This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wWQ8iEeunFxDJdQGv6IRyjzfRr0.roa File: wWQ8iEeunFxDJdQGv6IRyjzfRr0.roa (raw, json) Hash identifier: 7L4kIizHgavFEgAEV3lU8hwy+gV8nNM8E//f9itVIHQ= Subject key identifier: C1:64:3C:88:47:AE:9C:5C:43:25:D4:06:BF:A2:11:CA:3C:DF:46:BD Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019C065E5283B017D241A0A600F15725975D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wWQ8iEeunFxDJdQGv6IRyjzfRr0.roa Signing time: Wed 28 Jan 2026 20:49:30 +0000 ROA not before: Wed 28 Jan 2026 20:49:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 138.249.15.0/24 maxlen: 24 138.249.22.0/24 maxlen: 24 138.249.23.0/24 maxlen: 24 138.249.102.0/24 maxlen: 24 170.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:5e:52:83:b0:17:d2:41:a0:a6:00:f1:57:25:97:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 28 20:49:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1643c8847ae9c5c4325d406bfa211ca3cdf46bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:d6:df:7e:5b:1e:b4:95:85:26:de:07:68: 48:1c:b2:f9:15:3c:e0:99:a8:52:d4:61:b1:4e:51: 28:b2:07:52:e1:a8:6f:07:60:07:27:fe:46:b1:50: 33:4d:98:ba:5e:55:a7:b8:b1:73:47:c6:e3:40:9c: ee:fc:f3:f3:4f:ac:8e:eb:e8:0b:86:db:a6:f2:7d: f4:ee:15:95:90:16:38:cd:68:27:a4:a4:2b:94:f9: e4:3a:0f:6e:d7:3c:33:f6:0b:8e:6c:27:ac:45:29: ca:d5:bf:d7:f3:a4:91:4d:a1:c1:3e:9b:0c:7f:48: ae:a6:19:64:79:87:e2:94:a4:94:b5:68:53:0e:80: 9f:7f:28:7d:e8:35:ad:21:cd:a6:14:93:4d:4f:70: 53:91:ad:7a:de:51:10:4e:44:da:ae:16:bf:69:06: ad:07:d9:58:a2:86:f1:58:12:50:1e:4d:09:f1:c8: a2:90:73:f4:be:c3:49:64:88:ee:20:db:f4:fa:a9: 57:d9:c8:b2:24:79:32:a3:fa:a3:1e:a5:5b:72:74: 25:ce:bd:6a:ef:b4:6f:49:22:e4:cc:8b:5d:63:c7: bf:61:61:b2:6e:92:d9:29:c1:a5:96:e1:62:aa:83: ba:88:51:83:41:78:34:b8:34:3e:b9:60:33:e3:4d: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:3C:88:47:AE:9C:5C:43:25:D4:06:BF:A2:11:CA:3C:DF:46:BD X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/wWQ8iEeunFxDJdQGv6IRyjzfRr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.15.0/24 138.249.22.0/23 138.249.102.0/24 170.168.88.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:48:1a:a5:ac:53:5d:bb:cb:64:cd:fd:c0:42:45:1a:be:1b: b5:4c:d4:5b:27:6c:83:04:13:e2:08:ff:d3:b1:77:de:28:21: fc:c8:cb:ac:7c:7a:8c:88:e3:49:3d:e5:e0:64:8e:88:7b:b9: b7:b4:23:c8:4a:bb:9f:f0:36:a6:0f:ef:39:66:b8:49:c7:47: a7:dd:86:df:49:d8:85:93:b8:5f:20:65:ad:e4:c0:7e:dd:e6: ea:07:33:ee:dc:10:32:31:6c:0a:42:39:4e:72:2b:57:9c:97: 0e:27:8a:c1:ed:b6:0a:b3:1f:e1:c4:63:5a:9f:81:08:48:65: 26:30:b6:d9:03:e0:67:d5:af:a8:68:4b:6b:71:4e:05:09:84: 52:31:87:52:d8:e7:a5:df:ad:43:74:91:cf:cd:e1:7e:3b:27: e6:2c:c1:01:e6:e1:d6:d6:3b:89:01:9b:9e:ab:c7:17:a8:ff: 2f:a2:86:eb:b3:64:aa:b9:53:11:cd:8f:89:1f:0b:95:24:7b: e1:51:3e:50:ea:40:0f:e2:94:6c:7d:52:b4:85:a8:11:ff:6e: 3f:56:2e:26:a2:54:63:2e:b5:be:be:4b:2e:85:8a:34:6a:8c: a9:25:00:42:68:57:6c:dc:c5:4b:7a:46:60:15:f8:36:77:0d: 82:f3:e7:73 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwGXlKDsBfSQaCmAPFXJZddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTI4MjA0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTY0M2M4ODQ3YWU5YzVjNDMyNWQ0MDZiZmEyMTFjYTNjZGY0NmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjLW335bHrSVhSbeB2hIHLL5FTzg mahS1GGxTlEosgdS4ahvB2AHJ/5GsVAzTZi6XlWnuLFzR8bjQJzu/PPzT6yO6+gL htum8n307hWVkBY4zWgnpKQrlPnkOg9u1zwz9guObCesRSnK1b/X86SRTaHBPpsM f0iuphlkeYfilKSUtWhTDoCffyh96DWtIc2mFJNNT3BTka163lEQTkTarha/aQat B9lYoobxWBJQHk0J8ciikHP0vsNJZIjuINv0+qlX2ciyJHkyo/qjHqVbcnQlzr1q 77RvSSLkzItdY8e/YWGybpLZKcGlluFiqoO6iFGDQXg0uDQ+uWAz402FjQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMFkPIhHrpxcQyXUBr+iEco830a9MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvd1dROGlFZXVuRnhESmRRR3Y2SVJ5anpmUnIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAivkPAwQB ivkWAwQAivlmAwQAqqhYMA0GCSqGSIb3DQEBCwUAA4IBAQBOSBqlrFNdu8tkzf3A QkUavhu1TNRbJ2yDBBPiCP/TsXfeKCH8yMusfHqMiONJPeXgZI6Ie7m3tCPISruf 8DamD+85ZrhJx0en3YbfSdiFk7hfIGWt5MB+3ebqBzPu3BAyMWwKQjlOcitXnJcO J4rB7bYKsx/hxGNan4EISGUmMLbZA+Bn1a+oaEtrcU4FCYRSMYdS2Oel361DdJHP zeF+OyfmLMEB5uHW1juJAZueq8cXqP8voobrs2SquVMRzY+JHwuVJHvhUT5Q6kAP 4pRsfVK0hagR/24/Vi4molRjLrW+vksuhYo0aoypJQBCaFds3MVLekZgFfg2dw2C 8+dz -----END CERTIFICATE-----Generated at Wed Feb 4 23:35:07 2026 by rpki-client