This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r70TOyjFzSuOx9gWX7e618-JOpg.roa File: r70TOyjFzSuOx9gWX7e618-JOpg.roa (raw, json) Hash identifier: iGKhcetQjtRUCVkr7i2ua9I+IzbyMNs0boNpj0Et0dA= Subject key identifier: AF:BD:13:3B:28:C5:CD:2B:8E:C7:D8:16:5F:B7:BA:D7:CF:89:3A:98 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B031C86B977A883155EF6AAE6A153 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r70TOyjFzSuOx9gWX7e618-JOpg.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 130.185.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:1c:86:b9:77:a8:83:15:5e:f6:aa:e6:a1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afbd133b28c5cd2b8ec7d8165fb7bad7cf893a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:25:e3:d0:08:e6:4e:31:94:2d:0c:c6:ac:84: bc:7c:8f:70:50:59:88:a2:d8:23:55:88:f6:6c:b0: d0:02:c6:bb:aa:16:07:ab:3b:fb:d6:e0:46:bc:bc: f3:1c:66:2e:41:3d:47:8e:98:b2:84:80:b5:f6:96: 54:b0:21:3d:63:5f:ac:24:af:75:ae:dc:1d:65:53: d1:b5:d5:ff:fe:80:45:7c:8e:8e:4a:a4:cf:8d:72: 1e:51:10:5d:f1:a4:d5:47:98:f2:20:5d:83:5c:7c: 3e:1b:7d:50:fa:be:fe:93:8b:df:ae:93:78:f6:49: ed:a4:29:f0:aa:ee:16:3b:4a:79:86:b3:62:d5:f9: 96:d6:ce:ad:7d:42:23:f1:c5:1d:86:03:ad:36:44: 6d:28:5f:2f:ec:e4:97:97:b7:9f:10:59:c0:6f:5b: 9c:39:ac:21:db:be:db:23:10:cf:f6:25:bf:c2:35: 4b:c4:12:11:9d:33:ff:0e:86:2c:f3:b7:3f:b9:02: 53:6a:9a:f5:5b:4b:ec:b9:d1:65:57:91:53:27:a4: c6:64:0b:8a:0d:1f:69:fd:e2:70:0d:0b:0e:e0:0a: dc:02:96:86:c4:e6:f6:57:ac:06:49:97:e7:b1:c8: dc:32:2d:fa:3d:e5:91:6c:5a:2f:73:bd:54:72:64: f0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:BD:13:3B:28:C5:CD:2B:8E:C7:D8:16:5F:B7:BA:D7:CF:89:3A:98 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/r70TOyjFzSuOx9gWX7e618-JOpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.185.254.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:e7:ce:e7:f5:2b:1c:d4:e2:5c:8a:81:b4:db:de:fb:4f:a3: 24:1c:be:e8:f4:29:5a:ca:86:84:44:d4:2e:1a:39:c9:be:bb: 9a:37:50:b6:e0:7b:75:52:34:1b:be:86:94:cf:9a:8a:b2:6b: 5f:86:1f:a2:b1:5e:63:13:6d:35:bb:f6:22:2d:d0:c2:c8:9e: b1:1a:c7:40:2f:21:ae:9b:0d:76:5b:af:3b:3a:f8:8c:df:de: 2f:e3:ad:3d:dd:0c:a2:70:65:8d:58:cc:56:6b:d3:05:f6:07: 3e:96:02:54:f1:2a:42:9b:df:d9:7f:72:5d:54:ca:da:e6:ea: 00:fc:32:e0:32:86:17:50:41:a8:02:86:79:d4:22:7c:6a:51: 3d:14:13:99:b7:19:4b:4a:36:98:87:3b:0c:db:a9:ff:22:ba: 84:38:63:d3:23:50:df:ff:d3:d3:22:05:e6:35:cc:c3:41:f6: a8:15:cf:40:07:de:e8:14:d8:bf:84:0c:97:57:75:cf:10:a0: 8d:f4:ce:f8:9c:67:90:01:7e:96:e7:89:67:08:5a:03:ee:8e: dc:6b:8a:4e:84:33:3c:8c:1a:2d:e3:b6:f7:00:a5:c2:fb:02: 5b:dc:77:32:12:ef:fd:84:41:6a:78:e8:25:6c:63:14:1c:2e: bf:c9:44:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwMchrl3qIMVXvaq5qFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmJkMTMzYjI4YzVjZDJiOGVjN2Q4MTY1ZmI3YmFkN2NmODkzYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CXj0AjmTjGULQzGrIS8fI9wUFmI otgjVYj2bLDQAsa7qhYHqzv71uBGvLzzHGYuQT1HjpiyhIC19pZUsCE9Y1+sJK91 rtwdZVPRtdX//oBFfI6OSqTPjXIeURBd8aTVR5jyIF2DXHw+G31Q+r7+k4vfrpN4 9kntpCnwqu4WO0p5hrNi1fmW1s6tfUIj8cUdhgOtNkRtKF8v7OSXl7efEFnAb1uc Oawh277bIxDP9iW/wjVLxBIRnTP/DoYs87c/uQJTapr1W0vsudFlV5FTJ6TGZAuK DR9p/eJwDQsO4ArcApaGxOb2V6wGSZfnscjcMi36PeWRbFovc71UcmTwLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK+9Ezsoxc0rjsfYFl+3utfPiTqYMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvcjcwVE95akZ6U3VPeDlnV1g3ZTYxOC1KT3BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgrn+MA0G CSqGSIb3DQEBCwUAA4IBAQB/587n9Ssc1OJcioG02977T6MkHL7o9ClayoaERNQu GjnJvruaN1C24Ht1UjQbvoaUz5qKsmtfhh+isV5jE201u/YiLdDCyJ6xGsdALyGu mw12W687OviM394v46093QyicGWNWMxWa9MF9gc+lgJU8SpCm9/Zf3JdVMra5uoA /DLgMoYXUEGoAoZ51CJ8alE9FBOZtxlLSjaYhzsM26n/IrqEOGPTI1Df/9PTIgXm NczDQfaoFc9AB97oFNi/hAyXV3XPEKCN9M74nGeQAX6W54lnCFoD7o7ca4pOhDM8 jBot47b3AKXC+wJb3HcyEu/9hEFqeOglbGMUHC6/yUTH -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:53 2026 by rpki-client