This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6wsuUzPwT2GQ3VUbf_dptXW64Ns.roa File: 6wsuUzPwT2GQ3VUbf_dptXW64Ns.roa (raw, json) Hash identifier: oDiQXH2Ovwwl/yLMKoWMJTIOxzb8q2D9s2TcYFpqOPs= Subject key identifier: EB:0B:2E:53:33:F0:4F:61:90:DD:55:1B:7F:F7:69:B5:75:BA:E0:DB Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B80123DF086DF1A265AFFA6FE3D6A5DF3 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6wsuUzPwT2GQ3VUbf_dptXW64Ns.roa Signing time: Fri 02 Jan 2026 18:57:17 +0000 ROA not before: Fri 02 Jan 2026 18:57:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216007 IP address blocks: 138.249.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:12:3d:f0:86:df:1a:26:5a:ff:a6:fe:3d:6a:5d:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 2 18:57:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb0b2e5333f04f6190dd551b7ff769b575bae0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:96:87:50:8c:95:37:47:5c:ef:10:fe:6f: fe:0f:c7:f9:a3:17:df:b9:c5:c7:42:76:51:6e:a0: cd:e1:84:39:ae:f9:2c:b8:c4:d8:14:cc:49:ab:8f: 09:36:53:52:37:9a:c4:31:91:9a:7d:04:81:ea:21: e2:ad:e6:c5:86:86:2e:26:ee:b7:d2:64:73:62:b3: cf:44:e3:cd:3f:bb:e0:f7:c1:99:45:d6:3a:25:1b: 65:ae:65:76:02:34:03:3a:f4:88:ae:63:26:e4:ae: 92:29:02:e0:f7:9d:99:d0:4f:5c:c3:e4:3b:15:6f: a1:13:c4:f6:e3:0e:d0:52:76:a0:62:e6:c6:e2:7c: c6:0d:0e:cd:9f:71:47:0d:58:97:17:4d:40:29:fd: 55:e5:d6:4e:5f:fb:b4:36:bb:c6:51:8e:85:fc:1d: 41:b4:2e:bd:4e:13:c9:91:5b:8b:51:75:77:98:71: 91:d0:76:d0:45:83:7d:fa:97:12:62:d9:f5:1c:2d: cb:15:4f:31:68:b7:b3:f1:e2:b3:8b:08:2f:db:d8: a5:8c:4f:f6:b1:a7:21:d2:c2:f7:2e:8c:f1:b7:bf: 77:10:c7:a6:11:ee:d1:dc:37:af:67:4a:00:04:c8: 98:21:3b:b9:60:62:e7:65:9f:90:ad:d5:3b:17:31: 04:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0B:2E:53:33:F0:4F:61:90:DD:55:1B:7F:F7:69:B5:75:BA:E0:DB X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6wsuUzPwT2GQ3VUbf_dptXW64Ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.115.0/24 Signature Algorithm: sha256WithRSAEncryption 89:45:ab:6f:bc:a8:d5:c8:c1:a7:ab:a0:b3:a4:00:b3:fe:bb: 6c:18:57:36:ac:42:0c:32:7e:32:3a:62:c1:ee:8f:2f:74:e3: 8d:24:3c:b6:ac:61:38:29:c0:ad:47:72:f6:05:26:92:44:48: d0:7b:32:33:b9:e3:45:67:1b:24:8e:b7:14:43:45:99:a1:e0: a3:79:cd:ce:ac:72:72:8e:b9:7d:dd:0e:4e:26:81:df:c5:bb: 86:3f:80:07:2f:f9:82:fa:f4:db:f6:3c:cb:d1:f3:63:97:98: a9:22:64:79:fd:e4:b5:35:f4:b9:a2:e7:d1:d5:2d:9c:3b:cb: 45:fc:e8:94:46:55:55:a1:3b:b2:c0:26:43:fd:a4:26:93:60: 44:77:ae:9e:90:a0:d6:cd:8e:f4:b8:84:98:f8:99:3c:67:a1: 4c:f5:58:d5:34:d0:de:cc:a1:44:3a:71:a1:e5:94:e0:30:3f: 37:a0:6f:70:c0:1e:11:e0:6c:3a:70:f4:e2:37:4b:97:6f:df: bd:4f:2a:5a:36:07:a9:b7:a0:27:56:35:07:9d:c6:ad:1a:a3: 8b:4a:56:e2:e7:f1:c2:be:8f:2f:03:21:a6:5f:95:bc:79:f2: f7:4c:56:0e:08:ff:17:36:8d:10:07:b7:79:b5:a5:43:05:76: 48:e6:5d:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuAEj3wht8aJlr/pv49al3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAyMTg1NzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjBiMmU1MzMzZjA0ZjYxOTBkZDU1MWI3ZmY3NjliNTc1YmFlMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0weWh1CMlTdHXO8Q/m/+D8f5oxff ucXHQnZRbqDN4YQ5rvksuMTYFMxJq48JNlNSN5rEMZGafQSB6iHirebFhoYuJu63 0mRzYrPPROPNP7vg98GZRdY6JRtlrmV2AjQDOvSIrmMm5K6SKQLg952Z0E9cw+Q7 FW+hE8T24w7QUnagYubG4nzGDQ7Nn3FHDViXF01AKf1V5dZOX/u0NrvGUY6F/B1B tC69ThPJkVuLUXV3mHGR0HbQRYN9+pcSYtn1HC3LFU8xaLez8eKziwgv29iljE/2 sach0sL3Lozxt793EMemEe7R3DevZ0oABMiYITu5YGLnZZ+QrdU7FzEEhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOsLLlMz8E9hkN1VG3/3abV1uuDbMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNndzdVV6UHdUMkdRM1ZVYmZfZHB0WFc2NE5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivlzMA0G CSqGSIb3DQEBCwUAA4IBAQCJRatvvKjVyMGnq6CzpACz/rtsGFc2rEIMMn4yOmLB 7o8vdOONJDy2rGE4KcCtR3L2BSaSREjQezIzueNFZxskjrcUQ0WZoeCjec3OrHJy jrl93Q5OJoHfxbuGP4AHL/mC+vTb9jzL0fNjl5ipImR5/eS1NfS5oufR1S2cO8tF /OiURlVVoTuywCZD/aQmk2BEd66ekKDWzY70uISY+Jk8Z6FM9VjVNNDezKFEOnGh 5ZTgMD83oG9wwB4R4Gw6cPTiN0uXb9+9TypaNgept6AnVjUHncatGqOLSlbi5/HC vo8vAyGmX5W8efL3TFYOCP8XNo0QB7d5taVDBXZI5l2S -----END CERTIFICATE-----Generated at Tue Jan 13 14:52:56 2026 by rpki-client