This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/COlrwjj13FF9gHaIbEd0fbOnwNk.roa File: COlrwjj13FF9gHaIbEd0fbOnwNk.roa (raw, json) Hash identifier: 3CUX602ftuNsTarUuMnSa7F/nUWvCjg7ZTokwoyLaCU= Subject key identifier: 08:E9:6B:C2:38:F5:DC:51:7D:80:76:88:6C:47:74:7D:B3:A7:C0:D9 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F416728127C23C70E2A5052A88FA0 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/COlrwjj13FF9gHaIbEd0fbOnwNk.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214822 IP address blocks: 170.168.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:41:67:28:12:7c:23:c7:0e:2a:50:52:a8:8f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08e96bc238f5dc517d8076886c47747db3a7c0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:93:fd:af:fd:34:c9:00:ac:2d:75:53:54:33: bb:30:90:31:35:82:8f:2d:74:97:0f:c3:97:a5:26: 23:5d:af:81:3e:b3:b9:71:0b:20:4c:f5:15:f3:a7: 1b:05:77:63:49:14:0e:53:39:9a:e9:05:d6:6a:44: bb:f2:9e:7b:29:78:30:84:63:42:79:a1:94:b8:80: 01:a9:9a:87:d7:46:bd:5b:79:b7:cf:ce:bf:bb:c8: 28:b2:db:2d:66:cb:74:79:37:2c:86:75:81:74:d5: e1:e0:e3:8b:ae:56:ed:e7:b3:2b:2a:5f:13:72:86: c1:f1:c8:5a:37:a0:d6:a2:6d:63:d5:4e:99:54:89: 98:8b:d5:e9:23:66:05:61:4d:b7:3d:6b:5a:84:e6: 6f:b0:f1:73:f6:c7:02:34:73:a5:91:b5:f0:8d:32: 5b:84:c1:9e:7c:cd:3a:f4:c2:7c:3b:b2:ec:c0:cd: 07:2c:63:b3:f2:da:7f:83:89:73:e1:4e:ba:c7:1b: 67:1d:89:83:70:c2:fc:79:4d:03:6e:cf:95:8f:fa: 7f:51:95:e1:b3:6e:ca:4e:6f:7a:66:85:94:57:3c: 2f:58:d0:e9:8a:28:fa:11:88:8d:89:df:4c:83:4c: 32:61:0b:74:c7:6d:82:a2:9a:14:58:88:71:cc:de: 60:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E9:6B:C2:38:F5:DC:51:7D:80:76:88:6C:47:74:7D:B3:A7:C0:D9 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/COlrwjj13FF9gHaIbEd0fbOnwNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.15.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:35:ff:2c:62:91:5f:08:f9:75:66:18:4b:de:98:9b:08:fc: 8f:8c:db:be:da:d1:33:b5:cd:d1:9f:7a:0e:3d:72:c4:d2:ce: 73:37:5d:1f:35:5c:8b:38:b7:08:ea:dd:2a:7c:7b:1d:c9:f2: d6:6d:4b:f9:6a:50:86:52:f5:31:00:7b:6e:f9:85:3a:73:2e: dc:54:0d:17:3d:fe:f2:91:d2:72:30:69:b2:5f:5c:29:32:ab: 61:74:5b:9b:e1:c0:a8:7f:d4:a2:6e:8a:a8:2a:6d:b3:ff:1f: 90:c6:ae:17:75:65:17:80:cd:47:62:41:0a:e7:58:4f:ef:94: a3:0e:7e:dc:40:57:f2:54:6e:5e:0b:95:ab:d0:9a:92:7e:5b: 95:11:95:5e:9f:3c:61:44:93:47:bc:70:2b:be:30:9a:88:c7: cf:a9:61:84:be:fa:76:02:e2:6c:46:97:67:a2:b8:1b:67:7d: cf:2c:af:ea:fc:b1:c4:e3:21:57:97:d0:64:0c:91:6c:b4:71: cf:2f:7e:7f:7b:08:68:20:ec:b3:97:86:57:a0:c9:dd:76:57: c3:ef:f6:f7:ff:7e:8b:70:fc:68:f1:44:66:98:c3:8e:b8:21: 18:65:5b:61:01:9b:35:1a:c7:06:bc:7d:0c:39:1e:a4:2e:3d: 3d:50:be:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0FnKBJ8I8cOKlBSqI+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGU5NmJjMjM4ZjVkYzUxN2Q4MDc2ODg2YzQ3NzQ3ZGIzYTdjMGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJP9r/00yQCsLXVTVDO7MJAxNYKP LXSXD8OXpSYjXa+BPrO5cQsgTPUV86cbBXdjSRQOUzma6QXWakS78p57KXgwhGNC eaGUuIABqZqH10a9W3m3z86/u8goststZst0eTcshnWBdNXh4OOLrlbt57MrKl8T cobB8chaN6DWom1j1U6ZVImYi9XpI2YFYU23PWtahOZvsPFz9scCNHOlkbXwjTJb hMGefM069MJ8O7LswM0HLGOz8tp/g4lz4U66xxtnHYmDcML8eU0Dbs+Vj/p/UZXh s27KTm96ZoWUVzwvWNDpiij6EYiNid9Mg0wyYQt0x22CopoUWIhxzN5g2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjpa8I49dxRfYB2iGxHdH2zp8DZMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvQ09scndqajEzRkY5Z0hhSWJFZDBmYk9ud05rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgPMA0G CSqGSIb3DQEBCwUAA4IBAQB7Nf8sYpFfCPl1ZhhL3pibCPyPjNu+2tEztc3Rn3oO PXLE0s5zN10fNVyLOLcI6t0qfHsdyfLWbUv5alCGUvUxAHtu+YU6cy7cVA0XPf7y kdJyMGmyX1wpMqthdFub4cCof9SiboqoKm2z/x+Qxq4XdWUXgM1HYkEK51hP75Sj Dn7cQFfyVG5eC5Wr0JqSfluVEZVenzxhRJNHvHArvjCaiMfPqWGEvvp2AuJsRpdn orgbZ33PLK/q/LHE4yFXl9BkDJFstHHPL35/ewhoIOyzl4ZXoMnddlfD7/b3/36L cPxo8URmmMOOuCEYZVthAZs1GscGvH0MOR6kLj09UL5J -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:43 2026 by rpki-client