This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/VxtFXcr8B75khIr59LWaM6XlHUI.roa File: VxtFXcr8B75khIr59LWaM6XlHUI.roa (raw, json) Hash identifier: m9399X0kBLJyCAih+LoeANTErA5Y23wKh0cQq2seXlA= Subject key identifier: 57:1B:45:5D:CA:FC:07:BE:64:84:8A:F9:F4:B5:9A:33:A5:E5:1D:42 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F2A01557BC9D3E35B8ED13B5A5568 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/VxtFXcr8B75khIr59LWaM6XlHUI.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50556 IP address blocks: 170.168.14.0/24 maxlen: 24 170.168.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2a:01:55:7b:c9:d3:e3:5b:8e:d1:3b:5a:55:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=571b455dcafc07be64848af9f4b59a33a5e51d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:39:c7:37:56:eb:1e:44:6f:43:59:e6:a4: 73:d5:87:a5:d7:a0:5a:7a:d9:53:f0:d8:95:47:97: 0d:2e:cf:29:9b:0d:f4:a3:e6:e2:79:ca:86:82:03: cf:3a:76:5a:cf:61:30:c4:4f:d0:2b:be:e2:1a:ea: 8d:1d:30:57:66:e8:b7:c9:f1:d1:85:90:b3:97:64: cf:91:de:48:62:bc:6b:67:f7:7a:4a:3b:2b:dd:28: 5a:4a:2d:c3:7d:b4:f5:3f:a0:96:2c:7d:82:e0:5c: 0c:4e:8d:0a:e5:aa:9b:4f:9f:23:41:cc:6d:0a:e2: 02:6b:11:08:d8:0c:d5:cd:8e:c7:14:87:79:c8:3d: 88:56:a5:97:7b:42:29:56:d5:3d:f3:e5:ea:0f:66: ec:37:b9:34:b0:85:e8:68:91:1a:08:5e:b4:dc:1b: 8d:bb:f3:6a:1e:af:ac:e3:96:29:16:59:8a:cf:01: 84:09:d1:97:6c:a8:b4:42:59:eb:fb:cf:7a:f5:39: db:19:7d:18:c8:76:38:9d:6e:70:ac:fb:a9:4f:1c: e4:93:c4:41:9e:78:32:c3:5f:b1:2f:d4:a8:68:d5: dd:c7:02:05:77:5f:f9:c6:80:6c:5c:43:5c:0b:21: 33:2b:8b:15:2a:c9:15:db:40:31:56:f9:ce:36:58: 87:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1B:45:5D:CA:FC:07:BE:64:84:8A:F9:F4:B5:9A:33:A5:E5:1D:42 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/VxtFXcr8B75khIr59LWaM6XlHUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.14.0/24 170.168.46.0/24 Signature Algorithm: sha256WithRSAEncryption 20:01:64:1f:47:07:0a:d2:ef:5a:c5:99:1d:43:34:8f:33:55: 9c:7e:41:8c:7a:57:47:4f:32:b1:3d:ae:a5:a1:94:c6:ad:8d: 51:20:e7:3c:e7:77:b7:27:92:df:e8:44:2c:1a:e7:ca:9f:bb: 64:23:12:c8:05:f2:d9:e9:1d:2d:77:d9:3d:8b:06:2e:e6:8f: 2b:43:48:b0:b9:3a:91:df:63:53:6e:8e:65:36:42:72:7d:de: cd:ea:e6:4f:04:63:26:22:08:f6:9e:2e:ca:8a:6d:d5:07:d9: 47:1c:a9:a6:69:71:aa:f1:f0:88:2e:ca:de:7d:2b:3e:47:1a: 15:ee:81:77:96:37:33:52:1e:c0:e9:aa:29:4c:60:8a:cb:09: 80:d0:f0:de:84:70:09:82:07:48:79:10:ea:bd:7f:56:e0:77: d4:da:0b:0e:b4:01:eb:d3:8f:0b:78:db:e5:42:03:ae:e9:63: a3:1d:eb:cd:b0:47:04:3d:ac:fe:d0:03:b3:77:40:e4:e0:2f: d7:bd:1c:18:25:9c:c8:d4:58:e8:e6:0c:4e:e5:f4:c5:56:8b: 15:5a:75:d8:0c:1d:18:77:8a:c1:40:5c:0b:27:13:8f:75:92: eb:24:87:a9:f1:10:4c:5c:a7:72:02:5a:77:86:99:8e:2b:a7: 8d:2f:be:b7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fyoBVXvJ0+NbjtE7WlVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzFiNDU1ZGNhZmMwN2JlNjQ4NDhhZjlmNGI1OWEzM2E1ZTUxZDQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE05xzdW6x5Eb0NZ5qRz1Yel16Ba etlT8NiVR5cNLs8pmw30o+biecqGggPPOnZaz2EwxE/QK77iGuqNHTBXZui3yfHR hZCzl2TPkd5IYrxrZ/d6Sjsr3ShaSi3DfbT1P6CWLH2C4FwMTo0K5aqbT58jQcxt CuICaxEI2AzVzY7HFId5yD2IVqWXe0IpVtU98+XqD2bsN7k0sIXoaJEaCF603BuN u/NqHq+s45YpFlmKzwGECdGXbKi0Qlnr+8969TnbGX0YyHY4nW5wrPupTxzkk8RB nngyw1+xL9SoaNXdxwIFd1/5xoBsXENcCyEzK4sVKskV20AxVvnONliHhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFcbRV3K/Ae+ZISK+fS1mjOl5R1CMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvVnh0RlhjcjhCNzVraElyNTlMV2FNNlhsSFVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAqqgOAwQA qqguMA0GCSqGSIb3DQEBCwUAA4IBAQAgAWQfRwcK0u9axZkdQzSPM1WcfkGMeldH TzKxPa6loZTGrY1RIOc853e3J5Lf6EQsGufKn7tkIxLIBfLZ6R0td9k9iwYu5o8r Q0iwuTqR32NTbo5lNkJyfd7N6uZPBGMmIgj2ni7Kim3VB9lHHKmmaXGq8fCILsre fSs+RxoV7oF3ljczUh7A6aopTGCKywmA0PDehHAJggdIeRDqvX9W4HfU2gsOtAHr 048LeNvlQgOu6WOjHevNsEcEPaz+0AOzd0Dk4C/XvRwYJZzI1Fjo5gxO5fTFVosV WnXYDB0Yd4rBQFwLJxOPdZLrJIep8RBMXKdyAlp3hpmOK6eNL763 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:56 2026 by rpki-client