This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/xY_RPRuWhka4yK50fnHCPCGKxRA.roa File: xY_RPRuWhka4yK50fnHCPCGKxRA.roa (raw, json) Hash identifier: VF7eJGl3ihiYl2HxFRVXPIGcGhxVuh+HKeZIJvFxhqE= Subject key identifier: C5:8F:D1:3D:1B:96:86:46:B8:C8:AE:74:7E:71:C2:3C:21:8A:C5:10 Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Certificate serial: 019B797F3296848A8BD6E07C35E71CF7337D Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/xY_RPRuWhka4yK50fnHCPCGKxRA.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197578 IP address blocks: 170.168.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:32:96:84:8a:8b:d6:e0:7c:35:e7:1c:f7:33:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c58fd13d1b968646b8c8ae747e71c23c218ac510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:2f:76:a8:ac:53:35:d5:65:9f:43:05:91: 04:90:f7:7e:3b:32:10:01:61:82:fe:6d:cb:2d:06: 1a:bf:2b:df:0d:95:77:7d:47:a1:ec:c0:83:42:19: 9f:c1:2b:2e:19:ca:e3:03:fd:d6:bf:68:b1:6f:8b: 1d:84:a5:4e:a6:1f:fb:f1:6d:7b:af:99:af:87:5f: db:24:16:c5:13:1b:bb:19:ed:1a:df:0d:1e:47:7f: 29:86:ab:df:99:ed:b0:16:34:26:44:21:2e:b0:5b: 42:33:22:c3:f9:bf:c2:8c:e9:14:42:a8:45:3c:77: fa:7c:b8:d5:e3:e9:e3:04:97:86:1f:1e:06:79:45: 0e:53:ea:5e:a0:95:ae:0b:d9:aa:b8:8a:c1:9b:92: 04:c7:61:98:28:d2:fb:0f:ac:9c:3d:ff:3c:b1:eb: de:31:c4:b3:ab:43:79:5e:24:41:76:57:19:bb:a4: b6:9c:e9:4b:22:48:39:6b:4c:09:6e:ce:9d:f0:4b: 12:fb:84:f0:9c:61:08:08:22:72:76:1a:76:7f:71: 47:42:7b:f1:75:3e:f7:b5:df:d5:96:9d:a7:67:5f: b5:15:c3:f4:49:e8:b4:45:8a:ca:92:03:12:82:12: dc:99:ef:f8:5d:60:7a:b4:de:f8:b2:04:6f:be:d4: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8F:D1:3D:1B:96:86:46:B8:C8:AE:74:7E:71:C2:3C:21:8A:C5:10 X509v3 Authority Key Identifier: keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/xY_RPRuWhka4yK50fnHCPCGKxRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.168.77.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e7:82:d1:7a:60:83:39:f8:01:2d:2f:e3:ce:b7:a6:d5:c4: a2:71:74:89:55:ad:fb:19:5d:c1:b3:b2:74:20:42:d4:8f:83: 86:08:46:a8:fc:cc:08:0e:11:b2:11:93:d5:20:56:4a:57:9b: 4b:ae:7a:79:ba:3e:4f:21:95:6d:79:7a:93:41:7e:f8:d5:ab: 0c:a6:7c:b5:62:df:19:4d:04:06:86:5f:d3:e3:63:d2:d6:5b: 68:35:60:be:3f:7c:e1:42:86:0e:b1:4e:8d:b2:37:75:10:80: d1:e7:b3:b1:c2:9a:cb:d3:9f:a4:f0:6b:bc:af:82:c7:6a:d1: 05:c2:b2:82:05:d8:ba:94:97:1e:e4:c7:da:2a:d0:73:56:6f: 07:cb:55:1f:10:f5:f6:1a:41:37:14:91:9e:56:a3:a4:ca:e1: 98:a6:ae:c1:e1:fb:9f:c6:69:4e:af:9b:91:f7:81:b1:c4:52: 56:2c:ca:28:e0:8d:d2:b7:be:28:0d:09:b9:d0:c8:7b:7b:0d: ea:30:47:f1:bd:0a:ca:70:29:3d:55:1c:6a:c8:9a:65:86:fe: c7:7c:d5:68:d6:71:75:51:3e:a7:5c:bd:09:e8:54:c1:ea:0c: 34:af:c9:06:1b:da:1e:a5:ec:13:31:52:28:20:43:c2:03:fb: cb:ef:14:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fzKWhIqL1uB8Necc9zN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh MGYwY2UwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNThmZDEzZDFiOTY4NjQ2YjhjOGFlNzQ3ZTcxYzIzYzIxOGFjNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLUvdqisUzXVZZ9DBZEEkPd+OzIQ AWGC/m3LLQYavyvfDZV3fUeh7MCDQhmfwSsuGcrjA/3Wv2ixb4sdhKVOph/78W17 r5mvh1/bJBbFExu7Ge0a3w0eR38phqvfme2wFjQmRCEusFtCMyLD+b/CjOkUQqhF PHf6fLjV4+njBJeGHx4GeUUOU+peoJWuC9mquIrBm5IEx2GYKNL7D6ycPf88seve McSzq0N5XiRBdlcZu6S2nOlLIkg5a0wJbs6d8EsS+4TwnGEICCJydhp2f3FHQnvx dT73td/Vlp2nZ1+1FcP0Sei0RYrKkgMSghLcme/4XWB6tN74sgRvvtSJlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMWP0T0bloZGuMiudH5xwjwhisUQMB8GA1UdIwQY MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et YTY2N2JiNzY1MDYwLzEveFlfUlBSdVdoa2E0eUs1MGZuSENQQ0dLeFJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqqhNMA0G CSqGSIb3DQEBCwUAA4IBAQCX54LRemCDOfgBLS/jzrem1cSicXSJVa37GV3Bs7J0 IELUj4OGCEao/MwIDhGyEZPVIFZKV5tLrnp5uj5PIZVteXqTQX741asMpny1Yt8Z TQQGhl/T42PS1ltoNWC+P3zhQoYOsU6Nsjd1EIDR57OxwprL05+k8Gu8r4LHatEF wrKCBdi6lJce5MfaKtBzVm8Hy1UfEPX2GkE3FJGeVqOkyuGYpq7B4fufxmlOr5uR 94GxxFJWLMoo4I3St74oDQm50Mh7ew3qMEfxvQrKcCk9VRxqyJplhv7HfNVo1nF1 UT6nXL0J6FTB6gw0r8kGG9oepewTMVIoIEPCA/vL7xTK -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:09 2026 by rpki-client