This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oBlCd_BmJYFJJlnAymELi4gJcug.roa File: oBlCd_BmJYFJJlnAymELi4gJcug.roa (raw, json) Hash identifier: U7EaXz4ke7wEqyjqqoqg/FIYaXyvCtChOuDCoMRCtOc= Subject key identifier: A0:19:42:77:F0:66:25:81:49:26:59:C0:CA:61:0B:8B:88:09:72:E8 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F246795E491F29272B72CC2567A99 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oBlCd_BmJYFJJlnAymELi4gJcug.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43991 IP address blocks: 138.249.3.0/24 maxlen: 24 170.168.64.0/24 maxlen: 24 170.168.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:24:67:95:e4:91:f2:92:72:b7:2c:c2:56:7a:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0194277f0662581492659c0ca610b8b880972e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:0d:db:b4:58:09:c9:28:72:92:1e:bf:6d: 75:c2:df:47:89:49:8d:41:e7:aa:1c:76:68:ec:bf: 35:8e:72:f1:f1:19:b4:7f:79:d3:48:f3:26:9c:d9: 48:a6:b3:84:85:72:e8:49:55:19:c7:17:2f:65:3d: e0:8b:c8:2a:8d:85:d5:c3:76:df:b9:72:cc:3d:5f: 76:06:43:75:cb:9c:d3:f8:fc:31:a1:3e:2f:6a:22: d2:b2:f3:3a:e8:50:2f:95:9d:33:1a:fa:c8:fd:1c: 71:77:ef:3c:1c:f0:aa:54:f8:58:0c:5b:9e:95:86: 85:0b:02:3d:66:88:b7:50:f5:10:df:8a:77:b0:ce: e7:c1:49:a8:fc:d3:4a:58:f0:d4:19:ec:9b:ff:bd: 62:58:97:0d:f8:4d:08:f5:b5:af:cb:85:15:4f:79: df:58:3e:56:93:40:70:91:ee:bb:c2:3a:4b:5a:d1: de:07:84:8a:71:19:be:d1:56:3f:68:9c:81:a4:81: 14:9e:d7:49:74:1a:c1:21:48:fe:71:ca:6c:9a:e3: 4f:66:42:58:5c:2a:c3:9c:73:37:47:08:b9:c0:d7: 57:78:9c:08:f1:db:50:4f:1f:4b:2b:53:e1:af:29: 23:1e:ca:0f:aa:02:70:e1:dc:eb:c4:d9:d4:e8:9d: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:42:77:F0:66:25:81:49:26:59:C0:CA:61:0B:8B:88:09:72:E8 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/oBlCd_BmJYFJJlnAymELi4gJcug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.3.0/24 170.168.64.0/24 170.168.75.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:32:3e:50:1e:31:25:87:71:f3:ea:d9:56:b9:d7:71:c5:e7: 20:26:6e:cf:08:85:fe:2d:eb:c1:5a:80:fc:26:b1:6c:56:7a: b3:aa:96:b1:e7:97:70:f7:7b:47:2f:29:7a:6d:6b:58:7f:11: 26:7f:59:f7:a7:25:7e:db:ac:ac:ae:65:e5:29:31:ec:74:f7: d2:69:60:8b:61:84:2e:85:87:d7:a3:c9:ac:9b:46:f3:a4:18: 61:8a:0a:61:0f:a3:9b:4d:5b:34:01:62:b4:ff:5d:6f:fe:58: 7f:1e:14:8d:ab:64:dd:de:e1:01:c4:05:e2:c6:7c:d9:4e:74: e3:3e:b8:9a:8d:fa:82:34:fa:69:04:24:93:9e:44:37:dc:c7: dd:40:73:36:0d:f8:4e:15:6e:36:48:ab:71:9d:c9:14:32:01: 8f:66:18:4a:6d:76:14:52:71:b0:92:26:dd:c4:33:6e:34:61: 2f:73:14:b8:fc:95:bc:0b:b7:b7:28:e6:5d:9f:2a:ad:93:e3: ab:56:56:2c:3b:af:b7:dd:de:d6:10:d5:78:dc:8a:e2:fa:f5: 03:c2:42:78:c8:2a:27:f1:7f:78:9e:d3:19:f9:43:b9:f4:80: 99:a1:47:e8:87:fe:34:5b:d2:8c:73:9a:20:44:41:25:79:08: 68:63:f1:f8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fyRnleSR8pJytyzCVnqZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDE5NDI3N2YwNjYyNTgxNDkyNjU5YzBjYTYxMGI4Yjg4MDk3MmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy8N27RYCckocpIev211wt9HiUmN QeeqHHZo7L81jnLx8Rm0f3nTSPMmnNlIprOEhXLoSVUZxxcvZT3gi8gqjYXVw3bf uXLMPV92BkN1y5zT+PwxoT4vaiLSsvM66FAvlZ0zGvrI/Rxxd+88HPCqVPhYDFue lYaFCwI9Zoi3UPUQ34p3sM7nwUmo/NNKWPDUGeyb/71iWJcN+E0I9bWvy4UVT3nf WD5Wk0Bwke67wjpLWtHeB4SKcRm+0VY/aJyBpIEUntdJdBrBIUj+ccpsmuNPZkJY XCrDnHM3Rwi5wNdXeJwI8dtQTx9LK1PhrykjHsoPqgJw4dzrxNnU6J2a8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKAZQnfwZiWBSSZZwMphC4uICXLoMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvb0JsQ2RfQm1KWUZKSmxuQXltRUxpNGdKY3VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAivkDAwQA qqhAAwQAqqhLMA0GCSqGSIb3DQEBCwUAA4IBAQA/Mj5QHjElh3Hz6tlWuddxxecg Jm7PCIX+LevBWoD8JrFsVnqzqpax55dw93tHLyl6bWtYfxEmf1n3pyV+26ysrmXl KTHsdPfSaWCLYYQuhYfXo8msm0bzpBhhigphD6ObTVs0AWK0/11v/lh/HhSNq2Td 3uEBxAXixnzZTnTjPriajfqCNPppBCSTnkQ33MfdQHM2DfhOFW42SKtxnckUMgGP ZhhKbXYUUnGwkibdxDNuNGEvcxS4/JW8C7e3KOZdnyqtk+OrVlYsO6+33d7WENV4 3Iri+vUDwkJ4yCon8X94ntMZ+UO59ICZoUfoh/40W9KMc5ogREEleQhoY/H4 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:32 2026 by rpki-client