This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/n8BhOs6aD681Ecdtm4y1gzsbWbo.roa File: n8BhOs6aD681Ecdtm4y1gzsbWbo.roa (raw, json) Hash identifier: UsUdQr17+b0jxP/4ygT0qa8ZTjaFUsVR1eNaHzvA3NY= Subject key identifier: 9F:C0:61:3A:CE:9A:0F:AF:35:11:C7:6D:9B:8C:B5:83:3B:1B:59:BA Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3917FC74572D416911FCFF975D07 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/n8BhOs6aD681Ecdtm4y1gzsbWbo.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204957 IP address blocks: 130.49.15.0/24 maxlen: 24 130.49.25.0/24 maxlen: 24 130.49.35.0/24 maxlen: 24 130.49.44.0/24 maxlen: 24 130.49.52.0/24 maxlen: 24 130.49.61.0/24 maxlen: 24 130.49.72.0/24 maxlen: 24 130.49.85.0/24 maxlen: 24 130.49.94.0/24 maxlen: 24 130.49.102.0/24 maxlen: 24 130.49.117.0/24 maxlen: 24 130.49.126.0/24 maxlen: 24 155.212.41.0/24 maxlen: 24 155.212.50.0/24 maxlen: 24 155.212.59.0/24 maxlen: 24 155.212.66.0/24 maxlen: 24 155.212.77.0/24 maxlen: 24 155.212.85.0/24 maxlen: 24 155.212.94.0/24 maxlen: 24 155.212.102.0/24 maxlen: 24 155.212.114.0/24 maxlen: 24 155.212.125.0/24 maxlen: 24 170.168.215.0/24 maxlen: 24 170.168.230.0/24 maxlen: 24 170.168.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:39:17:fc:74:57:2d:41:69:11:fc:ff:97:5d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fc0613ace9a0faf3511c76d9b8cb5833b1b59ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c2:a5:8f:eb:eb:14:45:f7:2a:7a:b3:86:65: c5:e4:b1:f1:f8:98:c7:cc:f1:f0:c8:eb:27:38:25: ad:9c:c8:56:6c:96:88:c2:7d:9b:71:c3:06:9b:30: 01:01:ba:1e:6c:9d:ae:9b:7f:2e:c6:1e:2f:1e:e0: 65:32:7d:be:30:59:43:a4:37:87:c9:86:d7:94:d1: 89:91:04:3e:b9:e8:0f:29:47:7f:ee:ce:29:a7:8a: 48:db:81:05:89:3c:c1:0f:bc:12:3b:18:c7:45:07: 97:95:ae:53:31:31:84:a1:64:fc:3b:3d:e0:4e:af: cc:71:19:0c:0e:bc:f2:1e:b4:93:4f:5f:2b:42:c7: 09:63:48:38:7a:65:62:16:39:cd:ae:57:d1:09:7a: 43:39:2f:27:6c:f0:39:56:26:7a:46:94:4b:5a:32: 31:0b:5f:16:d0:d4:46:f8:c5:d3:c0:1b:55:c0:f7: c1:15:58:91:12:f2:39:5d:46:2e:0f:76:9e:c6:9e: 69:ba:62:a0:c7:3c:5d:28:32:88:a1:4b:8b:4e:11: df:12:1d:4d:8c:d5:fa:5c:19:60:9a:9b:de:8a:24: 2a:ae:04:4d:e7:69:3a:d2:a0:93:e8:af:8c:92:cc: 88:62:a2:fd:70:81:22:e1:21:15:f9:53:85:6b:14: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:61:3A:CE:9A:0F:AF:35:11:C7:6D:9B:8C:B5:83:3B:1B:59:BA X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/n8BhOs6aD681Ecdtm4y1gzsbWbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.49.15.0/24 130.49.25.0/24 130.49.35.0/24 130.49.44.0/24 130.49.52.0/24 130.49.61.0/24 130.49.72.0/24 130.49.85.0/24 