This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qDpuaRIAFs_uTqzfAGq3Irzrfyw.roa File: qDpuaRIAFs_uTqzfAGq3Irzrfyw.roa (raw, json) Hash identifier: CnsYGPVpsyCeJUF1xfIDec+VUSaj6NAduYdTejolQUc= Subject key identifier: A8:3A:6E:69:12:00:16:CF:EE:4E:AC:DF:00:6A:B7:22:BC:EB:7F:2C Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3186E326D13B1F9C9FBE9A442F2A Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qDpuaRIAFs_uTqzfAGq3Irzrfyw.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196695 IP address blocks: 170.168.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:86:e3:26:d1:3b:1f:9c:9f:be:9a:44:2f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a83a6e69120016cfee4eacdf006ab722bceb7f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:fa:ee:33:83:57:12:0f:0c:18:a1:f2:ee: 4a:34:0b:79:af:98:a9:13:f8:4f:10:a1:c3:d4:9a: 6c:b4:c6:30:31:58:dc:73:cc:7b:b0:da:31:87:b1: a7:72:a5:31:92:6e:32:2c:49:ab:fd:5f:de:cb:eb: d2:55:3c:e3:39:15:0b:a6:b7:52:29:ab:fb:7b:5f: d9:a8:2d:8d:f3:67:0d:a3:33:b7:43:41:ef:f5:d1: 4d:e0:fa:e4:09:e1:f5:72:37:62:15:dc:7c:98:b0: b2:a3:cf:8a:9a:3a:22:f4:b5:5e:db:08:3c:fd:1a: f2:b0:9e:67:36:78:19:ca:37:c7:2f:ac:76:df:44: 7e:32:0a:cd:08:5b:4a:0e:4c:7d:cb:e4:42:71:91: 52:49:b3:4e:6d:50:3c:bb:94:3b:ee:52:4e:40:5f: 83:52:e7:77:1c:1a:1c:ce:9c:43:e2:f7:e2:d3:0b: 25:ba:1b:31:03:62:2e:9a:8f:89:b0:e1:2e:ed:09: aa:af:53:aa:ed:d3:30:94:78:e8:54:ae:aa:07:df: 1a:b8:c5:ba:d5:cd:e2:bc:48:99:a7:2b:60:e0:03: 21:0b:05:65:12:82:71:ca:6e:16:18:68:4d:3d:7e: 32:bb:45:9f:28:fa:19:bc:8c:76:03:72:6b:fe:65: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3A:6E:69:12:00:16:CF:EE:4E:AC:DF:00:6A:B7:22:BC:EB:7F:2C X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qDpuaRIAFs_uTqzfAGq3Irzrfyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.11.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:e5:ab:f2:44:a9:3b:4f:d2:77:08:24:69:b6:63:5b:af:de: c9:90:58:75:15:a8:f6:76:f4:e7:83:87:e2:e3:2c:bd:a0:13: fa:c4:71:d3:8f:3f:60:dd:01:ad:fb:7d:af:8e:f8:f8:05:5c: 74:6d:a8:38:e3:2d:b8:7d:5f:b2:58:9a:fa:6d:ab:08:9a:ed: fc:0f:69:4b:8c:eb:23:a8:37:e8:4b:17:88:bb:ab:96:73:ab: 29:90:be:e9:f7:da:f2:5a:26:8f:be:81:62:9c:9c:d3:00:b2: b3:3a:23:49:ae:6d:83:8f:0d:0d:de:3c:13:af:a9:01:c3:9b: 28:a4:48:a9:68:e7:0c:a4:9d:f0:21:36:c2:57:e7:8b:7e:1b: 8e:5a:a7:eb:c5:eb:c1:2f:0b:51:a3:43:cb:9e:ea:21:4b:95: ef:ea:ea:de:d3:ec:20:1e:73:f1:50:44:73:02:aa:20:6c:de: 04:1b:3d:be:b7:38:5f:97:b5:bc:89:5b:74:40:c2:a9:3e:11: af:81:b9:f0:04:5e:c8:5a:14:09:de:2f:db:6f:1c:28:54:f1: 44:ee:27:65:e1:87:1c:12:cd:8a:45:2e:00:9c:77:28:0e:b6: 0f:0c:89:29:5e:ed:13:7d:7c:a5:d2:cc:05:3a:c7:a8:e7:fa: 59:0a:1c:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzGG4ybROx+cn76aRC8qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODNhNmU2OTEyMDAxNmNmZWU0ZWFjZGYwMDZhYjcyMmJjZWI3ZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKb67jODVxIPDBih8u5KNAt5r5ip E/hPEKHD1JpstMYwMVjcc8x7sNoxh7GncqUxkm4yLEmr/V/ey+vSVTzjORULprdS Kav7e1/ZqC2N82cNozO3Q0Hv9dFN4PrkCeH1cjdiFdx8mLCyo8+Kmjoi9LVe2wg8 /RrysJ5nNngZyjfHL6x230R+MgrNCFtKDkx9y+RCcZFSSbNObVA8u5Q77lJOQF+D Uud3HBoczpxD4vfi0wsluhsxA2Iumo+JsOEu7Qmqr1Oq7dMwlHjoVK6qB98auMW6 1c3ivEiZpytg4AMhCwVlEoJxym4WGGhNPX4yu0WfKPoZvIx2A3Jr/mWpwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKg6bmkSABbP7k6s3wBqtyK8638sMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvcURwdWFSSUFGc191VHF6ZkFHcTNJcnpyZnl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgLMA0G CSqGSIb3DQEBCwUAA4IBAQA75avyRKk7T9J3CCRptmNbr97JkFh1Faj2dvTng4fi 4yy9oBP6xHHTjz9g3QGt+32vjvj4BVx0bag44y24fV+yWJr6basImu38D2lLjOsj qDfoSxeIu6uWc6spkL7p99ryWiaPvoFinJzTALKzOiNJrm2Djw0N3jwTr6kBw5so pEipaOcMpJ3wITbCV+eLfhuOWqfrxevBLwtRo0PLnuohS5Xv6ure0+wgHnPxUERz AqogbN4EGz2+tzhfl7W8iVt0QMKpPhGvgbnwBF7IWhQJ3i/bbxwoVPFE7idl4Ycc Es2KRS4AnHcoDrYPDIkpXu0TfXyl0swFOseo5/pZChw0 -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:49 2026 by rpki-client