This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/o0btYCzI8rGwLQC3uzzUw2YdEYo.roa File: o0btYCzI8rGwLQC3uzzUw2YdEYo.roa (raw, json) Hash identifier: K88fkHEh9pgF8IrWOiHnrDMmPqwZUFmZNBCpfSfJOtg= Subject key identifier: A3:46:ED:60:2C:C8:F2:B1:B0:2D:00:B7:BB:3C:D4:C3:66:1D:11:8A Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A92DF4754977156BFC441166EE43861BB Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/o0btYCzI8rGwLQC3uzzUw2YdEYo.roa Signing time: Mon 17 Nov 2025 17:31:37 +0000 ROA not before: Mon 17 Nov 2025 17:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58061 IP address blocks: 138.249.0.0/24 maxlen: 24 138.249.1.0/24 maxlen: 24 170.168.4.0/24 maxlen: 24 170.168.5.0/24 maxlen: 24 170.168.26.0/24 maxlen: 24 170.168.27.0/24 maxlen: 24 170.168.32.0/24 maxlen: 24 170.168.41.0/24 maxlen: 24 170.168.43.0/24 maxlen: 24 170.168.48.0/24 maxlen: 24 170.168.49.0/24 maxlen: 24 170.168.50.0/24 maxlen: 24 170.168.51.0/24 maxlen: 24 170.168.112.0/24 maxlen: 24 170.168.113.0/24 maxlen: 24 170.168.114.0/24 maxlen: 24 170.168.118.0/24 maxlen: 24 170.168.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:df:47:54:97:71:56:bf:c4:41:16:6e:e4:38:61:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 17 17:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a346ed602cc8f2b1b02d00b7bb3cd4c3661d118a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:9e:5d:36:1a:36:10:5c:93:81:72:72:f8: 0d:95:0c:0d:cc:e6:fe:fb:45:04:8b:70:04:b9:58: c5:5e:aa:48:48:32:4e:85:0e:a2:52:d3:14:87:bd: fd:80:29:7c:09:99:2b:db:1f:a8:9a:94:e4:9d:a8: 54:92:fa:32:be:2b:1e:99:10:fe:8a:df:81:1a:65: 37:70:63:d2:5d:bb:0e:92:c5:7b:f4:e0:de:69:b3: ef:f8:f7:d5:66:d0:b1:9f:43:a7:2a:1f:d1:9b:58: 21:11:7c:e8:33:33:ea:a4:64:48:a2:53:f6:5f:7f: 8e:e9:db:9c:54:98:dc:6a:34:c1:c6:79:73:35:1a: 0e:0d:63:6f:69:7f:f2:a0:5d:e7:20:87:2b:18:8e: d4:26:8c:c9:ff:81:9a:75:a4:2f:8b:1b:00:00:4c: ea:54:b2:86:2b:41:e5:ed:b5:bb:8e:3c:b7:ee:57: fa:3e:6e:d2:d1:ad:9f:6c:b2:1d:cc:34:55:e2:cb: c3:99:04:d6:b8:90:2d:93:86:2b:13:08:7a:a9:35: f4:d9:9c:8d:68:e9:c5:ee:96:d0:a8:3c:c9:25:48: e9:0b:c0:40:14:8c:fa:05:c3:7f:47:4e:14:da:cb: bf:b8:d3:fd:50:06:bd:cd:0e:b7:32:e9:16:f5:8a: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:ED:60:2C:C8:F2:B1:B0:2D:00:B7:BB:3C:D4:C3:66:1D:11:8A X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/o0btYCzI8rGwLQC3uzzUw2YdEYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.0.0/23 170.168.4.0/23 170.168.26.0/23 170.168.32.0/24 170.168.41.0/24 170.168.43.0/24 170.168.48.0/22 170.168.112.0-170.168.114.255 170.168.118.