This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hEyZ0019apyX0NQtENfXGVthzxk.roa File: hEyZ0019apyX0NQtENfXGVthzxk.roa (raw, json) Hash identifier: LIejzCJUThN6J8VdM5R09qga+Vke1xOX+NdhguxS4Dg= Subject key identifier: 84:4C:99:D3:4D:7D:6A:9C:97:D0:D4:2D:10:D7:D7:19:5B:61:CF:19 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019C1AAADD7F42E846613A1C0C65E142E8C1 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hEyZ0019apyX0NQtENfXGVthzxk.roa Signing time: Sun 01 Feb 2026 19:25:31 +0000 ROA not before: Sun 01 Feb 2026 19:25:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 103.151.103.0/24 maxlen: 24 103.152.17.0/24 maxlen: 24 103.155.127.0/24 maxlen: 24 138.249.104.0/24 maxlen: 24 138.249.105.0/24 maxlen: 24 138.249.106.0/24 maxlen: 24 138.249.107.0/24 maxlen: 24 138.249.108.0/24 maxlen: 24 138.249.109.0/24 maxlen: 24 138.249.110.0/24 maxlen: 24 138.249.131.0/24 maxlen: 24 138.249.132.0/24 maxlen: 24 138.249.139.0/24 maxlen: 24 138.249.151.0/24 maxlen: 24 138.249.153.0/24 maxlen: 24 138.249.154.0/24 maxlen: 24 138.249.155.0/24 maxlen: 24 138.249.156.0/24 maxlen: 24 138.249.157.0/24 maxlen: 24 138.249.158.0/24 maxlen: 24 138.249.165.0/24 maxlen: 24 138.249.167.0/24 maxlen: 24 138.249.168.0/24 maxlen: 24 138.249.169.0/24 maxlen: 24 138.249.170.0/24 maxlen: 24 138.249.184.0/24 maxlen: 24 138.249.185.0/24 maxlen: 24 138.249.186.0/24 maxlen: 24 138.249.188.0/24 maxlen: 24 138.249.189.0/24 maxlen: 24 138.249.190.0/24 maxlen: 24 138.249.191.0/24 maxlen: 24 138.249.204.0/24 maxlen: 24 138.249.205.0/24 maxlen: 24 138.249.206.0/24 maxlen: 24 138.249.207.0/24 maxlen: 24 138.249.208.0/24 maxlen: 24 138.249.209.0/24 maxlen: 24 138.249.211.0/24 maxlen: 24 138.249.212.0/24 maxlen: 24 138.249.213.0/24 maxlen: 24 138.249.214.0/24 maxlen: 24 138.249.215.0/24 maxlen: 24 138.249.218.0/24 maxlen: 24 138.249.220.0/24 maxlen: 24 138.249.221.0/24 maxlen: 24 138.249.222.0/24 maxlen: 24 138.249.223.0/24 maxlen: 24 138.249.226.0/24 maxlen: 24 138.249.231.0/24 maxlen: 24 138.249.232.0/24 maxlen: 24 138.249.233.0/24 maxlen: 24 138.249.234.0/24 maxlen: 24 138.249.235.0/24 maxlen: 24 138.249.236.0/24 maxlen: 24 138.249.237.0/24 maxlen: 24 138.249.238.0/24 maxlen: 24 138.249.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1a:aa:dd:7f:42:e8:46:61:3a:1c:0c:65:e1:42:e8:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Feb 1 19:25:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=844c99d34d7d6a9c97d0d42d10d7d7195b61cf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:84:ca:61:f4:71:27:b9:89:e6:86:81:95:63: 32:b4:c8:c6:94:fc:61:25:f7:c1:71:06:a8:aa:9f: 4a:ef:94:37:64:3e:71:be:e7:99:04:85:50:c0:d1: 15:ec:de:a6:ff:1e:e2:78:0b:0f:09:48:98:9e:38: fb:1e:c5:d4:c2:b7:2f:df:38:29:a2:5b:54:89:66: 0f:ef:5a:cd:c0:2b:bb:65:57:3d:db:14:fd:95:cb: eb:d2:15:d4:c6:66:d3:cb:3a:35:85:8e:35:79:08: f7:0c:98:ca:f0:c4:8e:70:41:64:ee:3a:12:49:4c: 12:64:bc:47:07:dd:1e:ee:4d:8e:09:9f:24:98:1d: 51:4b:61:66:2b:b9:bc:e6:e5:b0:b5:b9:f0:2c:ed: 6d:2a:23:6b:53:40:82:7b:1b:83:be:1d:8f:67:eb: 25:f7:59:60:c2:8c:20:b2:b9:e2:b0:61:3b:3e:cd: 1d:9e:bc:c2:cd:60:89:7a:92:c3:6b:96:2d:c8:fe: 6a:7b:a5:bf:0a:b5:12:85:e6:65:a9:1a:c9:0d:c0: