This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/J3Irj20a5Nlbymwp_tuM6NwpZGk.roa File: J3Irj20a5Nlbymwp_tuM6NwpZGk.roa (raw, json) Hash identifier: JOo4UjGWzNEE5RC1ZV6KYebK8zPHqC8OTRdKUFsxrbc= Subject key identifier: 27:72:2B:8F:6D:1A:E4:D9:5B:CA:6C:29:FE:DB:8C:E8:DC:29:64:69 Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E3891592FD97159311255CB45A9BEAE Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/J3Irj20a5Nlbymwp_tuM6NwpZGk.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56797 IP address blocks: 213.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:91:59:2f:d9:71:59:31:12:55:cb:45:a9:be:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27722b8f6d1ae4d95bca6c29fedb8ce8dc296469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:14:e0:85:69:e6:68:a3:e5:27:b2:16:f2: d1:fa:79:71:b9:a0:6b:ed:c7:6f:58:60:d5:07:74: ea:f2:a7:c1:a3:0e:5a:73:7f:15:0b:38:4f:b6:b1: 41:fa:8b:e0:30:5c:a2:05:10:bf:40:4e:e6:af:9b: b5:b3:7c:b8:5a:8e:d2:e8:81:99:ae:0e:ba:04:2d: 61:4c:2b:5f:f5:0f:c6:ae:0f:ad:1c:f3:ef:d3:3e: c1:a8:70:bf:ee:96:47:26:ae:f9:70:59:9d:8d:3b: bd:eb:85:59:36:5c:c1:ac:b4:20:bd:bb:d6:61:d0: 56:ef:dc:31:1d:75:87:0f:8f:aa:bd:56:42:65:82: 5e:dc:10:4e:4e:53:c7:b6:60:65:2a:06:77:0a:75: cb:6b:fd:af:5c:b3:d7:86:f2:dc:06:9e:e6:9f:b0: 24:f1:8d:be:2d:28:94:14:09:c3:99:b1:44:89:fd: ad:3a:0f:1a:01:1f:5e:4e:8e:01:a4:5b:3d:31:eb: d1:f2:7a:5d:41:d0:cb:37:42:70:21:4c:ca:d4:46: 16:ba:77:93:fa:cd:3a:af:fa:27:cd:92:d7:d8:e1: 5e:74:62:74:73:ee:5f:7c:0c:0a:3d:0e:c7:ee:53: be:ab:9a:42:05:79:a7:dd:ae:3c:99:02:bf:de:f6: b1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:72:2B:8F:6D:1A:E4:D9:5B:CA:6C:29:FE:DB:8C:E8:DC:29:64:69 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/J3Irj20a5Nlbymwp_tuM6NwpZGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.174.0.0/24 Signature Algorithm: sha256WithRSAEncryption 00:84:42:81:ff:60:14:5b:a3:8a:9f:e2:7b:92:44:36:c0:81: e1:10:2d:2b:e1:dc:05:dd:b1:f3:3f:34:e7:2a:ca:5e:44:a8: 09:20:cf:ce:78:e0:f8:38:38:69:11:be:63:23:5c:b2:cd:9f: de:c2:c0:ff:22:d0:a4:23:65:59:77:e9:e9:8f:be:47:76:2e: 66:ed:3f:fd:4c:74:c9:f7:e5:50:5e:93:25:ca:55:17:f2:01: db:6d:3b:08:70:29:44:92:e3:a4:a6:58:22:8a:3f:2e:46:83: af:b7:3f:07:d1:32:1a:d2:4d:f4:e4:93:60:b2:66:5a:c1:5d: 71:ef:59:51:be:5d:44:f5:f9:d1:09:84:07:39:04:9a:44:0d: 39:b3:95:fb:18:a3:77:95:a0:a4:49:be:56:ac:e9:7a:d7:e6: b6:25:7c:cc:bd:4f:d5:0a:56:db:64:d7:e2:2d:1c:87:32:97: 69:5e:de:31:db:40:bb:5c:96:9a:a9:9e:64:e9:26:e3:58:c5: 70:44:75:7e:29:81:c0:77:30:f6:cd:28:df:95:7a:21:65:93: 53:92:84:c2:e6:34:db:b8:23:62:d8:16:bf:4e:21:b3:20:3c: 76:4b:74:46:77:ab:00:89:b6:df:70:6e:1f:c5:5f:fe:19:57: 3c:df:68:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJFZL9lxWTESVctFqb6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzcyMmI4ZjZkMWFlNGQ5NWJjYTZjMjlmZWRiOGNlOGRjMjk2NDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhEU4IVp5mij5SeyFvLR+nlxuaBr 7cdvWGDVB3Tq8qfBow5ac38VCzhPtrFB+ovgMFyiBRC/QE7mr5u1s3y4Wo7S6IGZ rg66BC1hTCtf9Q/Grg+tHPPv0z7BqHC/7pZHJq75cFmdjTu964VZNlzBrLQgvbvW YdBW79wxHXWHD4+qvVZCZYJe3BBOTlPHtmBlKgZ3CnXLa/2vXLPXhvLcBp7mn7Ak 8Y2+LSiUFAnDmbFEif2tOg8aAR9eTo4BpFs9MevR8npdQdDLN0JwIUzK1EYWuneT +s06r/onzZLX2OFedGJ0c+5ffAwKPQ7H7lO+q5pCBXmn3a48mQK/3vaxhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdyK49tGuTZW8psKf7bjOjcKWRpMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvSjNJcmoyMGE1TmxieW13cF90dU02TndwWkdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1a4AMA0G CSqGSIb3DQEBCwUAA4IBAQAAhEKB/2AUW6OKn+J7kkQ2wIHhEC0r4dwF3bHzPzTn KspeRKgJIM/OeOD4ODhpEb5jI1yyzZ/ewsD/ItCkI2VZd+npj75Hdi5m7T/9THTJ 9+VQXpMlylUX8gHbbTsIcClEkuOkplgiij8uRoOvtz8H0TIa0k305JNgsmZawV1x 71lRvl1E9fnRCYQHOQSaRA05s5X7GKN3laCkSb5WrOl61+a2JXzMvU/VClbbZNfi LRyHMpdpXt4x20C7XJaaqZ5k6SbjWMVwRHV+KYHAdzD2zSjflXohZZNTkoTC5jTb uCNi2Ba/TiGzIDx2S3RGd6sAibbfcG4fxV/+GVc832iH -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:32 2026 by rpki-client