This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/70a0Lc6K02o54FM6PX05XeuuRi8.roa File: 70a0Lc6K02o54FM6PX05XeuuRi8.roa (raw, json) Hash identifier: PtJL+LlSx9gEGZnO3go2ShBwbA0iEFFNYQSTPl1KJgU= Subject key identifier: EF:46:B4:2D:CE:8A:D3:6A:39:E0:53:3A:3D:7D:39:5D:EB:AE:46:2F Certificate issuer: /CN=f6c870440cf851551499255162812926cf6edfd3 Certificate serial: 019C231C6911B6CFF285B6C55BCE4CD8A36C Authority key identifier: F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/70a0Lc6K02o54FM6PX05XeuuRi8.roa Signing time: Tue 03 Feb 2026 10:46:30 +0000 ROA not before: Tue 03 Feb 2026 10:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212699 IP address blocks: 89.38.105.0/24 maxlen: 24 194.0.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.mft rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:1c:69:11:b6:cf:f2:85:b6:c5:5b:ce:4c:d8:a3:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c870440cf851551499255162812926cf6edfd3 Validity Not Before: Feb 3 10:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef46b42dce8ad36a39e0533a3d7d395debae462f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:83:cb:6b:51:64:ff:78:7a:1f:b6:ef:64: ef:9d:58:65:3a:94:63:0d:db:2c:a1:9e:cd:c7:b3: 9a:0d:e9:6f:df:43:d3:2c:7a:ac:84:11:37:28:0b: 38:e5:75:53:b3:93:e2:44:1e:42:08:27:ac:1f:ca: 33:39:1d:fa:75:1c:6f:8f:e3:ca:f6:e7:4c:77:e7: f7:3f:bc:2a:f4:f6:b0:8c:0f:12:3c:83:c0:f1:f8: d9:5a:63:1c:14:ab:e0:dc:66:df:56:7a:60:45:60: 2e:23:23:5e:a2:83:2f:54:bf:6c:f2:13:0e:5c:e0: 63:cd:df:12:18:90:0f:78:9e:22:28:b7:65:bd:45: bf:26:d5:cc:ca:f4:ad:4e:9a:d9:e7:ab:b3:d3:34: c0:2c:e9:02:53:21:cf:fd:a2:7a:4a:9a:3b:ca:7c: e1:e8:e7:a3:55:05:ff:cb:3e:86:70:a6:0b:9b:87: 35:34:29:1e:c2:7a:40:20:77:a3:0a:19:f7:9d:dc: f3:b7:12:be:47:b0:78:39:0f:8c:be:16:c1:06:3f: 2d:1c:64:92:35:89:58:2c:43:76:b0:02:bf:a6:ef: da:2a:97:45:ca:5c:74:7b:2e:b6:e6:94:77:03:05: e3:60:bf:7d:6b:4b:de:8a:47:9b:2f:11:ef:5d:73: fd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:46:B4:2D:CE:8A:D3:6A:39:E0:53:3A:3D:7D:39:5D:EB:AE:46:2F X509v3 Authority Key Identifier: keyid:F6:C8:70:44:0C:F8:51:55:14:99:25:51:62:81:29:26:CF:6E:DF:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9shwRAz4UVUUmSVRYoEpJs9u39M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/70a0Lc6K02o54FM6PX05XeuuRi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/421a74-5816-4f11-ac08-0af38562a3ab/1/9shwRAz4UVUUmSVRYoEpJs9u39M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.105.0/24 194.0.143.0/24 Signature Algorithm: