This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-m0cdecrBUgwYfQXmfcb1rCJ5i8.roa File: 1-m0cdecrBUgwYfQXmfcb1rCJ5i8.roa (raw, json) Hash identifier: pqBDrwWKRuaDvbQOCEI6shlmD3zdj19mKZ1po+9A+cg= Subject key identifier: FA:6D:1C:75:E7:2B:05:48:30:61:F4:17:99:F7:1B:D6:B0:89:E6:2F Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F40955B7E7829F5A0CEF0A2F0581A Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-m0cdecrBUgwYfQXmfcb1rCJ5i8.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213834 IP address blocks: 170.168.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:40:95:5b:7e:78:29:f5:a0:ce:f0:a2:f0:58:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa6d1c75e72b05483061f41799f71bd6b089e62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:e4:ee:34:62:da:03:02:f3:94:d7:f2:6f: 34:43:af:f0:9c:5d:35:53:15:ac:95:38:27:56:c1: fa:1b:c2:f9:2b:f5:61:8a:2a:6f:f5:37:89:b7:70: 45:fa:a4:2b:bc:52:96:96:d9:b6:8a:fb:44:6e:4b: f0:4c:0e:c8:b3:52:cc:f1:61:08:14:34:9e:61:3e: d4:b5:ba:cc:13:2b:51:a9:a9:0b:22:42:98:ed:bb: e6:b7:3b:09:31:ee:c7:67:ae:61:d8:8f:32:c9:00: 61:b3:15:ca:41:5b:e2:df:b7:8f:70:17:bb:1b:b5: 88:70:0f:e6:53:b2:8d:47:17:3c:0a:72:00:8d:16: c4:aa:79:d8:33:3b:99:8c:26:59:6e:34:7e:5b:d0: a8:e2:73:d9:ab:a3:0b:5a:c0:a1:bb:0b:4e:de:e7: 80:58:56:8f:26:42:28:01:a3:41:ef:30:87:ae:e1: 38:c6:37:7d:9e:52:2a:e0:91:0c:88:59:5f:2a:bd: 62:f9:69:82:51:76:53:e6:47:fd:18:93:33:2c:fd: 36:a3:ae:f2:cb:6d:3d:ad:08:bf:8b:d9:2e:62:ca: 87:90:a3:c8:b4:de:3e:d7:e6:b6:c8:5b:c9:f4:c7: 0d:6f:9a:4a:32:5b:9e:45:61:a9:c0:5d:6c:b4:b7: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6D:1C:75:E7:2B:05:48:30:61:F4:17:99:F7:1B:D6:B0:89:E6:2F X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-m0cdecrBUgwYfQXmfcb1rCJ5i8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.74.0/24 Signature Algorithm: sha256WithRSAEncryption 18:c5:4d:fa:80:ec:cd:40:a8:08:3e:81:04:08:36:31:4f:dd: 40:4c:8e:16:51:79:55:cb:ec:0a:4e:08:1b:4f:f3:98:2d:e8: b0:a1:2a:f5:bc:41:0e:30:b8:91:db:75:8e:6a:73:91:9a:79: 69:5c:dd:53:22:7a:dc:51:8b:9d:ee:70:69:72:d8:58:07:0f: 4e:6b:61:1b:2c:0e:d9:b7:c7:d2:4a:85:c8:cb:7b:70:04:e7: bf:33:c7:4f:e5:83:0b:1f:4c:73:9b:b0:cc:63:d6:7b:f9:9d: 22:05:31:47:7a:3d:f5:f0:aa:e6:5b:ad:a8:d1:9e:fa:3c:17: 59:17:2f:f5:3d:a8:69:3e:55:2f:61:9b:f1:5f:bf:ac:69:e0: 51:8b:af:df:50:93:0a:72:c4:c2:c3:80:39:7f:1f:fa:55:b8: 3a:77:d7:2a:a1:4c:f2:45:49:5b:e4:0f:04:96:4e:b9:24:3a: dc:5b:46:0c:09:f0:66:32:95:78:18:f4:a2:d4:25:d7:93:d8: f7:69:84:e7:c0:c6:26:8c:53:ad:83:99:65:e0:ed:74:c9:0a: 1c:7f:a7:23:fd:79:a9:39:c0:9d:60:05:c2:08:0f:71:1a:1c: 90:8f:aa:eb:1c:62:fc:66:ed:e1:20:e1:79:93:27:7c:84:d9: 0d:50:6e:5d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5f0CVW354KfWgzvCi8FgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTZkMWM3NWU3MmIwNTQ4MzA2MWY0MTc5OWY3MWJkNmIwODllNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Xk7jRi2gMC85TX8m80Q6/wnF01 UxWslTgnVsH6G8L5K/Vhiipv9TeJt3BF+qQrvFKWltm2ivtEbkvwTA7Is1LM8WEI FDSeYT7UtbrMEytRqakLIkKY7bvmtzsJMe7HZ65h2I8yyQBhsxXKQVvi37ePcBe7 G7WIcA/mU7KNRxc8CnIAjRbEqnnYMzuZjCZZbjR+W9Co4nPZq6MLWsChuwtO3ueA WFaPJkIoAaNB7zCHruE4xjd9nlIq4JEMiFlfKr1i+WmCUXZT5kf9GJMzLP02o67y y209rQi/i9kuYsqHkKPItN4+1+a2yFvJ9McNb5pKMlueRWGpwF1stLeYSQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPptHHXnKwVIMGH0F5n3G9awieYvMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvMS1tMGNkZWNyQlVnd1lmUVhtZmNiMXJDSjVpOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjQvMmI2MDMwLTZkODgtNGUzZS05ZjNhLWE2NjdiYjc2NTA2 MC8xL0xtcUc1aThNNlk0QzZZQ0duX1JCVHVLZzhNNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKqoSjAN BgkqhkiG9w0BAQsFAAOCAQEAGMVN+oDszUCoCD6BBAg2MU/dQEyOFlF5VcvsCk4I G0/zmC3osKEq9bxBDjC4kdt1jmpzkZp5aVzdUyJ63FGLne5waXLYWAcPTmthGywO 2bfH0kqFyMt7cATnvzPHT+WDCx9Mc5uwzGPWe/mdIgUxR3o99fCq5lutqNGe+jwX WRcv9T2oaT5VL2Gb8V+/rGngUYuv31CTCnLEwsOAOX8f+lW4OnfXKqFM8kVJW+QP BJZOuSQ63FtGDAnwZjKVeBj0otQl15PY92mE58DGJoxTrYOZZeDtdMkKHH+nI/15 qTnAnWAFwggPcRockI+q6xxi/Gbt4SDheZMnfITZDVBuXQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:25 2026 by rpki-client