This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cN9HwbgFjlVwtrl1nx0SxThbNFI.roa File: cN9HwbgFjlVwtrl1nx0SxThbNFI.roa (raw, json) Hash identifier: OP8fyShdfpr1nUQoH75GR3P3I5WDC5OZi8y4at5GkkY= Subject key identifier: 70:DF:47:C1:B8:05:8E:55:70:B6:B9:75:9F:1D:12:C5:38:5B:34:52 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF05ED4768918A6BF06FECDA991EA Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cN9HwbgFjlVwtrl1nx0SxThbNFI.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53850 IP address blocks: 185.217.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f0:5e:d4:76:89:18:a6:bf:06:fe:cd:a9:91:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70df47c1b8058e5570b6b9759f1d12c5385b3452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:a8:0d:62:6d:97:43:e5:62:e8:9f:42:4f: a3:38:9c:90:3e:a8:f0:4d:d4:03:02:aa:b2:47:63: d3:21:1f:07:71:79:92:3d:1b:c6:ac:99:15:fb:82: 33:0a:63:fb:2d:80:f4:61:20:11:5b:40:bf:7f:bb: 49:ef:47:e5:de:85:b3:05:a2:75:a5:b6:29:98:c6: 98:e4:95:03:e2:4b:ac:f0:05:55:b9:a3:f6:c4:b3: 3e:a7:30:27:a4:28:e7:e1:a1:1a:4b:88:78:94:ae: f1:c8:3e:0f:3f:76:c5:ec:c9:d6:0b:c8:07:a1:65: 4e:eb:a6:36:6a:d3:c8:25:18:de:73:4b:0e:9d:bb: 51:72:96:14:3a:88:c8:ee:60:e1:6c:dc:cb:7c:35: 46:14:00:cf:50:70:97:e0:00:e0:1f:81:30:b0:09: 63:ab:7c:d0:f0:e8:db:fe:08:a2:6a:f5:13:2d:06: c3:0d:7f:ae:64:db:9c:c3:85:66:7c:b1:93:55:84: 80:3a:bd:77:3b:a3:a6:aa:b2:24:82:40:ce:1d:68: e2:cb:56:39:f0:08:86:b9:0b:0c:41:e5:c4:b0:d5: c5:e8:f2:5c:be:2d:64:d4:cb:cd:5c:19:1c:d2:01: e1:e5:0f:c7:cb:c7:92:60:83:38:e2:50:80:a4:17: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DF:47:C1:B8:05:8E:55:70:B6:B9:75:9F:1D:12:C5:38:5B:34:52 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/cN9HwbgFjlVwtrl1nx0SxThbNFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.108.0/24 Signature Algorithm: sha256WithRSAEncryption 36:ea:75:24:7a:c0:db:51:84:d4:83:db:8f:90:d7:2c:73:dc: d5:4e:52:f6:92:4d:d3:52:87:0f:99:f8:70:3d:35:1e:3a:22: 00:1c:31:6c:6a:56:c7:88:f0:19:a6:9f:60:8e:d4:71:9d:14: b2:6f:86:9c:09:88:a1:9d:a0:2d:c1:a3:bc:a9:8b:2b:0b:4b: fb:9e:35:64:7b:74:a5:b0:2c:88:5c:d9:3c:d0:98:d6:f6:c1: 46:9b:a7:e9:1d:82:2a:c1:6c:ca:72:f8:08:6e:25:7c:f5:42: af:df:6f:f3:da:6d:95:36:d9:d9:95:ce:72:8b:38:a1:78:dc: b5:67:42:69:71:aa:7f:b9:70:4c:f8:5d:f4:a8:82:89:39:2c: 63:cc:52:e9:72:94:26:d1:40:53:62:63:6d:2b:af:86:48:6b: 31:33:9b:37:42:66:6b:7b:08:33:ce:11:09:6f:be:2d:de:99: fc:32:f5:8c:12:65:41:91:ae:8a:95:2e:cc:d2:ae:bd:c5:fd: 53:36:30:7b:af:20:99:9d:11:ea:f6:e1:2c:99:e4:79:13:a2: 8d:66:bd:3f:36:29:e7:9c:46:94:a5:c7:b4:9a:b9:6b:ed:39: ac:d4:51:41:8f:27:92:29:ab:aa:25:bf:b8:50:9a:35:a8:67: e6:44:e5:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vBe1HaJGKa/Bv7NqZHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGRmNDdjMWI4MDU4ZTU1NzBiNmI5NzU5ZjFkMTJjNTM4NWIzNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgCoDWJtl0PlYuifQk+jOJyQPqjw TdQDAqqyR2PTIR8HcXmSPRvGrJkV+4IzCmP7LYD0YSARW0C/f7tJ70fl3oWzBaJ1 pbYpmMaY5JUD4kus8AVVuaP2xLM+pzAnpCjn4aEaS4h4lK7xyD4PP3bF7MnWC8gH oWVO66Y2atPIJRjec0sOnbtRcpYUOojI7mDhbNzLfDVGFADPUHCX4ADgH4EwsAlj q3zQ8Ojb/giiavUTLQbDDX+uZNucw4VmfLGTVYSAOr13O6OmqrIkgkDOHWjiy1Y5 8AiGuQsMQeXEsNXF6PJcvi1k1MvNXBkc0gHh5Q/Hy8eSYIM44lCApBedCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDfR8G4BY5VcLa5dZ8dEsU4WzRSMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvY045SHdiZ0ZqbFZ3dHJsMW54MFN4VGhiTkZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudlsMA0G CSqGSIb3DQEBCwUAA4IBAQA26nUkesDbUYTUg9uPkNcsc9zVTlL2kk3TUocPmfhw PTUeOiIAHDFsalbHiPAZpp9gjtRxnRSyb4acCYihnaAtwaO8qYsrC0v7njVke3Sl sCyIXNk80JjW9sFGm6fpHYIqwWzKcvgIbiV89UKv32/z2m2VNtnZlc5yiziheNy1 Z0Jpcap/uXBM+F30qIKJOSxjzFLpcpQm0UBTYmNtK6+GSGsxM5s3QmZrewgzzhEJ b74t3pn8MvWMEmVBka6KlS7M0q69xf1TNjB7ryCZnRHq9uEsmeR5E6KNZr0/Ninn nEaUpce0mrlr7Tms1FFBjyeSKauqJb+4UJo1qGfmROWw -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:21 2026 by rpki-client