This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/K3F6SgR2DKsffTf8mmdQKAqKWZ4.roa File: K3F6SgR2DKsffTf8mmdQKAqKWZ4.roa (raw, json) Hash identifier: tWETA1c79DRGb1N0+nPnvjWvWPxPOZmcpCJ+00xe5Qw= Subject key identifier: 2B:71:7A:4A:04:76:0C:AB:1F:7D:37:FC:9A:67:50:28:0A:8A:59:9E Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019BB76C6B63F28443F3457D143B8B36B4FC Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/K3F6SgR2DKsffTf8mmdQKAqKWZ4.roa Signing time: Tue 13 Jan 2026 12:54:54 +0000 ROA not before: Tue 13 Jan 2026 12:54:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 138.249.133.0/24 maxlen: 24 170.168.61.0/24 maxlen: 24 170.168.62.0/24 maxlen: 24 170.168.89.0/24 maxlen: 24 170.168.90.0/24 maxlen: 24 170.168.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b7:6c:6b:63:f2:84:43:f3:45:7d:14:3b:8b:36:b4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 13 12:54:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2b717a4a04760cab1f7d37fc9a6750280a8a599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:53:53:69:7d:41:8a:bb:09:a7:4f:43:dc: 9c:19:4b:bd:0c:32:ca:2e:57:9b:98:f6:27:21:6c: c5:c2:b8:e8:97:2d:1d:3d:b6:50:4b:d7:60:62:74: 76:00:b5:a4:2a:bb:52:42:69:d4:33:92:d2:88:71: 2c:f8:57:c2:f6:fd:2a:eb:19:ad:e7:e5:6f:ed:5e: 04:9a:e6:52:66:9d:f9:88:31:f7:1d:e5:41:2b:ef: 32:01:6d:a9:20:0e:b1:c9:f8:b0:d2:00:b2:10:ef: 59:47:9a:98:3b:01:c7:a4:94:5d:b5:0e:9f:3d:a3: 06:e6:60:ff:57:4b:81:3a:97:f7:1e:ad:c2:91:92: 6e:4a:e6:5c:bc:01:40:4a:bd:a7:84:6d:70:2f:fb: 0c:0c:b7:19:37:ab:e0:6d:7a:a6:d3:de:fb:5e:1e: cd:4b:38:74:ab:e4:61:dd:4e:2d:47:2b:0d:77:90: 58:70:7e:88:91:1c:69:f5:a6:fc:88:03:b7:e0:c4: 47:6b:88:9d:de:a5:29:35:26:92:45:e7:1b:bc:dd: ec:0d:18:17:ba:16:90:0d:97:a6:22:90:df:b0:e9: 71:77:64:e5:66:78:56:e5:46:fe:e4:f2:04:ab:ea: 36:0b:19:ca:61:ef:6e:d0:82:11:a2:23:b3:61:b7: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:71:7A:4A:04:76:0C:AB:1F:7D:37:FC:9A:67:50:28:0A:8A:59:9E X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/K3F6SgR2DKsffTf8mmdQKAqKWZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.133.0/24 170.168.61.0-170.168.62.255 170.168.89.0-170.168.90.255 170.168.103.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:da:5c:5b:2f:c0:a1:da:ce:c3:19:fb:45:d5:55:7e:c5:8a: c2:28:fc:73:a3:92:6f:d6:8a:d4:93:9a:60:9d:ab:8c:a7:4f: f2:73:7d:fa:df:df:b3:0a:fa:46:6d:4a:c3:4b:2c:37:25:0c: d7:65:7d:da:35:09:a3:f9:56:90:0c:ae:e9:08:10:b0:95:86: ff:8a:a1:04:36:5e:58:8d:0e:f7:0c:45:49:8e:f0:92:1c:40: d8:27:e7:b4:0a:31:a4:1f:27:d4:b3:c6:9d:04:66:37:ce:7c: c1:61:da:24:bb:61:9c:22:b6:4d:82:8d:e0:c6:b3:a5:b1:7b: a7:00:10:c6:cb:33:a1:75:33:c0:9a:fe:1e:ca:7a:56:d2:dc: d3:b2:8a:fc:84:35:78:23:3c:6f:d0:46:de:29:2b:14:76:c0: 87:a2:fd:f6:2e:68:8b:dc:16:92:81:44:bd:de:d2:2e:23:36: dd:9a:25:ec:03:46:c8:0d:fd:ce:6c:54:13:d6:23:b8:12:4e: 8f:a2:c8:d6:4a:d2:60:c9:b4:64:36:38:84:a8:06:16:b5:35: 58:ee:71:d4:86:8e:78:52:70:bb:27:3f:3b:e1:b2:b1:ab:07: fa:a4:37:41:4d:c7:3a:3c:19:03:55:b8:bb:94:fd:ae:b8:98: 8e:be:9f:ef -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZu3bGtj8oRD80V9FDuLNrT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTEzMTI1NDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjcxN2E0YTA0NzYwY2FiMWY3ZDM3ZmM5YTY3NTAyODBhOGE1OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvRTU2l9QYq7CadPQ9ycGUu9DDLK LlebmPYnIWzFwrjoly0dPbZQS9dgYnR2ALWkKrtSQmnUM5LSiHEs+FfC9v0q6xmt 5+Vv7V4EmuZSZp35iDH3HeVBK+8yAW2pIA6xyfiw0gCyEO9ZR5qYOwHHpJRdtQ6f PaMG5mD/V0uBOpf3Hq3CkZJuSuZcvAFASr2nhG1wL/sMDLcZN6vgbXqm0977Xh7N Szh0q+Rh3U4tRysNd5BYcH6IkRxp9ab8iAO34MRHa4id3qUpNSaSRecbvN3sDRgX uhaQDZemIpDfsOlxd2TlZnhW5Ub+5PIEq+o2CxnKYe9u0IIRoiOzYbfqIwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFCtxekoEdgyrH303/JpnUCgKilmeMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvSzNGNlNnUjJES3NmZlRmOG1tZFFLQXFLV1o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAivmFMAwD BACqqD0DBACqqD4wDAMEAKqoWQMEAKqoWgMEAKqoZzANBgkqhkiG9w0BAQsFAAOC AQEAL9pcWy/AodrOwxn7RdVVfsWKwij8c6OSb9aK1JOaYJ2rjKdP8nN9+t/fswr6 Rm1Kw0ssNyUM12V92jUJo/lWkAyu6QgQsJWG/4qhBDZeWI0O9wxFSY7wkhxA2Cfn tAoxpB8n1LPGnQRmN858wWHaJLthnCK2TYKN4MazpbF7pwAQxsszoXUzwJr+Hsp6 VtLc07KK/IQ1eCM8b9BG3ikrFHbAh6L99i5oi9wWkoFEvd7SLiM23Zol7ANGyA39 zmxUE9YjuBJOj6LI1krSYMm0ZDY4hKgGFrU1WO5x1IaOeFJwuyc/O+GysasH+qQ3 QU3HOjwZA1W4u5T9rriYjr6f7w== -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:18 2026 by rpki-client