This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6t99PnwWn-BVKajh8cF8oLFV4AU.roa File: 6t99PnwWn-BVKajh8cF8oLFV4AU.roa (raw, json) Hash identifier: Ni/8y7wm5KFQ4/2Rm+ISrTCQOWj7rxM8SYDnF0aY/CI= Subject key identifier: EA:DF:7D:3E:7C:16:9F:E0:55:29:A8:E1:F1:C1:7C:A0:B1:55:E0:05 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A7C77800B8D3EE8502537C82FF9ABC662 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6t99PnwWn-BVKajh8cF8oLFV4AU.roa Signing time: Thu 13 Nov 2025 09:06:37 +0000 ROA not before: Thu 13 Nov 2025 09:06:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203869 IP address blocks: 170.168.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:77:80:0b:8d:3e:e8:50:25:37:c8:2f:f9:ab:c6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 13 09:06:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eadf7d3e7c169fe05529a8e1f1c17ca0b155e005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:b5:b8:ab:dc:a8:6a:45:75:90:d6:f1:df: 82:fb:f9:fe:43:46:4e:5e:2a:f0:73:8f:20:1d:46: 79:84:ff:01:9c:c0:db:52:eb:1b:db:e7:f9:15:9c: 4e:df:25:d5:9d:ff:d7:1d:d3:30:d5:3d:35:2b:d4: b0:da:8d:60:84:f5:32:b8:6b:66:a1:45:71:a7:99: dd:ae:c7:35:73:8a:a7:91:f4:92:1f:75:c4:f7:6d: 84:5a:4e:70:40:f3:5b:ba:09:ce:e8:83:01:1c:0c: 52:21:36:6c:c5:0c:68:da:52:4d:b5:4c:2e:4e:0e: 48:8f:1d:ee:04:05:0c:07:2f:76:8d:bf:0e:d1:1b: f4:aa:c5:3d:d1:f7:57:cf:2b:b8:b7:a2:a8:83:b1: 91:3b:01:14:70:c5:d7:ba:5c:8d:6f:eb:f1:d9:72: 1c:2e:7c:20:41:15:c3:f8:e9:77:0d:63:09:c5:99: ec:ec:8e:00:34:30:87:20:d9:f8:76:21:82:bb:ea: 2e:a7:71:5f:8d:58:3a:0d:61:ae:03:8a:f2:1e:54: 2e:b2:09:29:99:5c:d0:69:dc:81:71:f0:d7:a4:8f: 41:f4:28:9a:f5:5f:82:08:95:88:15:64:92:47:17: 96:47:75:c5:6e:b3:81:de:44:bb:b5:7a:00:99:a8: e1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DF:7D:3E:7C:16:9F:E0:55:29:A8:E1:F1:C1:7C:A0:B1:55:E0:05 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/6t99PnwWn-BVKajh8cF8oLFV4AU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.128.0/24 Signature Algorithm: sha256WithRSAEncryption 22:4a:f5:b9:f7:82:1e:d5:79:8d:f4:4f:2c:86:09:22:27:c7: a3:af:1c:75:5f:aa:df:18:08:71:54:95:fa:55:27:f7:94:3c: 70:d1:f7:25:14:34:a4:69:cd:99:ad:86:53:e3:79:50:78:f9: 58:e9:72:a9:d2:8a:e0:4b:89:0b:dc:cf:ac:24:c1:08:25:bc: 1c:bf:0f:2d:b7:28:6b:69:87:8f:43:ad:3c:55:31:f3:6a:44: 3d:c5:5e:ec:ba:9b:82:65:78:fd:b4:ae:82:9a:3f:47:f4:8a: d2:d8:c3:49:05:7e:04:31:a3:24:78:5c:f6:90:c7:16:6f:5f: 4e:4c:0c:c0:37:d5:92:bd:00:16:08:d1:19:dc:d3:f3:34:0c: 2b:03:5c:ef:fd:1f:cb:26:1e:96:74:81:69:9b:43:b3:e7:1a: 86:04:f8:b5:e1:c5:9a:09:ba:03:e6:6a:db:d8:e7:22:bf:8d: 80:eb:4b:a9:c2:88:65:6c:8a:1d:cd:75:66:6d:ea:64:e4:8d: a7:94:b1:f8:e1:a8:05:de:e7:7c:df:cd:72:d6:66:ae:c2:82: ce:85:b8:76:9e:ef:7c:61:2a:e3:f3:7b:4a:af:06:c1:ae:ac: 53:4d:27:e3:ae:15:5a:3a:f9:a1:a5:01:4c:bf:0a:aa:5d:b4: ee:6c:31:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp8d4ALjT7oUCU3yC/5q8ZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTEzMDkwNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWRmN2QzZTdjMTY5ZmUwNTUyOWE4ZTFmMWMxN2NhMGIxNTVlMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyO1uKvcqGpFdZDW8d+C+/n+Q0ZO Xirwc48gHUZ5hP8BnMDbUusb2+f5FZxO3yXVnf/XHdMw1T01K9Sw2o1ghPUyuGtm oUVxp5ndrsc1c4qnkfSSH3XE922EWk5wQPNbugnO6IMBHAxSITZsxQxo2lJNtUwu Tg5Ijx3uBAUMBy92jb8O0Rv0qsU90fdXzyu4t6Kog7GROwEUcMXXulyNb+vx2XIc LnwgQRXD+Ol3DWMJxZns7I4ANDCHINn4diGCu+oup3FfjVg6DWGuA4ryHlQusgkp mVzQadyBcfDXpI9B9Cia9V+CCJWIFWSSRxeWR3XFbrOB3kS7tXoAmajhcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOrffT58Fp/gVSmo4fHBfKCxVeAFMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvNnQ5OVBud1duLUJWS2FqaDhjRjhvTEZWNEFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqiAMA0G CSqGSIb3DQEBCwUAA4IBAQAiSvW594Ie1XmN9E8shgkiJ8ejrxx1X6rfGAhxVJX6 VSf3lDxw0fclFDSkac2ZrYZT43lQePlY6XKp0orgS4kL3M+sJMEIJbwcvw8ttyhr aYePQ608VTHzakQ9xV7supuCZXj9tK6Cmj9H9IrS2MNJBX4EMaMkeFz2kMcWb19O TAzAN9WSvQAWCNEZ3NPzNAwrA1zv/R/LJh6WdIFpm0Oz5xqGBPi14cWaCboD5mrb 2Ociv42A60upwohlbIodzXVmbepk5I2nlLH44agF3ud8381y1mauwoLOhbh2nu98 YSrj83tKrwbBrqxTTSfjrhVaOvmhpQFMvwqqXbTubDHP -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:07 2025 by rpki-client