This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8lCuIYGfHDEZ5rM2EpOPsgiKLYo.roa File: 8lCuIYGfHDEZ5rM2EpOPsgiKLYo.roa (raw, json) Hash identifier: KUoNY0BkhYQYXjnQyHK6AlHX6VJsL4xl9fuZmeKC6m0= Subject key identifier: F2:50:AE:21:81:9F:1C:31:19:E6:B3:36:12:93:8F:B2:08:8A:2D:8A Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B37C2767F246CE7B1F36F1CE5B74B0DF4 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8lCuIYGfHDEZ5rM2EpOPsgiKLYo.roa Signing time: Fri 19 Dec 2025 17:57:29 +0000 ROA not before: Fri 19 Dec 2025 17:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204610 IP address blocks: 138.249.14.0/24 maxlen: 24 138.249.15.0/24 maxlen: 24 138.249.22.0/24 maxlen: 24 138.249.23.0/24 maxlen: 24 138.249.104.0/24 maxlen: 24 138.249.105.0/24 maxlen: 24 138.249.106.0/24 maxlen: 24 138.249.107.0/24 maxlen: 24 138.249.108.0/24 maxlen: 24 138.249.109.0/24 maxlen: 24 138.249.110.0/24 maxlen: 24 138.249.111.0/24 maxlen: 24 138.249.113.0/24 maxlen: 24 138.249.118.0/24 maxlen: 24 170.168.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c2:76:7f:24:6c:e7:b1:f3:6f:1c:e5:b7:4b:0d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 19 17:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f250ae21819f1c3119e6b33612938fb2088a2d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:48:b4:3d:30:2f:84:7b:b8:3f:44:46:d8: 29:b2:ff:92:e1:09:af:de:22:5d:d0:79:0b:2f:ad: e5:18:74:07:32:71:da:37:cb:0d:d6:92:0f:b7:2b: c6:6f:8f:1a:5b:fe:d6:53:d9:eb:e1:6b:f0:cc:28: 7b:8f:8a:ea:c7:82:21:dc:d5:a6:38:61:c2:c1:86: ad:1b:c6:ef:66:36:8b:78:a4:7c:0f:f9:0c:12:ec: 11:c8:45:03:58:17:fa:e6:7c:7e:8a:28:95:49:ae: 2a:62:a9:21:aa:0a:94:d6:28:8b:25:dc:da:09:d5: 5f:a1:5c:20:07:9c:54:65:6e:f6:d4:05:2c:c4:9a: 1b:7b:02:40:b1:96:56:1f:f6:34:85:58:ec:4f:3e: 5a:8b:9d:d7:68:41:c1:0a:5a:37:e4:27:5d:cf:c5: 98:a1:f2:7e:02:1c:b5:e7:e7:d7:bd:80:9d:90:56: b3:05:a2:a6:2b:45:a3:58:3e:99:21:35:5f:3b:0d: bd:64:86:bf:2e:45:9a:86:eb:b8:44:1e:84:31:b2: 78:14:36:97:ad:c3:9f:1a:85:80:9d:3f:ba:e9:82: 9f:ce:e1:9d:29:c0:51:d8:c5:86:0e:98:f3:91:47: 08:f1:45:fd:06:6f:4c:ba:6b:fc:68:a2:71:28:9e: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:50:AE:21:81:9F:1C:31:19:E6:B3:36:12:93:8F:B2:08:8A:2D:8A X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/8lCuIYGfHDEZ5rM2EpOPsgiKLYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.14.0/23 138.249.22.0/23 138.249.104.0/21 138.249.113.0/24 138.249.118.0/24 170.168.88.0/24 Signature Algorithm: sha256WithRSAEncryption 12:e0:99:fb:84:9f:98:43:ee:9d:1b:5e:02:41:9a:7c:66:17: 4d:97:88:6e:09:0e:28:bd:2f:10:81:18:ae:d8:54:f8:01:91: 60:63:7e:1a:58:8e:80:62:a4:60:92:c1:2e:cd:10:c2:08:6c: f8:0f:29:52:ce:a4:78:3c:a9:be:b0:df:b5:f7:4e:5d:ad:c2: 85:e4:9d:e9:44:c3:27:8a:4c:e5:46:4e:b0:dc:49:76:64:33: 95:29:9e:91:37:69:a7:45:ee:53:71:88:05:cd:f8:96:c6:f4: 84:db:c3:0d:0f:70:37:a8:14:1d:08:9e:ce:a9:06:f4:ec:32: 40:10:40:66:41:6f:28:d3:b8:f0:a4:73:8c:cf:e8:06:4a:7a: 59:a2:a6:dd:01:31:aa:df:40:c2:c3:bc:85:a6:3a:92:80:31: 2b:33:75:bf:1f:e8:ac:8b:cc:e6:95:2b:09:c2:20:3c:3b:3e: 99:64:82:44:7a:dc:8a:4d:03:b9:f5:c5:41:84:48:85:ce:e3: da:f6:c3:2d:ef:58:e8:80:46:c9:4d:e5:33:8d:2b:0d:b7:ec: 5f:40:4b:21:ef:05:e8:32:dc:f1:8f:e2:d1:9f:0a:87:2f:5e: 80:62:ad:03:36:e0:29:93:07:4a:b1:2c:3d:7c:dc:21:70:bc: 4c:c0:f2:5c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZs3wnZ/JGznsfNvHOW3Sw30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjE5MTc1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjUwYWUyMTgxOWYxYzMxMTllNmIzMzYxMjkzOGZiMjA4OGEyZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5lItD0wL4R7uD9ERtgpsv+S4Qmv 3iJd0HkLL63lGHQHMnHaN8sN1pIPtyvGb48aW/7WU9nr4WvwzCh7j4rqx4Ih3NWm OGHCwYatG8bvZjaLeKR8D/kMEuwRyEUDWBf65nx+iiiVSa4qYqkhqgqU1iiLJdza CdVfoVwgB5xUZW721AUsxJobewJAsZZWH/Y0hVjsTz5ai53XaEHBClo35Cddz8WY ofJ+Ahy15+fXvYCdkFazBaKmK0WjWD6ZITVfOw29ZIa/LkWahuu4RB6EMbJ4FDaX rcOfGoWAnT+66YKfzuGdKcBR2MWGDpjzkUcI8UX9Bm9Mumv8aKJxKJ6JUwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPJQriGBnxwxGeazNhKTj7IIii2KMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvOGxDdUlZR2ZIREVaNXJNMkVwT1BzZ2lLTFlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBivkOAwQB ivkWAwQDivloAwQAivlxAwQAivl2AwQAqqhYMA0GCSqGSIb3DQEBCwUAA4IBAQAS 4Jn7hJ+YQ+6dG14CQZp8ZhdNl4huCQ4ovS8QgRiu2FT4AZFgY34aWI6AYqRgksEu zRDCCGz4DylSzqR4PKm+sN+1905drcKF5J3pRMMnikzlRk6w3El2ZDOVKZ6RN2mn Re5TcYgFzfiWxvSE28MND3A3qBQdCJ7OqQb07DJAEEBmQW8o07jwpHOMz+gGSnpZ oqbdATGq30DCw7yFpjqSgDErM3W/H+isi8zmlSsJwiA8Oz6ZZIJEetyKTQO59cVB hEiFzuPa9sMt71jogEbJTeUzjSsNt+xfQEsh7wXoMtzxj+LRnwqHL16AYq0DNuAp kwdKsSw9fNwhcLxMwPJc -----END CERTIFICATE-----Generated at Sat Dec 20 15:01:22 2025 by rpki-client