This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/v_9a1n0lRiyYpBSPDrUQV8hiCDs.roa File: v_9a1n0lRiyYpBSPDrUQV8hiCDs.roa (raw, json) Hash identifier: uijmOy4HITb3UO6twsueJHFtLdUSBd8zX0KK3LUyIBQ= Subject key identifier: BF:FF:5A:D6:7D:25:46:2C:98:A4:14:8F:0E:B5:10:57:C8:62:08:3B Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AB56A05C155CFC1B7480A574053355B42 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/v_9a1n0lRiyYpBSPDrUQV8hiCDs.roa Signing time: Mon 24 Nov 2025 10:30:15 +0000 ROA not before: Mon 24 Nov 2025 10:30:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35682 IP address blocks: 138.249.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:6a:05:c1:55:cf:c1:b7:48:0a:57:40:53:35:5b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 24 10:30:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bfff5ad67d25462c98a4148f0eb51057c862083b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ed:b5:f6:a8:e6:75:4f:a0:5e:b2:84:ae:df: dd:1b:76:c0:88:8c:81:d3:58:dd:1c:ea:1f:33:01: aa:a3:de:45:db:1d:28:70:ca:f3:82:90:91:b5:76: 4c:15:57:4a:ac:bc:41:e2:8a:70:37:cb:96:b8:82: 48:36:e7:11:b7:a4:ed:a7:73:c6:eb:67:71:3a:1c: 1b:1a:5d:40:65:32:84:e8:ab:ab:cc:d2:63:e5:3e: 36:60:ed:1d:21:9b:2d:48:52:40:6e:fc:d2:ad:73: a1:be:fd:f1:b2:a0:70:12:ab:ea:95:26:56:85:b8: 11:bd:9b:4a:3a:98:0c:dc:57:3c:3a:8d:97:26:20: 92:ab:e6:64:0a:6c:60:38:d1:58:16:60:16:d3:59: 7d:33:a3:0a:44:26:66:80:ba:2f:16:f1:bf:75:99: d0:49:1c:79:6a:2c:66:95:ac:af:fc:4e:cb:dd:7e: ba:2f:27:47:37:e6:91:da:dd:15:1b:db:ce:7c:cc: fd:9d:81:ef:73:ec:c8:76:f6:13:e0:28:f5:a7:fc: 71:6e:53:08:2f:91:71:09:11:55:89:44:c0:b0:92: 9f:18:92:b9:33:c1:cf:d4:30:b6:8d:de:cb:4b:7e: 18:53:db:12:79:a5:5c:21:f8:c1:6c:00:ad:b0:3b: b0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FF:5A:D6:7D:25:46:2C:98:A4:14:8F:0E:B5:10:57:C8:62:08:3B X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/v_9a1n0lRiyYpBSPDrUQV8hiCDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.7.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:b5:e0:20:44:90:74:d3:f9:7c:3e:e4:5f:a4:55:b1:ae:96: b6:44:09:c0:f2:48:b2:07:bd:bf:d1:9a:27:44:e2:c2:28:54: 68:55:91:9a:40:0d:97:e6:5b:40:23:cd:bb:99:ce:66:31:91: fc:31:8b:5a:64:19:59:8a:b1:3e:91:d2:5d:98:51:36:b8:82: a3:87:7e:e1:31:9e:26:87:c4:4a:2c:4c:85:17:c5:0b:6a:d8: e8:59:d6:d1:d8:dd:71:db:2e:b9:90:d1:68:b8:fa:4b:1b:68: 1d:eb:4b:a2:80:19:f8:a7:3c:2e:90:bb:b6:5f:60:7c:77:f0: 77:6d:15:48:97:7e:68:06:3d:e2:60:17:91:66:03:05:e5:d8: 7b:cb:65:e0:ef:fe:20:b6:a3:eb:ec:4a:d8:5b:8f:52:a5:5f: 89:63:37:88:bf:d7:6e:43:f4:24:f4:2e:70:7a:3d:ba:62:72: 6f:9b:a2:86:4f:35:8d:67:b0:64:59:3d:95:b3:0d:31:be:30: 50:ff:5a:63:51:d0:28:20:11:66:af:3f:1a:a5:1b:bb:89:91: e4:e4:bf:33:a3:ac:cc:64:c7:ce:f2:17:d8:38:1e:95:67:82: 16:38:4d:ca:0a:25:51:04:8c:c8:e2:dd:bf:ff:62:8b:0a:31: 1a:c8:ea:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq1agXBVc/Bt0gKV0BTNVtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI0MTAzMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmZmNWFkNjdkMjU0NjJjOThhNDE0OGYwZWI1MTA1N2M4NjIwODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne219qjmdU+gXrKErt/dG3bAiIyB 01jdHOofMwGqo95F2x0ocMrzgpCRtXZMFVdKrLxB4opwN8uWuIJINucRt6Ttp3PG 62dxOhwbGl1AZTKE6KurzNJj5T42YO0dIZstSFJAbvzSrXOhvv3xsqBwEqvqlSZW hbgRvZtKOpgM3Fc8Oo2XJiCSq+ZkCmxgONFYFmAW01l9M6MKRCZmgLovFvG/dZnQ SRx5aixmlayv/E7L3X66LydHN+aR2t0VG9vOfMz9nYHvc+zIdvYT4Cj1p/xxblMI L5FxCRFViUTAsJKfGJK5M8HP1DC2jd7LS34YU9sSeaVcIfjBbACtsDuw1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL//WtZ9JUYsmKQUjw61EFfIYgg7MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvdl85YTFuMGxSaXlZcEJTUERyVVFWOGhpQ0RzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkHMA0G CSqGSIb3DQEBCwUAA4IBAQBOteAgRJB00/l8PuRfpFWxrpa2RAnA8kiyB72/0Zon ROLCKFRoVZGaQA2X5ltAI827mc5mMZH8MYtaZBlZirE+kdJdmFE2uIKjh37hMZ4m h8RKLEyFF8ULatjoWdbR2N1x2y65kNFouPpLG2gd60uigBn4pzwukLu2X2B8d/B3 bRVIl35oBj3iYBeRZgMF5dh7y2Xg7/4gtqPr7ErYW49SpV+JYzeIv9duQ/Qk9C5w ej26YnJvm6KGTzWNZ7BkWT2Vsw0xvjBQ/1pjUdAoIBFmrz8apRu7iZHk5L8zo6zM ZMfO8hfYOB6VZ4IWOE3KCiVRBIzI4t2//2KLCjEayOoh -----END CERTIFICATE-----Generated at Sat Dec 6 08:04:48 2025 by rpki-client