This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DWxA3Yg67laTZQsFNt8UvQM_6Bs.roa File: DWxA3Yg67laTZQsFNt8UvQM_6Bs.roa (raw, json) Hash identifier: 0Ak/5S+b2pF7SvCvvxk+Zsja5AttRIG/SipwdMKaVb0= Subject key identifier: 0D:6C:40:DD:88:3A:EE:56:93:65:0B:05:36:DF:14:BD:03:3F:E8:1B Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A6DF61F12ADECA9055B7FD1A60E12A142 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DWxA3Yg67laTZQsFNt8UvQM_6Bs.roa Signing time: Mon 10 Nov 2025 13:30:37 +0000 ROA not before: Mon 10 Nov 2025 13:30:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203912 IP address blocks: 170.168.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:f6:1f:12:ad:ec:a9:05:5b:7f:d1:a6:0e:12:a1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 10 13:30:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0d6c40dd883aee5693650b0536df14bd033fe81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:38:3a:04:57:85:34:88:ed:bd:0c:f2:14: a7:a8:96:ae:51:78:e8:53:cb:e5:0c:8d:48:e3:1e: c7:db:46:f3:92:e9:24:e4:d4:01:73:20:70:8b:1e: 85:4d:46:4a:f9:ce:ff:5a:24:69:a6:6c:e3:a3:05: 7a:70:8f:56:4a:8f:48:07:0d:16:ee:c3:8a:0d:7b: 04:b6:38:43:74:ab:37:d4:97:c1:38:c2:ff:b0:b5: 5b:b3:ae:77:9f:1e:b9:1c:2a:3c:6b:e2:12:62:63: 83:f8:a9:27:67:33:d9:44:55:9b:6c:67:6e:b8:51: 70:93:78:f4:36:92:a5:72:42:f0:fc:c1:8e:c9:95: 39:5b:91:48:ec:2d:cd:46:8a:2b:f5:01:b0:0d:72: ae:ab:48:cf:3a:85:36:d4:ce:77:34:34:6b:b4:cb: b0:8b:13:ed:15:44:7e:5c:d5:f8:8b:47:74:fe:a1: 21:5f:5e:f2:87:59:5c:da:c7:c4:33:10:41:40:2a: 2d:82:2b:8e:45:dd:f0:bb:c4:6e:1d:ac:35:f1:a1: eb:7f:b5:d6:41:12:e8:51:68:64:a1:0c:a9:d3:fb: 8a:77:36:0f:04:f8:19:34:2d:93:e4:b2:c5:03:51: dd:49:e4:35:67:e9:67:c1:5b:ce:30:a1:98:56:73: 69:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6C:40:DD:88:3A:EE:56:93:65:0B:05:36:DF:14:BD:03:3F:E8:1B X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/DWxA3Yg67laTZQsFNt8UvQM_6Bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.63.0/24 Signature Algorithm: sha256WithRSAEncryption 29:72:d4:a5:1f:e9:c9:b3:e8:39:2f:2d:01:47:29:77:1d:d2: 54:64:2a:7b:0b:88:e3:2e:9e:1a:be:97:80:5b:ee:b5:c4:bb: f3:a0:46:46:ab:00:d4:f9:86:77:10:b4:fa:11:ef:b8:cb:75: 1b:fb:d9:b0:3a:04:3a:26:17:7b:4d:22:66:eb:06:91:98:eb: 26:d4:55:e4:f1:c5:e8:6c:8f:a7:16:30:48:4a:89:1c:00:a2: d6:16:f4:ff:d9:7d:b4:61:0f:b2:4b:d0:4e:5f:8d:83:b2:6a: 9b:59:d0:45:19:4d:a2:bd:44:65:8f:23:00:c4:23:db:56:23: bc:ed:18:bf:63:c2:bc:9a:87:ed:03:20:55:64:25:9b:8e:27: e7:2d:a7:4c:a8:21:c3:1d:ae:9f:31:eb:a0:a4:f6:46:14:42: e2:f5:69:32:3b:ce:50:73:58:50:7d:01:5a:2a:b5:32:4f:e7: fa:02:04:79:b4:5a:7d:f1:0f:84:39:15:38:1c:c8:d2:c7:db: e9:d8:3e:1f:4f:eb:79:46:25:7e:e3:3e:ee:8b:0a:ee:7e:ca: e8:b4:9d:8b:09:e4:d4:4d:da:0a:0c:22:be:42:4e:6f:6d:0f: 64:78:80:30:c0:3d:b0:be:c4:f2:00:3a:92:b3:a0:3b:1f:07: ad:61:cb:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpt9h8SreypBVt/0aYOEqFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTEwMTMzMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDZjNDBkZDg4M2FlZTU2OTM2NTBiMDUzNmRmMTRiZDAzM2ZlODFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dE4OgRXhTSI7b0M8hSnqJauUXjo U8vlDI1I4x7H20bzkukk5NQBcyBwix6FTUZK+c7/WiRppmzjowV6cI9WSo9IBw0W 7sOKDXsEtjhDdKs31JfBOML/sLVbs653nx65HCo8a+ISYmOD+KknZzPZRFWbbGdu uFFwk3j0NpKlckLw/MGOyZU5W5FI7C3NRoor9QGwDXKuq0jPOoU21M53NDRrtMuw ixPtFUR+XNX4i0d0/qEhX17yh1lc2sfEMxBBQCotgiuORd3wu8RuHaw18aHrf7XW QRLoUWhkoQyp0/uKdzYPBPgZNC2T5LLFA1HdSeQ1Z+lnwVvOMKGYVnNpYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA1sQN2IOu5Wk2ULBTbfFL0DP+gbMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvRFd4QTNZZzY3bGFUWlFzRk50OFV2UU1fNkJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqg/MA0G CSqGSIb3DQEBCwUAA4IBAQApctSlH+nJs+g5Ly0BRyl3HdJUZCp7C4jjLp4avpeA W+61xLvzoEZGqwDU+YZ3ELT6Ee+4y3Ub+9mwOgQ6Jhd7TSJm6waRmOsm1FXk8cXo bI+nFjBISokcAKLWFvT/2X20YQ+yS9BOX42DsmqbWdBFGU2ivURljyMAxCPbViO8 7Ri/Y8K8moftAyBVZCWbjifnLadMqCHDHa6fMeugpPZGFELi9WkyO85Qc1hQfQFa KrUyT+f6AgR5tFp98Q+EORU4HMjSx9vp2D4fT+t5RiV+4z7uiwrufsrotJ2LCeTU TdoKDCK+Qk5vbQ9keIAwwD2wvsTyADqSs6A7HwetYcsk -----END CERTIFICATE-----Generated at Sat Dec 6 08:04:32 2025 by rpki-client