This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/n1STdCLbW3m34cqiRfNCnRgvaew.roa File: n1STdCLbW3m34cqiRfNCnRgvaew.roa (raw, json) Hash identifier: hGO1gEVS6yJXxVAhARTwOWiuCmccEh1m/xA2rCLhOBc= Subject key identifier: 9F:54:93:74:22:DB:5B:79:B7:E1:CA:A2:45:F3:42:9D:18:2F:69:EC Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3CC09A9A23113505BB4A0987844C Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/n1STdCLbW3m34cqiRfNCnRgvaew.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210408 IP address blocks: 170.168.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3c:c0:9a:9a:23:11:35:05:bb:4a:09:87:84:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f54937422db5b79b7e1caa245f3429d182f69ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:d9:02:62:d8:ed:8a:38:99:04:de:13:90: 71:3e:c9:e6:f1:33:17:a9:ff:3d:22:ed:ea:49:c1: 73:bb:fc:4d:82:fc:d9:73:bf:ee:36:7c:0c:77:f2: 1e:d3:15:b0:49:88:fe:c2:cc:54:74:96:bd:a1:d6: 14:55:d7:44:7b:ea:34:31:ab:e5:3b:c6:0c:4c:42: 1b:5a:0a:cc:23:a0:0c:84:05:cb:49:da:e6:43:c7: 78:78:f9:18:6a:a5:0e:6d:87:d5:a5:f2:46:28:c1: 3f:52:94:f4:9c:5b:a7:96:20:65:d5:8c:4e:b3:a4: 61:56:9f:2c:ef:c4:1b:fb:11:3c:c4:74:c3:bc:de: 33:23:98:d1:ec:5f:83:4b:e0:d4:c9:ec:40:7c:32: 46:7a:ac:59:93:ca:34:6e:14:56:8a:da:29:9f:b4: ce:14:60:d4:28:2e:f4:ea:93:f9:22:95:79:de:f7: f9:fa:a7:e2:ef:dd:c2:e6:f5:1f:67:14:a0:93:56: 08:fa:b0:39:fb:9f:01:31:e2:ac:f4:9c:01:91:ff: 16:38:53:2e:a1:9a:f5:da:0f:6e:13:19:13:6c:c7: 1d:a5:23:79:42:94:19:66:8d:41:23:9c:c0:a2:d7: ac:10:56:96:0b:e4:fc:49:d2:22:4c:58:e9:7c:ee: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:54:93:74:22:DB:5B:79:B7:E1:CA:A2:45:F3:42:9D:18:2F:69:EC X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/n1STdCLbW3m34cqiRfNCnRgvaew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.66.0/24 Signature Algorithm: sha256WithRSAEncryption 25:7a:2c:b7:df:77:7c:05:34:8c:2c:2c:7d:0b:aa:54:6d:ea: 18:fa:27:a6:4d:ec:0d:db:04:de:c8:61:27:b8:82:52:46:ff: e7:20:bc:c8:6a:e0:3a:a5:0d:98:84:8c:ba:c2:b6:f4:51:14: 13:b5:12:8a:ad:e4:f4:5c:35:b8:ea:64:dd:a8:d7:1a:e0:19: e3:e4:2c:7f:2c:29:9e:45:f6:25:85:1f:38:ec:4c:c3:cf:38: a3:aa:2d:f6:bf:15:de:fc:da:e3:de:72:be:d9:50:ac:b5:51: 95:fc:46:94:fa:aa:ce:a8:12:01:7a:a9:a8:d5:1d:6c:89:74: 98:c6:c4:0a:69:18:d4:62:09:78:ca:12:6b:c0:93:81:18:52: 43:27:9f:ee:07:56:57:8b:cd:3a:c3:78:be:32:f1:1c:4a:d5: 85:d6:bd:2f:8d:51:a8:fd:78:1f:89:d7:42:91:75:a6:00:97: cb:d4:fe:aa:de:55:32:cd:3b:49:e2:2d:39:66:58:c8:65:43: a2:59:cc:0b:48:f6:fa:c4:43:e5:5e:e6:bb:27:96:cd:82:ef: 88:55:ac:30:6f:3b:4d:5c:3b:cd:c4:e4:c2:ec:7a:8b:f3:e1: d0:fe:a2:43:1a:fe:4e:67:01:85:59:5b:4e:e3:17:50:1b:f5: 75:b2:aa:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzzAmpojETUFu0oJh4RMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjU0OTM3NDIyZGI1Yjc5YjdlMWNhYTI0NWYzNDI5ZDE4MmY2OWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYfZAmLY7Yo4mQTeE5BxPsnm8TMX qf89Iu3qScFzu/xNgvzZc7/uNnwMd/Ie0xWwSYj+wsxUdJa9odYUVddEe+o0Mavl O8YMTEIbWgrMI6AMhAXLSdrmQ8d4ePkYaqUObYfVpfJGKME/UpT0nFunliBl1YxO s6RhVp8s78Qb+xE8xHTDvN4zI5jR7F+DS+DUyexAfDJGeqxZk8o0bhRWitopn7TO FGDUKC706pP5IpV53vf5+qfi793C5vUfZxSgk1YI+rA5+58BMeKs9JwBkf8WOFMu oZr12g9uExkTbMcdpSN5QpQZZo1BI5zAotesEFaWC+T8SdIiTFjpfO6ivQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9Uk3Qi21t5t+HKokXzQp0YL2nsMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbjFTVGRDTGJXM20zNGNxaVJmTkNuUmd2YWV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhCMA0G CSqGSIb3DQEBCwUAA4IBAQAleiy333d8BTSMLCx9C6pUbeoY+iemTewN2wTeyGEn uIJSRv/nILzIauA6pQ2YhIy6wrb0URQTtRKKreT0XDW46mTdqNca4Bnj5Cx/LCme RfYlhR847EzDzzijqi32vxXe/Nrj3nK+2VCstVGV/EaU+qrOqBIBeqmo1R1siXSY xsQKaRjUYgl4yhJrwJOBGFJDJ5/uB1ZXi806w3i+MvEcStWF1r0vjVGo/XgfiddC kXWmAJfL1P6q3lUyzTtJ4i05ZljIZUOiWcwLSPb6xEPlXua7J5bNgu+IVawwbztN XDvNxOTC7HqL8+HQ/qJDGv5OZwGFWVtO4xdQG/V1sqp4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:18 2026 by rpki-client