This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qZZ9ZF_dP9Xgx6esFsA2dpn_iBI.roa File: qZZ9ZF_dP9Xgx6esFsA2dpn_iBI.roa (raw, json) Hash identifier: b8j0jbg5JdQqf36I5QEcDYxwxqcm2VMwPhiWWP7CMrw= Subject key identifier: A9:96:7D:64:5F:DD:3F:D5:E0:C7:A7:AC:16:C0:36:76:99:FF:88:12 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B8EF153C69F78962D9A2C5DF879F35C23 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qZZ9ZF_dP9Xgx6esFsA2dpn_iBI.roa Signing time: Mon 05 Jan 2026 16:15:38 +0000 ROA not before: Mon 05 Jan 2026 16:15:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48207 IP address blocks: 138.249.8.0/24 maxlen: 24 138.249.20.0/24 maxlen: 24 138.249.127.0/24 maxlen: 24 170.168.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:f1:53:c6:9f:78:96:2d:9a:2c:5d:f8:79:f3:5c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 5 16:15:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9967d645fdd3fd5e0c7a7ac16c0367699ff8812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:b8:c1:bc:80:b4:c9:31:e5:b7:91:04:79: 36:c3:fa:a2:00:f2:c8:8a:48:4a:94:ad:49:26:f4: 1d:f4:16:4d:7a:2d:16:98:22:a6:71:bc:d3:b5:3f: 38:08:32:34:65:67:93:3a:88:7c:c1:52:1f:fd:30: 0d:ba:03:2d:8c:fc:c4:0f:38:7d:18:83:3d:10:31: 9d:45:cc:c4:52:70:32:a4:c6:5c:6f:b0:11:33:ae: 05:3e:01:0d:a4:2d:13:f5:b1:b7:a3:02:91:28:89: a7:fc:ff:aa:9f:77:ff:36:86:b5:2b:62:b7:90:ca: 6f:11:21:1f:b4:a8:15:f3:8d:75:79:cb:e6:c0:b2: 2b:87:9e:be:ea:3d:f0:68:e0:00:6a:41:86:5b:ea: ce:ca:24:6e:f6:05:99:45:10:8b:8b:8b:a8:47:41: f3:74:ab:14:c8:d7:5a:e9:a1:4c:d1:b0:31:82:dc: 18:7a:32:62:93:ae:52:1c:e7:e1:f9:6a:e2:8a:8b: 2b:05:2c:ba:9f:50:64:43:29:45:72:db:4b:c4:d9: 4c:bd:48:03:f9:19:16:ee:cc:5f:1c:2c:15:e9:df: 3b:50:fa:07:b0:5c:1c:5c:8f:f2:cd:7b:01:02:fd: 07:9b:47:4a:a8:74:f0:26:ff:1f:1b:a8:8b:1d:b3: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:96:7D:64:5F:DD:3F:D5:E0:C7:A7:AC:16:C0:36:76:99:FF:88:12 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qZZ9ZF_dP9Xgx6esFsA2dpn_iBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.8.0/24 138.249.20.0/24 138.249.127.0/24 170.168.102.0/24 Signature Algorithm: sha256WithRSAEncryption 32:25:d0:ec:b2:0c:57:6b:1c:a2:1b:35:ec:1d:4c:29:fd:af: b4:1a:c9:8f:6b:c7:c0:f6:68:95:aa:e2:e5:5a:99:57:d3:b5: 23:fb:bb:98:95:e4:1f:89:05:4b:e8:cc:45:79:a4:b9:59:09: 18:33:e0:19:ab:46:85:25:4e:ed:ef:54:3c:00:7a:72:6c:fe: 97:6f:7c:2f:ce:9a:dd:f6:6a:81:bb:82:29:c0:e0:e1:1f:98: 9d:b8:a3:45:bd:18:7e:13:2b:b2:72:22:e2:4d:29:16:e3:49: 54:f1:0c:d5:64:91:c3:30:9d:e0:05:c8:3c:de:91:6c:ca:00: 26:5a:3f:e9:2f:27:67:be:aa:c9:d5:da:1f:35:2e:ab:fe:7c: 2c:85:51:52:68:6b:47:59:37:4e:c6:b9:70:1d:e2:55:97:4d: 32:a2:5c:50:9e:56:20:8d:0e:e7:56:10:86:0d:48:42:58:61: dd:16:d5:69:29:ed:4f:92:d9:29:6a:4e:03:7a:30:54:01:5b: 2b:c4:d4:7b:2f:9a:59:0d:2a:30:8d:e8:39:7a:f3:8f:ec:a9: 72:a2:f9:84:27:20:26:3a:2d:1e:f5:fd:f9:37:16:49:84:b7: 53:f0:64:20:75:66:22:7f:24:dc:c3:d4:58:08:6f:4b:a4:7a: 5f:d6:52:32 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuO8VPGn3iWLZosXfh581wjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTA1MTYxNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTk2N2Q2NDVmZGQzZmQ1ZTBjN2E3YWMxNmMwMzY3Njk5ZmY4ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3G4wbyAtMkx5beRBHk2w/qiAPLI ikhKlK1JJvQd9BZNei0WmCKmcbzTtT84CDI0ZWeTOoh8wVIf/TANugMtjPzEDzh9 GIM9EDGdRczEUnAypMZcb7ARM64FPgENpC0T9bG3owKRKImn/P+qn3f/Noa1K2K3 kMpvESEftKgV8411ecvmwLIrh56+6j3waOAAakGGW+rOyiRu9gWZRRCLi4uoR0Hz dKsUyNda6aFM0bAxgtwYejJik65SHOfh+WriiosrBSy6n1BkQylFcttLxNlMvUgD +RkW7sxfHCwV6d87UPoHsFwcXI/yzXsBAv0Hm0dKqHTwJv8fG6iLHbMnvwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKmWfWRf3T/V4MenrBbANnaZ/4gSMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvcVpaOVpGX2RQOVhneDZlc0ZzQTJkcG5faUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAivkIAwQA ivkUAwQAivl/AwQAqqhmMA0GCSqGSIb3DQEBCwUAA4IBAQAyJdDssgxXaxyiGzXs HUwp/a+0GsmPa8fA9miVquLlWplX07Uj+7uYleQfiQVL6MxFeaS5WQkYM+AZq0aF JU7t71Q8AHpybP6Xb3wvzprd9mqBu4IpwODhH5iduKNFvRh+EyuyciLiTSkW40lU 8QzVZJHDMJ3gBcg83pFsygAmWj/pLydnvqrJ1dofNS6r/nwshVFSaGtHWTdOxrlw HeJVl00yolxQnlYgjQ7nVhCGDUhCWGHdFtVpKe1Pktkpak4DejBUAVsrxNR7L5pZ DSowjeg5evOP7KlyovmEJyAmOi0e9f35NxZJhLdT8GQgdWYifyTcw9RYCG9LpHpf 1lIy -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:13 2026 by rpki-client