This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wvJ9yi_ngSMjKsLhqft7L3CMrxg.roa File: wvJ9yi_ngSMjKsLhqft7L3CMrxg.roa (raw, json) Hash identifier: +TgwOUVkAMxhkdgQuWOZiAm7+CtVY4P8LTlrZBNk9ZU= Subject key identifier: C2:F2:7D:CA:2F:E7:81:23:23:2A:C2:E1:A9:FB:7B:2F:70:8C:AF:18 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F356C0818596D9BC2FD33FF57D755 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wvJ9yi_ngSMjKsLhqft7L3CMrxg.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203523 IP address blocks: 138.249.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:35:6c:08:18:59:6d:9b:c2:fd:33:ff:57:d7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2f27dca2fe78123232ac2e1a9fb7b2f708caf18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:49:65:96:67:59:94:c1:ce:fb:7b:cf:86:f5: b7:93:89:4d:80:66:52:ef:e2:76:56:ea:a1:62:cc: 82:1a:a3:a3:31:47:33:98:23:d5:d3:3e:36:1c:53: 09:f6:fc:7c:09:2c:a2:a7:d7:57:b0:6c:36:e0:4d: 10:82:d0:b4:0a:e5:30:f5:73:3c:fa:01:bc:cf:21: 5b:bc:40:4c:67:3a:c5:f2:19:6e:8f:ff:e3:69:fe: 5c:7c:22:a1:aa:8e:1e:1a:10:04:e8:44:32:3a:60: 7f:97:d3:17:21:d1:9d:e7:23:a0:e9:02:43:6c:39: bb:d1:94:0f:42:21:d5:e2:a7:6b:77:95:9f:66:09: 6c:0d:a6:b1:6a:87:e4:a9:8f:66:e4:9a:dc:f3:0f: a9:18:2c:72:bc:a4:ed:36:23:1b:cb:a7:c6:f9:af: 6a:06:88:df:8f:ea:a9:f5:61:3f:13:00:9d:34:a6: c9:53:82:fd:91:95:d5:81:7c:ab:cd:4b:78:07:47: ff:84:ce:d4:b2:20:67:e1:2c:be:b5:cc:ae:7b:77: a6:95:d1:f3:c0:45:aa:22:0d:36:a9:3c:af:a5:b8: 15:28:5a:77:b3:d0:76:b9:35:e9:df:b7:c5:ff:7f: c4:bd:18:29:c4:73:ce:21:a5:b9:3e:b4:1e:47:08: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:7D:CA:2F:E7:81:23:23:2A:C2:E1:A9:FB:7B:2F:70:8C:AF:18 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wvJ9yi_ngSMjKsLhqft7L3CMrxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.6.0/24 Signature Algorithm: sha256WithRSAEncryption 09:1e:10:05:02:01:a5:ce:df:f4:d1:e8:49:34:2f:e9:e8:e6: c2:5f:6a:01:05:c2:95:97:61:86:1f:bb:c2:a0:d1:5a:5a:9a: 29:f4:e5:8b:f9:48:90:dd:6c:ec:d1:89:4f:fe:47:05:d1:4c: f5:82:27:62:4f:43:32:73:28:43:1f:ea:b1:de:06:ac:f3:6b: 52:a9:2d:2d:e4:08:3c:fd:c2:c0:bf:13:70:a8:c9:53:9b:06: 8a:0b:73:a0:9b:81:64:a2:25:72:6d:0e:1c:c7:0e:bc:76:f1: 24:63:c2:91:4c:f8:19:f5:f1:f0:07:09:0d:81:f6:77:16:79: 45:04:04:50:dc:16:74:9a:9f:2a:2d:e7:7a:2c:4c:88:02:e7: 77:4b:2b:dc:41:34:86:06:ab:20:b6:b6:03:9d:e7:bd:2e:a8: a5:cb:30:57:57:ce:9a:4d:e6:10:92:59:23:62:11:d3:99:7f: b0:d3:b3:10:07:94:c4:e8:40:40:db:2c:79:b5:7d:a0:d0:65: 0a:23:73:86:d7:ba:60:ea:07:a4:dc:15:71:19:ce:9e:70:b5: 32:5b:6d:b8:31:a6:db:fe:d2:87:51:a6:47:35:c4:16:0f:d7: 4d:c8:79:29:dd:d4:59:83:d6:80:8c:51:c3:16:14:88:7e:e9: 94:70:17:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzVsCBhZbZvC/TP/V9dVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmYyN2RjYTJmZTc4MTIzMjMyYWMyZTFhOWZiN2IyZjcwOGNhZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0klllmdZlMHO+3vPhvW3k4lNgGZS 7+J2VuqhYsyCGqOjMUczmCPV0z42HFMJ9vx8CSyip9dXsGw24E0QgtC0CuUw9XM8 +gG8zyFbvEBMZzrF8hluj//jaf5cfCKhqo4eGhAE6EQyOmB/l9MXIdGd5yOg6QJD bDm70ZQPQiHV4qdrd5WfZglsDaaxaofkqY9m5Jrc8w+pGCxyvKTtNiMby6fG+a9q Bojfj+qp9WE/EwCdNKbJU4L9kZXVgXyrzUt4B0f/hM7UsiBn4Sy+tcyue3emldHz wEWqIg02qTyvpbgVKFp3s9B2uTXp37fF/3/EvRgpxHPOIaW5PrQeRwgXbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLyfcov54EjIyrC4an7ey9wjK8YMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvd3ZKOXlpX25nU01qS3NMaHFmdDdMM0NNcnhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkGMA0G CSqGSIb3DQEBCwUAA4IBAQAJHhAFAgGlzt/00ehJNC/p6ObCX2oBBcKVl2GGH7vC oNFaWpop9OWL+UiQ3Wzs0YlP/kcF0Uz1gidiT0MycyhDH+qx3gas82tSqS0t5Ag8 /cLAvxNwqMlTmwaKC3Ogm4FkoiVybQ4cxw68dvEkY8KRTPgZ9fHwBwkNgfZ3FnlF BARQ3BZ0mp8qLed6LEyIAud3SyvcQTSGBqsgtrYDnee9LqilyzBXV86aTeYQklkj YhHTmX+w07MQB5TE6EBA2yx5tX2g0GUKI3OG17pg6gek3BVxGc6ecLUyW224Mabb /tKHUaZHNcQWD9dNyHkp3dRZg9aAjFHDFhSIfumUcBcB -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:06 2026 by rpki-client