This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5OkKwkEqmYbRsJoEwAM9YhTLUzg.roa File: 5OkKwkEqmYbRsJoEwAM9YhTLUzg.roa (raw, json) Hash identifier: A6V6ZT1BdNo5+AHqY1XZS+I6AJG3P8nar4YEacaCOKU= Subject key identifier: E4:E9:0A:C2:41:2A:99:86:D1:B0:9A:04:C0:03:3D:62:14:CB:53:38 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F298CCAA263067D31EF22C2E9B8D9 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5OkKwkEqmYbRsJoEwAM9YhTLUzg.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49505 IP address blocks: 170.168.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:29:8c:ca:a2:63:06:7d:31:ef:22:c2:e9:b8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4e90ac2412a9986d1b09a04c0033d6214cb5338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:80:14:83:29:0e:af:32:b5:3b:cd:98:77:d7: 1e:5a:f9:59:31:b4:1f:2c:55:7e:c5:ef:c5:47:f9: 1e:a2:eb:ef:86:7d:55:29:c2:f5:a1:54:72:28:c4: 47:9a:a9:cc:2a:0b:75:c5:28:bb:9f:ee:31:95:a6: 4e:b1:56:a7:24:33:17:81:23:4f:73:43:ed:c7:a2: f5:bc:a7:e5:9c:c9:62:39:7a:0b:8a:e0:a3:c7:3d: f1:a4:a7:3f:fa:07:d5:9a:1a:b0:00:e4:76:02:10: 23:4c:a7:48:30:4f:da:b7:6d:c4:9f:4c:b1:8b:b1: b0:4d:cb:33:20:d8:1f:9d:67:75:fe:88:6c:f6:ab: 8d:b7:20:07:92:3a:af:9c:cd:e7:f9:ae:ce:70:d7: 85:76:3b:cf:af:18:ca:df:16:fe:02:2c:c9:be:b3: 52:12:5c:25:a7:b7:aa:f0:b2:7d:9d:4d:49:c2:6e: 3b:b5:b1:9d:43:d2:62:80:f6:4a:89:48:05:24:de: ce:10:8c:81:1d:a4:5e:b1:a4:4f:7a:eb:6e:e0:cb: a6:2c:bd:94:65:98:70:97:69:32:54:24:cc:9f:dd: b6:ad:7c:22:48:14:3e:af:d3:7b:2e:51:cb:00:99: a8:3e:78:76:9d:ed:52:05:4f:69:b6:ce:5a:8d:f6: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E9:0A:C2:41:2A:99:86:D1:B0:9A:04:C0:03:3D:62:14:CB:53:38 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5OkKwkEqmYbRsJoEwAM9YhTLUzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:80:0d:34:9f:97:72:6d:ac:e2:80:27:01:3f:b6:07:70:14: 9f:1d:4b:5f:38:aa:55:2a:b3:e0:4e:16:50:5e:b9:dc:9e:b9: 83:36:5b:d8:d0:c6:0b:21:d9:cc:93:08:70:09:47:cc:ff:5a: 8e:7e:9a:60:43:03:65:1c:b5:8f:85:a4:47:8a:66:4b:ef:a0: c6:75:9f:50:38:77:7f:7b:e0:49:8d:12:c1:65:b8:8f:58:5f: bc:15:30:6a:59:f0:2c:66:00:e1:f6:a8:b4:72:e2:b1:8e:af: b0:1d:71:b5:15:73:01:71:46:37:d1:35:bd:1a:03:76:8b:c1: ac:05:6a:18:be:5a:c4:77:fa:ef:fa:09:2f:d2:49:b6:ec:3d: 1c:dc:80:57:53:01:48:c4:9c:9f:61:ff:cf:39:a0:78:9c:b1: 20:36:19:61:90:05:cc:23:9b:56:85:c8:cf:08:1f:94:d4:85: f2:8c:68:bc:d4:11:90:1a:d8:18:e2:a1:47:ab:41:7a:31:c4: 74:d3:71:a0:68:75:d1:c0:1e:22:86:49:c3:bb:84:5e:b1:ae: d2:30:ca:58:93:68:8e:4b:17:53:39:ce:16:3f:b7:b7:b8:85: 68:0a:37:c0:86:a6:fe:67:0d:f3:a2:81:8d:48:51:1d:2c:b7: cb:26:39:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fymMyqJjBn0x7yLC6bjZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGU5MGFjMjQxMmE5OTg2ZDFiMDlhMDRjMDAzM2Q2MjE0Y2I1MzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64AUgykOrzK1O82Yd9ceWvlZMbQf LFV+xe/FR/keouvvhn1VKcL1oVRyKMRHmqnMKgt1xSi7n+4xlaZOsVanJDMXgSNP c0Ptx6L1vKflnMliOXoLiuCjxz3xpKc/+gfVmhqwAOR2AhAjTKdIME/at23En0yx i7GwTcszINgfnWd1/ohs9quNtyAHkjqvnM3n+a7OcNeFdjvPrxjK3xb+AizJvrNS Elwlp7eq8LJ9nU1Jwm47tbGdQ9JigPZKiUgFJN7OEIyBHaResaRPeutu4MumLL2U ZZhwl2kyVCTMn922rXwiSBQ+r9N7LlHLAJmoPnh2ne1SBU9pts5ajfbmJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOTpCsJBKpmG0bCaBMADPWIUy1M4MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNU9rS3drRXFtWWJSc0pvRXdBTTlZaFRMVXpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhzMA0G CSqGSIb3DQEBCwUAA4IBAQAKgA00n5dybazigCcBP7YHcBSfHUtfOKpVKrPgThZQ XrncnrmDNlvY0MYLIdnMkwhwCUfM/1qOfppgQwNlHLWPhaRHimZL76DGdZ9QOHd/ e+BJjRLBZbiPWF+8FTBqWfAsZgDh9qi0cuKxjq+wHXG1FXMBcUY30TW9GgN2i8Gs BWoYvlrEd/rv+gkv0km27D0c3IBXUwFIxJyfYf/POaB4nLEgNhlhkAXMI5tWhcjP CB+U1IXyjGi81BGQGtgY4qFHq0F6McR003GgaHXRwB4ihknDu4Resa7SMMpYk2iO SxdTOc4WP7e3uIVoCjfAhqb+Zw3zooGNSFEdLLfLJjn4 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:46 2026 by rpki-client