This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/k7kQ26TmGoRHDn830sOZLFJGJ9o.roa File: k7kQ26TmGoRHDn830sOZLFJGJ9o.roa (raw, json) Hash identifier: 5TrNAj6F569VYBgZi61o2w3FpcVeyiDLVdpz9ScvgvQ= Subject key identifier: 93:B9:10:DB:A4:E6:1A:84:47:0E:7F:37:D2:C3:99:2C:52:46:27:DA Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3A56BD8BC0D4D42D43BD1EB7E82D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/k7kQ26TmGoRHDn830sOZLFJGJ9o.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205799 IP address blocks: 170.168.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3a:56:bd:8b:c0:d4:d4:2d:43:bd:1e:b7:e8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93b910dba4e61a84470e7f37d2c3992c524627da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:b6:cc:36:f9:31:58:ca:5d:fc:e1:da:7f: d1:b6:81:af:32:40:de:90:cd:55:c2:96:62:6b:76: 5b:a8:56:50:68:f4:35:9b:c4:3f:bf:15:f4:f8:43: 2f:c5:d9:8a:07:61:15:fd:e4:89:0e:28:77:ee:5c: cb:e9:5f:c2:71:fc:10:4c:99:55:5f:fb:3c:1e:85: 1d:a5:64:6d:3b:fa:d4:0b:3c:2e:3b:0d:1e:f2:dc: 3a:2a:3d:77:98:cc:25:e8:c0:9f:a8:a2:fc:e9:76: 9c:84:bd:ed:4b:b8:f4:67:3d:0d:b0:97:04:ea:39: 27:eb:45:59:5d:90:b3:03:09:93:7d:28:0a:4f:98: 00:e5:8e:b1:6a:e1:43:c6:7c:c3:fe:68:76:65:8e: 9c:6a:80:32:89:10:ca:f9:fd:8a:be:ce:7b:8a:74: 52:d9:f2:c9:b1:e6:de:99:19:49:18:df:76:e3:ed: e5:82:2e:36:f2:27:a7:4d:7f:55:dd:f6:84:a9:b7: ed:42:45:47:a5:db:18:5c:62:58:0b:91:c9:35:a4: 43:1c:5c:24:28:f8:fb:4f:4f:fb:35:33:ce:96:7e: 66:d9:a1:a8:7f:ba:cf:21:64:36:40:09:c8:27:80: 64:c2:a6:7c:37:32:35:14:52:28:57:54:43:31:16: ad:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B9:10:DB:A4:E6:1A:84:47:0E:7F:37:D2:C3:99:2C:52:46:27:DA X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/k7kQ26TmGoRHDn830sOZLFJGJ9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.17.0/24 Signature Algorithm: sha256WithRSAEncryption 84:40:23:59:72:9a:09:f8:f3:10:94:db:c1:df:82:4d:7d:d8: cd:58:c5:5c:bc:fc:31:74:ec:e5:08:d3:2c:be:84:0b:bd:ca: 25:21:8c:58:85:3e:13:09:b1:83:c0:35:1e:b6:d9:3e:9d:58: 18:bc:0a:a7:f2:ff:e5:e4:c2:56:66:00:b0:e0:71:13:74:54: 6a:5f:04:93:1b:ae:18:95:d6:b7:69:e4:8b:78:99:e9:48:50: 7c:0b:36:82:df:6f:f0:c5:8a:ef:21:ab:39:a8:45:cf:b0:7c: b0:ed:90:79:33:b2:9d:0e:a7:76:67:f0:33:ff:a3:d7:f6:03: 5f:96:7f:e3:67:6c:74:f3:55:e2:4d:6c:ab:be:ee:1b:33:08: 5e:3d:c6:06:c8:1f:b7:e5:6e:4c:5e:a0:24:b4:38:ad:49:da: 7b:88:1e:31:e9:e6:d2:61:19:7b:6d:fd:ef:59:4f:80:1c:47: 02:2e:18:11:0b:cf:31:bb:c3:f7:f9:36:67:8a:f8:86:f1:5e: f8:55:f1:52:7f:f1:52:17:fe:01:29:90:75:60:01:1f:03:d1: 11:a7:5e:49:ea:36:5a:95:65:cb:a3:05:7e:d3:a7:37:ad:91: 55:ed:33:74:cf:f2:ec:71:9a:06:80:4f:28:0e:3f:cd:4f:fd: 47:41:8b:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzpWvYvA1NQtQ70et+gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2I5MTBkYmE0ZTYxYTg0NDcwZTdmMzdkMmMzOTkyYzUyNDYyN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN62zDb5MVjKXfzh2n/RtoGvMkDe kM1VwpZia3ZbqFZQaPQ1m8Q/vxX0+EMvxdmKB2EV/eSJDih37lzL6V/CcfwQTJlV X/s8HoUdpWRtO/rUCzwuOw0e8tw6Kj13mMwl6MCfqKL86XachL3tS7j0Zz0NsJcE 6jkn60VZXZCzAwmTfSgKT5gA5Y6xauFDxnzD/mh2ZY6caoAyiRDK+f2Kvs57inRS 2fLJsebemRlJGN924+3lgi428ienTX9V3faEqbftQkVHpdsYXGJYC5HJNaRDHFwk KPj7T0/7NTPOln5m2aGof7rPIWQ2QAnIJ4BkwqZ8NzI1FFIoV1RDMRatFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJO5ENuk5hqERw5/N9LDmSxSRifaMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvazdrUTI2VG1Hb1JIRG44MzBzT1pMRkpHSjlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgRMA0G CSqGSIb3DQEBCwUAA4IBAQCEQCNZcpoJ+PMQlNvB34JNfdjNWMVcvPwxdOzlCNMs voQLvcolIYxYhT4TCbGDwDUettk+nVgYvAqn8v/l5MJWZgCw4HETdFRqXwSTG64Y lda3aeSLeJnpSFB8CzaC32/wxYrvIas5qEXPsHyw7ZB5M7KdDqd2Z/Az/6PX9gNf ln/jZ2x081XiTWyrvu4bMwhePcYGyB+35W5MXqAktDitSdp7iB4x6ebSYRl7bf3v WU+AHEcCLhgRC88xu8P3+TZniviG8V74VfFSf/FSF/4BKZB1YAEfA9ERp15J6jZa lWXLowV+06c3rZFV7TN0z/LscZoGgE8oDj/NT/1HQYvP -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:30 2026 by rpki-client