This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/u9-cQXFnqYqRihjf4qNMnWyfh20.roa File: u9-cQXFnqYqRihjf4qNMnWyfh20.roa (raw, json) Hash identifier: KndAO42cMsY9F+Afd9ePuSyQzFc2IQvwNwyUe9pwb+4= Subject key identifier: BB:DF:9C:41:71:67:A9:8A:91:8A:18:DF:E2:A3:4C:9D:6C:9F:87:6D Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3A08FB677EB1F7B6517D6AC962AF Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/u9-cQXFnqYqRihjf4qNMnWyfh20.roa Signing time: Thu 01 Jan 2026 12:18:59 +0000 ROA not before: Thu 01 Jan 2026 12:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205429 IP address blocks: 170.168.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3a:08:fb:67:7e:b1:f7:b6:51:7d:6a:c9:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbdf9c417167a98a918a18dfe2a34c9d6c9f876d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:88:30:d9:6f:31:f0:5c:ce:3e:b3:fd:86: 65:b5:95:15:c1:65:34:45:b6:1a:1f:68:cb:f4:0e: e0:ee:00:53:50:fb:a9:d9:eb:95:8d:2c:cb:c3:b9: fe:e7:cc:79:4d:58:6c:25:61:06:05:91:b4:3f:75: 35:41:32:4c:c7:87:49:8b:ae:b8:c0:15:cf:3d:f1: ae:4f:4d:e0:36:90:a2:24:b6:22:e3:b6:52:b8:e9: 05:b7:81:fa:65:ee:c8:47:7f:2e:21:39:ac:99:e6: 34:3c:fa:54:5e:5d:8a:22:7d:27:e7:6e:21:f0:25: 1d:e2:c5:47:13:ba:02:ba:f6:b4:bd:51:01:5d:89: ad:d5:2e:b5:ce:ab:5f:fc:20:8f:a7:d4:d2:9d:c1: 8e:f3:57:5b:66:21:c1:16:e7:3e:5c:1c:b4:9f:b9: c1:c5:2c:66:f9:99:93:ae:43:d8:95:e3:b9:7b:d3: 53:14:ec:69:bc:5c:ee:47:b9:1f:14:b1:9d:71:c8: eb:82:67:62:cc:03:c9:58:92:64:48:7c:7e:33:47: 12:ca:75:a9:35:38:f8:a4:67:6c:1d:84:28:ce:8d: 0a:25:ad:3b:08:f6:57:0d:a2:7b:fc:7d:f9:2c:da: 9a:7d:a9:ba:c1:1c:b0:3a:63:b0:f0:b4:5f:8f:3a: 21:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:9C:41:71:67:A9:8A:91:8A:18:DF:E2:A3:4C:9D:6C:9F:87:6D X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/u9-cQXFnqYqRihjf4qNMnWyfh20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.13.0/24 Signature Algorithm: sha256WithRSAEncryption 44:a8:a0:40:15:78:17:51:58:a2:24:c0:56:0c:3e:b1:17:a2: 90:79:44:90:37:0c:68:e7:51:58:9a:9d:b1:05:dc:96:a9:4d: 57:8c:4c:7d:74:06:3f:7b:30:4f:40:1d:83:d6:19:3d:37:6a: 14:0b:c3:e5:27:df:6e:6f:3c:6c:de:3d:da:0f:d8:4c:f8:7c: f7:c5:ca:bd:cc:28:03:55:b9:e1:35:32:43:c9:6e:3c:7d:0c: 33:b1:f8:64:3e:51:9b:1b:18:d8:77:60:64:bf:8d:63:89:13: fd:aa:91:44:c7:9a:2c:a7:63:1e:f2:d5:9d:ba:91:7e:ed:1e: 3d:77:24:0f:3e:b8:cb:f7:2e:af:63:d6:63:8a:e9:fa:73:3a: 82:9a:2b:11:57:e1:f3:38:16:13:13:51:78:43:f5:10:44:81: 66:72:86:ed:26:28:90:1e:66:ef:5e:48:5b:4a:45:44:4e:03: 52:25:95:c9:7a:a0:8b:a0:f5:31:c0:23:26:96:9e:f8:dd:59: cf:c6:db:d3:0f:06:e6:e0:15:ec:f0:0d:41:e9:6c:06:5c:a2: c2:12:de:b3:b6:36:ae:d9:55:e4:d1:62:2a:60:f0:83:c5:27: 6e:e8:11:43:b0:28:88:6b:8a:cc:b3:56:c9:11:5e:ab:4e:d9: a9:76:a4:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzoI+2d+sfe2UX1qyWKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmRmOWM0MTcxNjdhOThhOTE4YTE4ZGZlMmEzNGM5ZDZjOWY4NzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+iIMNlvMfBczj6z/YZltZUVwWU0 RbYaH2jL9A7g7gBTUPup2euVjSzLw7n+58x5TVhsJWEGBZG0P3U1QTJMx4dJi664 wBXPPfGuT03gNpCiJLYi47ZSuOkFt4H6Ze7IR38uITmsmeY0PPpUXl2KIn0n524h 8CUd4sVHE7oCuva0vVEBXYmt1S61zqtf/CCPp9TSncGO81dbZiHBFuc+XBy0n7nB xSxm+ZmTrkPYleO5e9NTFOxpvFzuR7kfFLGdccjrgmdizAPJWJJkSHx+M0cSynWp NTj4pGdsHYQozo0KJa07CPZXDaJ7/H35LNqafam6wRywOmOw8LRfjzoh6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvfnEFxZ6mKkYoY3+KjTJ1sn4dtMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEvdTktY1FYRm5xWXFSaWhqZjRxTk1uV3lmaDIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqgNMA0G CSqGSIb3DQEBCwUAA4IBAQBEqKBAFXgXUViiJMBWDD6xF6KQeUSQNwxo51FYmp2x BdyWqU1XjEx9dAY/ezBPQB2D1hk9N2oUC8PlJ99ubzxs3j3aD9hM+Hz3xcq9zCgD VbnhNTJDyW48fQwzsfhkPlGbGxjYd2Bkv41jiRP9qpFEx5osp2Me8tWdupF+7R49 dyQPPrjL9y6vY9Zjiun6czqCmisRV+HzOBYTE1F4Q/UQRIFmcobtJiiQHmbvXkhb SkVETgNSJZXJeqCLoPUxwCMmlp743VnPxtvTDwbm4BXs8A1B6WwGXKLCEt6ztjau 2VXk0WIqYPCDxSdu6BFDsCiIa4rMs1bJEV6rTtmpdqQJ -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:24 2026 by rpki-client