This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_8IOH6xafS0lgT4-hhdpt94r4lU.roa File: _8IOH6xafS0lgT4-hhdpt94r4lU.roa (raw, json) Hash identifier: ANEzlkjUJsN4iT2TJukPROaGGY9wx/een146oSL+eAs= Subject key identifier: FF:C2:0E:1F:AC:5A:7D:2D:25:81:3E:3E:86:17:69:B7:DE:2B:E2:55 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F25CB32115D6A5E67739F6D93A617 Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_8IOH6xafS0lgT4-hhdpt94r4lU.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47204 IP address blocks: 170.168.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:25:cb:32:11:5d:6a:5e:67:73:9f:6d:93:a6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffc20e1fac5a7d2d25813e3e861769b7de2be255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4c:ea:83:79:22:ff:0b:c7:29:bd:1b:59:fa: 8f:f2:62:70:6d:3c:ef:e3:30:a3:50:b4:98:a7:22: e6:90:6e:aa:b9:0a:67:29:9e:9e:f3:ef:1c:9f:fb: 05:fb:76:a6:dc:26:11:91:5d:7c:40:82:e5:29:e2: 92:c3:fe:10:bd:4b:a2:a3:9c:2b:af:67:ea:4d:22: 56:f5:98:86:d6:cb:ce:70:61:0a:fe:1d:51:d2:93: b1:34:72:36:ce:d0:00:39:75:8b:d3:9c:2f:4f:7f: 61:8e:bf:46:c4:82:c6:41:1a:52:af:35:68:8e:f2: ee:c6:74:76:ca:fb:89:f7:30:ee:80:32:eb:e0:17: 3a:29:28:6e:5b:07:c9:e5:c5:e3:f7:33:26:66:78: fb:85:c8:b6:3c:c9:65:d4:93:9e:a3:55:0d:bc:8d: 47:04:27:ea:ba:d1:79:30:5d:32:ed:56:30:b2:d5: fe:4c:e3:b9:25:62:f4:a4:b9:1b:c2:ee:83:67:a8: b1:0d:d3:c4:08:3d:c1:85:7d:95:9e:57:ef:e4:2a: 19:2e:74:61:aa:71:64:85:ba:d0:f4:22:dd:34:2e: ec:73:04:34:f7:09:39:d9:34:a8:60:84:c1:33:d0: 05:b5:b1:4b:43:e7:bd:5e:41:4e:36:92:2f:bf:96: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:0E:1F:AC:5A:7D:2D:25:81:3E:3E:86:17:69:B7:DE:2B:E2:55 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/_8IOH6xafS0lgT4-hhdpt94r4lU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.22.0/24 Signature Algorithm: sha256WithRSAEncryption 08:cf:04:c8:f2:88:59:d7:a1:69:23:ef:d3:64:48:d8:3d:52: e5:61:98:49:4b:df:30:df:08:dd:ee:94:02:fe:49:a3:47:c8: ed:cd:7c:fa:a9:3d:ed:c1:24:8f:9c:41:7d:16:76:0c:e6:e0: 1a:94:c7:e7:65:a7:ea:d0:57:51:7e:c5:c2:b0:c6:a5:dd:06: 76:5c:96:bb:23:27:62:42:72:55:ad:62:02:fa:92:b7:bf:3d: f1:71:45:1c:da:69:e2:5d:19:25:8d:03:93:b5:a2:84:34:c9: f3:bf:24:34:af:67:60:ef:5e:29:0c:b4:98:1f:72:58:89:7e: 85:36:40:1c:78:59:da:2a:d7:ab:19:d7:7d:09:e8:c8:36:4e: 96:0e:a3:8e:76:c2:1d:29:2e:fe:2e:d4:ac:6a:cc:79:60:94: ed:70:d4:67:0f:80:d6:fd:e1:54:df:e2:09:f1:05:4a:d5:ed: d9:19:7b:7c:71:a3:16:7d:dc:ee:c7:1b:f1:47:48:10:ab:ce: fa:b1:4b:73:49:03:ae:2b:d4:b0:98:c0:d8:9d:6b:b1:b5:66: 7a:53:b0:35:89:96:2e:8b:6a:32:a3:9c:aa:a1:d9:03:8e:af: 8a:04:cc:fd:48:8d:36:a9:dd:be:cb:ec:74:77:73:82:f4:a3: 59:4c:d0:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyXLMhFdal5nc59tk6YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmMyMGUxZmFjNWE3ZDJkMjU4MTNlM2U4NjE3NjliN2RlMmJlMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUzqg3ki/wvHKb0bWfqP8mJwbTzv 4zCjULSYpyLmkG6quQpnKZ6e8+8cn/sF+3am3CYRkV18QILlKeKSw/4QvUuio5wr r2fqTSJW9ZiG1svOcGEK/h1R0pOxNHI2ztAAOXWL05wvT39hjr9GxILGQRpSrzVo jvLuxnR2yvuJ9zDugDLr4Bc6KShuWwfJ5cXj9zMmZnj7hci2PMll1JOeo1UNvI1H BCfqutF5MF0y7VYwstX+TOO5JWL0pLkbwu6DZ6ixDdPECD3BhX2Vnlfv5CoZLnRh qnFkhbrQ9CLdNC7scwQ09wk52TSoYITBM9AFtbFLQ+e9XkFONpIvv5a4IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP/CDh+sWn0tJYE+PoYXabfeK+JVMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvXzhJT0g2eGFmUzBsZ1Q0LWhoZHB0OTRyNGxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgWMA0G CSqGSIb3DQEBCwUAA4IBAQAIzwTI8ohZ16FpI+/TZEjYPVLlYZhJS98w3wjd7pQC /kmjR8jtzXz6qT3twSSPnEF9FnYM5uAalMfnZafq0FdRfsXCsMal3QZ2XJa7Iydi QnJVrWIC+pK3vz3xcUUc2mniXRkljQOTtaKENMnzvyQ0r2dg714pDLSYH3JYiX6F NkAceFnaKterGdd9CejINk6WDqOOdsIdKS7+LtSsasx5YJTtcNRnD4DW/eFU3+IJ 8QVK1e3ZGXt8caMWfdzuxxvxR0gQq876sUtzSQOuK9SwmMDYnWuxtWZ6U7A1iZYu i2oyo5yqodkDjq+KBMz9SI02qd2+y+x0d3OC9KNZTNAp -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:42 2026 by rpki-client