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:65:d1:38:e0:ec:e1:0e:77:43:1a:17:18:ee:e3:42:e0:82: 10:1c:2d:90:7e:10:a7:e5:5c:ac:7e:0a:e0:18:e7:97:f6:85: 2e:fb:7a:4a:3c:22:04:b2:cc:25:21:5f:1b:30:c4:22:e5:18: 16:26:ef:a5:ad:c2:3c:74:01:30:4f:4b:e7:b2:35:f0:1a:14: 8c:d7:d3:1d:9c:e2:bb:13:eb:53:53:41:cb:d9:d6:51:ff:78: 1f:05:11:cb:3d:4c:0f:60:55:3c:85:25:e6:75:e5:c7:5f:6d: 78:55:d0:1b:b7:01:36:88:a8:6a:2a:9b:7c:be:98:fd:c0:7b: ca:23:e7:93:d4:14:63:f6:0a:3e:d7:2c:54:ea:bd:90:d8:2a: a2:68:b3:34:07:ab:43:59:64:7f:b0:2c:63:8d:a0:b4:b4:96: 88:f1:f6:9d:88:dc:3a:6c:5a:0b:c6:e3:50:ea:4f:fb:4d:08: 76:35:0e:a8:60:d5:82:71:09:8b:bc:f6:97:f3:ee:5a:31:21: b2:59:cb:52:58:33:ee:2d:92:7f:cf:57:a1:77:ca:e1:1f:e3: 5c:17:81:af:a4:a3:c2:f9:65:61:68:15:e2:f3:c8:55:53:d2: 15:5f:29:f4:95:5b:35:ab:58:70:d5:9f:7d:91:b8:f1:86:6b: 59:d4:c9:e4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZqS30dUl3FWv8RBFm7kOGG7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTE3MTczMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQ2ZWQ2MDJjYzhmMmIxYjAyZDAwYjdiYjNjZDRjMzY2MWQxMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN2eXTYaNhBck4FycvgNlQwNzOb+ +0UEi3AEuVjFXqpISDJOhQ6iUtMUh739gCl8CZkr2x+ompTknahUkvoyvisemRD+ it+BGmU3cGPSXbsOksV79ODeabPv+PfVZtCxn0OnKh/Rm1ghEXzoMzPqpGRIolP2 X3+O6ducVJjcajTBxnlzNRoODWNvaX/yoF3nIIcrGI7UJozJ/4GadaQvixsAAEzq VLKGK0Hl7bW7jjy37lf6Pm7S0a2fbLIdzDRV4svDmQTWuJAtk4YrEwh6qTX02ZyN aOnF7pbQqDzJJUjpC8BAFIz6BcN/R04U2su/uNP9UAa9zQ63MukW9YotuQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKNG7WAsyPKxsC0At7s81MNmHRGKMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbzBidFlDekk4ckd3TFFDM3V6elV3MllkRVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQBivkAAwQB qqgEAwQBqqgaAwQAqqggAwQAqqgpAwQAqqgrAwQCqqgwMAwDBASqqHADBACqqHID BAGqqHYwDQYJKoZIhvcNAQELBQADggEBAF9l0Tjg7OEOd0MaFxju40LgghAcLZB+ EKflXKx+CuAY55f2hS77eko8IgSyzCUhXxswxCLlGBYm76Wtwjx0ATBPS+eyNfAa FIzX0x2c4rsT61NTQcvZ1lH/eB8FEcs9TA9gVTyFJeZ15cdfbXhV0Bu3ATaIqGoq m3y+mP3Ae8oj55PUFGP2Cj7XLFTqvZDYKqJoszQHq0NZZH+wLGONoLS0lojx9p2I 3DpsWgvG41DqT/tNCHY1Dqhg1YJxCYu89pfz7loxIbJZy1JYM+4tkn/PV6F3yuEf 41wXga+ko8L5ZWFoFeLzyFVT0hVfKfSVWzWrWHDVn32RuPGGa1nUyeQ= -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:53 2025 by rpki-client