be:05:dc:73:a4:47:23:a1:94:bb:0d:ea:7d:dd:66: 99:09:42:be:95:27:16:9e:6e:9d:3e:5f:1c:41:0a: 72:d9:9d:4d:a0:df:ed:6d:8d:5e:a6:e7:0f:47:ef: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4C:99:D3:4D:7D:6A:9C:97:D0:D4:2D:10:D7:D7:19:5B:61:CF:19 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/hEyZ0019apyX0NQtENfXGVthzxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.103.0/24 103.152.17.0/24 103.155.127.0/24 138.249.104.0-138.249.110.255 138.249.131.0-138.249.132.255 138.249.139.0/24 138.249.151.0/24 138.249.153.0-138.249.158.255 138.249.165.0/24 138.249.167.0-138.249.170.255 138.249.184.0-138.249.186.255 138.249.188.0/22 138.249.204.0-138.249.209.255 138.249.211.0-138.249.215.255 138.249.218.0/24 138.249.220.0/22 138.249.226.0/24 138.249.231.0-138.249.239.255 Signature Algorithm: sha256WithRSAEncryption 4f:93:61:8e:ed:32:c0:c1:76:14:98:e4:a4:d6:40:4f:a9:0e: 48:dd:0c:72:e1:3c:28:c0:ac:57:41:9b:00:f2:f2:45:52:60: e0:13:63:18:c3:1a:f9:d5:17:e3:7e:e1:b0:ac:bf:8c:99:26: 8a:bf:90:dd:32:57:e0:99:bc:f9:bb:df:ea:be:97:1f:12:6e: 5d:96:8a:4e:01:2d:74:79:1d:3b:fc:0a:0e:38:89:65:ae:54: b7:28:1e:21:f5:02:f5:02:07:c2:cc:20:1c:ba:cd:fb:03:7c: 76:e7:97:2d:09:8d:be:41:7e:2d:96:5e:ce:c5:5d:ca:8e:45: 8f:e2:d8:bd:5c:3f:94:df:fb:0a:fa:d3:69:9e:35:58:9f:93: ae:36:8f:9a:69:2b:98:74:97:44:8d:b0:b1:79:0d:c7:19:64: c2:78:6f:89:39:32:42:04:b9:af:b7:f3:6d:cd:59:17:30:51: 70:1a:94:68:54:e4:97:e9:d1:bb:42:e9:06:95:be:43:39:8e: 17:a4:be:3d:ac:98:fb:64:64:48:e0:cb:75:da:bf:29:80:c2: 45:63:0a:ec:17:9a:dc:da:ff:57:24:a7:11:ae:62:89:2d:03: df:cd:e7:d9:12:c8:8d:c5:9e:d2:85:52:ab:51:05:9b:52:bc: 7c:28:4a:d3 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgISAZwaqt1/QuhGYTocDGXhQujBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMjAxMTkyNTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDRjOTlkMzRkN2Q2YTljOTdkMGQ0MmQxMGQ3ZDcxOTViNjFjZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ITKYfRxJ7mJ5oaBlWMytMjGlPxh JffBcQaoqp9K75Q3ZD5xvueZBIVQwNEV7N6m/x7ieAsPCUiYnjj7HsXUwrcv3zgp oltUiWYP71rNwCu7ZVc92xT9lcvr0hXUxmbTyzo1hY41eQj3DJjK8MSOcEFk7joS SUwSZLxHB90e7k2OCZ8kmB1RS2FmK7m85uWwtbnwLO1tKiNrU0CCexuDvh2PZ+sl 91lgwowgsrnisGE7Ps0dnrzCzWCJepLDa5YtyP5qe6W/CrUSheZlqRrJDcC+Bdxz pEcjoZS7Dep93WaZCUK+lScWnm6dPl8cQQpy2Z1NoN/tbY1epucPR+/gzwIDAQAB o4ICtDCCArAwHQYDVR0OBBYEFIRMmdNNfWqcl9DULRDX1xlbYc8ZMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvaEV5WjAwMTlhcHlYME5RdEVOZlhHVnRoenhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBABn l2cDBABnmBEDBABnm38wDAMEA4r5aAMEAIr5bjAMAwQAivmDAwQAivmEAwQAivmL AwQAivmXMAwDBACK+ZkDBACK+Z4DBACK+aUwDAMEAIr5pwMEAIr5qjAMAwQDivm4 AwQAivm6AwQCivm8MAwDBAKK+cwDBAGK+dAwDAMEAIr50wMEA4r50AMEAIr52gME Aor53AMEAIr54jAMAwQAivnnAwQEivngMA0GCSqGSIb3DQEBCwUAA4IBAQBPk2GO 7TLAwXYUmOSk1kBPqQ5I3Qxy4TwowKxXQZsA8vJFUmDgE2MYwxr51RfjfuGwrL+M mSaKv5DdMlfgmbz5u9/qvpcfEm5dlopOAS10eR07/AoOOIllrlS3KB4h9QL1AgfC zCAcus37A3x255ctCY2+QX4tll7OxV3KjkWP4ti9XD+U3/sK+tNpnjVYn5OuNo+a aSuYdJdEjbCxeQ3HGWTCeG+JOTJCBLmvt/NtzVkXMFFwGpRoVOSX6dG7QukGlb5D OY4XpL49rJj7ZGRI4Mt12r8pgMJFYwrsF5rc2v9XJKcRrmKJLQPfzefZEsiNxZ7S hVKrUQWbUrx8KErT -----END CERTIFICATE-----Generated at Wed Feb 4 23:33:54 2026 by rpki-client