This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ux2eFBXG08v81fpwKEi_KgyXlXs.roa File: Ux2eFBXG08v81fpwKEi_KgyXlXs.roa (raw, json) Hash identifier: 4ysqpYtrDADzuYwDVC4VYgNIQGPu4+ZdZI9ZImVVyXs= Subject key identifier: 53:1D:9E:14:15:C6:D3:CB:FC:D5:FA:70:28:48:BF:2A:0C:97:95:7B Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019A54AAFCDE7FC966E298CD2DB5FA790DDD Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ux2eFBXG08v81fpwKEi_KgyXlXs.roa Signing time: Wed 05 Nov 2025 15:38:03 +0000 ROA not before: Wed 05 Nov 2025 15:38:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49505 IP address blocks: 170.168.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:54:aa:fc:de:7f:c9:66:e2:98:cd:2d:b5:fa:79:0d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Nov 5 15:38:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=531d9e1415c6d3cbfcd5fa702848bf2a0c97957b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:4c:fb:95:9c:01:52:4c:12:be:48:56:d3: 0e:ce:bb:b1:a7:b3:38:4e:41:5d:f8:81:64:83:36: 69:82:17:ca:55:42:04:d0:da:fa:ab:c3:21:27:98: 4b:61:66:2d:21:15:c5:f6:f5:76:74:77:f3:6f:20: fd:12:72:4d:29:a2:6e:df:5c:23:da:28:76:a2:54: 94:79:ae:4e:62:75:32:1d:79:96:10:13:ef:98:41: 48:cc:6d:cf:50:de:ac:4d:88:ba:dc:76:72:55:92: 09:d7:22:d0:0e:6e:a9:c8:2d:79:45:01:54:b5:66: a6:09:65:14:36:55:62:bc:0f:b7:c4:60:5a:bf:ec: c0:47:ee:26:98:99:c3:d7:6b:15:bf:01:9d:39:34: 2d:b9:d8:50:63:87:ce:d5:ba:36:f2:84:25:55:2f: 91:21:82:2d:87:eb:0a:19:b8:6d:ce:a7:1f:2d:1b: 81:89:a0:b0:a1:9e:42:96:31:ef:cb:bf:82:b6:f0: b7:63:e0:af:c0:e0:d0:54:d7:12:e3:6f:9e:e7:16: 77:a0:43:40:74:b1:b7:72:d3:2e:01:ea:a4:b8:8a: 37:1c:90:78:fb:89:8a:16:33:9c:9a:ca:4e:19:2e: 36:89:24:fd:08:b0:c1:7c:1c:68:9c:4b:5c:d2:c0: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:9E:14:15:C6:D3:CB:FC:D5:FA:70:28:48:BF:2A:0C:97:95:7B X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/Ux2eFBXG08v81fpwKEi_KgyXlXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:8f:2b:af:8d:64:02:e9:60:80:b0:b8:19:8b:0b:82:b3:8e: 6a:c2:27:63:65:78:c2:90:92:40:3b:7b:37:16:0f:35:5d:26: a3:8c:06:0d:a2:f4:5c:4d:e5:d3:66:3d:ff:dd:e9:14:ba:ea: 93:3d:ea:18:fb:4d:b0:55:4b:1d:e1:37:54:49:58:ef:01:44: 1e:92:04:0c:4c:47:af:a5:bd:01:86:6c:c0:a8:61:e8:a4:9f: c9:0f:72:54:3a:f1:f3:49:49:c7:d7:12:3a:d9:4d:c9:e6:c3: 05:7a:57:ba:ac:0e:8c:22:80:27:34:8b:62:74:47:d8:2c:f3: f9:5f:3c:ba:c5:fa:33:37:d2:21:95:7e:7d:95:c1:ed:d9:28: d8:4e:67:41:dd:f5:a7:ce:8b:5d:2d:e1:89:94:45:f6:b9:d7: 45:df:6d:88:93:0a:86:37:3b:0c:da:b4:00:c5:09:ad:cb:44: 8e:28:90:b0:87:f1:16:5e:6a:cf:fd:01:db:59:2a:b7:7a:a1: 99:88:f3:40:a8:7f:1b:b4:08:f8:3c:b1:fc:00:4b:cd:44:e1: 1b:ee:ba:e9:93:58:04:98:4b:89:bc:ff:99:ae:b5:6e:a7:11: a0:ee:cd:54:aa:b2:e9:77:a1:ff:83:eb:ab:28:1b:02:80:fa: 95:63:63:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpUqvzef8lm4pjNLbX6eQ3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjUxMTA1MTUzODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzFkOWUxNDE1YzZkM2NiZmNkNWZhNzAyODQ4YmYyYTBjOTc5NTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fBM+5WcAVJMEr5IVtMOzruxp7M4 TkFd+IFkgzZpghfKVUIE0Nr6q8MhJ5hLYWYtIRXF9vV2dHfzbyD9EnJNKaJu31wj 2ih2olSUea5OYnUyHXmWEBPvmEFIzG3PUN6sTYi63HZyVZIJ1yLQDm6pyC15RQFU tWamCWUUNlVivA+3xGBav+zAR+4mmJnD12sVvwGdOTQtudhQY4fO1bo28oQlVS+R IYIth+sKGbhtzqcfLRuBiaCwoZ5CljHvy7+CtvC3Y+CvwODQVNcS42+e5xZ3oENA dLG3ctMuAeqkuIo3HJB4+4mKFjOcmspOGS42iST9CLDBfBxonEtc0sBFFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMdnhQVxtPL/NX6cChIvyoMl5V7MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvVXgyZUZCWEcwOHY4MWZwd0tFaV9LZ3lYbFhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhzMA0G CSqGSIb3DQEBCwUAA4IBAQAOjyuvjWQC6WCAsLgZiwuCs45qwidjZXjCkJJAO3s3 Fg81XSajjAYNovRcTeXTZj3/3ekUuuqTPeoY+02wVUsd4TdUSVjvAUQekgQMTEev pb0BhmzAqGHopJ/JD3JUOvHzSUnH1xI62U3J5sMFele6rA6MIoAnNItidEfYLPP5 Xzy6xfozN9IhlX59lcHt2SjYTmdB3fWnzotdLeGJlEX2uddF322IkwqGNzsM2rQA xQmty0SOKJCwh/EWXmrP/QHbWSq3eqGZiPNAqH8btAj4PLH8AEvNROEb7rrpk1gE mEuJvP+ZrrVupxGg7s1UqrLpd6H/g+urKBsCgPqVY2Oq -----END CERTIFICATE-----Generated at Sat Dec 6 09:08:30 2025 by rpki-client