This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5pIOySkarCfAnCvqp4DEf7-zNmY.roa File: 5pIOySkarCfAnCvqp4DEf7-zNmY.roa (raw, json) Hash identifier: hF+iQZcmRv2FsDkiOXiYz+/tWgd09SYSMoxzZvQ0kqo= Subject key identifier: E6:92:0E:C9:29:1A:AC:27:C0:9C:2B:EA:A7:80:C4:7F:BF:B3:36:66 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019AB6AF08167B14B97E82609AAEF9C508B9 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5pIOySkarCfAnCvqp4DEf7-zNmY.roa Signing time: Mon 24 Nov 2025 16:25:15 +0000 ROA not before: Mon 24 Nov 2025 16:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214822 IP address blocks: 170.168.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:af:08:16:7b:14:b9:7e:82:60:9a:ae:f9:c5:08:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 24 16:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e6920ec9291aac27c09c2beaa780c47fbfb33666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:f4:77:3b:ff:be:b6:e2:59:1f:c9:d2:46: c5:9e:fc:bb:39:ee:a6:59:9f:01:e7:a0:5a:a7:d4: 9e:5e:4d:67:2e:bb:06:dc:c3:4f:3d:05:66:f8:e7: a1:24:7c:1a:04:22:24:ba:27:5c:d8:30:59:01:6a: 46:45:8d:82:38:da:25:a9:13:51:ce:5e:ca:e1:23: 7e:0d:0e:ef:5e:73:69:00:bd:68:3b:2f:90:33:7c: 30:38:34:0b:fd:78:44:af:9c:d2:e4:41:a9:14:a3: 79:54:7b:90:30:16:b2:bc:ee:ef:57:6e:89:f1:50: 8c:7e:1a:7b:42:c9:86:cb:df:8b:6a:19:1c:dc:23: 1f:35:f4:51:be:76:f0:14:c9:de:63:c8:63:48:df: f5:be:42:d0:0d:33:34:08:44:b2:9b:4a:e3:fa:82: c2:ec:04:9a:f9:f6:b5:a3:44:40:0c:15:c4:6c:7f: 36:0f:f0:06:13:c3:75:49:4f:68:63:9d:c8:6e:77: 07:ec:d5:89:75:d4:40:7c:66:26:56:e1:61:f9:8e: 42:22:6d:b8:41:10:12:61:11:a9:44:87:f8:11:61: 23:3e:8e:84:6b:f7:3a:b8:8e:fd:22:c5:ff:20:ae: 7e:ca:07:81:05:7e:9a:0a:a9:53:99:1e:67:7d:24: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:92:0E:C9:29:1A:AC:27:C0:9C:2B:EA:A7:80:C4:7F:BF:B3:36:66 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/5pIOySkarCfAnCvqp4DEf7-zNmY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.15.0/24 Signature Algorithm: sha256WithRSAEncryption 96:57:f0:3e:80:8c:7b:b1:c8:11:1c:ef:78:fd:8d:ba:ee:4e: 3e:23:e2:9b:05:f1:86:61:c7:5c:0e:f8:02:ac:e1:cb:18:b6: eb:78:5a:a6:f3:e6:b8:ae:d9:aa:da:df:68:6a:ef:7b:07:76: aa:09:6a:88:15:7c:8c:6d:b2:65:7c:65:1b:27:71:09:fb:67: f2:52:8e:7f:e5:b0:35:b5:25:a2:c8:66:b1:2d:dd:a2:1f:c0: 0c:a3:9d:7c:1a:0e:c7:81:e8:84:7f:94:d3:91:36:49:42:22: bf:31:c0:82:7e:8f:e4:93:91:d3:de:51:9a:40:4c:96:f0:27: b8:a1:ca:63:b3:9e:65:99:74:e6:ea:a6:df:93:8e:49:86:5c: 37:1c:17:a0:05:8d:bb:b5:f4:0a:28:12:dc:63:9d:59:55:ae: 06:ec:85:3a:68:7d:dc:c9:8f:93:b5:b2:29:73:59:32:7e:bb: b3:89:f0:d1:18:9b:cc:5d:92:8c:eb:62:c3:66:e5:ef:00:23: c1:54:b8:df:dd:e9:16:d1:25:c0:a2:9d:b1:17:8b:c1:b0:d9: 17:a6:e1:5b:a1:91:4b:95:68:dc:fa:d0:75:93:7a:e2:b7:9c: a0:9f:04:d0:a6:59:e1:5a:7b:7c:6e:6e:77:69:c4:f5:a3:e5: 68:3f:1a:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq2rwgWexS5foJgmq75xQi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTI0MTYyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjkyMGVjOTI5MWFhYzI3YzA5YzJiZWFhNzgwYzQ3ZmJmYjMzNjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlj0dzv/vrbiWR/J0kbFnvy7Oe6m WZ8B56Bap9SeXk1nLrsG3MNPPQVm+OehJHwaBCIkuidc2DBZAWpGRY2CONolqRNR zl7K4SN+DQ7vXnNpAL1oOy+QM3wwODQL/XhEr5zS5EGpFKN5VHuQMBayvO7vV26J 8VCMfhp7QsmGy9+Lahkc3CMfNfRRvnbwFMneY8hjSN/1vkLQDTM0CESym0rj+oLC 7ASa+fa1o0RADBXEbH82D/AGE8N1SU9oY53IbncH7NWJddRAfGYmVuFh+Y5CIm24 QRASYRGpRIf4EWEjPo6Ea/c6uI79IsX/IK5+ygeBBX6aCqlTmR5nfSRi6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaSDskpGqwnwJwr6qeAxH+/szZmMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNXBJT3lTa2FyQ2ZBbkN2cXA0REVmNy16Tm1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgPMA0G CSqGSIb3DQEBCwUAA4IBAQCWV/A+gIx7scgRHO94/Y267k4+I+KbBfGGYcdcDvgC rOHLGLbreFqm8+a4rtmq2t9oau97B3aqCWqIFXyMbbJlfGUbJ3EJ+2fyUo5/5bA1 tSWiyGaxLd2iH8AMo518Gg7HgeiEf5TTkTZJQiK/McCCfo/kk5HT3lGaQEyW8Ce4 ocpjs55lmXTm6qbfk45Jhlw3HBegBY27tfQKKBLcY51ZVa4G7IU6aH3cyY+TtbIp c1kyfruzifDRGJvMXZKM62LDZuXvACPBVLjf3ekW0SXAop2xF4vBsNkXpuFboZFL lWjc+tB1k3rit5ygnwTQplnhWnt8bm53acT1o+VoPxqS -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:45 2025 by rpki-client