This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/4cfTBRAbwSpVdN0UAD2d4PDbJU0.roa File: 4cfTBRAbwSpVdN0UAD2d4PDbJU0.roa (raw, json) Hash identifier: 1fOhyUM/LNv5GMHyB4RI7Y3nspSamABL6SqWZXgovrs= Subject key identifier: E1:C7:D3:05:10:1B:C1:2A:55:74:DD:14:00:3D:9D:E0:F0:DB:25:4D Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F205DBB5AC1EF03788B4AAB193D58 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/4cfTBRAbwSpVdN0UAD2d4PDbJU0.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 138.249.21.0/24 maxlen: 24 138.249.126.0/24 maxlen: 24 170.168.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:20:5d:bb:5a:c1:ef:03:78:8b:4a:ab:19:3d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1c7d305101bc12a5574dd14003d9de0f0db254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:84:95:a3:f2:1f:d3:80:66:e1:c4:e8:62:43: 08:6c:e3:60:f7:b0:6e:4b:d5:65:9c:b5:95:fa:a5: c6:7b:48:48:8d:fe:b1:b5:a6:2d:14:f8:2a:ee:1a: 6e:53:2a:e2:92:07:28:b7:0c:36:3d:de:76:54:32: 7a:12:60:dd:1b:3c:cd:fe:b5:3e:f0:0a:46:8a:aa: ac:01:4b:a6:71:78:44:0c:f8:89:ca:85:d8:ee:05: e3:83:7a:b1:65:33:7a:3a:44:f5:80:ae:43:cf:01: f7:75:99:c0:6c:79:c0:9d:95:99:48:e9:cb:2c:75: 05:d9:a8:3b:e9:af:e0:7f:79:87:c6:b2:a4:91:f6: 7f:f7:0a:b0:4e:0f:78:7a:b4:f3:b4:14:39:cd:0d: 46:a3:2d:80:8f:1c:95:3e:89:ff:a7:c9:3d:99:ab: 96:e8:e3:d5:fb:17:2c:f8:fc:a0:a3:9f:2b:c3:ca: e3:7b:cf:69:e4:17:13:59:19:0f:3a:2c:b4:27:ed: 03:bc:e0:ab:4b:cb:00:bb:a0:c9:8d:73:ab:88:5e: 8f:b1:18:88:97:f7:e5:4f:79:ec:b2:f1:ce:24:ac: d9:78:19:3c:f2:9a:3c:0c:d0:91:5a:f9:99:1a:cd: 07:d8:be:cf:ce:1c:8b:06:73:8f:09:bc:7e:56:90: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C7:D3:05:10:1B:C1:2A:55:74:DD:14:00:3D:9D:E0:F0:DB:25:4D X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/4cfTBRAbwSpVdN0UAD2d4PDbJU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.21.0/24 138.249.126.0/24 170.168.7.0/24 Signature Algorithm: sha256WithRSAEncryption 37:26:f3:03:31:ae:c1:59:33:d1:40:8a:77:09:85:e0:3a:ce: 6f:0e:c6:34:e4:26:bf:81:44:22:8d:e4:77:d7:de:ad:42:af: 04:32:50:af:42:96:f9:43:25:44:5e:99:ac:4e:91:98:90:75: 93:06:de:9d:39:bb:57:28:9a:49:b7:d4:5f:3e:51:9e:fa:80: 65:d9:58:67:64:25:99:b6:16:9b:bd:52:87:6f:e6:50:3f:37: 00:aa:a5:54:52:df:cc:2a:46:80:42:0d:1d:9b:d6:7a:7b:52: 2b:a8:46:71:df:5f:56:fe:ab:36:75:de:0e:e6:83:b2:61:f4: 0e:c1:51:e0:7b:b6:10:05:bc:69:0b:ec:18:87:1e:de:86:fc: ff:4d:bd:21:a1:71:aa:bd:69:31:34:14:0c:cb:b6:0d:fe:41: b1:72:1e:ae:74:6b:57:42:0f:34:7c:fb:7f:d7:7e:39:d4:22: 02:bb:ad:97:6b:61:78:19:3e:b2:90:48:ec:0a:6b:1a:2c:f7: 7e:b1:26:a3:a5:26:c3:4e:ed:bb:20:86:dc:dd:cd:4d:6a:2a: 47:18:34:72:18:7f:05:df:f0:b9:c1:c1:10:49:79:a8:f8:1a: 0d:c4:53:40:a5:e2:c5:2f:55:0d:39:38:51:7b:78:5a:6d:1e: 5d:a0:0e:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fyBdu1rB7wN4i0qrGT1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWM3ZDMwNTEwMWJjMTJhNTU3NGRkMTQwMDNkOWRlMGYwZGIyNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoSVo/If04Bm4cToYkMIbONg97Bu S9VlnLWV+qXGe0hIjf6xtaYtFPgq7hpuUyrikgcotww2Pd52VDJ6EmDdGzzN/rU+ 8ApGiqqsAUumcXhEDPiJyoXY7gXjg3qxZTN6OkT1gK5DzwH3dZnAbHnAnZWZSOnL LHUF2ag76a/gf3mHxrKkkfZ/9wqwTg94erTztBQ5zQ1Goy2AjxyVPon/p8k9mauW 6OPV+xcs+Pygo58rw8rje89p5BcTWRkPOiy0J+0DvOCrS8sAu6DJjXOriF6PsRiI l/flT3nssvHOJKzZeBk88po8DNCRWvmZGs0H2L7PzhyLBnOPCbx+VpAObQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOHH0wUQG8EqVXTdFAA9neDw2yVNMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNGNmVEJSQWJ3U3BWZE4wVUFEMmQ0UERiSlUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAivkVAwQA ivl+AwQAqqgHMA0GCSqGSIb3DQEBCwUAA4IBAQA3JvMDMa7BWTPRQIp3CYXgOs5v DsY05Ca/gUQijeR3196tQq8EMlCvQpb5QyVEXpmsTpGYkHWTBt6dObtXKJpJt9Rf PlGe+oBl2VhnZCWZthabvVKHb+ZQPzcAqqVUUt/MKkaAQg0dm9Z6e1IrqEZx319W /qs2dd4O5oOyYfQOwVHge7YQBbxpC+wYhx7ehvz/Tb0hoXGqvWkxNBQMy7YN/kGx ch6udGtXQg80fPt/13451CICu62Xa2F4GT6ykEjsCmsaLPd+sSajpSbDTu27IIbc 3c1NaipHGDRyGH8F3/C5wcEQSXmo+BoNxFNApeLFL1UNOThRe3habR5doA4N -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:19 2026 by rpki-client