This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/PeZp91VLVSgaN-RfhhUNx6Xrhh0.roa File: PeZp91VLVSgaN-RfhhUNx6Xrhh0.roa (raw, json) Hash identifier: zJnS3cSseTbV2oatwEdQYXR6YGP3oR3l9jgk34Qbqhk= Subject key identifier: 3D:E6:69:F7:55:4B:55:28:1A:37:E4:5F:86:15:0D:C7:A5:EB:86:1D Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F1FC2ECDBF7B042F6251A58689C6B Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/PeZp91VLVSgaN-RfhhUNx6Xrhh0.roa Signing time: Thu 01 Jan 2026 12:18:52 +0000 ROA not before: Thu 01 Jan 2026 12:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 138.249.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:1f:c2:ec:db:f7:b0:42:f6:25:1a:58:68:9c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3de669f7554b55281a37e45f86150dc7a5eb861d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:43:ce:2d:01:73:48:c9:d7:96:50:6e:36:de: bf:d9:76:39:5e:36:45:a6:66:70:60:5f:b4:63:9d: b5:17:97:b6:f0:20:b0:23:8f:13:1a:e9:1b:1e:c4: db:83:77:ff:8e:2d:78:4d:cf:56:af:1e:d5:b2:4f: 80:65:9b:2e:6c:e0:a8:fe:0e:6d:9f:93:37:62:c8: 01:52:0a:40:1a:d2:11:7c:e4:a1:c1:ff:d1:97:61: aa:bf:6f:38:c7:31:be:f0:f6:dc:a7:5b:22:0c:e2: ba:6e:ac:3e:41:e6:46:f9:4e:6b:f5:8d:bc:59:70: 36:e6:91:a6:98:50:62:79:d6:e6:77:9a:fe:ac:41: 48:42:9b:f2:51:ff:90:ae:fd:fc:4c:82:50:20:ec: 58:cf:fc:2a:b8:44:15:b1:a8:d0:27:f9:eb:d5:e6: f5:c4:86:42:f8:d0:b0:6c:14:3f:3b:99:aa:8d:ac: 26:84:30:52:d0:2b:a6:3d:a8:44:76:80:7d:8e:b7: 56:b0:ef:b6:6c:f5:b6:f8:49:80:22:03:48:1e:4d: 1b:af:11:78:29:1e:62:b1:18:79:68:36:1c:fa:a4: cc:a9:2f:e8:d4:c8:7d:8b:2d:4e:7f:9b:10:86:14: 89:80:0c:26:76:f9:18:7c:1d:d4:61:d1:34:cc:04: d0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E6:69:F7:55:4B:55:28:1A:37:E4:5F:86:15:0D:C7:A5:EB:86:1D X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/PeZp91VLVSgaN-RfhhUNx6Xrhh0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.102.0/24 Signature Algorithm: sha256WithRSAEncryption 18:01:c4:bf:31:8b:ee:7f:bf:a5:19:04:3f:18:93:df:57:35: 3f:1d:68:1b:a6:8f:08:13:9e:af:3e:ff:bc:f5:eb:62:59:08: f1:2e:09:9c:1f:0b:d6:4c:7d:1e:a7:2a:8c:72:af:93:f2:c2: d6:f8:74:d3:42:07:ad:ff:c5:bd:d7:63:c5:a9:54:49:24:67: 47:4a:3f:8f:da:bc:29:0e:27:96:ef:d7:12:b2:3a:0c:74:f6: 85:e0:27:b5:b6:f4:7a:2a:c7:40:3d:1c:c7:0f:6d:81:1d:f7: bc:40:02:42:d5:ae:89:c3:d6:91:52:41:34:79:e3:7b:6b:4a: ea:eb:38:86:86:7e:a8:cf:73:92:15:48:cd:c1:63:28:b5:66: 40:b5:0e:e5:a8:7a:ff:a8:31:fd:8f:47:b5:48:fa:3c:a2:47: 21:3f:fd:13:32:50:84:1c:8e:0a:40:86:54:96:f9:31:20:35: 05:c8:87:e5:d1:27:47:8b:90:e7:2a:f0:aa:d7:0b:56:7c:74: 6f:57:5d:43:d2:ea:a0:c5:6d:fc:e8:b9:79:0c:27:4a:7a:2e: d3:cf:aa:1a:01:7a:d7:a2:c0:50:27:4a:af:76:7d:ef:94:e5: 3e:3d:f3:c1:29:b5:4f:2d:8b:86:3c:32:d2:48:29:00:51:4a: f0:8f:bc:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fx/C7Nv3sEL2JRpYaJxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGU2NjlmNzU1NGI1NTI4MWEzN2U0NWY4NjE1MGRjN2E1ZWI4NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEPOLQFzSMnXllBuNt6/2XY5XjZF pmZwYF+0Y521F5e28CCwI48TGukbHsTbg3f/ji14Tc9Wrx7Vsk+AZZsubOCo/g5t n5M3YsgBUgpAGtIRfOShwf/Rl2Gqv284xzG+8Pbcp1siDOK6bqw+QeZG+U5r9Y28 WXA25pGmmFBiedbmd5r+rEFIQpvyUf+Qrv38TIJQIOxYz/wquEQVsajQJ/nr1eb1 xIZC+NCwbBQ/O5mqjawmhDBS0CumPahEdoB9jrdWsO+2bPW2+EmAIgNIHk0brxF4 KR5isRh5aDYc+qTMqS/o1Mh9iy1Of5sQhhSJgAwmdvkYfB3UYdE0zATQsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3mafdVS1UoGjfkX4YVDcel64YdMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvUGVacDkxVkxWU2dhTi1SZmhoVU54NlhyaGgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivlmMA0G CSqGSIb3DQEBCwUAA4IBAQAYAcS/MYvuf7+lGQQ/GJPfVzU/HWgbpo8IE56vPv+8 9etiWQjxLgmcHwvWTH0epyqMcq+T8sLW+HTTQget/8W912PFqVRJJGdHSj+P2rwp DieW79cSsjoMdPaF4Ce1tvR6KsdAPRzHD22BHfe8QAJC1a6Jw9aRUkE0eeN7a0rq 6ziGhn6oz3OSFUjNwWMotWZAtQ7lqHr/qDH9j0e1SPo8okchP/0TMlCEHI4KQIZU lvkxIDUFyIfl0SdHi5DnKvCq1wtWfHRvV11D0uqgxW386Ll5DCdKei7Tz6oaAXrX osBQJ0qvdn3vlOU+PfPBKbVPLYuGPDLSSCkAUUrwj7yW -----END CERTIFICATE-----Generated at Wed Jan 21 11:13:02 2026 by rpki-client