This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z_ks314tqN8Uz0sn3FyKYXHt7wg.roa File: Z_ks314tqN8Uz0sn3FyKYXHt7wg.roa (raw, json) Hash identifier: XaAkvqIVhjGI1zWRmJjUwcdsxrE2apIOpikUYkMiWqM= Subject key identifier: 67:F9:2C:DF:5E:2D:A8:DF:14:CF:4B:27:DC:5C:8A:61:71:ED:EF:08 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B32EE7FC9DCC2704B52ED8135DD90779D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z_ks314tqN8Uz0sn3FyKYXHt7wg.roa Signing time: Thu 18 Dec 2025 19:27:29 +0000 ROA not before: Thu 18 Dec 2025 19:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197309 IP address blocks: 138.249.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:ee:7f:c9:dc:c2:70:4b:52:ed:81:35:dd:90:77:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 18 19:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f92cdf5e2da8df14cf4b27dc5c8a6171edef08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:e8:2f:8f:93:2a:31:cc:86:a3:f6:dc:b2: 04:f6:eb:65:c1:fa:84:e1:47:4c:3e:c2:b5:6d:4b: c2:55:be:08:c2:27:1e:c8:58:f2:26:15:a2:ad:12: 9e:04:8d:3c:ac:76:e0:67:21:af:7d:d4:de:16:7c: e8:b7:03:7f:b8:62:73:4f:b5:f6:de:06:05:5e:f8: eb:8b:2b:81:47:e3:e2:a8:17:5a:bf:a5:2d:2d:0e: 4d:f4:f0:fb:d4:90:c4:53:ad:2d:31:b7:71:40:d8: 4e:06:eb:d0:8b:4a:d2:18:f0:98:86:b6:19:d4:d6: 64:b2:5b:81:76:ac:74:00:b0:e7:e7:d9:36:de:b1: 49:11:35:b2:95:95:bc:46:4f:f8:93:2c:5a:f1:da: 25:80:c1:02:a1:33:92:8a:2f:86:ff:61:30:8e:9f: 55:34:0e:57:90:60:32:1b:3a:a1:66:0d:bd:e9:b5: bf:08:ea:8f:f8:b4:5c:29:aa:8e:7c:58:a5:7e:fc: ea:85:06:fa:88:f4:8a:1b:6f:44:4f:97:1b:78:14: 7a:48:a2:ec:32:e0:b6:d9:df:17:2b:92:2e:2a:88: e7:0d:30:05:66:33:8f:61:e6:41:03:c6:08:20:ca: 47:e2:ac:d0:0f:1f:1e:4b:54:6d:87:a9:eb:e6:5d: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F9:2C:DF:5E:2D:A8:DF:14:CF:4B:27:DC:5C:8A:61:71:ED:EF:08 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Z_ks314tqN8Uz0sn3FyKYXHt7wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.16.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:35:79:a6:76:f4:17:01:70:92:e3:32:de:45:43:21:17:4a: ae:cf:d4:bc:19:82:69:9d:2f:51:e4:55:97:7e:c0:ef:68:80: 3e:be:1d:e8:0c:94:c3:53:89:df:c9:35:bd:70:22:9c:2f:57: 70:e5:a9:12:7c:4c:62:65:02:46:89:fa:82:66:94:cf:41:bf: cf:a9:b5:78:ea:24:20:fb:c6:3e:8b:d4:0c:3d:74:84:26:44: 10:ed:f8:08:7f:55:74:d7:6d:44:72:5b:35:ec:95:06:f7:96: 7f:3a:03:22:15:91:7c:8c:ed:b9:af:5f:22:ec:5e:16:9e:2e: 78:30:a9:35:49:46:de:2d:ed:99:19:8a:60:56:d5:b6:95:79: 66:01:8a:aa:a0:ae:aa:73:3c:45:8a:06:d0:11:f9:cc:01:31: 2d:82:eb:03:62:a3:ab:3f:62:e6:15:6a:20:df:05:7d:57:f1: a7:d4:a2:90:cf:59:bb:c6:36:53:00:be:d0:8a:d5:15:ec:b4: ec:10:53:28:b5:d8:99:74:a1:8d:a5:73:3f:e1:8f:f3:20:0f: 4f:3d:e5:a1:65:14:d2:bd:28:16:51:40:42:55:be:55:4a:2c: 2f:91:d9:8f:69:8a:5f:62:9e:5a:39:1c:00:13:42:52:c3:cd: 09:93:79:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsy7n/J3MJwS1LtgTXdkHedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjE4MTkyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2Y5MmNkZjVlMmRhOGRmMTRjZjRiMjdkYzVjOGE2MTcxZWRlZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksfoL4+TKjHMhqP23LIE9utlwfqE 4UdMPsK1bUvCVb4IwiceyFjyJhWirRKeBI08rHbgZyGvfdTeFnzotwN/uGJzT7X2 3gYFXvjriyuBR+PiqBdav6UtLQ5N9PD71JDEU60tMbdxQNhOBuvQi0rSGPCYhrYZ 1NZksluBdqx0ALDn59k23rFJETWylZW8Rk/4kyxa8dolgMECoTOSii+G/2Ewjp9V NA5XkGAyGzqhZg296bW/COqP+LRcKaqOfFilfvzqhQb6iPSKG29ET5cbeBR6SKLs MuC22d8XK5IuKojnDTAFZjOPYeZBA8YIIMpH4qzQDx8eS1Rth6nr5l3abQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGf5LN9eLajfFM9LJ9xcimFx7e8IMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvWl9rczMxNHRxTjhVejBzbjNGeUtZWEh0N3dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivkQMA0G CSqGSIb3DQEBCwUAA4IBAQB6NXmmdvQXAXCS4zLeRUMhF0quz9S8GYJpnS9R5FWX fsDvaIA+vh3oDJTDU4nfyTW9cCKcL1dw5akSfExiZQJGifqCZpTPQb/PqbV46iQg +8Y+i9QMPXSEJkQQ7fgIf1V0121Ecls17JUG95Z/OgMiFZF8jO25r18i7F4Wni54 MKk1SUbeLe2ZGYpgVtW2lXlmAYqqoK6qczxFigbQEfnMATEtgusDYqOrP2LmFWog 3wV9V/Gn1KKQz1m7xjZTAL7QitUV7LTsEFMotdiZdKGNpXM/4Y/zIA9PPeWhZRTS vSgWUUBCVb5VSiwvkdmPaYpfYp5aORwAE0JSw80Jk3lK -----END CERTIFICATE-----Generated at Sat Dec 20 08:15:34 2025 by rpki-client