This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/t6rzb9V4CtqE19d3fvrivglZ8JY.roa File: t6rzb9V4CtqE19d3fvrivglZ8JY.roa (raw, json) Hash identifier: 4D9YdlVLAXYceYahdSlYP72+fLVK34lQxVM5oI1tuvo= Subject key identifier: B7:AA:F3:6F:D5:78:0A:DA:84:D7:D7:77:7E:FA:E2:BE:09:59:F0:96 Certificate issuer: /CN=213cb2a2181a7d36f40e41758d627f701a602042 Certificate serial: 019B77C746C21E940D15A97D0A741BA358D0 Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/t6rzb9V4CtqE19d3fvrivglZ8JY.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215904 IP address blocks: 185.65.68.0/24 maxlen: 24 217.70.14.0/24 maxlen: 24 2a14:2f40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:46:c2:1e:94:0d:15:a9:7d:0a:74:1b:a3:58:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7aaf36fd5780ada84d7d7777efae2be0959f096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:40:fd:a2:c7:47:f9:f0:aa:f8:c8:f5:47: dd:7f:05:86:b3:5b:0b:e9:0a:7c:7b:4d:86:46:fc: 27:eb:b7:e9:33:99:80:fe:50:26:8a:64:f3:29:cc: 2c:a1:e5:8d:ab:1e:ce:16:3b:68:0c:3d:dc:dd:ce: 3d:e0:e3:36:5a:69:48:9e:d9:63:09:19:86:ab:b1: 51:36:45:63:54:c4:1f:02:a9:5d:3d:91:2c:58:9f: 4b:68:87:3c:a3:d5:2b:8f:ef:dd:55:7a:7e:2b:d6: a9:0c:c7:03:1f:c6:a6:f3:a3:0e:c2:03:3c:f4:81: b8:ee:30:12:eb:e6:84:6e:ca:f9:03:32:8b:33:2d: 33:28:5d:6b:b1:de:29:9d:57:45:43:16:25:d8:28: 3a:0b:20:af:aa:05:12:7e:63:3a:b3:4c:ec:04:55: f9:f8:fc:59:0a:1b:9b:33:47:a1:5f:11:1c:75:9e: 4f:00:81:78:48:25:a0:f3:2f:52:37:08:52:03:a5: ed:ea:c6:68:b9:17:09:8c:01:d5:82:e4:7d:97:af: 5a:46:39:26:2b:e8:9d:7a:e2:46:4a:8f:70:c1:46: a8:2f:32:4c:ff:31:2a:44:65:40:f8:0b:99:7a:51: 93:78:2a:37:af:75:83:03:cf:f5:15:d9:9e:d9:65: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AA:F3:6F:D5:78:0A:DA:84:D7:D7:77:7E:FA:E2:BE:09:59:F0:96 X509v3 Authority Key Identifier: keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/t6rzb9V4CtqE19d3fvrivglZ8JY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.68.0/24 217.70.14.0/24 IPv6: 2a14:2f40::/32 Signature Algorithm: sha256WithRSAEncryption 09:57:f3:28:15:71:79:73:de:36:6e:ab:39:ea:8e:15:71:50: ef:e3:4d:c3:3a:7c:b3:d5:7d:f4:64:ac:60:b6:e9:ef:a6:7f: 13:df:5f:ea:eb:cc:13:d1:55:1b:6f:b7:76:b9:b4:9f:b5:df: e7:f2:ae:d0:d6:47:ce:01:51:c5:ce:b9:cd:c6:6b:e1:f6:d4: f0:36:55:2c:c0:b1:92:43:4a:c4:d2:74:4f:23:43:fc:a4:60: 13:3e:4d:38:bb:d2:aa:52:6f:c6:9f:26:54:5f:de:e7:8b:69: b2:b3:28:81:5d:27:9e:23:41:b3:2c:64:a8:5d:72:a1:62:fa: 65:37:4c:dd:b3:e3:3f:36:e1:e2:81:7c:8d:9f:73:d3:87:f4: 64:a1:88:26:3a:bf:c7:26:54:6d:5d:b5:22:00:4c:6c:ac:6f: 20:87:ea:72:eb:83:97:4b:a6:90:06:cb:c2:30:76:2e:ee:28: 66:bc:03:16:7d:fe:3a:3d:d6:45:55:38:e5:97:36:76:d1:6b: 0d:0c:8e:10:d7:31:76:37:85:9e:f6:61:64:ed:c6:42:f7:72: 22:65:9c:bc:68:30:af:0b:f5:7c:21:27:36:88:0f:3a:27:23: 90:13:aa:ef:b1:91:7b:c5:a2:e1:35:2e:6e:75:d8:0c:f4:93: d1:8a:b3:be -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x0bCHpQNFal9CnQbo1jQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxM2NiMmEyMTgxYTdkMzZmNDBlNDE3NThkNjI3ZjcwMWE2 MDIwNDIwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2FhZjM2ZmQ1NzgwYWRhODRkN2Q3Nzc3ZWZhZTJiZTA5NTlmMDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui1A/aLHR/nwqvjI9UfdfwWGs1sL 6Qp8e02GRvwn67fpM5mA/lAmimTzKcwsoeWNqx7OFjtoDD3c3c494OM2WmlIntlj CRmGq7FRNkVjVMQfAqldPZEsWJ9LaIc8o9Urj+/dVXp+K9apDMcDH8am86MOwgM8 9IG47jAS6+aEbsr5AzKLMy0zKF1rsd4pnVdFQxYl2Cg6CyCvqgUSfmM6s0zsBFX5 +PxZChubM0ehXxEcdZ5PAIF4SCWg8y9SNwhSA6Xt6sZouRcJjAHVguR9l69aRjkm K+ideuJGSo9wwUaoLzJM/zEqRGVA+AuZelGTeCo3r3WDA8/1Fdme2WWAdwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLeq82/VeArahNfXd3764r4JWfCWMB8GA1UdIwQY MBaAFCE8sqIYGn029A5BdY1if3AaYCBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUt M2U1MWJjZDE0NzM2LzEvdDZyemI5VjRDdHFFMTlkM2Z2cml2Z2xaOEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kYzExZDYtNGMzNS00ZGFhLWE3ZGUtM2U1MWJjZDE0NzM2 LzEvSVR5eW9oZ2FmVGIwRGtGMWpXSl9jQnBnSUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuUFEAwQA 2UYOMA0EAgACMAcDBQAqFC9AMA0GCSqGSIb3DQEBCwUAA4IBAQAJV/MoFXF5c942 bqs56o4VcVDv403DOnyz1X30ZKxgtunvpn8T31/q68wT0VUbb7d2ubSftd/n8q7Q 1kfOAVHFzrnNxmvh9tTwNlUswLGSQ0rE0nRPI0P8pGATPk04u9KqUm/GnyZUX97n i2mysyiBXSeeI0GzLGSoXXKhYvplN0zds+M/NuHigXyNn3PTh/RkoYgmOr/HJlRt XbUiAExsrG8gh+py64OXS6aQBsvCMHYu7ihmvAMWff46PdZFVTjllzZ20WsNDI4Q 1zF2N4We9mFk7cZC93IiZZy8aDCvC/V8ISc2iA86JyOQE6rvsZF7xaLhNS5uddgM 9JPRirO+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:58 2026 by rpki-client