This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/vVDQz8ZNTcBlmNvbvWAQ2VU2giE.roa File: vVDQz8ZNTcBlmNvbvWAQ2VU2giE.roa (raw, json) Hash identifier: vPzKYfiYmOoNem9gxWlRVXcEFU3AsKPwB+MG84msjEo= Subject key identifier: BD:50:D0:CF:C6:4D:4D:C0:65:98:DB:DB:BD:60:10:D9:55:36:82:21 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B425D00F28CF98F522BB22D59BA54FEFA Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/vVDQz8ZNTcBlmNvbvWAQ2VU2giE.roa Signing time: Sun 21 Dec 2025 19:22:29 +0000 ROA not before: Sun 21 Dec 2025 19:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51396 IP address blocks: 138.249.24.0/24 maxlen: 24 138.249.25.0/24 maxlen: 24 138.249.26.0/24 maxlen: 24 138.249.27.0/24 maxlen: 24 138.249.32.0/24 maxlen: 24 138.249.33.0/24 maxlen: 24 138.249.34.0/24 maxlen: 24 138.249.35.0/24 maxlen: 24 138.249.40.0/24 maxlen: 24 138.249.41.0/24 maxlen: 24 138.249.42.0/24 maxlen: 24 138.249.43.0/24 maxlen: 24 138.249.120.0/24 maxlen: 24 138.249.121.0/24 maxlen: 24 138.249.122.0/24 maxlen: 24 138.249.123.0/24 maxlen: 24 138.249.124.0/24 maxlen: 24 138.249.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:5d:00:f2:8c:f9:8f:52:2b:b2:2d:59:ba:54:fe:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Dec 21 19:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd50d0cfc64d4dc06598dbdbbd6010d955368221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:f4:8b:8a:11:70:d5:c7:be:cc:f8:cc:0b: ef:60:19:f9:01:4b:0a:f1:53:d4:25:79:4b:1a:64: 21:6f:50:1c:1f:21:05:ff:e1:f7:4c:61:b7:5d:c3: 8b:ef:a3:99:e7:1e:bd:94:98:57:3e:ef:3a:79:ac: 63:33:f8:a6:4f:d8:7f:4b:50:fb:da:a0:24:29:d6: a0:59:64:1e:a2:38:47:cf:63:33:79:d9:9c:2e:fc: 59:84:70:9a:aa:32:37:6f:59:ef:04:ad:d5:91:84: cb:15:38:02:f0:ec:5e:b6:37:b3:38:e9:56:1e:10: e0:6f:1d:40:81:ee:bd:23:22:93:b0:8e:2b:7c:c1: 29:4b:a6:ff:93:2d:27:25:88:df:2c:42:98:c6:43: c4:8b:f5:f0:1c:75:59:0d:7e:66:d2:1b:d1:be:b2: 67:4b:92:4d:b3:ca:ef:3c:fa:62:f1:87:93:13:fa: 63:5a:66:12:f6:45:a8:c5:3a:d1:39:e3:82:bc:6d: 36:7f:c6:33:a0:91:c7:c4:12:93:f3:4c:1d:77:45: c8:d9:08:ae:28:87:ee:d1:9c:a2:15:b1:38:85:72: 67:a1:4f:eb:c4:0f:20:37:09:b3:69:71:69:c3:63: 7e:2d:e2:85:f7:7d:cc:cb:c8:1e:47:61:38:a3:1a: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:50:D0:CF:C6:4D:4D:C0:65:98:DB:DB:BD:60:10:D9:55:36:82:21 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/vVDQz8ZNTcBlmNvbvWAQ2VU2giE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.249.24.0/22 138.249.32.0/22 138.249.40.0/22 138.249.120.0-138.249.125.255 Signature Algorithm: sha256WithRSAEncryption 67:5f:24:26:23:56:d8:05:46:52:2a:e5:e6:45:bc:47:e9:95: 15:54:bc:4b:85:62:4a:40:4a:72:73:87:d3:c1:26:ac:71:1c: 85:97:b0:f5:33:f9:b1:8a:df:7d:ea:ac:11:fd:11:e4:53:fb: c5:2a:5a:80:fe:ee:3d:f5:4d:e5:a8:21:7c:65:86:0e:88:7d: df:66:4b:4d:f8:9b:d8:2d:ec:66:20:b1:24:76:fb:f3:7b:05: 4b:aa:bc:04:b2:63:44:a5:8a:45:d1:74:92:d5:9e:1f:92:be: f7:80:28:0c:a9:18:56:06:fb:02:15:05:41:d9:19:44:2f:e9: af:28:ed:25:c8:a3:6f:15:a0:8f:11:95:3f:32:91:3f:f7:bb: d5:be:f8:9f:e6:c7:62:58:99:01:ff:7e:39:b6:80:0f:49:be: b7:67:2f:c7:e5:be:da:56:20:8e:5f:e0:ab:d3:41:80:93:f9: da:70:4c:91:c5:3c:ee:c5:43:9c:4b:81:fa:1b:9c:d2:8f:22: f7:20:be:7f:17:32:67:4f:48:d0:74:cd:ba:12:da:38:7f:fe: fa:58:ae:72:70:96:5c:68:6b:f2:51:b2:e8:40:b8:3d:97:ae: 1d:c3:e0:7d:28:c3:95:6e:97:10:7e:9d:99:2c:23:3e:be:ff: 24:e7:ea:6c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZtCXQDyjPmPUiuyLVm6VP76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMjIxMTkyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDUwZDBjZmM2NGQ0ZGMwNjU5OGRiZGJiZDYwMTBkOTU1MzY4MjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7b0i4oRcNXHvsz4zAvvYBn5AUsK 8VPUJXlLGmQhb1AcHyEF/+H3TGG3XcOL76OZ5x69lJhXPu86eaxjM/imT9h/S1D7 2qAkKdagWWQeojhHz2MzedmcLvxZhHCaqjI3b1nvBK3VkYTLFTgC8OxetjezOOlW HhDgbx1Age69IyKTsI4rfMEpS6b/ky0nJYjfLEKYxkPEi/XwHHVZDX5m0hvRvrJn S5JNs8rvPPpi8YeTE/pjWmYS9kWoxTrROeOCvG02f8YzoJHHxBKT80wdd0XI2Qiu KIfu0ZyiFbE4hXJnoU/rxA8gNwmzaXFpw2N+LeKF933My8geR2E4oxpWxQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFL1Q0M/GTU3AZZjb271gENlVNoIhMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvdlZEUXo4Wk5UY0JsbU52YnZXQVEyVlUyZ2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCivkYAwQC ivkgAwQCivkoMAwDBAOK+XgDBAGK+XwwDQYJKoZIhvcNAQELBQADggEBAGdfJCYj VtgFRlIq5eZFvEfplRVUvEuFYkpASnJzh9PBJqxxHIWXsPUz+bGK333qrBH9EeRT +8UqWoD+7j31TeWoIXxlhg6Ifd9mS034m9gt7GYgsSR2+/N7BUuqvASyY0SlikXR dJLVnh+SvveAKAypGFYG+wIVBUHZGUQv6a8o7SXIo28VoI8RlT8ykT/3u9W++J/m x2JYmQH/fjm2gA9JvrdnL8flvtpWII5f4KvTQYCT+dpwTJHFPO7FQ5xLgfobnNKP Ivcgvn8XMmdPSNB0zboS2jh//vpYrnJwllxoa/JRsuhAuD2Xrh3D4H0ow5VulxB+ nZksIz6+/yTn6mw= -----END CERTIFICATE-----Generated at Tue Dec 23 16:50:45 2025 by rpki-client