This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/SRh4Hy3R47P3UQ1F9_KO1FqmhWk.roa File: SRh4Hy3R47P3UQ1F9_KO1FqmhWk.roa (raw, json) Hash identifier: izIqzgj6RaGzVKo1NWV9wDkk6SlaJry3+pwHw/n42NE= Subject key identifier: 49:18:78:1F:2D:D1:E3:B3:F7:51:0D:45:F7:F2:8E:D4:5A:A6:85:69 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A7D42BED3DEFFE7BEF0E657EFBD783984 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/SRh4Hy3R47P3UQ1F9_KO1FqmhWk.roa Signing time: Thu 13 Nov 2025 12:48:37 +0000 ROA not before: Thu 13 Nov 2025 12:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203858 IP address blocks: 170.168.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:42:be:d3:de:ff:e7:be:f0:e6:57:ef:bd:78:39:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 13 12:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4918781f2dd1e3b3f7510d45f7f28ed45aa68569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:90:43:ee:2c:96:d0:93:e6:87:8f:d0:9f: dc:27:ed:a0:37:4b:61:95:4d:a8:95:e3:b2:9d:41: fa:0b:53:53:58:e3:b5:5e:f4:d3:cf:15:99:fe:3c: 41:7a:63:52:f5:76:eb:d7:54:2d:e2:77:b5:11:70: 40:cd:f9:de:12:f9:31:b4:93:49:18:1f:8d:04:da: 9c:c3:29:79:b4:47:52:7d:7a:85:27:cf:0e:77:af: bb:c0:b8:95:36:f3:57:36:56:9b:66:15:28:49:ca: e6:21:18:98:40:4f:f8:8c:71:b4:d9:c7:48:80:05: 2a:8e:89:4d:80:fb:b4:f1:f9:25:d5:79:06:bf:2a: bf:18:3c:53:8c:9e:cb:7b:e8:05:9a:05:1d:11:01: 1c:8b:40:aa:ad:1e:3c:d2:ef:b9:96:02:e3:84:0c: a9:c7:97:60:3a:33:03:33:3d:bc:45:da:5c:40:c9: 78:2e:45:b5:45:2c:06:a4:0c:62:f7:14:5f:e0:fa: 1b:b6:07:e6:92:84:c3:fe:50:a7:ec:4f:9f:2a:45: 12:f0:99:3a:d2:a8:e1:a3:ce:0b:0e:f4:53:93:51: e8:48:72:6d:8e:b5:98:61:76:66:e1:10:3e:57:df: e9:66:f1:8b:30:2f:75:27:22:c7:34:09:da:65:11: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:78:1F:2D:D1:E3:B3:F7:51:0D:45:F7:F2:8E:D4:5A:A6:85:69 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/SRh4Hy3R47P3UQ1F9_KO1FqmhWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.116.0/24 Signature Algorithm: sha256WithRSAEncryption 71:da:2a:3c:4c:40:6f:40:3f:3a:7b:53:ff:af:8b:20:7a:4b: 03:8f:7b:e1:ec:d2:d2:e2:6a:62:61:13:96:8a:0c:d5:55:b5: 9d:25:77:33:ee:24:81:30:f6:5e:78:38:89:c0:dd:0b:1d:02: 1d:09:bf:db:b0:ba:a5:32:8d:63:c0:b5:fa:06:24:43:65:ef: 3c:4e:b8:46:a4:7a:13:82:54:a3:84:06:cc:ff:b8:f5:7f:17: d7:08:71:44:1c:e5:da:43:90:c6:4a:10:15:86:8a:65:4f:40: 57:fb:b6:74:34:7f:e2:29:f1:21:37:98:9b:d9:06:1a:82:9a: 32:4a:2b:98:21:b2:98:44:7b:4e:13:a2:bb:1e:dd:cd:88:9b: 8e:0e:f6:1a:80:4c:c5:d0:37:b6:28:e3:2f:16:65:33:77:bb: 25:92:66:5f:51:c1:9e:84:39:43:b5:5b:ef:9f:96:1b:71:9c: d7:e6:90:92:ba:87:d6:f5:1c:83:62:26:fa:44:de:e5:4e:3e: 65:95:0e:3c:55:29:8c:c4:00:7b:1c:76:b1:82:8c:70:e5:c4: 03:33:51:e5:18:75:b3:1d:57:ac:67:f2:00:21:fc:5a:db:a2: 09:9d:17:2c:48:32:e8:ba:a3:48:62:69:a1:98:75:f3:1d:ad: 08:15:1f:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9Qr7T3v/nvvDmV++9eDmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTEzMTI0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTE4NzgxZjJkZDFlM2IzZjc1MTBkNDVmN2YyOGVkNDVhYTY4NTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSaQQ+4sltCT5oeP0J/cJ+2gN0th lU2oleOynUH6C1NTWOO1XvTTzxWZ/jxBemNS9Xbr11Qt4ne1EXBAzfneEvkxtJNJ GB+NBNqcwyl5tEdSfXqFJ88Od6+7wLiVNvNXNlabZhUoScrmIRiYQE/4jHG02cdI gAUqjolNgPu08fkl1XkGvyq/GDxTjJ7Le+gFmgUdEQEci0CqrR480u+5lgLjhAyp x5dgOjMDMz28RdpcQMl4LkW1RSwGpAxi9xRf4PobtgfmkoTD/lCn7E+fKkUS8Jk6 0qjho84LDvRTk1HoSHJtjrWYYXZm4RA+V9/pZvGLMC91JyLHNAnaZRHtnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkYeB8t0eOz91ENRffyjtRapoVpMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvU1JoNEh5M1I0N1AzVVExRjlfS08xRnFtaFdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqh0MA0G CSqGSIb3DQEBCwUAA4IBAQBx2io8TEBvQD86e1P/r4sgeksDj3vh7NLS4mpiYROW igzVVbWdJXcz7iSBMPZeeDiJwN0LHQIdCb/bsLqlMo1jwLX6BiRDZe88TrhGpHoT glSjhAbM/7j1fxfXCHFEHOXaQ5DGShAVhoplT0BX+7Z0NH/iKfEhN5ib2QYagpoy SiuYIbKYRHtOE6K7Ht3NiJuODvYagEzF0De2KOMvFmUzd7slkmZfUcGehDlDtVvv n5YbcZzX5pCSuofW9RyDYib6RN7lTj5llQ48VSmMxAB7HHaxgoxw5cQDM1HlGHWz HVesZ/IAIfxa26IJnRcsSDLouqNIYmmhmHXzHa0IFR85 -----END CERTIFICATE-----Generated at Sat Dec 6 08:57:56 2025 by rpki-client