This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/n9G4PwDSvg3JXpVqBL9fxfextGk.roa File: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (raw, json) Hash identifier: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0= Subject key identifier: 9F:D1:B8:3F:00:D2:BE:0D:C9:5E:95:6A:04:BF:5F:C5:F7:B1:B4:69 Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8 Certificate serial: 019B7758DB873ABE6E87DE05408A3309B3AD Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/n9G4PwDSvg3JXpVqBL9fxfextGk.roa Signing time: Thu 01 Jan 2026 02:17:50 +0000 ROA not before: Thu 01 Jan 2026 02:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208923 IP address blocks: 185.70.224.0/24 maxlen: 24 185.70.226.0/24 maxlen: 24 185.70.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:db:87:3a:be:6e:87:de:05:40:8a:33:09:b3:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8 Validity Not Before: Jan 1 02:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fd1b83f00d2be0dc95e956a04bf5fc5f7b1b469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:91:03:71:e5:63:b4:25:fd:ea:b8:7d:e4: 57:b9:25:fe:e0:98:bd:ce:e4:8b:8b:31:20:68:f6: 65:1b:9c:6d:e2:e5:69:1a:3c:36:ee:42:c8:37:ca: 25:79:40:42:3c:2e:a6:12:3e:b1:18:54:58:6c:a3: a8:ab:55:79:a9:d0:de:37:b2:64:4b:22:39:26:96: 8c:a9:6d:2c:ff:24:18:6a:49:92:37:94:5e:52:2e: 03:09:85:53:af:4d:ca:11:b1:58:fc:3c:52:3a:fe: 57:62:72:52:b1:74:94:c4:7c:4e:5d:44:9a:bc:61: 00:c7:2a:db:0e:aa:ca:bc:e9:23:e2:c1:ad:ec:8d: 99:d7:b0:9b:a8:a9:80:eb:01:2f:ee:42:fa:3b:bc: 08:8b:84:77:0f:4e:72:50:35:54:9b:98:bf:a5:8a: cf:13:b8:58:16:d4:52:15:ed:db:b2:a5:91:1f:e5: 6a:8f:57:4e:be:a6:ce:92:6c:ba:b4:3a:bd:fa:1b: 7a:f3:e6:51:85:9c:e9:e6:ff:bd:66:ab:86:e0:8c: ab:5a:1a:dd:a0:ca:83:dd:86:7a:b6:29:52:9b:2f: 7c:82:f2:d7:85:c0:a4:0b:15:5d:bf:42:3e:f5:5b: 98:f2:cb:a9:58:8d:31:29:7a:52:d2:ac:30:7b:76: a0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D1:B8:3F:00:D2:BE:0D:C9:5E:95:6A:04:BF:5F:C5:F7:B1:B4:69 X509v3 Authority Key Identifier: keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/n9G4PwDSvg3JXpVqBL9fxfextGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.224.0/24 185.70.226.0/23 Signature Algorithm: sha256WithRSAEncryption 31:64:1d:dc:6b:87:c7:14:4f:07:bb:ea:be:fd:f4:76:ec:c5: bd:87:fa:9c:97:7c:04:06:ed:4b:fa:f4:61:84:37:41:98:f2: ad:bb:c5:a3:0d:cd:9e:e5:79:2e:9d:81:36:71:57:80:19:eb: ee:e4:13:90:b9:cf:f6:c0:65:09:37:1b:01:54:c4:cb:1a:37: e0:28:4e:e1:59:5f:bb:7d:3d:8d:b7:43:67:17:6e:23:da:3a: c7:fa:2d:7d:5c:6e:d7:47:e5:e0:c9:5b:ff:f3:8f:6f:a5:96: 9b:e3:98:94:95:2d:3c:14:90:0f:38:b1:dc:72:e1:e3:1c:18: a9:24:d8:a1:4d:ec:45:05:8c:01:b2:20:46:6f:47:d0:51:12: 6b:9a:38:f4:41:20:82:0b:c9:56:95:dd:e2:3b:62:c0:1d:cc: ee:29:04:82:a0:b6:73:0b:21:59:1c:a6:5a:f0:f8:48:2e:2c: 93:9f:41:3c:b0:74:14:d9:f9:01:76:72:f5:fe:1d:30:32:68: 11:c6:fd:7f:7a:c8:12:7e:66:17:f0:be:ef:5b:b6:df:8d:7d: 77:d3:1a:e0:a2:19:4d:9b:1e:d4:bb:d0:25:92:ac:73:32:9f: 10:2f:b8:72:67:10:97:ae:e1:09:34:1c:17:5a:70:3f:1f:b5: 06:21:0c:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WNuHOr5uh94FQIozCbOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzU3MTg1NDcyZjE2ZDUzZWViNjhhMTQwZTM1MTNmYTMx YzMxZDgwHhcNMjYwMTAxMDIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmQxYjgzZjAwZDJiZTBkYzk1ZTk1NmEwNGJmNWZjNWY3YjFiNDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkiRA3HlY7Ql/eq4feRXuSX+4Ji9 zuSLizEgaPZlG5xt4uVpGjw27kLIN8oleUBCPC6mEj6xGFRYbKOoq1V5qdDeN7Jk SyI5JpaMqW0s/yQYakmSN5ReUi4DCYVTr03KEbFY/DxSOv5XYnJSsXSUxHxOXUSa vGEAxyrbDqrKvOkj4sGt7I2Z17CbqKmA6wEv7kL6O7wIi4R3D05yUDVUm5i/pYrP E7hYFtRSFe3bsqWRH+Vqj1dOvqbOkmy6tDq9+ht68+ZRhZzp5v+9ZquG4IyrWhrd oMqD3YZ6tilSmy98gvLXhcCkCxVdv0I+9VuY8supWI0xKXpS0qwwe3ag5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ/RuD8A0r4NyV6VagS/X8X3sbRpMB8GA1UdIwQY MBaAFGR1cYVHLxbVPutooUDjUT+jHDHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2Yzct ODFkMTAwNzNkZWU0LzEvbjlHNFB3RFN2ZzNKWHBWcUJMOWZ4ZmV4dEdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xMjE0NDctZDJjOC00Y2E4LTk2YzctODFkMTAwNzNkZWU0 LzEvWkhWeGhVY3ZGdFUtNjJpaFFPTlJQNk1jTWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuUbgAwQB uUbiMA0GCSqGSIb3DQEBCwUAA4IBAQAxZB3ca4fHFE8Hu+q+/fR27MW9h/qcl3wE Bu1L+vRhhDdBmPKtu8WjDc2e5XkunYE2cVeAGevu5BOQuc/2wGUJNxsBVMTLGjfg KE7hWV+7fT2Nt0NnF24j2jrH+i19XG7XR+XgyVv/849vpZab45iUlS08FJAPOLHc cuHjHBipJNihTexFBYwBsiBGb0fQURJrmjj0QSCCC8lWld3iO2LAHczuKQSCoLZz CyFZHKZa8PhILiyTn0E8sHQU2fkBdnL1/h0wMmgRxv1/esgSfmYX8L7vW7bfjX13 0xrgohlNmx7Uu9AlkqxzMp8QL7hyZxCXruEJNBwXWnA/H7UGIQx0 -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:52 2026 by rpki-client