130.49.94.0/24 130.49.102.0/24 130.49.117.0/24 130.49.126.0/24 155.212.41.0/24 155.212.50.0/24 155.212.59.0/24 155.212.66.0/24 155.212.77.0/24 155.212.85.0/24 155.212.94.0/24 155.212.102.0/24 155.212.114.0/24 155.212.125.0/24 170.168.215.0/24 170.168.230.0/24 170.168.250.0/24 Signature Algorithm: sha256WithRSAEncryption 76:93:fa:18:76:7a:3e:89:93:64:aa:0d:d9:f1:e7:1b:49:9c: eb:dc:49:bc:87:1a:3f:bb:66:db:d0:60:55:c0:eb:3c:74:04: e9:0d:3a:90:43:fc:b8:06:7f:e4:c7:63:fd:9f:e3:bd:5f:55: 1b:03:73:cd:02:20:7f:c4:c1:1a:fa:4a:d9:80:96:40:58:b1: 3a:1b:b0:a6:95:09:57:fe:44:e8:ba:f9:43:60:42:c0:3d:a5: d1:9a:bc:aa:07:da:e1:2b:42:b7:34:55:ca:ab:47:38:42:b3: 66:42:fc:b8:aa:34:ad:ee:ec:0f:77:5e:ac:d3:ab:a5:7b:da: 3d:95:a7:ee:59:b4:69:18:8b:be:0f:db:33:c8:bd:e0:87:f2: b9:2a:34:da:ec:50:7b:41:23:19:51:26:8b:d1:d6:ed:c3:51: cc:7e:48:c9:ca:2d:d0:32:aa:1a:f8:8a:c1:89:1b:7c:54:8e: 29:48:51:a7:c1:1f:03:22:82:46:8f:c9:8b:5e:0a:49:92:6e: 0c:3f:c9:79:72:79:1b:25:2b:ed:3a:ec:42:84:ca:99:82:ad: d5:44:33:a8:d6:e3:55:76:74:50:00:86:92:8a:15:7d:49:c2: 0f:cd:a2:25:32:91:db:7f:55:3e:9b:4f:65:8e:25:49:09:ae: 2d:a2:d0:06 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZt5fzkX/HRXLUFpEfz/l10HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmMwNjEzYWNlOWEwZmFmMzUxMWM3NmQ5YjhjYjU4MzNiMWI1OWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMKlj+vrFEX3KnqzhmXF5LHx+JjH zPHwyOsnOCWtnMhWbJaIwn2bccMGmzABAboebJ2um38uxh4vHuBlMn2+MFlDpDeH yYbXlNGJkQQ+uegPKUd/7s4pp4pI24EFiTzBD7wSOxjHRQeXla5TMTGEoWT8Oz3g Tq/McRkMDrzyHrSTT18rQscJY0g4emViFjnNrlfRCXpDOS8nbPA5ViZ6RpRLWjIx C18W0NRG+MXTwBtVwPfBFViREvI5XUYuD3aexp5pumKgxzxdKDKIoUuLThHfEh1N jNX6XBlgmpveiiQqrgRN52k60qCT6K+MksyIYqL9cIEi4SEV+VOFaxTpvwIDAQAB o4ICnjCCApowHQYDVR0OBBYEFJ/AYTrOmg+vNRHHbZuMtYM7G1m6MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbjhCaE9zNmFENjgxRWNkdG00eTFnenNiV2JvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBACC MQ8DBACCMRkDBACCMSMDBACCMSwDBACCMTQDBACCMT0DBACCMUgDBACCMVUDBACC MV4DBACCMWYDBACCMXUDBACCMX4DBACb1CkDBACb1DIDBACb1DsDBACb1EIDBACb 1E0DBACb1FUDBACb1F4DBACb1GYDBACb1HIDBACb1H0DBACqqNcDBACqqOYDBACq qPowDQYJKoZIhvcNAQELBQADggEBAHaT+hh2ej6Jk2SqDdnx5xtJnOvcSbyHGj+7 ZtvQYFXA6zx0BOkNOpBD/LgGf+THY/2f471fVRsDc80CIH/EwRr6StmAlkBYsTob sKaVCVf+ROi6+UNgQsA9pdGavKoH2uErQrc0VcqrRzhCs2ZC/LiqNK3u7A93XqzT q6V72j2Vp+5ZtGkYi74P2zPIveCH8rkqNNrsUHtBIxlRJovR1u3DUcx+SMnKLdAy qhr4isGJG3xUjilIUafBHwMigkaPyYteCkmSbgw/yXlyeRslK+067EKEypmCrdVE M6jW41V2dFAAhpKKFX1Jwg/NoiUykdt/VT6bT2WOJUkJri2i0AY= -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:21 2026 by rpki-client