This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8GStIOyAfd0eDFFaa9dZPAFS6_g.roa File: 8GStIOyAfd0eDFFaa9dZPAFS6_g.roa (raw, json) Hash identifier: bb1MpV2A9Xxd1p1hmfh9Y+aB3bTFKUyQMvV+aHqr/jw= Subject key identifier: F0:64:AD:20:EC:80:7D:DD:1E:0C:51:5A:6B:D7:59:3C:01:52:EB:F8 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AC04BFA16FFCA40308FEF09FB90E4BD06 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8GStIOyAfd0eDFFaa9dZPAFS6_g.roa Signing time: Wed 26 Nov 2025 13:13:15 +0000 ROA not before: Wed 26 Nov 2025 13:13:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215224 IP address blocks: 138.249.10.0/24 maxlen: 24 138.249.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c0:4b:fa:16:ff:ca:40:30:8f:ef:09:fb:90:e4:bd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 26 13:13:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f064ad20ec807ddd1e0c515a6bd7593c0152ebf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bd:e6:b2:26:ae:8c:92:13:c6:8c:63:98:34: 4a:34:44:ee:14:15:b5:6b:4e:c7:8a:13:e4:d6:ed: c0:79:62:8a:06:cb:59:af:6f:cf:00:ad:8a:0b:5c: 29:e0:69:0c:59:39:62:e3:95:54:d1:73:6c:21:40: 2a:81:78:68:15:1e:b3:51:29:50:6e:74:9a:a7:a4: f1:a2:e5:94:a8:f6:6e:8c:90:43:39:6a:43:c2:64: 66:74:51:03:54:97:c4:0b:9d:40:d1:9d:c6:b5:ca: 0c:0d:8c:b0:a5:da:09:02:24:e3:f8:19:09:65:32: 0f:5f:2c:5c:68:24:bb:bc:53:46:da:2f:13:d3:bd: 91:ee:c3:02:97:ef:65:d5:11:68:e2:93:b3:56:e6: b9:d0:3a:a0:03:47:23:12:42:15:12:06:7f:fe:7a: 84:4e:11:74:32:ec:49:f7:0b:f9:67:84:1d:01:fe: 7a:9d:af:96:98:3c:39:e5:62:fc:c9:2f:92:59:d7: 85:ac:75:38:90:23:fd:f1:e8:31:fe:a9:86:29:1a: d8:07:05:5c:78:bc:26:65:95:17:9f:06:e5:df:30: 95:68:76:9c:4f:7a:14:98:59:c4:3e:06:4b:e6:e1: 87:d7:8a:b3:bd:70:94:8b:5a:4b:fe:59:bf:76:b0: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:64:AD:20:EC:80:7D:DD:1E:0C:51:5A:6B:D7:59:3C:01:52:EB:F8 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8GStIOyAfd0eDFFaa9dZPAFS6_g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.10.0/23 Signature Algorithm: sha256WithRSAEncryption 64:69:19:73:60:3f:eb:a4:f6:b6:db:62:d7:70:44:26:6c:a6: 41:ea:41:3e:80:c9:b1:b6:5a:09:ae:51:66:87:53:cd:fe:a1: 28:bc:6c:bb:7b:ef:92:c1:24:e2:33:4f:a5:57:c5:ae:19:ec: c1:30:2b:dc:37:f1:12:39:72:a7:66:51:f0:c1:37:f3:c3:cf: e5:13:da:ca:4d:01:8e:50:fe:67:12:81:bd:e0:a5:78:1a:ee: b3:20:66:2b:e9:53:a0:e8:46:4d:f4:81:65:a0:55:f3:8e:18: 38:5d:c1:d5:bf:1f:f1:26:9a:e9:8b:df:49:18:10:2a:05:cf: 3c:f1:51:1c:39:f5:45:53:d1:7c:dc:59:2c:bb:75:ae:10:cd: 7d:56:41:2e:3a:de:c3:5e:31:94:91:14:fe:b6:7a:5b:de:07: a1:ec:fb:22:f6:55:f4:73:b0:47:f2:47:c6:5c:30:ea:c4:ab: 81:bf:8d:16:30:05:7e:1d:ac:e9:1d:17:cb:41:3b:22:a3:50: ca:05:ec:9b:cb:bc:7a:bb:3a:31:a1:57:52:e6:89:77:a1:96: e9:92:39:d9:27:c2:fd:e1:20:f2:4f:47:8c:31:38:a5:ae:f7: 91:02:92:85:e1:8b:05:19:fa:b5:56:22:46:41:62:82:a3:1f: 52:2e:89:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrAS/oW/8pAMI/vCfuQ5L0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI2MTMxMzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDY0YWQyMGVjODA3ZGRkMWUwYzUxNWE2YmQ3NTkzYzAxNTJlYmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh73msiaujJITxoxjmDRKNETuFBW1 a07HihPk1u3AeWKKBstZr2/PAK2KC1wp4GkMWTli45VU0XNsIUAqgXhoFR6zUSlQ bnSap6TxouWUqPZujJBDOWpDwmRmdFEDVJfEC51A0Z3GtcoMDYywpdoJAiTj+BkJ ZTIPXyxcaCS7vFNG2i8T072R7sMCl+9l1RFo4pOzVua50DqgA0cjEkIVEgZ//nqE ThF0MuxJ9wv5Z4QdAf56na+WmDw55WL8yS+SWdeFrHU4kCP98egx/qmGKRrYBwVc eLwmZZUXnwbl3zCVaHacT3oUmFnEPgZL5uGH14qzvXCUi1pL/lm/drDQZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBkrSDsgH3dHgxRWmvXWTwBUuv4MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvOEdTdElPeUFmZDBlREZGYWE5ZFpQQUZTNl9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBivkKMA0G CSqGSIb3DQEBCwUAA4IBAQBkaRlzYD/rpPa222LXcEQmbKZB6kE+gMmxtloJrlFm h1PN/qEovGy7e++SwSTiM0+lV8WuGezBMCvcN/ESOXKnZlHwwTfzw8/lE9rKTQGO UP5nEoG94KV4Gu6zIGYr6VOg6EZN9IFloFXzjhg4XcHVvx/xJprpi99JGBAqBc88 8VEcOfVFU9F83Fksu3WuEM19VkEuOt7DXjGUkRT+tnpb3geh7Psi9lX0c7BH8kfG XDDqxKuBv40WMAV+HazpHRfLQTsio1DKBeyby7x6uzoxoVdS5ol3oZbpkjnZJ8L9 4SDyT0eMMTilrveRApKF4YsFGfq1ViJGQWKCox9SLomw -----END CERTIFICATE-----Generated at Fri Dec 5 20:06:43 2025 by rpki-client