This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CKE8je3gDbjsbOmiMjaj0AEwhEk.roa File: CKE8je3gDbjsbOmiMjaj0AEwhEk.roa (raw, json) Hash identifier: vU8iTsd41SKMZaGgTdjSB09/u+repJ9wRLjNLmKkm8c= Subject key identifier: 08:A1:3C:8D:ED:E0:0D:B8:EC:6C:E9:A2:32:36:A3:D0:01:30:84:49 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F34597109CEC876011781851E9D76 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CKE8je3gDbjsbOmiMjaj0AEwhEk.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199669 IP address blocks: 170.168.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:34:59:71:09:ce:c8:76:01:17:81:85:1e:9d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08a13c8dede00db8ec6ce9a23236a3d001308449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:cf:2f:08:78:e5:06:0b:f0:81:1c:e6:5f: 21:49:26:1f:2c:67:a4:79:0c:69:90:86:2a:eb:f3: 4b:b1:05:cb:c6:d1:0f:d6:18:5e:2d:c7:b5:f7:e3: 97:51:60:b3:8a:bc:13:40:d1:f1:8e:8d:f6:a9:84: 56:db:31:09:79:9d:d7:14:6e:2f:1a:d4:4e:c5:e2: 13:c8:1c:fd:9e:09:ef:fb:1b:5e:d8:68:e6:bb:10: e7:78:9e:4b:61:3a:81:a5:0d:5f:03:35:e5:4f:16: 10:6f:87:48:82:c3:7b:80:24:3f:c7:90:76:17:b5: 30:03:c3:5d:b9:b3:a9:c1:a0:85:99:83:60:e1:0b: 67:32:d0:2f:83:c7:33:c4:34:25:c9:28:70:f4:68: 6e:49:78:4b:a6:a6:82:bd:d6:41:6c:e1:cd:e7:c6: a4:53:43:40:23:f5:f1:63:ab:7d:ec:8f:91:90:20: 10:fb:65:88:ef:5b:c5:aa:80:a5:4f:f0:7e:a0:78: 7c:37:92:f0:34:0b:de:68:c1:55:78:36:ce:5e:21: a1:15:69:9c:ba:42:96:e1:bc:4b:cc:d3:c4:a6:64: ac:9d:f1:05:87:35:0a:7c:dd:bf:c9:c1:e7:b4:2f: fd:b5:67:ac:65:67:02:60:84:60:a5:cf:ee:10:f9: c9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:A1:3C:8D:ED:E0:0D:B8:EC:6C:E9:A2:32:36:A3:D0:01:30:84:49 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CKE8je3gDbjsbOmiMjaj0AEwhEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.21.0/24 Signature Algorithm: sha256WithRSAEncryption 94:8c:73:ca:94:ab:d6:52:bb:fc:f0:c0:0e:9c:69:93:86:d7: cd:00:10:86:a1:7f:20:a2:39:af:53:54:c9:b2:34:74:cc:76: 7e:74:fe:41:88:e3:06:4f:de:1a:2b:74:11:9e:c0:a1:63:5d: 4e:51:2f:3b:fd:ad:c2:91:a2:94:01:22:18:a9:c1:62:1f:d1: d1:bc:de:e9:e9:ae:da:fe:a8:bd:08:fb:9c:63:6f:45:b3:55: 93:68:6f:49:bf:c7:73:39:28:ee:09:e0:7b:17:fe:bd:cd:a2: a6:e7:b3:76:5d:17:a5:10:45:dc:74:12:ba:57:6c:43:d4:26: f4:0d:aa:a6:ea:09:19:08:29:9a:fd:d0:60:54:0a:49:0c:64: d4:f8:58:bf:13:d4:df:20:36:d8:75:cd:13:85:aa:d1:08:17: 42:53:5e:67:7f:89:08:39:77:29:16:11:ff:32:84:e3:0e:2b: c0:d7:9f:cf:45:16:d1:61:36:6a:7f:e2:38:16:9e:66:32:6b: 67:d0:e5:8e:9a:6f:ca:97:87:f8:33:6b:e6:1c:8f:aa:6e:bf: e6:c7:01:0e:24:19:9f:63:f5:ab:b8:f1:64:b4:76:f3:b5:cc: 9a:6f:a6:39:ec:0e:14:c1:15:65:0b:65:44:37:2d:9f:e7:f0: d7:d1:94:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzRZcQnOyHYBF4GFHp12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGExM2M4ZGVkZTAwZGI4ZWM2Y2U5YTIzMjM2YTNkMDAxMzA4NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzPPLwh45QYL8IEc5l8hSSYfLGek eQxpkIYq6/NLsQXLxtEP1hheLce19+OXUWCzirwTQNHxjo32qYRW2zEJeZ3XFG4v GtROxeITyBz9ngnv+xte2GjmuxDneJ5LYTqBpQ1fAzXlTxYQb4dIgsN7gCQ/x5B2 F7UwA8NdubOpwaCFmYNg4QtnMtAvg8czxDQlyShw9GhuSXhLpqaCvdZBbOHN58ak U0NAI/XxY6t97I+RkCAQ+2WI71vFqoClT/B+oHh8N5LwNAveaMFVeDbOXiGhFWmc ukKW4bxLzNPEpmSsnfEFhzUKfN2/ycHntC/9tWesZWcCYIRgpc/uEPnJkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAihPI3t4A247GzpojI2o9ABMIRJMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvQ0tFOGplM2dEYmpzYk9taU1qYWowQUV3aEVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgVMA0G CSqGSIb3DQEBCwUAA4IBAQCUjHPKlKvWUrv88MAOnGmThtfNABCGoX8gojmvU1TJ sjR0zHZ+dP5BiOMGT94aK3QRnsChY11OUS87/a3CkaKUASIYqcFiH9HRvN7p6a7a /qi9CPucY29Fs1WTaG9Jv8dzOSjuCeB7F/69zaKm57N2XRelEEXcdBK6V2xD1Cb0 Daqm6gkZCCma/dBgVApJDGTU+Fi/E9TfIDbYdc0TharRCBdCU15nf4kIOXcpFhH/ MoTjDivA15/PRRbRYTZqf+I4Fp5mMmtn0OWOmm/Kl4f4M2vmHI+qbr/mxwEOJBmf Y/WruPFktHbztcyab6Y57A4UwRVlC2VENy2f5/DX0ZTf -----END CERTIFICATE-----Generated at Sun Jan 25 19:58:58 2026 by rpki-client