This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Po2srGlpnYrSYLjP_aJjMkIir7Q.roa File: Po2srGlpnYrSYLjP_aJjMkIir7Q.roa (raw, json) Hash identifier: mHy8WrxIBrXcOHqiKFUTUPNt8MzahcY00BX1L7VhxYw= Subject key identifier: 3E:8D:AC:AC:69:69:9D:8A:D2:60:B8:CF:FD:A2:63:32:42:22:AF:B4 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B0948461D9D642570CFEBBFCA515CB5F3 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Po2srGlpnYrSYLjP_aJjMkIir7Q.roa Signing time: Wed 10 Dec 2025 17:21:30 +0000 ROA not before: Wed 10 Dec 2025 17:21:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204610 IP address blocks: 138.249.14.0/24 maxlen: 24 138.249.15.0/24 maxlen: 24 138.249.22.0/24 maxlen: 24 138.249.23.0/24 maxlen: 24 138.249.104.0/24 maxlen: 24 138.249.105.0/24 maxlen: 24 138.249.106.0/24 maxlen: 24 138.249.107.0/24 maxlen: 24 138.249.108.0/24 maxlen: 24 138.249.109.0/24 maxlen: 24 138.249.110.0/24 maxlen: 24 138.249.111.0/24 maxlen: 24 170.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:48:46:1d:9d:64:25:70:cf:eb:bf:ca:51:5c:b5:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 10 17:21:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3e8dacac69699d8ad260b8cffda263324222afb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d2:72:cd:18:ea:9e:bd:88:fa:7c:2b:7d:72: 4b:37:28:5b:a5:47:d8:d2:c9:d1:48:85:56:8e:d5: f5:75:f2:9e:a3:65:ef:7f:79:f0:ef:c8:fe:52:f8: 96:6f:7f:a5:5e:25:20:f2:05:d9:bd:4e:b9:60:69: 8f:81:48:d5:7a:d1:d2:29:9b:84:b3:b6:a2:20:f7: de:76:1c:66:e1:fa:b8:05:f6:76:73:e0:43:6d:fc: ee:a0:39:71:80:34:0e:be:2a:4d:d4:2c:6e:7c:ed: a2:49:3e:08:4d:5a:8f:29:41:0d:ae:9a:76:be:df: fa:b0:1a:af:9c:c1:e2:23:43:a6:67:65:5c:f1:84: 94:62:5f:74:fb:22:2a:cf:8c:50:95:de:f4:76:bb: bc:32:27:e0:02:ae:36:dd:f5:c6:48:ea:b9:42:e8: 02:30:25:98:7f:d6:4f:1f:a2:4e:b6:9b:b3:b5:8d: 84:ed:ec:17:e0:54:2c:c7:b6:49:92:1b:38:1c:ba: 1a:54:0a:20:ad:84:a3:b5:25:ee:5b:66:f9:14:3f: cb:d4:64:09:3e:5c:e4:d8:aa:28:03:3b:d1:58:34: 48:be:25:75:0d:a9:39:67:d2:fd:0f:fd:87:08:9c: 6a:0b:fd:11:c6:15:b1:95:f6:63:29:18:d1:94:60: 7a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:AC:AC:69:69:9D:8A:D2:60:B8:CF:FD:A2:63:32:42:22:AF:B4 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Po2srGlpnYrSYLjP_aJjMkIir7Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.14.0/23 138.249.22.0/23 138.249.104.0/21 170.168.88.0/24 Signature Algorithm: sha256WithRSAEncryption 97:f6:d7:7e:db:3f:b5:4b:a4:f6:30:33:0f:a3:19:f9:29:88: a3:4e:b6:bf:ca:1c:c1:fe:b6:d0:43:b8:9d:d5:13:f9:4a:9a: 03:f6:b5:a9:11:13:2e:77:91:6d:a2:48:2b:c3:e5:8b:c7:a9: 51:b1:40:85:8b:13:27:c8:88:36:95:45:c4:d7:80:73:b5:29: a6:65:22:a3:5e:02:27:43:ad:76:80:51:60:4b:1b:4b:eb:1c: a5:de:53:7c:fc:ad:30:4d:2e:23:49:e9:96:e4:93:22:19:b8: 43:a0:44:98:ee:86:90:b7:5c:d1:85:08:91:f8:f8:c1:29:c3: 7c:7c:8e:36:38:23:9f:ba:a0:cb:55:34:f4:10:c9:28:46:5f: 0b:85:81:85:de:ce:4e:fc:9a:88:46:c4:7b:4d:9a:a8:9c:13: c0:d8:c3:f5:73:7f:dc:12:64:6b:98:e9:f8:fb:fc:67:e4:db: 18:21:43:a0:bf:69:d7:ed:39:24:d3:fe:59:2d:91:4a:c2:ca: 14:c1:80:9e:d0:d2:cf:8b:ee:4a:0b:b7:1a:cf:12:d8:02:c2: f0:33:85:57:40:2b:6b:83:c9:d9:d5:26:a9:ce:ac:49:57:62: 3c:af:ac:99:73:19:c7:c1:2f:19:ca:eb:b8:6e:84:f4:e4:ae: d1:8d:d5:08 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsJSEYdnWQlcM/rv8pRXLXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjEwMTcyMTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZThkYWNhYzY5Njk5ZDhhZDI2MGI4Y2ZmZGEyNjMzMjQyMjJhZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9JyzRjqnr2I+nwrfXJLNyhbpUfY 0snRSIVWjtX1dfKeo2Xvf3nw78j+UviWb3+lXiUg8gXZvU65YGmPgUjVetHSKZuE s7aiIPfedhxm4fq4BfZ2c+BDbfzuoDlxgDQOvipN1CxufO2iST4ITVqPKUENrpp2 vt/6sBqvnMHiI0OmZ2Vc8YSUYl90+yIqz4xQld70dru8MifgAq423fXGSOq5QugC MCWYf9ZPH6JOtpuztY2E7ewX4FQsx7ZJkhs4HLoaVAogrYSjtSXuW2b5FD/L1GQJ Plzk2KooAzvRWDRIviV1Dak5Z9L9D/2HCJxqC/0RxhWxlfZjKRjRlGB6uwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFD6NrKxpaZ2K0mC4z/2iYzJCIq+0MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvUG8yc3JHbHBuWXJTWUxqUF9hSmpNa0lpcjdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBivkOAwQB ivkWAwQDivloAwQAqqhYMA0GCSqGSIb3DQEBCwUAA4IBAQCX9td+2z+1S6T2MDMP oxn5KYijTra/yhzB/rbQQ7id1RP5SpoD9rWpERMud5Ftokgrw+WLx6lRsUCFixMn yIg2lUXE14BztSmmZSKjXgInQ612gFFgSxtL6xyl3lN8/K0wTS4jSemW5JMiGbhD oESY7oaQt1zRhQiR+PjBKcN8fI42OCOfuqDLVTT0EMkoRl8LhYGF3s5O/JqIRsR7 TZqonBPA2MP1c3/cEmRrmOn4+/xn5NsYIUOgv2nX7Tkk0/5ZLZFKwsoUwYCe0NLP i+5KC7cazxLYAsLwM4VXQCtrg8nZ1SapzqxJV2I8r6yZcxnHwS8Zyuu4boT05K7R jdUI -----END CERTIFICATE-----Generated at Mon Dec 15 03:33:00 2025 by rpki-client