This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RKxbEg02CQqEEFZYU5UVK6B1_aw.roa File: RKxbEg02CQqEEFZYU5UVK6B1_aw.roa (raw, json) Hash identifier: eIUF6vP7/DVell1fwXGud9mJ7vhES91Vw0Kwb5W3Pws= Subject key identifier: 44:AC:5B:12:0D:36:09:0A:84:10:56:58:53:95:15:2B:A0:75:FD:AC Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F411F03B2A8E5043DDCC34D639A19 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RKxbEg02CQqEEFZYU5UVK6B1_aw.roa Signing time: Thu 01 Jan 2026 12:19:01 +0000 ROA not before: Thu 01 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214727 IP address blocks: 170.168.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:41:1f:03:b2:a8:e5:04:3d:dc:c3:4d:63:9a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44ac5b120d36090a841056585395152ba075fdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:11:22:91:24:03:a0:bd:08:3b:92:ec:e3: b0:4d:9a:4b:91:b9:44:95:a9:46:d1:c3:21:2e:75: e2:9e:b9:95:bc:01:ca:b1:7f:0f:c0:1c:26:98:0d: 27:89:4f:84:86:d5:3a:e5:ea:4c:d9:02:06:5a:22: e0:9b:3a:82:b8:bf:20:30:26:b8:4a:3b:50:a7:14: fd:81:2a:68:47:4d:4d:49:86:99:bf:5f:ec:ec:9f: 14:46:45:df:de:ae:15:9c:15:f0:24:b2:a1:cc:f4: 0e:ea:25:ae:84:93:79:b8:5f:7c:4a:cb:5c:25:8d: d7:d4:b8:88:09:ff:37:db:f7:5d:eb:60:3f:f2:fe: 99:06:ab:ef:51:89:4d:65:c0:1f:1b:7e:e1:8f:fe: db:26:0a:23:c2:dc:ca:e1:ab:a1:77:bc:95:96:3b: 04:03:83:7b:45:4d:bd:06:0d:27:38:84:bb:31:b1: f2:25:a2:72:04:5f:c0:b2:51:2e:76:ec:0f:61:6b: 1b:e7:bf:bc:ad:35:b8:2b:09:29:fa:57:ec:e1:fa: 69:04:de:19:ff:1e:c7:0c:21:f3:24:21:ef:b4:1b: 86:72:7b:fe:f3:2f:84:48:98:7e:ff:1e:5b:1c:fb: 6b:a4:47:7a:e3:8f:b9:5c:c1:45:98:3c:a9:d1:dc: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AC:5B:12:0D:36:09:0A:84:10:56:58:53:95:15:2B:A0:75:FD:AC X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/RKxbEg02CQqEEFZYU5UVK6B1_aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.76.0/24 Signature Algorithm: sha256WithRSAEncryption 99:6c:21:bf:35:6d:a1:46:ec:36:06:4e:3e:b2:53:b6:a7:2a: c0:fa:73:f6:7e:58:4e:9d:f6:b6:32:73:0b:c4:39:e9:18:83: 54:a1:66:58:6e:22:a1:dc:db:32:d7:39:96:71:56:9d:fb:7d: e5:a7:1d:06:47:5e:ae:af:7a:af:e7:75:fe:ab:2f:68:2c:9f: 63:e8:41:a3:0d:4f:c2:3f:c3:2b:98:02:e5:18:61:aa:22:58: 1d:db:f1:f9:e0:d8:86:85:b2:7b:47:a9:a5:a9:72:dd:0a:20: 63:41:d1:b7:12:a2:ee:a6:d7:d8:42:50:d5:a8:2c:18:3e:c4: a5:2d:e2:af:c1:a7:e5:f4:d2:e5:41:36:48:f7:08:68:4e:80: 64:08:44:20:3c:fc:20:d9:24:a1:08:af:b8:53:b8:2a:cf:b2: d6:9c:a4:16:0c:c3:58:0c:8f:ca:39:13:3a:18:13:87:06:98: d5:16:54:a5:d9:d4:09:45:50:ee:58:60:a2:45:59:69:0d:fe: 2c:66:fe:ee:d9:68:44:0c:4a:32:a2:d0:b6:89:fc:ce:46:41: 36:c2:ff:48:73:89:3d:56:27:0b:48:c6:fd:49:83:88:64:4e: 6e:0d:a8:ec:c2:91:b5:cc:d5:5c:f8:75:bd:02:0f:f0:9e:20: 9e:c6:af:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5f0EfA7Ko5QQ93MNNY5oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGFjNWIxMjBkMzYwOTBhODQxMDU2NTg1Mzk1MTUyYmEwNzVmZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGARIpEkA6C9CDuS7OOwTZpLkblE lalG0cMhLnXinrmVvAHKsX8PwBwmmA0niU+EhtU65epM2QIGWiLgmzqCuL8gMCa4 SjtQpxT9gSpoR01NSYaZv1/s7J8URkXf3q4VnBXwJLKhzPQO6iWuhJN5uF98Sstc JY3X1LiICf832/dd62A/8v6ZBqvvUYlNZcAfG37hj/7bJgojwtzK4auhd7yVljsE A4N7RU29Bg0nOIS7MbHyJaJyBF/AslEuduwPYWsb57+8rTW4Kwkp+lfs4fppBN4Z /x7HDCHzJCHvtBuGcnv+8y+ESJh+/x5bHPtrpEd644+5XMFFmDyp0dypEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFESsWxINNgkKhBBWWFOVFSugdf2sMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvUkt4YkVnMDJDUXFFRUZaWVU1VVZLNkIxX2F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhMMA0G CSqGSIb3DQEBCwUAA4IBAQCZbCG/NW2hRuw2Bk4+slO2pyrA+nP2flhOnfa2MnML xDnpGINUoWZYbiKh3Nsy1zmWcVad+33lpx0GR16ur3qv53X+qy9oLJ9j6EGjDU/C P8MrmALlGGGqIlgd2/H54NiGhbJ7R6mlqXLdCiBjQdG3EqLuptfYQlDVqCwYPsSl LeKvwafl9NLlQTZI9whoToBkCEQgPPwg2SShCK+4U7gqz7LWnKQWDMNYDI/KORM6 GBOHBpjVFlSl2dQJRVDuWGCiRVlpDf4sZv7u2WhEDEoyotC2ifzORkE2wv9Ic4k9 VicLSMb9SYOIZE5uDajswpG1zNVc+HW9Ag/wniCexq9k -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:11 2026 by rpki-client