This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/o0f_X072uuHKKlIxNC7QrHA09CA.roa File: o0f_X072uuHKKlIxNC7QrHA09CA.roa (raw, json) Hash identifier: +ZMQ8RUxed4DOgvSIpKwqESVEro3bsmNUwUixatN9qY= Subject key identifier: A3:47:FF:5F:4E:F6:BA:E1:CA:2A:52:31:34:2E:D0:AC:70:34:F4:20 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F27E7573CC09D8CFC01B118F952CA Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/o0f_X072uuHKKlIxNC7QrHA09CA.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48199 IP address blocks: 170.168.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:27:e7:57:3c:c0:9d:8c:fc:01:b1:18:f9:52:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a347ff5f4ef6bae1ca2a5231342ed0ac7034f420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:00:0c:d7:60:4b:d2:b8:c6:8c:19:69:76: fb:3a:f4:8f:06:54:af:a8:35:4b:04:92:a9:67:74: 12:50:e6:74:d4:85:4f:5e:09:a3:74:7f:61:31:07: 71:18:08:fb:0c:86:93:98:06:6e:a8:82:63:b4:46: bb:7e:f5:03:e5:03:41:06:27:8b:c0:2d:4d:a9:df: 91:5d:30:87:cc:4f:3e:0a:ef:db:af:71:c6:7a:c3: fc:27:8f:39:c6:bc:80:25:3d:50:f9:16:56:1a:bf: 57:1b:16:ae:ac:a9:f5:78:d3:3c:b8:b4:14:2a:68: 92:aa:5a:0f:3e:cb:59:11:b8:18:8b:6d:b0:9b:1e: 96:f8:7d:ff:4e:27:87:d8:b2:89:98:8c:d8:8b:f0: 36:f6:eb:f1:4e:8f:03:0d:8c:a4:5f:b2:6d:62:26: 6a:4a:55:c6:2d:ec:45:fb:25:e0:2f:51:fa:a9:69: 4f:e1:6e:9a:62:12:cb:13:a6:ec:33:5a:23:3a:e5: 13:17:74:2b:ca:65:2f:9f:6b:20:39:84:73:cb:b5: 3c:d2:63:37:14:5d:e6:32:0b:11:4a:9b:18:57:51: d0:1d:5c:00:ec:10:47:ab:9e:2d:44:ce:18:3b:e6: d1:41:70:ae:20:89:4c:a0:f3:ea:57:9b:bc:91:8b: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:47:FF:5F:4E:F6:BA:E1:CA:2A:52:31:34:2E:D0:AC:70:34:F4:20 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/o0f_X072uuHKKlIxNC7QrHA09CA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.129.0/24 Signature Algorithm: sha256WithRSAEncryption 51:9a:4e:11:28:e9:ff:36:73:85:03:b2:d0:e5:92:32:17:7b: f1:29:66:54:b0:74:10:8b:fd:ce:00:2f:a8:5a:09:99:52:b1: b9:ad:27:fd:9d:26:bf:63:93:e9:1d:a0:b4:ae:d0:da:27:45: a8:a0:59:b3:7d:61:cd:e9:f4:62:99:b9:84:7c:e0:b5:aa:02: e5:b7:a8:73:7d:1d:6d:7d:92:06:a7:9f:95:ee:05:5c:af:58: b9:47:04:cf:82:a3:46:9c:ca:d1:13:67:e1:8a:a8:73:dd:56: c5:e1:9b:8e:e9:52:44:1b:37:25:c1:ce:9d:3e:cc:40:b3:e8: 4a:a3:97:dd:a6:88:06:f6:a0:9c:81:b0:73:09:ba:80:f6:e4: 93:ac:b9:c6:0d:09:5d:7e:a0:ac:79:ee:22:eb:92:ee:df:55: 9c:50:d6:21:6c:90:2c:c9:fb:ee:b6:20:b2:a5:2b:8c:26:25: 9b:2c:d6:63:38:0b:f2:19:57:86:ee:fb:7d:79:88:f3:c7:8c: 23:90:b4:11:80:f0:7b:1a:71:dd:60:6a:ba:84:28:8d:ee:57: 99:a5:05:1f:cc:17:a9:1f:91:2c:cf:47:e9:10:d5:95:7c:95: a2:f1:ed:43:49:31:4e:c4:99:7b:25:90:c9:d9:86:07:cf:ec: 80:36:21:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyfnVzzAnYz8AbEY+VLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzQ3ZmY1ZjRlZjZiYWUxY2EyYTUyMzEzNDJlZDBhYzcwMzRmNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjgADNdgS9K4xowZaXb7OvSPBlSv qDVLBJKpZ3QSUOZ01IVPXgmjdH9hMQdxGAj7DIaTmAZuqIJjtEa7fvUD5QNBBieL wC1Nqd+RXTCHzE8+Cu/br3HGesP8J485xryAJT1Q+RZWGr9XGxaurKn1eNM8uLQU KmiSqloPPstZEbgYi22wmx6W+H3/TieH2LKJmIzYi/A29uvxTo8DDYykX7JtYiZq SlXGLexF+yXgL1H6qWlP4W6aYhLLE6bsM1ojOuUTF3QrymUvn2sgOYRzy7U80mM3 FF3mMgsRSpsYV1HQHVwA7BBHq54tRM4YO+bRQXCuIIlMoPPqV5u8kYvMVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNH/19O9rrhyipSMTQu0KxwNPQgMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvbzBmX1gwNzJ1dUhLS2xJeE5DN1FySEEwOUNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqiBMA0G CSqGSIb3DQEBCwUAA4IBAQBRmk4RKOn/NnOFA7LQ5ZIyF3vxKWZUsHQQi/3OAC+o WgmZUrG5rSf9nSa/Y5PpHaC0rtDaJ0WooFmzfWHN6fRimbmEfOC1qgLlt6hzfR1t fZIGp5+V7gVcr1i5RwTPgqNGnMrRE2fhiqhz3VbF4ZuO6VJEGzclwc6dPsxAs+hK o5fdpogG9qCcgbBzCbqA9uSTrLnGDQldfqCsee4i65Lu31WcUNYhbJAsyfvutiCy pSuMJiWbLNZjOAvyGVeG7vt9eYjzx4wjkLQRgPB7GnHdYGq6hCiN7leZpQUfzBep H5Esz0fpENWVfJWi8e1DSTFOxJl7JZDJ2YYHz+yANiHr -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:11 2026 by rpki-client