This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_4BQubaO55ww622GBtT-7lzcNaU.roa File: _4BQubaO55ww622GBtT-7lzcNaU.roa (raw, json) Hash identifier: 8X4J5LmlnZhsiDU3d5Eq8UKQih6Tk2RsE0PN/mO5LdU= Subject key identifier: FF:80:50:B9:B6:8E:E7:9C:30:EB:6D:86:06:D4:FE:EE:5C:DC:35:A5 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F2A512019460EAF1CE9949E009BCC Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_4BQubaO55ww622GBtT-7lzcNaU.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51076 IP address blocks: 91.192.94.0/24 maxlen: 24 170.168.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2a:51:20:19:46:0e:af:1c:e9:94:9e:00:9b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8050b9b68ee79c30eb6d8606d4feee5cdc35a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:f1:da:b4:6e:82:f5:90:25:23:c7:f5:0e: 4a:90:d7:97:96:d3:6d:71:32:24:c6:e7:3c:ce:6a: 84:bb:23:5c:29:b4:49:52:6f:6c:5b:18:1d:8b:39: 12:57:1f:0f:6d:1a:91:b3:b2:64:ce:49:49:57:24: 05:5b:fb:39:0b:a3:57:89:66:7f:52:77:c0:cf:6c: 21:4a:a6:48:89:c9:3b:be:f0:ae:08:14:71:82:4f: 2d:c6:c8:75:b6:3a:0a:31:b1:57:2b:a4:96:29:05: c9:06:08:48:d2:4f:5f:b2:64:5e:cd:98:c3:fa:ca: 6d:0c:42:90:4b:1b:1a:e4:cb:a8:47:a4:29:84:e7: 66:da:91:6b:da:dc:35:87:8c:e7:fd:44:3a:e9:e6: 2f:d8:1b:78:7e:e6:ee:cd:74:7f:84:19:6e:32:d9: 90:84:d9:aa:ab:89:21:25:27:e9:e6:d0:a1:64:f8: b2:a8:0c:4b:49:65:f4:6c:85:8e:5d:61:cc:23:f1: 15:61:46:b2:6c:de:44:ab:05:bd:37:70:63:f6:c3: 77:b8:90:f2:f0:a7:cf:8d:e4:87:8d:19:56:e2:ea: cd:42:75:eb:dd:83:18:07:51:2b:37:fa:9f:67:42: cf:81:f7:8f:11:fc:b7:d4:f6:47:2c:7c:6a:d2:d6: c1:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:80:50:B9:B6:8E:E7:9C:30:EB:6D:86:06:D4:FE:EE:5C:DC:35:A5 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_4BQubaO55ww622GBtT-7lzcNaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.94.0/24 170.168.16.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:a4:a1:94:a9:95:c7:80:74:cb:21:1f:34:15:69:a2:cc:11: 63:ca:f8:49:ec:8c:1f:31:e9:ed:c2:b8:4d:09:5c:0e:e8:a4: 51:72:9b:a8:48:b7:50:a9:1e:94:ea:23:b0:41:a1:08:0c:32: 0d:79:38:9c:0d:06:af:b4:de:b6:d3:09:0b:79:ef:49:ce:28: 5b:32:5b:1b:74:e4:f5:e1:74:51:3b:5a:f8:a9:ec:27:98:8a: d4:08:33:85:12:8b:60:49:e1:da:32:83:d0:8b:50:43:a5:13: d4:61:3b:3d:46:d2:44:88:b6:79:09:2d:34:fe:ea:ce:48:fe: ca:fb:17:7d:4f:97:3d:ad:6b:07:f4:da:63:17:9e:74:3e:a8: b7:b6:09:e1:70:d1:34:77:9a:63:b5:7d:99:6e:0e:5a:96:4a: ae:15:1c:42:b5:de:46:d6:e0:17:61:7b:74:c0:35:b1:35:75: c7:96:77:d2:2c:51:80:61:cd:c3:6c:9c:e8:54:78:f7:52:fc: 44:67:c7:b3:18:eb:e2:f5:cc:e3:d7:24:d2:9a:cb:f2:ed:1a: fe:f9:72:41:ec:b7:90:a2:a6:64:80:e4:5a:35:68:3e:da:92: 1b:b1:f6:5c:a9:7b:5c:bc:88:07:30:20:1a:1a:0f:69:9f:06: 5d:4e:5d:4b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fypRIBlGDq8c6ZSeAJvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjgwNTBiOWI2OGVlNzljMzBlYjZkODYwNmQ0ZmVlZTVjZGMzNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAzx2rRugvWQJSPH9Q5KkNeXltNt cTIkxuc8zmqEuyNcKbRJUm9sWxgdizkSVx8PbRqRs7JkzklJVyQFW/s5C6NXiWZ/ UnfAz2whSqZIick7vvCuCBRxgk8txsh1tjoKMbFXK6SWKQXJBghI0k9fsmRezZjD +sptDEKQSxsa5MuoR6QphOdm2pFr2tw1h4zn/UQ66eYv2Bt4fubuzXR/hBluMtmQ hNmqq4khJSfp5tChZPiyqAxLSWX0bIWOXWHMI/EVYUaybN5EqwW9N3Bj9sN3uJDy 8KfPjeSHjRlW4urNQnXr3YMYB1ErN/qfZ0LPgfePEfy31PZHLHxq0tbBPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP+AULm2juecMOtthgbU/u5c3DWlMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvXzRCUXViYU81NXd3NjIyR0J0VC03bHpjTmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8BeAwQA qqgQMA0GCSqGSIb3DQEBCwUAA4IBAQCfpKGUqZXHgHTLIR80FWmizBFjyvhJ7Iwf MentwrhNCVwO6KRRcpuoSLdQqR6U6iOwQaEIDDINeTicDQavtN620wkLee9Jzihb MlsbdOT14XRRO1r4qewnmIrUCDOFEotgSeHaMoPQi1BDpRPUYTs9RtJEiLZ5CS00 /urOSP7K+xd9T5c9rWsH9NpjF550Pqi3tgnhcNE0d5pjtX2Zbg5alkquFRxCtd5G 1uAXYXt0wDWxNXXHlnfSLFGAYc3DbJzoVHj3UvxEZ8ezGOvi9czj1yTSmsvy7Rr+ +XJB7LeQoqZkgORaNWg+2pIbsfZcqXtcvIgHMCAaGg9pnwZdTl1L -----END CERTIFICATE-----Generated at Sun Jan 25 16:55:02 2026 by rpki-client