This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/uGNfdvA7X3WyOFyt75e9tVBH91A.roa File: uGNfdvA7X3WyOFyt75e9tVBH91A.roa (raw, json) Hash identifier: 5//JVVveSwHR2hj+bfwWqReYip5bDufgsCMYkbkcBgE= Subject key identifier: B8:63:5F:76:F0:3B:5F:75:B2:38:5C:AD:EF:97:BD:B5:50:47:F7:50 Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae Certificate serial: 019B7E3765ACD8F9BB4784FAFF6D951F2482 Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/uGNfdvA7X3WyOFyt75e9tVBH91A.roa Signing time: Fri 02 Jan 2026 10:18:38 +0000 ROA not before: Fri 02 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6205 IP address blocks: 185.70.84.0/24 maxlen: 24 185.70.85.0/24 maxlen: 24 185.70.86.0/24 maxlen: 24 185.70.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:65:ac:d8:f9:bb:47:84:fa:ff:6d:95:1f:24:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae Validity Not Before: Jan 2 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8635f76f03b5f75b2385cadef97bdb55047f750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:20:c0:70:af:aa:39:dd:78:24:84:53:0c: 17:0b:26:50:5f:d2:02:42:97:b8:16:b8:d8:c9:c2: 77:d7:01:9f:af:29:f2:f5:f2:65:43:87:ba:4f:8c: 19:08:6c:7f:42:14:49:8b:a7:88:3b:f5:06:06:50: 0d:4e:90:aa:7f:60:8a:b9:d3:13:d9:ed:51:b6:e8: 09:58:8b:dc:4f:dd:1a:c3:09:8c:fb:77:bd:54:39: 00:ef:3a:03:a7:17:0c:3a:46:3d:35:62:e0:ff:40: ad:c3:e3:14:a4:51:5f:cb:10:22:a8:3b:64:13:74: 34:d9:98:ce:2e:f3:20:f8:22:4e:3c:62:ed:28:e9: 88:39:9c:0d:2d:66:80:bf:0b:ab:47:b5:64:90:90: c4:6d:e7:f5:f9:25:3f:75:d8:65:0d:8c:05:eb:7f: d3:f8:f3:d5:4d:33:d6:dd:ae:f8:21:ab:58:a0:ca: cd:e9:15:6e:ed:f5:c9:9e:b0:8d:7a:f0:be:ec:9b: f0:a5:19:c8:f1:da:03:e3:7b:43:38:0f:5c:ec:77: 2e:98:03:57:99:de:bd:12:90:3a:4d:95:e0:71:aa: 8d:72:cb:14:68:63:64:ba:a6:0c:76:0a:d3:3c:d1: dd:95:38:c2:94:f8:88:b7:0f:7c:b9:8b:2b:1c:d7: 42:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:63:5F:76:F0:3B:5F:75:B2:38:5C:AD:EF:97:BD:B5:50:47:F7:50 X509v3 Authority Key Identifier: keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/uGNfdvA7X3WyOFyt75e9tVBH91A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.84.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:49:14:bb:b2:8a:df:ad:26:5b:48:41:88:1c:2e:5a:a2:e0: f3:de:bb:da:7f:0c:62:0f:7f:8c:ef:18:a4:c7:90:5a:f9:25: 70:de:e5:38:62:61:fa:b7:e5:51:0a:12:d1:3f:31:39:d1:23: ac:a7:36:bc:b9:1a:ad:f2:9f:05:7c:82:05:b9:54:00:17:fe: 58:17:ad:4e:c6:cc:d2:ef:60:3a:26:5a:59:16:68:6a:12:30: ca:15:ad:4d:ff:55:ba:e8:b6:fe:47:95:f0:b1:d1:28:6c:c5: a9:0f:fd:aa:04:8b:75:55:40:50:62:b6:f7:32:fd:32:c0:fc: 28:ae:be:54:f7:c8:d5:80:23:d3:78:4f:cc:3d:41:18:c1:c8: 2b:4a:d3:f6:d1:7c:46:63:80:69:37:59:3d:ea:92:b8:19:3b: f3:04:43:2e:a4:b7:89:9b:aa:63:f0:34:d6:53:ef:94:0f:33: 45:2b:c2:63:cc:73:44:fb:8e:8b:7e:a8:3f:13:f9:fa:fe:87: d1:6c:41:7c:57:7e:c9:91:b2:f9:6e:cb:45:4c:45:f0:b5:c3: de:b9:2b:5d:d9:a7:9b:f0:79:59:60:77:d2:61:f5:2d:fe:5e: 06:78:3c:cb:a6:6b:58:0f:1c:b7:b1:c9:af:e1:2f:fa:d0:dc: 25:e9:ac:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N2Ws2Pm7R4T6/22VHySCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YmVkMzNmZjAxZThlMDlkYzRmZWRjZDAxMTM5YzBlNzc4 NTRhYWUwHhcNMjYwMTAyMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODYzNWY3NmYwM2I1Zjc1YjIzODVjYWRlZjk3YmRiNTUwNDdmNzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE0gwHCvqjndeCSEUwwXCyZQX9IC Qpe4FrjYycJ31wGfryny9fJlQ4e6T4wZCGx/QhRJi6eIO/UGBlANTpCqf2CKudMT 2e1RtugJWIvcT90awwmM+3e9VDkA7zoDpxcMOkY9NWLg/0Ctw+MUpFFfyxAiqDtk E3Q02ZjOLvMg+CJOPGLtKOmIOZwNLWaAvwurR7VkkJDEbef1+SU/ddhlDYwF63/T +PPVTTPW3a74IatYoMrN6RVu7fXJnrCNevC+7JvwpRnI8doD43tDOA9c7HcumANX md69EpA6TZXgcaqNcssUaGNkuqYMdgrTPNHdlTjClPiItw98uYsrHNdC9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhjX3bwO191sjhcre+XvbVQR/dQMB8GA1UdIwQY MBaAFPe+0z/wHo4J3E/tzQETnA53hUquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YTZkMDEtYTM3NS00ZTExLTg3MWUt OTllNjE0MWRlN2YxLzEvdUdOZmR2QTdYM1d5T0Z5dDc1ZTl0VkJIOTFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81YTZkMDEtYTM3NS00ZTExLTg3MWUtOTllNjE0MWRlN2Yx LzEvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUZUMA0G CSqGSIb3DQEBCwUAA4IBAQAeSRS7sorfrSZbSEGIHC5aouDz3rvafwxiD3+M7xik x5Ba+SVw3uU4YmH6t+VRChLRPzE50SOspza8uRqt8p8FfIIFuVQAF/5YF61OxszS 72A6JlpZFmhqEjDKFa1N/1W66Lb+R5XwsdEobMWpD/2qBIt1VUBQYrb3Mv0ywPwo rr5U98jVgCPTeE/MPUEYwcgrStP20XxGY4BpN1k96pK4GTvzBEMupLeJm6pj8DTW U++UDzNFK8JjzHNE+46Lfqg/E/n6/ofRbEF8V37JkbL5bstFTEXwtcPeuStd2aeb 8HlZYHfSYfUt/l4GeDzLpmtYDxy3scmv4S/60Nwl6awe -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:50 2026 by rpki-client