This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/70_l1y6U6sQdwIpOb6iklVy3oao.roa File: 70_l1y6U6sQdwIpOb6iklVy3oao.roa (raw, json) Hash identifier: VpEU3IVoWQIPh97gn+id38/VbaiStJZ66MLtFsKLfsU= Subject key identifier: EF:4F:E5:D7:2E:94:EA:C4:1D:C0:8A:4E:6F:A8:A4:95:5C:B7:A1:AA Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC4A42A72F680CFA679986A6F80DA2 Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/70_l1y6U6sQdwIpOb6iklVy3oao.roa Signing time: Thu 01 Jan 2026 14:18:07 +0000 ROA not before: Thu 01 Jan 2026 14:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210525 IP address blocks: 91.242.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:4a:42:a7:2f:68:0c:fa:67:99:86:a6:f8:0d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef4fe5d72e94eac41dc08a4e6fa8a4955cb7a1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:5a:20:3f:bb:02:f2:68:1e:fa:6d:08:2b: db:a4:a8:7f:bd:66:d8:0b:6e:fa:05:9d:34:10:a5: 3c:18:3c:4f:d1:96:3e:15:78:a1:b3:6b:7e:99:6b: 11:86:3d:bf:5e:17:42:7b:9d:ea:de:3b:c1:75:ac: a4:d6:b7:b7:1e:46:f8:88:d6:dc:c4:62:69:5a:5f: 7d:6e:03:eb:d9:27:6a:94:1c:f4:60:74:57:6a:7c: 28:f9:13:f9:31:07:d8:2a:a1:bc:56:4e:d5:28:e5: b8:ca:2b:ca:90:7a:28:50:1a:22:b3:ae:71:79:b5: 7c:e1:a3:03:cb:01:1a:78:e8:bb:ab:c2:16:fd:70: 2c:4d:a7:d7:1f:73:65:8c:21:00:5c:8e:48:08:93: 9d:f4:1e:98:8d:65:cb:07:2d:cf:af:4d:b8:92:b3: 37:df:78:2f:93:2d:c7:7d:57:86:f1:4a:c0:14:0b: 72:7e:d3:a0:b3:bb:af:39:58:d9:4a:ca:b2:8b:48: ce:96:8c:14:a4:d8:55:26:fd:44:ab:cb:c3:a6:c8: e5:a9:8c:36:8d:f8:4d:d4:94:fe:ed:99:dc:a2:ea: 2b:5b:8a:4c:5b:a9:e2:4c:7f:5c:f2:84:e9:56:dc: 30:55:17:c0:b0:e3:bf:d0:7d:bf:ef:ac:9d:ed:ad: b4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4F:E5:D7:2E:94:EA:C4:1D:C0:8A:4E:6F:A8:A4:95:5C:B7:A1:AA X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/70_l1y6U6sQdwIpOb6iklVy3oao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.255.0/24 Signature Algorithm: sha256WithRSAEncryption 67:6c:55:ad:09:8d:83:f7:a9:42:42:73:1a:56:17:a4:79:db: 21:5a:84:2e:44:1a:38:85:6b:11:ac:1a:ab:09:ab:b7:54:86: ca:4a:06:74:d7:17:3e:42:a3:ea:f2:1a:49:9d:ed:89:be:c8: f7:98:3d:7e:bc:d5:79:21:eb:9f:2b:1e:c4:81:56:ba:c8:83: a1:0c:b9:d4:8c:71:5f:33:1b:9c:b3:9e:b2:51:11:ec:b4:0c: 8e:46:3f:a5:8d:ea:a7:55:bd:70:46:a6:af:e4:11:4f:c7:84: 9e:10:d4:e6:d8:24:48:f2:90:dc:92:35:78:97:25:5b:b5:28: 3b:cf:f3:46:5a:3b:85:4d:5f:45:1d:c5:8c:fe:14:05:7a:bd: e8:34:92:62:0f:ca:7e:6f:5c:c9:8f:cb:2d:a1:ba:22:9a:ff: 1b:a8:4a:e2:12:45:93:23:d9:ff:c1:14:b2:ce:48:3c:05:51: d5:1a:9f:04:89:72:b5:bf:33:84:99:c7:c0:50:af:25:07:fe: 14:bf:d1:62:1e:86:03:21:35:6d:63:4f:b9:f7:fb:1d:d4:07: da:23:76:de:fc:af:b7:c9:5c:b5:d0:76:bf:e0:dd:b7:20:97: 9f:c9:40:c0:c8:69:ee:78:de:55:c4:37:c7:1f:75:ec:8a:3b: 99:30:d7:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57EpCpy9oDPpnmYam+A2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjRmZTVkNzJlOTRlYWM0MWRjMDhhNGU2ZmE4YTQ5NTVjYjdhMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptNaID+7AvJoHvptCCvbpKh/vWbY C276BZ00EKU8GDxP0ZY+FXihs2t+mWsRhj2/XhdCe53q3jvBdayk1re3Hkb4iNbc xGJpWl99bgPr2SdqlBz0YHRXanwo+RP5MQfYKqG8Vk7VKOW4yivKkHooUBois65x ebV84aMDywEaeOi7q8IW/XAsTafXH3NljCEAXI5ICJOd9B6YjWXLBy3Pr024krM3 33gvky3HfVeG8UrAFAtyftOgs7uvOVjZSsqyi0jOlowUpNhVJv1Eq8vDpsjlqYw2 jfhN1JT+7ZncouorW4pMW6niTH9c8oTpVtwwVRfAsOO/0H2/76yd7a209wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9P5dculOrEHcCKTm+opJVct6GqMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvNzBfbDF5NlU2c1Fkd0lwT2I2aWtsVnkzb2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/L/MA0G CSqGSIb3DQEBCwUAA4IBAQBnbFWtCY2D96lCQnMaVhekedshWoQuRBo4hWsRrBqr Cau3VIbKSgZ01xc+QqPq8hpJne2Jvsj3mD1+vNV5IeufKx7EgVa6yIOhDLnUjHFf Mxucs56yURHstAyORj+ljeqnVb1wRqav5BFPx4SeENTm2CRI8pDckjV4lyVbtSg7 z/NGWjuFTV9FHcWM/hQFer3oNJJiD8p+b1zJj8stoboimv8bqEriEkWTI9n/wRSy zkg8BVHVGp8EiXK1vzOEmcfAUK8lB/4Uv9FiHoYDITVtY0+59/sd1AfaI3be/K+3 yVy10Ha/4N23IJefyUDAyGnueN5VxDfHH3XsijuZMNcc -----END CERTIFICATE-----Generated at Mon Jan 26 12:22:24 2026 by rpki-client