This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/sCAK9QaMJNvpHyjGlB6mMOndBNc.roa File: sCAK9QaMJNvpHyjGlB6mMOndBNc.roa (raw, json) Hash identifier: GXuhh9x8GJqdCU82/QsBT6co70i52hl/+IWLhZTLpQY= Subject key identifier: B0:20:0A:F5:06:8C:24:DB:E9:1F:28:C6:94:1E:A6:30:E9:DD:04:D7 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019C012B2478419B772317FA523F4EE6AE6B Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/sCAK9QaMJNvpHyjGlB6mMOndBNc.roa Signing time: Tue 27 Jan 2026 20:35:30 +0000 ROA not before: Tue 27 Jan 2026 20:35:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204610 IP address blocks: 138.249.136.0/24 maxlen: 24 138.249.138.0/24 maxlen: 24 138.249.140.0/24 maxlen: 26 138.249.141.0/24 maxlen: 26 138.249.144.0/24 maxlen: 24 138.249.145.0/24 maxlen: 24 138.249.146.0/24 maxlen: 24 138.249.147.0/24 maxlen: 24 138.249.149.0/24 maxlen: 24 138.249.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:2b:24:78:41:9b:77:23:17:fa:52:3f:4e:e6:ae:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 27 20:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0200af5068c24dbe91f28c6941ea630e9dd04d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:f3:49:aa:20:e1:78:3b:93:f9:6f:7c:7b: 6d:16:f4:81:b4:25:54:e4:7c:54:41:98:0c:e7:e9: fd:13:63:d2:57:8e:df:e3:38:f3:5d:5d:38:19:60: 22:a1:b1:18:68:1b:e2:26:f0:ab:02:cf:9b:ea:79: c3:80:a8:4e:47:e4:0a:dc:72:31:f7:d6:e7:a4:02: 16:ed:ff:0e:0f:d8:3f:3b:18:3e:5b:4b:02:7f:34: 8e:a7:9e:d8:00:90:6d:de:ec:d6:a1:d3:df:3a:52: d8:fa:75:aa:7f:dd:cc:64:73:28:a4:9c:c7:6f:f3: be:4f:28:31:da:e8:d7:6c:48:27:fa:fc:b2:af:3f: eb:0b:37:fb:b8:a7:0d:a4:0d:ca:5c:d5:ef:f7:f7: 2f:25:c8:37:78:6f:c3:78:10:f8:e4:5d:72:19:fe: b4:6e:e7:89:fc:f7:5a:84:46:7a:a9:e2:08:fd:94: 1f:8a:6d:15:c7:e7:ee:67:90:e6:d8:eb:c5:af:27: 3f:1a:17:ce:2a:3b:12:24:0c:1c:88:e5:e6:91:2a: 3e:d7:c4:74:8e:35:97:d9:d5:4f:f2:b1:6c:05:43: 7f:82:52:48:2f:9c:95:24:a2:a5:49:25:7f:1e:ab: 33:59:c9:83:4b:19:ca:8a:06:bb:c7:4f:04:33:5b: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:0A:F5:06:8C:24:DB:E9:1F:28:C6:94:1E:A6:30:E9:DD:04:D7 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/sCAK9QaMJNvpHyjGlB6mMOndBNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.136.0/24 138.249.138.0/24 138.249.140.0/23 138.249.144.0/22 138.249.149.0-138.249.150.255 Signature Algorithm: sha256WithRSAEncryption 04:9f:49:bf:a2:87:54:34:14:74:bc:ae:d8:1f:41:69:a4:d3: e0:e0:de:1e:9d:93:a4:c3:7b:51:5a:20:4a:59:15:4a:50:e6: 49:d9:bc:b5:66:f0:1b:cb:99:b3:a5:74:7a:9c:06:f3:b7:0c: b4:b6:b5:1e:4f:37:26:0f:2b:76:86:89:7f:45:f6:c0:0d:f2: 0e:e8:76:4c:44:b1:dc:ea:53:d3:3c:80:52:43:83:6d:3e:c9: f7:4b:65:09:a6:24:0c:ff:f0:d9:42:67:e6:b3:67:e7:b3:f0: 5f:1c:ac:1a:b2:27:88:4b:e7:f7:79:79:73:ef:37:3d:62:c1: c9:c5:6f:44:7f:6a:9b:ec:b9:10:34:7c:70:46:25:3a:2f:10: e3:26:23:89:bc:e9:60:1f:e9:4c:84:59:d0:c1:c8:92:56:ea: a3:56:a3:61:fd:53:75:60:e5:64:c8:6a:c1:f4:53:25:f7:81: c4:77:fe:3f:fe:b7:79:ff:57:1f:67:82:0e:52:e6:0c:10:fa: 9c:66:dc:3b:21:f8:e7:41:15:dc:1d:d7:0d:0f:d1:58:ae:db: 13:43:ec:35:d5:28:a2:c0:9f:0f:75:5d:98:9b:9d:3c:9c:98: d5:ce:0c:65:91:ff:07:0d:e0:3e:d2:27:aa:f0:ac:1f:4f:80: 10:d6:b5:79 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZwBKyR4QZt3Ixf6Uj9O5q5rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTI3MjAzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDIwMGFmNTA2OGMyNGRiZTkxZjI4YzY5NDFlYTYzMGU5ZGQwNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ7zSaog4Xg7k/lvfHttFvSBtCVU 5HxUQZgM5+n9E2PSV47f4zjzXV04GWAiobEYaBviJvCrAs+b6nnDgKhOR+QK3HIx 99bnpAIW7f8OD9g/Oxg+W0sCfzSOp57YAJBt3uzWodPfOlLY+nWqf93MZHMopJzH b/O+Tygx2ujXbEgn+vyyrz/rCzf7uKcNpA3KXNXv9/cvJcg3eG/DeBD45F1yGf60 bueJ/PdahEZ6qeII/ZQfim0Vx+fuZ5Dm2OvFryc/GhfOKjsSJAwciOXmkSo+18R0 jjWX2dVP8rFsBUN/glJIL5yVJKKlSSV/HqszWcmDSxnKiga7x08EM1u72QIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFLAgCvUGjCTb6R8oxpQepjDp3QTXMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvc0NBSzlRYU1KTnZwSHlqR2xCNm1NT25kQk5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAivmIAwQA ivmKAwQBivmMAwQCivmQMAwDBACK+ZUDBACK+ZYwDQYJKoZIhvcNAQELBQADggEB AASfSb+ih1Q0FHS8rtgfQWmk0+Dg3h6dk6TDe1FaIEpZFUpQ5knZvLVm8BvLmbOl dHqcBvO3DLS2tR5PNyYPK3aGiX9F9sAN8g7odkxEsdzqU9M8gFJDg20+yfdLZQmm JAz/8NlCZ+azZ+ez8F8crBqyJ4hL5/d5eXPvNz1iwcnFb0R/apvsuRA0fHBGJTov EOMmI4m86WAf6UyEWdDByJJW6qNWo2H9U3Vg5WTIasH0UyX3gcR3/j/+t3n/Vx9n gg5S5gwQ+pxm3Dsh+OdBFdwd1w0P0Viu2xND7DXVKKLAnw91XZibnTycmNXODGWR /wcN4D7SJ6rwrB9PgBDWtXk= -----END CERTIFICATE-----Generated at Wed Feb 4 23:35:07 2026 by rpki-client