This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/70J_vTI8n9ha4h-89KZmwj9ICyU.roa File: 70J_vTI8n9ha4h-89KZmwj9ICyU.roa (raw, json) Hash identifier: 6rOId7G845YZmRrG16eNxzUO5WO642Hw3KW3DaIE6C8= Subject key identifier: EF:42:7F:BD:32:3C:9F:D8:5A:E2:1F:BC:F4:A6:66:C2:3F:48:0B:25 Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37B57EB90CE787F58FE6C0FAFB6B67 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/70J_vTI8n9ha4h-89KZmwj9ICyU.roa Signing time: Fri 02 Jan 2026 10:18:58 +0000 ROA not before: Fri 02 Jan 2026 10:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39351 IP address blocks: 155.2.208.0/24 maxlen: 24 155.2.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b5:7e:b9:0c:e7:87:f5:8f:e6:c0:fa:fb:6b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef427fbd323c9fd85ae21fbcf4a666c23f480b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:eb:1d:72:ed:41:08:f9:f5:3b:41:f0:49:2e: 93:6e:8e:63:79:61:59:7c:53:3f:68:ff:e4:a8:e9: e4:ea:55:14:d0:b4:b3:07:93:d8:7f:88:f4:9a:96: a3:91:66:70:33:7d:d8:29:70:d9:47:5b:f9:3a:9b: 3d:19:d0:ac:fa:93:8a:d1:85:44:c6:7b:1a:90:af: a5:ce:de:7c:23:e2:80:5e:70:df:a8:3d:54:cf:ab: c5:55:b9:ed:a8:1f:2b:93:3e:9f:08:67:51:95:99: 72:92:7c:91:75:8f:be:b2:4b:37:fa:80:18:9a:cc: 2e:52:51:cd:6a:bf:5f:eb:cd:b5:74:56:f5:6e:c2: 51:26:73:69:75:d8:c6:b9:c9:e8:41:c3:1d:33:7d: d2:97:9e:7e:2a:fa:da:8c:24:fb:a6:83:19:e8:fd: 10:90:fb:d8:e1:24:09:90:7e:29:06:aa:30:2d:54: f0:28:bc:78:95:43:87:bc:e3:dc:44:ed:47:27:a5: 4a:f9:2d:a5:eb:fc:c9:c7:dd:56:8c:9f:95:5d:6e: cb:15:55:75:09:25:4c:6e:d2:d0:99:75:d3:f6:c0: c5:bb:3f:18:91:50:02:e0:bc:b1:a2:ee:43:46:6b: 96:ce:4d:82:d7:6c:f1:83:74:3b:61:a2:9b:13:39: 01:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:42:7F:BD:32:3C:9F:D8:5A:E2:1F:BC:F4:A6:66:C2:3F:48:0B:25 X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/70J_vTI8n9ha4h-89KZmwj9ICyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.2.208.0/23 Signature Algorithm: sha256WithRSAEncryption 64:d8:b9:69:68:7f:94:72:5e:3a:3a:d0:16:aa:d1:18:ed:31: 70:f6:ea:28:e5:b6:a9:02:f4:68:48:41:49:77:bf:cc:af:a7: 21:63:1f:0a:1c:01:9a:5b:cf:1c:79:83:9d:ed:b3:e3:b2:3d: 75:68:7a:13:70:fb:44:21:85:c9:4c:c8:6d:df:7e:25:98:b4: 4c:ac:38:88:d6:a4:a9:ae:75:25:e3:19:a5:04:1f:0e:de:33: b5:8c:e8:e3:ba:3d:4c:43:57:d1:d7:62:e3:c2:b3:1e:0d:5b: 58:f5:ba:45:23:89:6b:24:6c:67:e5:ed:c9:ce:e2:7f:dc:5f: bb:72:3c:23:20:8a:61:c4:35:2d:88:f0:a6:86:89:44:ed:de: d1:78:59:3a:69:55:19:61:b9:2e:09:5f:7a:d5:d0:9d:fe:a8: c2:cd:b4:29:37:d0:77:b5:5d:e5:3e:8f:18:35:07:dd:8a:69: 0c:21:93:f5:60:12:21:be:f3:cd:6b:ac:5e:a4:5f:32:28:a9: d4:44:71:ed:f2:58:6a:9a:76:5a:30:7c:fb:b2:4a:43:c7:c9: 99:65:f3:b8:41:bb:f0:94:f7:97:e6:c1:bb:ab:8b:d4:fd:f1: ef:fd:08:2d:f4:3d:6c:44:6b:5d:3c:45:00:6f:05:d1:9b:2d: 94:12:0c:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7V+uQznh/WP5sD6+2tnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjQyN2ZiZDMyM2M5ZmQ4NWFlMjFmYmNmNGE2NjZjMjNmNDgwYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOsdcu1BCPn1O0HwSS6Tbo5jeWFZ fFM/aP/kqOnk6lUU0LSzB5PYf4j0mpajkWZwM33YKXDZR1v5Ops9GdCs+pOK0YVE xnsakK+lzt58I+KAXnDfqD1Uz6vFVbntqB8rkz6fCGdRlZlyknyRdY++sks3+oAY mswuUlHNar9f6821dFb1bsJRJnNpddjGucnoQcMdM33Sl55+KvrajCT7poMZ6P0Q kPvY4SQJkH4pBqowLVTwKLx4lUOHvOPcRO1HJ6VK+S2l6/zJx91WjJ+VXW7LFVV1 CSVMbtLQmXXT9sDFuz8YkVAC4Lyxou5DRmuWzk2C12zxg3Q7YaKbEzkBuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9Cf70yPJ/YWuIfvPSmZsI/SAslMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvNzBKX3ZUSThuOWhhNGgtODlLWm13ajlJQ3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmwLQMA0G CSqGSIb3DQEBCwUAA4IBAQBk2LlpaH+Ucl46OtAWqtEY7TFw9uoo5bapAvRoSEFJ d7/Mr6chYx8KHAGaW88ceYOd7bPjsj11aHoTcPtEIYXJTMht334lmLRMrDiI1qSp rnUl4xmlBB8O3jO1jOjjuj1MQ1fR12LjwrMeDVtY9bpFI4lrJGxn5e3JzuJ/3F+7 cjwjIIphxDUtiPCmholE7d7ReFk6aVUZYbkuCV961dCd/qjCzbQpN9B3tV3lPo8Y NQfdimkMIZP1YBIhvvPNa6xepF8yKKnURHHt8lhqmnZaMHz7skpDx8mZZfO4Qbvw lPeX5sG7q4vU/fHv/Qgt9D1sRGtdPEUAbwXRmy2UEgye -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:22 2026 by rpki-client