This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AQ3LeVmPr6TOdpm_tBvFhYsxYr4.roa File: AQ3LeVmPr6TOdpm_tBvFhYsxYr4.roa (raw, json) Hash identifier: Qgz0l8C9vQfvaKesz4agQGLaMT5Hfu1i5FdYfwvcZDE= Subject key identifier: 01:0D:CB:79:59:8F:AF:A4:CE:76:99:BF:B4:1B:C5:85:8B:31:62:BE Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F20F420A36A698E9EA6076E48F61C Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AQ3LeVmPr6TOdpm_tBvFhYsxYr4.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 138.249.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:20:f4:20:a3:6a:69:8e:9e:a6:07:6e:48:f6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=010dcb79598fafa4ce7699bfb41bc5858b3162be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e9:91:0c:4b:95:0e:28:f6:46:e9:52:48:aa: 42:92:ed:85:0f:d0:7a:51:95:19:bc:22:94:fa:e6: 71:fa:53:ef:e5:3d:60:f6:96:1f:78:58:52:60:8d: cb:8d:14:01:61:b9:2d:12:2d:19:f8:6a:dd:4a:bb: 3c:f4:57:bf:3b:e6:21:48:a7:82:fc:a4:18:d9:b9: 13:d1:1c:48:3b:a7:93:a4:09:20:30:1f:01:95:e8: 1c:4a:e0:59:cc:ff:6a:8a:60:80:b3:21:a9:24:93: f9:37:bb:7c:35:d8:cf:18:f6:e6:5e:9e:cb:d5:6a: bd:e2:b5:85:be:c7:eb:19:4b:06:32:15:c7:b0:fa: 39:6e:60:58:0b:1d:22:7b:df:7c:a3:2b:f3:30:69: c4:21:05:4d:db:3e:93:8f:60:53:09:ce:88:e8:38: 09:40:f0:04:2c:bb:da:15:44:ed:87:f6:91:70:2b: 32:00:7f:ae:2b:31:ef:26:0d:ab:ea:9c:cf:4f:ce: 69:00:d2:89:f9:8b:9e:3e:d0:32:82:fc:c8:12:ea: 1e:af:2c:47:68:f0:7a:4c:05:85:6e:2b:74:f4:a7: 3b:4d:82:cf:ac:de:5d:12:9f:14:27:f4:14:62:0e: c4:a7:51:72:a1:a5:9a:f4:8c:75:c3:47:fe:7e:ee: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0D:CB:79:59:8F:AF:A4:CE:76:99:BF:B4:1B:C5:85:8B:31:62:BE X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/AQ3LeVmPr6TOdpm_tBvFhYsxYr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.114.0/24 Signature Algorithm: sha256WithRSAEncryption 84:7b:27:1f:e5:8e:38:34:49:92:d6:a3:18:bf:40:a4:d0:08: 79:63:72:f0:ca:b2:fb:c1:27:bd:88:dd:ae:db:87:32:e6:0b: a4:33:06:7a:39:e3:5b:36:4a:ea:1a:1e:cb:0d:fb:89:4d:09: d2:51:15:73:e2:73:6b:1a:80:08:94:04:16:c7:f5:c7:63:a8: c1:c7:e0:d9:a9:c0:03:11:7c:c3:34:ce:43:ec:21:73:cb:38: 4b:3b:4a:81:f9:c9:80:7f:cb:ca:f1:24:63:50:c3:1d:53:c6: a7:7d:90:79:03:7c:db:ed:99:10:f6:16:a9:08:f2:46:88:f0: 9e:e7:03:b9:08:1a:11:11:9c:76:ad:26:a2:19:70:cd:48:fc: 53:0c:51:bd:83:3f:fe:f0:3c:b2:99:38:de:63:16:cb:ff:b1: 7b:56:74:18:8c:4e:41:f8:f5:8d:22:e4:04:29:f2:57:6b:b9: 1a:8a:78:0f:6c:df:e3:24:67:59:04:38:c1:d0:ca:5f:fc:0e: 6e:40:cd:c4:fa:5e:f1:81:62:a9:e6:b1:f1:6e:88:c5:73:5b: 45:a1:cf:00:12:2a:c1:2f:5c:77:2d:65:d8:05:88:57:01:8b: 31:24:e3:fb:41:34:7f:19:48:9b:da:b1:27:ab:a4:dc:5c:06: b1:1c:8e:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyD0IKNqaY6epgduSPYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTBkY2I3OTU5OGZhZmE0Y2U3Njk5YmZiNDFiYzU4NThiMzE2MmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+mRDEuVDij2RulSSKpCku2FD9B6 UZUZvCKU+uZx+lPv5T1g9pYfeFhSYI3LjRQBYbktEi0Z+GrdSrs89Fe/O+YhSKeC /KQY2bkT0RxIO6eTpAkgMB8BlegcSuBZzP9qimCAsyGpJJP5N7t8NdjPGPbmXp7L 1Wq94rWFvsfrGUsGMhXHsPo5bmBYCx0ie998oyvzMGnEIQVN2z6Tj2BTCc6I6DgJ QPAELLvaFUTth/aRcCsyAH+uKzHvJg2r6pzPT85pANKJ+YuePtAygvzIEuoeryxH aPB6TAWFbit09Kc7TYLPrN5dEp8UJ/QUYg7Ep1FyoaWa9Ix1w0f+fu5zAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAENy3lZj6+kznaZv7QbxYWLMWK+MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvQVEzTGVWbVByNlRPZHBtX3RCdkZoWXN4WXI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivlyMA0G CSqGSIb3DQEBCwUAA4IBAQCEeycf5Y44NEmS1qMYv0Ck0Ah5Y3LwyrL7wSe9iN2u 24cy5gukMwZ6OeNbNkrqGh7LDfuJTQnSURVz4nNrGoAIlAQWx/XHY6jBx+DZqcAD EXzDNM5D7CFzyzhLO0qB+cmAf8vK8SRjUMMdU8anfZB5A3zb7ZkQ9hapCPJGiPCe 5wO5CBoREZx2rSaiGXDNSPxTDFG9gz/+8DyymTjeYxbL/7F7VnQYjE5B+PWNIuQE KfJXa7kaingPbN/jJGdZBDjB0Mpf/A5uQM3E+l7xgWKp5rHxbojFc1tFoc8AEirB L1x3LWXYBYhXAYsxJOP7QTR/GUib2rEnq6TcXAaxHI48 -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:01 2026 by rpki-client