11:4a:8b:07:cb:7e:86: 92:f6:ec:56 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrwBPv2klZyYyNOgTGNcqzXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjA1MTkzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTRkMmMyZGIzY2QzMzAyYTBmNjBjMzE4YmFhYWE4MWNhMjBjYzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFOYTX1gQxuCDFYLo4YxhMFkrwuF rzTybZ0arGke3OZ/BU6tIkyMu8+RJGVloaQrTXQIJxNGw50+sDzIITdZDlT4cUKa /QjmRyMoJav9UnQWNmMjwt+i9nq/ge5NyMyfC4F6dc99e9pUCvMBvXRNxghyDbh4 8umkozb2N/58+IwdDk2G8UXWm+0T2CJwutMNPGNGKux0fPGRpXyvqgC+WAqzq/HI RUuuqw3aqdX2PDc+KFlLgRSahA345ipscqdvM43BTAW/Eb8LDpEQxmHfdEl7x/vG Abs8bWsKAgGQfEK5xGr1L1T3X5aHwVyG+0/UQZ886NH5B+PTE04UHjpmrwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHFNLC2zzTMCoPYMMYuqqoHKIMwGMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvY1Uwc0xiUE5Nd0tnOWd3eGk2cXFnY29nekFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCivkYAwQC ivkgAwQCivkoMA0GCSqGSIb3DQEBCwUAA4IBAQBtB6C1iQ5BphaHWT+dVPk/IE+S +CyycMrYrE7LhO8myrAdX8ykaDibD2iROhpIn3EgN7voa1KagEYXekUtO88OwAJY 3UHJPFvbP2jPaNmxQls8c0Jh0cgC2LCwRHRw5e4hVYNCN7Bbbn07HpFOE672wRhh pW118iIbXxCHqADveE20xQjB65uOp+BmOaPscVDzVsKHD60O+TCyGqpxvjyvpe6X tCzltIcKCQHlvFV92MKpk6jct95TYF1ncrpn54EVeUnWF67Cfpz0QK5TPDRsztO2 Yzq5jMTCvOLT3P4VmLCfMqm4BtiIuKK7ElXhuF16CZKPRhFKiwfLfoaS9uxW -----END CERTIFICATE-----Generated at Sat Dec 6 05:45:00 2025 by rpki-client