This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/PzaDJgAYb0CpUy-XH4xpykBR9v0.roa File: PzaDJgAYb0CpUy-XH4xpykBR9v0.roa (raw, json) Hash identifier: EA8h1myZoMO6k4k/hsqH1OTO+AXJGxLSMOqkq5mkzLQ= Subject key identifier: 3F:36:83:26:00:18:6F:40:A9:53:2F:97:1F:8C:69:CA:40:51:F6:FD Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3D3B06A8CD7742141A56944FB002 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/PzaDJgAYb0CpUy-XH4xpykBR9v0.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210956 IP address blocks: 170.168.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3d:3b:06:a8:cd:77:42:14:1a:56:94:4f:b0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f36832600186f40a9532f971f8c69ca4051f6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:c7:b1:e4:5c:c3:6a:c6:90:22:a1:8f:c8: 34:00:23:8a:10:e0:3a:0d:b3:1d:64:04:51:a3:7e: b7:91:39:42:fc:25:5c:29:81:31:2d:e4:fa:e3:ee: e7:b5:62:e0:41:c7:ab:19:6b:4a:21:c9:3a:0f:02: e2:51:6f:58:99:89:f5:c6:e5:48:f0:fb:40:08:d5: ec:0e:01:cb:bd:59:bb:df:bf:cd:98:85:48:68:87: 52:b5:17:22:41:9b:69:ff:cb:d0:be:20:fb:8e:cc: bd:ca:64:5e:3c:cd:c6:83:0f:fc:90:ab:8b:14:ca: e9:88:f9:b6:40:1c:d9:d9:8a:29:14:82:1f:bb:88: 94:38:17:e2:e6:9a:3f:91:67:96:f9:be:ca:12:59: 4b:0f:42:35:bd:c6:b8:bd:65:bc:99:ee:97:7d:68: 8a:da:1a:d1:3a:ef:c6:32:d8:54:c3:58:29:56:88: 28:e4:88:8a:20:9b:7c:f6:b0:92:68:a7:08:b7:3b: 2a:db:6e:16:7e:b6:74:57:75:f2:08:14:7f:43:40: 3b:2f:7e:92:08:82:13:5a:b0:54:87:ef:63:f2:6d: ff:a0:10:25:54:a3:e9:5c:36:e5:c9:1c:64:7d:96: ad:32:69:11:bd:bb:9e:b7:cd:fe:63:59:00:a6:2c: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:36:83:26:00:18:6F:40:A9:53:2F:97:1F:8C:69:CA:40:51:F6:FD X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/PzaDJgAYb0CpUy-XH4xpykBR9v0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.8.0/24 Signature Algorithm: sha256WithRSAEncryption 70:36:d9:ec:17:bd:16:0c:95:42:cf:76:6d:a9:30:47:92:c7: 75:3c:92:70:25:32:ae:c0:bd:ec:96:f9:a2:1d:e5:93:59:91: 45:52:ab:34:76:08:19:c3:1d:c5:6e:d5:5a:85:03:22:8f:f9: 25:04:48:d8:2e:d1:ba:db:a4:15:32:12:ae:d6:1c:a4:e0:09: 98:7c:5d:f8:8f:80:cc:71:88:0b:88:84:f5:b3:74:81:88:b8: cf:8a:8d:dc:74:87:35:3c:83:cf:81:0c:bf:61:38:ea:d1:fa: 02:83:95:75:72:71:99:35:7e:bc:4a:95:7a:cf:7f:f5:f2:23: ca:25:8f:83:a2:62:1e:73:6f:0b:34:1d:8e:52:be:90:91:01: 9b:17:fc:04:f4:4b:af:dc:a9:02:5d:62:33:7d:d0:7b:fd:85: 4c:e0:5e:6b:d2:c9:dd:94:58:6d:24:b2:40:98:a6:ff:12:9d: 54:4c:a8:1c:9b:f4:46:91:27:f5:23:cb:26:33:ea:6d:13:ff: b5:9f:4f:76:c8:16:b2:d2:cc:11:70:46:de:b4:3f:5b:9b:38: 9d:5c:91:42:91:c8:9b:79:aa:d6:9a:26:f2:bd:cd:f2:85:ff: 7a:70:65:e2:90:65:b9:60:62:68:e7:42:4b:94:b5:bc:09:11: e2:6d:a8:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fz07BqjNd0IUGlaUT7ACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjM2ODMyNjAwMTg2ZjQwYTk1MzJmOTcxZjhjNjljYTQwNTFmNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BLHseRcw2rGkCKhj8g0ACOKEOA6 DbMdZARRo363kTlC/CVcKYExLeT64+7ntWLgQcerGWtKIck6DwLiUW9YmYn1xuVI 8PtACNXsDgHLvVm737/NmIVIaIdStRciQZtp/8vQviD7jsy9ymRePM3Ggw/8kKuL FMrpiPm2QBzZ2YopFIIfu4iUOBfi5po/kWeW+b7KEllLD0I1vca4vWW8me6XfWiK 2hrROu/GMthUw1gpVogo5IiKIJt89rCSaKcItzsq224WfrZ0V3XyCBR/Q0A7L36S CIITWrBUh+9j8m3/oBAlVKPpXDblyRxkfZatMmkRvbuet83+Y1kApizukwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD82gyYAGG9AqVMvlx+MacpAUfb9MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvUHphREpnQVliMENwVXktWEg0eHB5a0JSOXYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgIMA0G CSqGSIb3DQEBCwUAA4IBAQBwNtnsF70WDJVCz3ZtqTBHksd1PJJwJTKuwL3slvmi HeWTWZFFUqs0dggZwx3FbtVahQMij/klBEjYLtG626QVMhKu1hyk4AmYfF34j4DM cYgLiIT1s3SBiLjPio3cdIc1PIPPgQy/YTjq0foCg5V1cnGZNX68SpV6z3/18iPK JY+DomIec28LNB2OUr6QkQGbF/wE9Euv3KkCXWIzfdB7/YVM4F5r0sndlFhtJLJA mKb/Ep1UTKgcm/RGkSf1I8smM+ptE/+1n092yBay0swRcEbetD9bmzidXJFCkcib earWmibyvc3yhf96cGXikGW5YGJo50JLlLW8CRHibain -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:42 2026 by rpki-client