This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/j0IZwlOH3mc7FYy7b-fBtTZS8wA.roa File: j0IZwlOH3mc7FYy7b-fBtTZS8wA.roa (raw, json) Hash identifier: NLCyLYLwX9n0jU1/afLvOyI3UPsyGpIqiWymEqSN+3I= Subject key identifier: 8F:42:19:C2:53:87:DE:67:3B:15:8C:BB:6F:E7:C1:B5:36:52:F3:00 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019ACBFD54E3BB8573E673014BFFE2005770 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/j0IZwlOH3mc7FYy7b-fBtTZS8wA.roa Signing time: Fri 28 Nov 2025 19:42:48 +0000 ROA not before: Fri 28 Nov 2025 19:42:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43991 IP address blocks: 138.249.3.0/24 maxlen: 24 170.168.64.0/24 maxlen: 24 170.168.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:fd:54:e3:bb:85:73:e6:73:01:4b:ff:e2:00:57:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 28 19:42:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f4219c25387de673b158cbb6fe7c1b53652f300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:c7:9f:85:29:97:18:18:ba:f3:db:5d:5d: 96:89:ea:26:6b:a6:62:51:d7:41:4a:6e:5f:bd:26: 9e:c8:f2:72:5d:6a:94:ab:9e:80:8e:49:ab:48:0b: 17:21:f7:d2:92:0b:af:7e:d8:07:20:5c:62:93:60: d5:42:53:9c:4f:b1:b1:2c:94:5b:fb:15:41:68:ec: b5:59:de:fe:2e:43:38:83:e2:85:b8:10:b6:dd:c7: 10:aa:0c:eb:eb:dc:62:02:92:08:4d:0b:53:a0:a3: 6e:77:f6:72:1d:36:81:52:17:65:b4:f9:d4:13:38: 29:b0:51:b4:b9:be:7d:79:93:f0:18:72:ed:f1:3e: dc:c4:2b:67:7f:c4:01:79:9c:2c:3a:db:9e:07:2e: 2e:08:c0:ee:d1:11:a6:cd:90:1a:76:e1:51:30:2b: 1d:45:6d:cc:7f:4f:79:b3:ad:11:31:44:9f:03:5a: 65:46:ac:b5:28:ff:55:2a:4f:91:b1:35:ee:2d:5e: 4d:44:ac:54:e5:39:af:b1:c7:da:d3:08:6e:71:51: 9c:aa:82:32:5a:99:1b:2c:38:20:34:20:25:70:01: e8:8a:e9:eb:ef:a2:84:68:e6:a4:7c:89:42:cc:85: ad:36:b3:7a:ee:52:6f:d5:6c:9a:4f:9e:39:03:d4: 2c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:42:19:C2:53:87:DE:67:3B:15:8C:BB:6F:E7:C1:B5:36:52:F3:00 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/j0IZwlOH3mc7FYy7b-fBtTZS8wA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.3.0/24 170.168.64.0/24 170.168.75.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:b6:84:8c:c2:c0:9d:5e:f2:d2:21:32:70:88:f1:f9:62:b1: 2f:52:7e:3b:5a:18:cf:9d:9b:64:91:24:8b:5d:de:e5:0a:1e: a9:ff:83:6b:00:5f:70:5e:63:e6:c9:fa:3e:d6:00:d1:35:1e: a5:00:e0:04:0c:57:4d:de:ac:f8:d7:dd:5d:2a:10:fd:33:bd: d6:73:d1:46:74:c5:41:24:ec:1f:10:a4:fa:e7:e1:cf:9a:e9: 47:1a:62:e3:3c:ca:55:4f:2b:f4:d2:50:dd:89:ff:6f:83:16: aa:3a:c5:96:27:25:45:db:b7:f1:3d:57:1b:dc:73:60:87:4b: 26:62:75:c4:e1:3c:04:65:23:1f:c7:1a:43:1e:35:bd:bf:72: 77:4d:97:fd:18:fe:e1:47:c3:82:47:5e:f3:50:6e:82:7c:73: 15:b5:eb:2a:94:42:a8:80:43:d8:5d:ea:b1:46:c6:f0:bb:96: c6:41:16:64:ad:63:09:8b:6b:cf:46:e4:35:e9:45:ee:85:3e: 72:d8:3e:40:84:76:65:75:7f:b3:de:2b:b0:c3:4e:8c:97:51: 8f:c9:10:7f:c5:bd:07:b5:dd:69:2b:df:20:f8:8a:9b:3c:0d: 00:97:f8:d2:89:12:b2:80:e6:b6:f7:65:84:60:b6:c7:85:c6: c2:33:df:00 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrL/VTju4Vz5nMBS//iAFdwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI4MTk0MjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQyMTljMjUzODdkZTY3M2IxNThjYmI2ZmU3YzFiNTM2NTJmMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLjHn4UplxgYuvPbXV2Wieoma6Zi UddBSm5fvSaeyPJyXWqUq56AjkmrSAsXIffSkguvftgHIFxik2DVQlOcT7GxLJRb +xVBaOy1Wd7+LkM4g+KFuBC23ccQqgzr69xiApIITQtToKNud/ZyHTaBUhdltPnU EzgpsFG0ub59eZPwGHLt8T7cxCtnf8QBeZwsOtueBy4uCMDu0RGmzZAaduFRMCsd RW3Mf095s60RMUSfA1plRqy1KP9VKk+RsTXuLV5NRKxU5Tmvscfa0whucVGcqoIy WpkbLDggNCAlcAHoiunr76KEaOakfIlCzIWtNrN67lJv1WyaT545A9QsmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI9CGcJTh95nOxWMu2/nwbU2UvMAMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvajBJWndsT0gzbWM3Rll5N2ItZkJ0VFpTOHdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAivkDAwQA qqhAAwQAqqhLMA0GCSqGSIb3DQEBCwUAA4IBAQCKtoSMwsCdXvLSITJwiPH5YrEv Un47WhjPnZtkkSSLXd7lCh6p/4NrAF9wXmPmyfo+1gDRNR6lAOAEDFdN3qz4191d KhD9M73Wc9FGdMVBJOwfEKT65+HPmulHGmLjPMpVTyv00lDdif9vgxaqOsWWJyVF 27fxPVcb3HNgh0smYnXE4TwEZSMfxxpDHjW9v3J3TZf9GP7hR8OCR17zUG6CfHMV tesqlEKogEPYXeqxRsbwu5bGQRZkrWMJi2vPRuQ16UXuhT5y2D5AhHZldX+z3iuw w06Ml1GPyRB/xb0Htd1pK98g+IqbPA0Al/jSiRKygOa292WEYLbHhcbCM98A -----END CERTIFICATE-----Generated at Sat Dec 6 09:08:55 2025 by rpki-client