This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2p0X3WKyu7zr-Bym3dpoBMWqR7g.roa File: 2p0X3WKyu7zr-Bym3dpoBMWqR7g.roa (raw, json) Hash identifier: NY7oe92j5txZnVlR5QftdOMVXPzJYjrr6brU96KNvQo= Subject key identifier: DA:9D:17:DD:62:B2:BB:BC:EB:F8:1C:A6:DD:DA:68:04:C5:AA:47:B8 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A9D3D644BB540370CD38B2E19550A6D86 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2p0X3WKyu7zr-Bym3dpoBMWqR7g.roa Signing time: Wed 19 Nov 2025 17:50:37 +0000 ROA not before: Wed 19 Nov 2025 17:50:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 138.249.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:3d:64:4b:b5:40:37:0c:d3:8b:2e:19:55:0a:6d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 19 17:50:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=da9d17dd62b2bbbcebf81ca6ddda6804c5aa47b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:ed:18:aa:32:63:1f:69:a5:c2:b6:09:8c: 73:03:14:86:af:80:18:0a:1a:f0:db:82:3a:1c:24: 3b:90:d8:1d:dc:20:29:b5:d8:8f:3e:e8:1d:c1:74: ca:f2:77:84:60:2b:de:3f:39:f0:65:27:fa:aa:30: 5b:04:5f:8b:38:36:1d:4a:45:aa:9c:61:66:84:fb: 9f:cc:e9:04:9d:f3:e0:bd:59:c0:84:44:43:7f:07: 3f:d6:42:82:24:d1:85:e5:f6:7e:b6:15:0b:03:c4: 89:40:a6:3f:00:ee:97:15:27:1d:dd:e5:38:07:43: 3a:50:7e:4c:36:04:c0:43:ad:fc:65:00:51:5e:40: 53:ee:24:6e:76:76:b6:0f:58:61:56:29:d9:f0:98: 5a:ce:7e:00:7b:0f:b0:8b:d9:a0:e6:6a:32:f8:29: 4e:42:4c:28:2f:b9:60:5d:5b:2d:bf:1b:fa:a0:c9: 14:80:3e:d4:18:71:0f:c8:cc:19:e3:66:85:04:b4: e8:91:25:d8:05:c4:a4:9d:a4:d4:b7:81:5f:5d:a1: be:f4:43:16:14:b2:14:3a:e7:e3:98:67:4b:45:03: ec:cc:dd:f1:24:a1:d0:6c:38:f5:e1:bd:e5:59:80: a0:38:62:96:94:bb:3d:b2:b2:ec:97:d6:45:7e:70: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9D:17:DD:62:B2:BB:BC:EB:F8:1C:A6:DD:DA:68:04:C5:AA:47:B8 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/2p0X3WKyu7zr-Bym3dpoBMWqR7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.2.0/24 Signature Algorithm: sha256WithRSAEncryption 27:27:d8:76:91:d2:37:d9:7d:9f:20:f6:ee:2d:2c:5b:e8:06: 9a:02:92:44:30:61:62:dc:62:de:6f:c7:f0:07:43:3b:7c:1b: d2:57:22:7a:0d:b8:b1:fe:5e:10:f5:a3:75:8f:9f:d6:88:a3: ab:e0:ff:7a:2c:17:cb:53:0c:77:b3:6b:81:ad:f0:f9:ab:ad: a4:bb:e2:37:83:fa:6a:30:b4:20:61:d2:4a:c6:db:86:e7:f4: 9d:c9:f8:23:95:17:e7:69:12:e5:d5:d5:04:cb:1b:15:b0:9f: 47:fb:8d:f7:4a:f8:11:b0:1b:3a:24:3b:a1:fb:a7:bb:cc:23: b8:a7:b5:51:c2:fe:a2:78:bc:1d:bb:ac:f8:d8:ff:5b:10:7d: a6:b6:49:b7:fc:72:f4:0a:b0:3c:5f:ca:3d:09:bd:42:58:00: 37:dd:6c:cb:20:a8:0f:b0:5c:61:50:43:6f:f6:d2:55:1c:91: 54:a6:88:51:33:04:24:14:43:9d:57:c4:c4:7b:75:49:57:b4: 20:3f:cd:05:f4:d2:a8:37:48:93:51:c3:d4:9e:64:f8:ad:24: c8:61:05:c2:d6:e2:c7:7a:be:5d:1f:7d:25:79:19:8c:67:a5: dc:0e:be:d0:de:03:2e:b7:f8:12:ea:4d:61:e3:3d:99:61:5f: de:89:5d:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdPWRLtUA3DNOLLhlVCm2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTE5MTc1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTlkMTdkZDYyYjJiYmJjZWJmODFjYTZkZGRhNjgwNGM1YWE0N2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ3tGKoyYx9ppcK2CYxzAxSGr4AY Chrw24I6HCQ7kNgd3CAptdiPPugdwXTK8neEYCvePznwZSf6qjBbBF+LODYdSkWq nGFmhPufzOkEnfPgvVnAhERDfwc/1kKCJNGF5fZ+thULA8SJQKY/AO6XFScd3eU4 B0M6UH5MNgTAQ638ZQBRXkBT7iRudna2D1hhVinZ8Jhazn4Aew+wi9mg5moy+ClO QkwoL7lgXVstvxv6oMkUgD7UGHEPyMwZ42aFBLTokSXYBcSknaTUt4FfXaG+9EMW FLIUOufjmGdLRQPszN3xJKHQbDj14b3lWYCgOGKWlLs9srLsl9ZFfnDZDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNqdF91isru86/gcpt3aaATFqke4MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvMnAwWDNXS3l1N3pyLUJ5bTNkcG9CTVdxUjdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkCMA0G CSqGSIb3DQEBCwUAA4IBAQAnJ9h2kdI32X2fIPbuLSxb6AaaApJEMGFi3GLeb8fw B0M7fBvSVyJ6Dbix/l4Q9aN1j5/WiKOr4P96LBfLUwx3s2uBrfD5q62ku+I3g/pq MLQgYdJKxtuG5/SdyfgjlRfnaRLl1dUEyxsVsJ9H+433SvgRsBs6JDuh+6e7zCO4 p7VRwv6ieLwdu6z42P9bEH2mtkm3/HL0CrA8X8o9Cb1CWAA33WzLIKgPsFxhUENv 9tJVHJFUpohRMwQkFEOdV8TEe3VJV7QgP80F9NKoN0iTUcPUnmT4rSTIYQXC1uLH er5dH30leRmMZ6XcDr7Q3gMut/gS6k1h4z2ZYV/eiV0f -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:44 2025 by rpki-client