This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/p_12PfHtHNQwh5RjCgaWP0R5XDA.roa File: p_12PfHtHNQwh5RjCgaWP0R5XDA.roa (raw, json) Hash identifier: 3H+yr3SDHo728uAiEu7/qz5RD+hKaFHg3l8ES5G9SJo= Subject key identifier: A7:FD:76:3D:F1:ED:1C:D4:30:87:94:63:0A:06:96:3F:44:79:5C:30 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3787684B8803941C651D3646671B Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/p_12PfHtHNQwh5RjCgaWP0R5XDA.roa Signing time: Thu 01 Jan 2026 12:18:58 +0000 ROA not before: Thu 01 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203912 IP address blocks: 170.168.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:37:87:68:4b:88:03:94:1c:65:1d:36:46:67:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fd763df1ed1cd4308794630a06963f44795c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d9:6d:3c:52:ae:08:99:cf:1d:45:c6:a4:0c: 7d:6f:5a:d3:2b:bd:2b:db:78:32:7f:83:56:af:3e: 96:7a:9f:50:48:2a:cf:22:ad:eb:cd:a9:8e:fb:96: 0a:08:ce:71:4f:74:20:7f:36:bd:7f:a2:f5:5e:27: 38:18:4e:c6:17:b7:7a:4e:f2:76:b6:3d:4f:47:ca: 6c:5d:df:9e:98:26:c8:6a:92:4e:6f:f1:ef:47:a7: f0:ea:78:4e:c2:76:ea:87:6e:21:6b:77:41:d9:2a: c2:d1:5d:3d:f3:0e:6d:ec:cd:a3:8d:90:4a:2f:38: 0d:f4:08:7d:df:56:57:44:77:39:19:70:fe:57:1e: d5:c5:20:82:06:cf:3d:69:ce:cd:a6:47:bf:53:0a: 26:64:26:3e:84:fc:94:12:cc:ba:fd:5c:4f:e3:c3: 6b:49:54:36:14:7c:ad:da:26:b5:af:f2:91:47:48: 8d:94:c0:07:6c:99:ff:a3:6a:99:7e:6d:8c:c8:05: d5:73:a1:b4:46:54:ec:22:92:74:f8:a0:f6:82:e6: 91:9b:49:c5:ff:de:87:15:ca:75:d9:8b:71:61:34: 84:5f:e3:e1:85:2e:42:98:50:e1:4c:7c:f4:7d:d0: 76:03:04:70:71:03:ea:1e:7b:24:19:e4:bb:9d:d5: 5a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:76:3D:F1:ED:1C:D4:30:87:94:63:0A:06:96:3F:44:79:5C:30 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/p_12PfHtHNQwh5RjCgaWP0R5XDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.63.0/24 Signature Algorithm: sha256WithRSAEncryption 78:54:d4:3c:f3:e5:ee:c2:8b:12:5e:3d:b3:4b:8f:39:ba:e5: 97:4a:1a:7b:f2:0b:f8:dd:52:26:05:93:f8:39:16:33:d0:da: 59:3b:70:3c:4c:7f:d1:d4:01:5a:e5:37:44:96:50:df:cf:5f: 4f:48:b0:5b:c0:df:00:59:24:3d:e9:18:31:d5:01:35:9f:d7: c1:83:b3:87:48:87:e6:c0:46:13:e5:b7:01:5d:4b:37:ab:03: e6:5a:64:e4:e8:3a:23:41:b5:7d:35:41:22:70:56:ae:57:82: 82:4f:bb:8f:5d:93:ed:a8:05:8f:2b:05:e6:f3:c4:ec:0b:35: fa:2f:e3:68:2e:6c:b8:80:41:75:aa:17:95:d2:cd:fe:e2:37: 2c:d3:ef:ac:51:71:44:32:42:7d:b7:5d:e7:3d:4c:cd:9c:32: c6:f4:e5:61:fa:6d:d0:e5:bb:ad:2c:f7:5b:28:55:bd:53:bd: 70:2b:f7:07:50:01:91:06:93:51:60:df:80:8c:8b:87:7e:43: 14:4c:4e:66:f5:dd:98:07:4d:a3:36:03:1b:6c:df:58:f5:81: 1c:ec:fd:a6:74:e2:36:17:ba:37:56:cb:e7:e2:56:cf:6f:39: c6:0a:df:bb:a2:ac:53:ab:34:09:00:9b:5c:97:8d:bb:19:ce: f8:c7:25:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzeHaEuIA5QcZR02RmcbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZkNzYzZGYxZWQxY2Q0MzA4Nzk0NjMwYTA2OTYzZjQ0Nzk1YzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dltPFKuCJnPHUXGpAx9b1rTK70r 23gyf4NWrz6Wep9QSCrPIq3rzamO+5YKCM5xT3Qgfza9f6L1Xic4GE7GF7d6TvJ2 tj1PR8psXd+emCbIapJOb/HvR6fw6nhOwnbqh24ha3dB2SrC0V098w5t7M2jjZBK LzgN9Ah931ZXRHc5GXD+Vx7VxSCCBs89ac7Npke/UwomZCY+hPyUEsy6/VxP48Nr SVQ2FHyt2ia1r/KRR0iNlMAHbJn/o2qZfm2MyAXVc6G0RlTsIpJ0+KD2guaRm0nF /96HFcp12YtxYTSEX+PhhS5CmFDhTHz0fdB2AwRwcQPqHnskGeS7ndVaoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKf9dj3x7RzUMIeUYwoGlj9EeVwwMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvcF8xMlBmSHRITlF3aDVSakNnYVdQMFI1WERBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqg/MA0G CSqGSIb3DQEBCwUAA4IBAQB4VNQ88+XuwosSXj2zS485uuWXShp78gv43VImBZP4 ORYz0NpZO3A8TH/R1AFa5TdEllDfz19PSLBbwN8AWSQ96Rgx1QE1n9fBg7OHSIfm wEYT5bcBXUs3qwPmWmTk6DojQbV9NUEicFauV4KCT7uPXZPtqAWPKwXm88TsCzX6 L+NoLmy4gEF1qheV0s3+4jcs0++sUXFEMkJ9t13nPUzNnDLG9OVh+m3Q5butLPdb KFW9U71wK/cHUAGRBpNRYN+AjIuHfkMUTE5m9d2YB02jNgMbbN9Y9YEc7P2mdOI2 F7o3Vsvn4lbPbznGCt+7oqxTqzQJAJtcl427Gc74xyWP -----END CERTIFICATE-----Generated at Sun Jan 25 21:26:00 2026 by rpki-client