sha256WithRSAEncryption 64:52:c4:15:48:80:a7:aa:cb:29:f1:a5:fb:7f:d6:88:74:c2: fd:32:c2:8f:6b:91:cb:00:3e:d6:ac:90:b0:96:09:c9:0f:75: d7:1e:52:10:4d:5f:64:5a:bf:3f:8e:34:9a:b1:fd:4c:e4:79: ed:e1:fd:be:7f:11:3c:50:e7:19:cf:ee:7f:16:90:55:39:2c: 45:3a:e0:6c:41:0e:75:db:6a:77:1b:4b:f1:30:eb:b4:e9:4a: 63:5e:58:f6:19:f0:90:18:89:36:a7:82:fd:a6:00:7a:66:16: f0:dc:df:a2:68:25:f7:ed:5b:c6:25:86:c8:46:80:f1:fe:3f: 40:25:ef:e4:b9:5c:bc:e8:52:ef:f3:1f:6e:56:99:23:5e:26: 19:ad:4a:d7:71:dc:92:12:5e:f0:9a:20:1e:36:79:da:9e:65: 0c:4c:f2:fe:fc:69:ac:9d:1a:2b:81:27:24:75:aa:df:dc:97: 9b:08:84:e6:7a:7f:54:6a:e5:96:a9:c0:d4:87:3b:9a:d3:03: 20:49:cf:ee:68:5b:25:e7:fa:35:e2:09:42:eb:c6:14:46:8b: e2:69:d9:bd:08:38:d5:e5:bf:05:0c:66:73:05:19:aa:73:33: 85:3f:ee:47:cd:e1:be:f5:be:81:01:b6:13:cd:0e:b4:b3:74: 31:48:95:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwjHGkRts/yhbbFW85M2KNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Yzg3MDQ0MGNmODUxNTUxNDk5MjU1MTYyODEyOTI2Y2Y2 ZWRmZDMwHhcNMjYwMjAzMTA0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjQ2YjQyZGNlOGFkMzZhMzllMDUzM2EzZDdkMzk1ZGViYWU0NjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6iDy2tRZP94eh+272TvnVhlOpRj DdssoZ7Nx7OaDelv30PTLHqshBE3KAs45XVTs5PiRB5CCCesH8ozOR36dRxvj+PK 9udMd+f3P7wq9PawjA8SPIPA8fjZWmMcFKvg3GbfVnpgRWAuIyNeooMvVL9s8hMO XOBjzd8SGJAPeJ4iKLdlvUW/JtXMyvStTprZ56uz0zTALOkCUyHP/aJ6Spo7ynzh 6OejVQX/yz6GcKYLm4c1NCkewnpAIHejChn3ndzztxK+R7B4OQ+MvhbBBj8tHGSS NYlYLEN2sAK/pu/aKpdFylx0ey625pR3AwXjYL99a0veikebLxHvXXP9dwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO9GtC3OitNqOeBTOj19OV3rrkYvMB8GA1UdIwQY MBaAFPbIcEQM+FFVFJklUWKBKSbPbt/TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNod1JBejRVVlVVbVNWUllvRXBKczl1MzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80MjFhNzQtNTgxNi00ZjExLWFjMDgt MGFmMzg1NjJhM2FiLzEvNzBhMExjNkswMm81NEZNNlBYMDVYZXV1Umk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi80MjFhNzQtNTgxNi00ZjExLWFjMDgtMGFmMzg1NjJhM2Fi LzEvOXNod1JBejRVVlVVbVNWUllvRXBKczl1MzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSZpAwQA wgCPMA0GCSqGSIb3DQEBCwUAA4IBAQBkUsQVSICnqssp8aX7f9aIdML9MsKPa5HL AD7WrJCwlgnJD3XXHlIQTV9kWr8/jjSasf1M5Hnt4f2+fxE8UOcZz+5/FpBVOSxF OuBsQQ5122p3G0vxMOu06UpjXlj2GfCQGIk2p4L9pgB6Zhbw3N+iaCX37VvGJYbI RoDx/j9AJe/kuVy86FLv8x9uVpkjXiYZrUrXcdySEl7wmiAeNnnanmUMTPL+/Gms nRorgSckdarf3JebCITmen9UauWWqcDUhzua0wMgSc/uaFsl5/o14glC68YURovi adm9CDjV5b8FDGZzBRmqczOFP+5HzeG+9b6BAbYTzQ60s3QxSJUu -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:37 2026 by rpki-client