This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mkeBpX6QC0s_J-Ya7Zz638VlpK4.roa File: mkeBpX6QC0s_J-Ya7Zz638VlpK4.roa (raw, json) Hash identifier: qFsT45P45Yx4q26rUG0DYWFCCh6FdcJKSJKbjFk1QjU= Subject key identifier: 9A:47:81:A5:7E:90:0B:4B:3F:27:E6:1A:ED:9C:FA:DF:C5:65:A4:AE Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F353993746A9810CB3BC9CD38EA9B Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mkeBpX6QC0s_J-Ya7Zz638VlpK4.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203382 IP address blocks: 138.249.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:35:39:93:74:6a:98:10:cb:3b:c9:cd:38:ea:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9a4781a57e900b4b3f27e61aed9cfadfc565a4ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:c3:6f:24:b1:34:5a:ff:22:03:72:4a:93: 78:1b:cc:dd:5c:bf:47:7c:cd:8a:eb:f7:0b:38:87: e7:19:5f:6b:86:f5:d0:56:0c:3e:3a:2f:5e:d2:4d: a4:f8:bb:c1:f2:dc:dc:f7:be:75:97:2a:1c:fa:61: 77:f2:24:57:aa:ca:07:64:be:0e:89:7f:8d:24:81: ca:87:e6:44:fb:86:d0:1c:9d:fc:93:5c:c1:cb:24: e1:07:c2:30:ba:69:aa:a4:ef:87:6d:16:d4:d4:d0: 4c:25:64:05:c3:dd:4c:64:a1:f9:09:38:0c:92:44: 29:42:fc:a8:1d:c7:94:e1:79:be:7b:b3:f1:44:c6: 0e:40:88:8f:88:00:47:65:ed:ad:56:97:8a:6e:14: 91:e2:f9:36:4b:e9:f3:4f:1a:65:e8:36:5b:72:e9: b3:5f:b9:3d:4b:7b:a5:d6:92:e0:67:6a:97:1f:a4: a4:10:05:4d:33:60:f5:58:08:e3:80:4a:65:f9:b2: 66:58:60:7a:38:10:39:ec:91:9b:e1:e3:09:f5:c7: 47:e9:8b:ea:57:43:c8:b0:79:b5:21:5b:ab:48:20: 04:2b:ff:f6:61:53:33:1f:42:03:6e:69:90:81:30: 07:6d:e4:5a:5e:91:1d:cc:f3:38:dc:e4:7e:16:67: 59:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:47:81:A5:7E:90:0B:4B:3F:27:E6:1A:ED:9C:FA:DF:C5:65:A4:AE X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/mkeBpX6QC0s_J-Ya7Zz638VlpK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.12.0/23 Signature Algorithm: sha256WithRSAEncryption 88:fe:52:3a:8e:02:bc:65:ec:a7:2d:50:96:17:35:3a:c4:95: db:2d:d7:04:e5:b6:40:9d:ae:85:da:16:b0:ed:46:72:e8:c3: 56:2d:ad:96:36:1d:c5:33:82:2a:93:97:20:dd:b1:1c:9b:d2: 7c:f2:c9:9e:fb:c7:ec:aa:99:39:e3:58:fb:af:d9:26:77:71: 4e:27:d8:a6:90:bf:b7:1c:c1:b1:17:4e:ee:97:2f:58:dc:3f: d9:24:11:83:5b:fa:23:8c:aa:ad:18:ed:f1:20:e0:81:ea:2b: ac:3b:21:14:bf:cb:2f:e4:09:8a:de:a4:88:c0:63:53:8a:66: d0:55:5d:a6:10:64:22:7c:4b:2f:f5:3a:b7:12:2d:d1:20:22: 22:ac:7e:88:7a:34:39:e5:56:18:e8:b5:dc:07:f7:02:b2:70: c3:b2:c4:3e:b0:c2:b9:ad:f6:8c:e7:1d:32:98:a6:59:e4:f0: 29:f4:22:ef:c2:78:25:9a:88:24:3e:4c:ec:e0:d6:78:09:0e: 88:03:d3:1b:a5:05:34:ad:7f:f3:e2:b4:aa:07:e8:85:d4:5d: ae:a3:c6:69:01:e3:40:17:08:00:46:a5:43:af:7a:e2:4e:66: 96:c0:10:e0:0e:d4:af:59:a7:c7:30:bf:66:04:fa:ff:ce:80: 0d:bd:b2:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzU5k3RqmBDLO8nNOOqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YTQ3ODFhNTdlOTAwYjRiM2YyN2U2MWFlZDljZmFkZmM1NjVhNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkovDbySxNFr/IgNySpN4G8zdXL9H fM2K6/cLOIfnGV9rhvXQVgw+Oi9e0k2k+LvB8tzc9751lyoc+mF38iRXqsoHZL4O iX+NJIHKh+ZE+4bQHJ38k1zByyThB8IwummqpO+HbRbU1NBMJWQFw91MZKH5CTgM kkQpQvyoHceU4Xm+e7PxRMYOQIiPiABHZe2tVpeKbhSR4vk2S+nzTxpl6DZbcumz X7k9S3ul1pLgZ2qXH6SkEAVNM2D1WAjjgEpl+bJmWGB6OBA57JGb4eMJ9cdH6Yvq V0PIsHm1IVurSCAEK//2YVMzH0IDbmmQgTAHbeRaXpEdzPM43OR+FmdZiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJpHgaV+kAtLPyfmGu2c+t/FZaSuMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbWtlQnBYNlFDMHNfSi1ZYTdaejYzOFZscEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivkMMA0G CSqGSIb3DQEBCwUAA4IBAQCI/lI6jgK8ZeynLVCWFzU6xJXbLdcE5bZAna6F2haw 7UZy6MNWLa2WNh3FM4Iqk5cg3bEcm9J88sme+8fsqpk541j7r9kmd3FOJ9imkL+3 HMGxF07uly9Y3D/ZJBGDW/ojjKqtGO3xIOCB6iusOyEUv8sv5AmK3qSIwGNTimbQ VV2mEGQifEsv9Tq3Ei3RICIirH6IejQ55VYY6LXcB/cCsnDDssQ+sMK5rfaM5x0y mKZZ5PAp9CLvwnglmogkPkzs4NZ4CQ6IA9MbpQU0rX/z4rSqB+iF1F2uo8ZpAeNA FwgARqVDr3riTmaWwBDgDtSvWafHML9mBPr/zoANvbKZ -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:06 2026 by rpki-client