This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9-IC9dBOeeDZCivehu5cN4EjGv8.roa
File: 9-IC9dBOeeDZCivehu5cN4EjGv8.roa (raw, json)
Hash identifier: Kby9dIZQ0GImMgg+obbrltw28tTrszttkGIYEbNds+8=
Subject key identifier: F7:E2:02:F5:D0:4E:79:E0:D9:0A:2B:DE:86:EE:5C:37:81:23:1A:FF
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019C1AAADBB188435CCCC71E23A3622F793B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9-IC9dBOeeDZCivehu5cN4EjGv8.roa
Signing time: Sun 01 Feb 2026 19:25:30 +0000
ROA not before: Sun 01 Feb 2026 19:25:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 138.249.129.0/24 maxlen: 24
138.249.130.0/24 maxlen: 24
138.249.160.0/24 maxlen: 24
138.249.162.0/24 maxlen: 24
138.249.163.0/24 maxlen: 24
138.249.166.0/24 maxlen: 24
138.249.171.0/24 maxlen: 24
138.249.187.0/24 maxlen: 24
138.249.203.0/24 maxlen: 24
138.249.217.0/24 maxlen: 24
138.249.219.0/24 maxlen: 24
138.249.224.0/24 maxlen: 24
138.249.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 18:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1a:aa:db:b1:88:43:5c:cc:c7:1e:23:a3:62:2f:79:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Feb 1 19:25:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7e202f5d04e79e0d90a2bde86ee5c3781231aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:75:63:4b:d7:5b:e5:ad:2d:df:4b:25:83:
17:91:2e:7b:7b:50:1e:b3:7e:ab:87:2a:26:d3:d1:
be:3f:ba:86:bd:04:6d:6e:f1:ab:12:86:19:26:51:
c2:89:85:8d:a6:8c:b5:23:70:6a:50:ca:b6:ff:d3:
f0:e5:63:cd:67:de:3a:3d:c8:d4:1d:2f:2a:a0:da:
cd:11:fb:cd:a4:b6:79:b3:2f:2f:d1:5e:e2:a7:7c:
6b:dd:5b:d9:68:8a:90:9b:33:0b:d5:a7:8b:0d:8f:
e6:25:04:f4:e0:96:38:89:a4:6a:e7:a8:26:0d:d5:
93:fa:79:f0:ad:cd:59:ab:a5:30:8c:96:f9:cf:22:
02:5f:25:7f:0f:20:f3:08:32:9e:1a:7d:15:46:63:
e0:01:32:26:c2:91:34:7d:46:9b:47:96:bb:1f:19:
27:91:81:5d:a7:e3:93:aa:70:99:b7:bd:70:61:62:
43:2d:ee:e6:dd:42:a4:5b:fb:27:b9:3d:7e:a3:74:
fc:66:51:9a:0d:b1:26:48:9e:af:2d:64:8a:2b:1a:
85:f2:96:8f:ed:84:0e:3c:ef:bc:3a:74:7d:a9:50:
99:d5:20:9d:ca:11:27:64:94:b8:ea:84:60:d8:86:
ff:58:fa:3f:bd:b7:1b:9b:43:59:17:91:cc:4a:f9:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:02:F5:D0:4E:79:E0:D9:0A:2B:DE:86:EE:5C:37:81:23:1A:FF
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/9-IC9dBOeeDZCivehu5cN4EjGv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.129.0-138.249.130.255
138.249.160.0/24
138.249.162.0/23
138.249.166.0/24
138.249.171.0/24
138.249.187.0/24
138.249.203.0/24
138.249.217.0/24
138.249.219.0/24
138.249.224.0/24
138.249.227.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a6:4e:f5:70:70:53:ee:a9:20:36:25:3f:f8:94:ad:eb:8b:
c3:4a:a0:df:7a:97:b2:91:44:8d:46:7d:87:53:b9:a5:81:86:
0f:67:b0:a0:fa:dd:4a:a8:01:cd:1f:e3:22:c5:cd:0b:63:bf:
58:32:2d:b4:9d:2a:75:c6:f1:0f:74:5c:2a:24:97:0a:2b:96:
77:cf:d7:2c:c2:5d:9e:c3:fd:2c:75:a2:b9:0c:9b:55:c9:e9:
53:29:a7:2e:2b:31:45:ea:7a:5e:a6:74:2f:f5:4c:7e:07:f5:
7d:f9:dd:2c:db:ac:6a:de:f8:bd:e4:60:70:e5:d9:a6:34:53:
ed:11:52:30:64:c9:e8:17:e1:13:51:a6:de:80:07:1b:12:bf:
fa:f3:99:90:72:bc:9e:b0:6b:1f:a6:36:7c:ab:cf:2d:1c:79:
6a:4d:69:27:25:20:76:f3:18:47:c8:b6:a8:1b:c4:1e:ce:e3:
41:b9:5d:27:1e:77:56:6c:66:a7:9b:73:15:a5:f7:6a:dc:73:
b0:9e:11:89:1e:60:47:47:21:ff:c9:de:9b:87:aa:6e:57:ca:
f4:8a:e6:dd:84:68:94:92:85:bc:f1:a9:4d:05:63:9d:59:17:
92:05:b4:e8:ad:5f:68:ac:8f:12:2f:b5:a6:57:eb:d5:3b:22:
62:27:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 23:34:23 2026 by rpki-client