This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/nO3KZ643eM65fRQNRSHPCDoudfc.roa File: nO3KZ643eM65fRQNRSHPCDoudfc.roa (raw, json) Hash identifier: JDO1lQXMokYEYxm14u/wJQVL2kLkVyFzXTBsQKFZGX8= Subject key identifier: 9C:ED:CA:67:AE:37:78:CE:B9:7D:14:0D:45:21:CF:08:3A:2E:75:F7 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F275621F0545A9EF302F5FFD5168E Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/nO3KZ643eM65fRQNRSHPCDoudfc.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48120 IP address blocks: 170.168.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:27:56:21:f0:54:5a:9e:f3:02:f5:ff:d5:16:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cedca67ae3778ceb97d140d4521cf083a2e75f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:dc:fd:4f:c4:fe:79:de:a8:3b:02:01:cf:0b: 79:53:9c:58:f5:9a:40:85:7c:12:99:2b:d5:37:26: 29:dd:ee:fe:1d:f2:3a:27:51:a7:f4:bd:69:cc:6f: 2e:4a:29:9d:ed:1d:84:31:47:cc:d6:90:90:7b:8d: 74:80:ff:0b:9a:94:39:2e:c1:aa:c5:7e:d9:8c:85: 18:7a:d5:f0:d8:b8:df:a0:82:8a:66:c0:f4:e6:2f: a7:60:5c:be:ac:eb:fb:d0:52:96:f7:52:79:09:9b: 88:f3:9c:66:a0:dc:5c:a5:2b:1b:87:75:58:ca:b9: 01:61:54:64:b4:40:e9:30:e7:19:b4:86:a3:e6:bd: e4:73:91:73:5b:b5:f2:c8:c8:ac:69:a5:48:6d:1a: a3:a3:d0:24:04:0c:f4:e0:6e:b4:d1:fe:35:45:d8: 2d:e5:1a:b9:28:04:aa:66:1c:f8:70:81:7c:39:75: a2:d0:a6:2f:80:ac:48:f1:20:35:76:4c:58:39:79: 99:84:79:e4:8c:34:c7:3c:21:70:19:79:5a:e8:12: 10:ef:0b:eb:c7:c6:34:b5:24:a2:37:21:cd:c9:7e: d7:e4:ce:11:bd:5e:cd:7d:2c:04:36:76:02:6c:e3: e8:6d:3c:5c:93:f7:54:17:54:32:8c:88:2e:c6:f8: f8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:ED:CA:67:AE:37:78:CE:B9:7D:14:0D:45:21:CF:08:3A:2E:75:F7 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/nO3KZ643eM65fRQNRSHPCDoudfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.73.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:e1:9b:9a:98:9e:eb:61:75:b2:de:da:22:80:44:3f:49:84: d9:01:2d:56:10:2d:87:83:29:e7:c3:99:3e:45:ff:00:86:26: c9:c0:55:cd:c3:e2:85:fa:93:b6:64:50:ff:55:6c:3b:99:51: 8e:91:7c:52:09:d7:53:91:25:91:2d:d3:ee:a6:78:82:9f:ee: 40:da:9b:75:e0:4a:bc:d9:98:9e:40:ec:c3:5b:91:27:09:8f: b3:bb:5e:d6:fc:1f:a7:8b:df:a2:1a:d5:ff:af:c7:1e:ab:df: 8b:12:1a:92:dc:ba:1d:35:60:d4:be:8d:ae:ca:f8:da:34:45: 2d:83:65:a0:58:c9:4c:d1:09:e4:92:74:7b:a7:c3:c2:45:ad: f0:cf:b9:60:90:77:66:45:23:09:b0:a5:8d:33:44:82:10:2d: b2:d0:4f:e3:3f:97:b7:20:b0:b8:1c:e5:a1:cd:2b:89:b0:ae: 11:61:06:51:7c:f9:b0:c8:bc:1d:d6:ae:ca:0c:16:6f:e8:1c: 06:c8:33:9b:85:8c:23:4f:60:83:71:3a:aa:87:d4:af:c9:99: d8:b7:23:af:7d:e8:2f:f6:3d:e4:36:78:57:66:7b:0d:83:b2: 1a:c7:93:fa:5f:e4:85:d2:79:ab:12:ba:e1:a0:8f:3f:5d:e2: 45:92:f5:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fydWIfBUWp7zAvX/1RaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2VkY2E2N2FlMzc3OGNlYjk3ZDE0MGQ0NTIxY2YwODNhMmU3NWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9z9T8T+ed6oOwIBzwt5U5xY9ZpA hXwSmSvVNyYp3e7+HfI6J1Gn9L1pzG8uSimd7R2EMUfM1pCQe410gP8LmpQ5LsGq xX7ZjIUYetXw2LjfoIKKZsD05i+nYFy+rOv70FKW91J5CZuI85xmoNxcpSsbh3VY yrkBYVRktEDpMOcZtIaj5r3kc5FzW7XyyMisaaVIbRqjo9AkBAz04G600f41Rdgt 5Rq5KASqZhz4cIF8OXWi0KYvgKxI8SA1dkxYOXmZhHnkjDTHPCFwGXla6BIQ7wvr x8Y0tSSiNyHNyX7X5M4RvV7NfSwENnYCbOPobTxck/dUF1QyjIguxvj4rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJztymeuN3jOuX0UDUUhzwg6LnX3MB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbk8zS1o2NDNlTTY1ZlJRTlJTSFBDRG91ZGZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhJMA0G CSqGSIb3DQEBCwUAA4IBAQAM4ZuamJ7rYXWy3toigEQ/SYTZAS1WEC2Hgynnw5k+ Rf8AhibJwFXNw+KF+pO2ZFD/VWw7mVGOkXxSCddTkSWRLdPupniCn+5A2pt14Eq8 2ZieQOzDW5EnCY+zu17W/B+ni9+iGtX/r8ceq9+LEhqS3LodNWDUvo2uyvjaNEUt g2WgWMlM0QnkknR7p8PCRa3wz7lgkHdmRSMJsKWNM0SCEC2y0E/jP5e3ILC4HOWh zSuJsK4RYQZRfPmwyLwd1q7KDBZv6BwGyDObhYwjT2CDcTqqh9SvyZnYtyOvfegv 9j3kNnhXZnsNg7Iax5P6X+SF0nmrErrhoI8/XeJFkvWa -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:04 2026 by rpki-client