This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-9OApy0uqr5qnP2UROeUEHBmHXo.roa File: 1-9OApy0uqr5qnP2UROeUEHBmHXo.roa (raw, json) Hash identifier: MoDLAOo2Zq1l9XK1tysrO2bbEf0H1S5y4f3IHFUn8G0= Subject key identifier: FB:D3:80:A7:2D:2E:AA:BE:6A:9C:FD:94:44:E7:94:10:70:66:1D:7A Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F41E0D7A9D1CDD7A592887E3AB8C8 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-9OApy0uqr5qnP2UROeUEHBmHXo.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215224 IP address blocks: 138.249.10.0/24 maxlen: 24 138.249.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:41:e0:d7:a9:d1:cd:d7:a5:92:88:7e:3a:b8:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd380a72d2eaabe6a9cfd9444e7941070661d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a5:3c:85:d6:2a:33:eb:80:4d:a0:bf:b2:24: 4a:3d:83:a2:9e:55:d8:ae:59:2b:8a:96:e6:6a:32: 9f:b6:dd:70:66:c4:15:10:99:95:9a:d3:63:02:86: 22:8e:1a:e2:ca:dc:f9:a7:58:85:0e:63:6b:cd:8a: 5f:e5:c5:f2:34:3d:27:99:8b:c9:d6:a6:16:ea:b2: 1e:c9:30:b3:9f:88:8d:6d:34:bd:ab:8d:88:73:e9: 21:b0:40:36:c4:34:6d:aa:6b:a2:df:3f:27:f1:f8: 07:ec:67:e7:1f:a4:a7:b8:ce:1a:f0:2b:c1:a1:1d: d3:51:de:c5:4d:8f:ca:67:f4:23:c8:cf:a2:f5:1e: 0e:53:7d:0b:81:42:05:15:5c:f2:69:c4:01:b7:db: 5e:f8:e6:98:5b:94:25:cf:89:54:d2:8c:d0:66:d8: 7f:d2:c6:11:ce:d2:3e:2c:50:ea:7c:ef:b6:bc:c3: a9:24:43:8e:cb:70:2b:93:b8:bc:70:a2:eb:c7:e0: cd:47:61:17:b8:47:cb:6b:7e:21:fc:d8:4b:58:4d: 62:04:f5:cb:7f:01:4b:aa:90:cc:71:8e:3d:3c:57: 5d:f4:8c:16:77:3c:fb:fc:51:32:84:ea:9e:1e:0e: be:ce:c5:47:ab:d4:c6:44:bf:16:94:35:72:10:88: ea:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D3:80:A7:2D:2E:AA:BE:6A:9C:FD:94:44:E7:94:10:70:66:1D:7A X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-9OApy0uqr5qnP2UROeUEHBmHXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.10.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:8a:b2:2a:53:7e:87:f4:ae:96:06:83:c6:b3:ca:3d:83:f2: 37:b1:39:66:d9:97:eb:2d:8f:fc:4f:57:a8:eb:96:83:f4:3f: cf:6f:d5:cf:4f:c6:7a:d8:78:12:e3:41:6d:0c:74:74:95:35: 0e:e3:b0:77:c2:b9:30:95:4f:ea:58:20:48:7b:4f:08:fc:85: 0b:01:91:fb:13:84:18:f1:bb:f7:20:bc:96:7f:30:aa:b7:16: a1:09:7c:00:1f:a0:a4:92:cb:80:e1:cc:a8:50:b9:01:a1:b4: 94:a6:13:a1:b7:57:48:95:99:5d:26:3a:e0:af:78:fa:fa:31: 9a:2f:d1:a9:33:51:43:43:31:e0:0b:05:a8:5c:92:01:db:fd: 33:fe:64:c2:f2:3d:5f:e7:bc:d9:d6:0e:f1:5a:86:c8:64:96: 82:93:d9:a7:25:55:6a:9b:66:85:7f:b4:6b:4c:94:99:d6:a2: f7:a1:75:eb:1a:37:8b:d4:ba:cc:14:f6:3a:33:1a:66:25:41: cb:76:aa:39:06:26:25:66:13:1a:c2:d1:63:18:8d:92:22:fb: f0:59:eb:c3:8c:1c:d1:57:6f:32:26:6b:94:93:45:28:dd:95: 29:ae:4c:8f:2f:60:7a:83:8b:78:86:1a:0a:ce:83:f6:91:d7: 46:01:a9:a0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5f0Hg16nRzdelkoh+OrjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQzODBhNzJkMmVhYWJlNmE5Y2ZkOTQ0NGU3OTQxMDcwNjYxZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKU8hdYqM+uATaC/siRKPYOinlXY rlkripbmajKftt1wZsQVEJmVmtNjAoYijhriytz5p1iFDmNrzYpf5cXyND0nmYvJ 1qYW6rIeyTCzn4iNbTS9q42Ic+khsEA2xDRtqmui3z8n8fgH7GfnH6SnuM4a8CvB oR3TUd7FTY/KZ/QjyM+i9R4OU30LgUIFFVzyacQBt9te+OaYW5Qlz4lU0ozQZth/ 0sYRztI+LFDqfO+2vMOpJEOOy3Ark7i8cKLrx+DNR2EXuEfLa34h/NhLWE1iBPXL fwFLqpDMcY49PFdd9IwWdzz7/FEyhOqeHg6+zsVHq9TGRL8WlDVyEIjqGwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPvTgKctLqq+apz9lETnlBBwZh16MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvMS05T0FweTB1cXI1cW5QMlVST2VVRUhCbUhYby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvMmI2MDMwLTZkODgtNGUzZS05ZjNhLWE2NjdiYjc2NTA2 MC8xL0xtcUc1aThNNlk0QzZZQ0duX1JCVHVLZzhNNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr5CjAN BgkqhkiG9w0BAQsFAAOCAQEAXoqyKlN+h/SulgaDxrPKPYPyN7E5ZtmX6y2P/E9X qOuWg/Q/z2/Vz0/Geth4EuNBbQx0dJU1DuOwd8K5MJVP6lggSHtPCPyFCwGR+xOE GPG79yC8ln8wqrcWoQl8AB+gpJLLgOHMqFC5AaG0lKYTobdXSJWZXSY64K94+vox mi/RqTNRQ0Mx4AsFqFySAdv9M/5kwvI9X+e82dYO8VqGyGSWgpPZpyVVaptmhX+0 a0yUmdai96F16xo3i9S6zBT2OjMaZiVBy3aqOQYmJWYTGsLRYxiNkiL78Fnrw4wc 0VdvMiZrlJNFKN2VKa5Mjy9geoOLeIYaCs6D9pHXRgGpoA== -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:59 2026 by rpki-client