This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/70T2V6z2fFf5nPcI1gr3lV-Y0Ik.roa File: 70T2V6z2fFf5nPcI1gr3lV-Y0Ik.roa (raw, json) Hash identifier: LbWN+MPqk7rM0x0woA0EEZCea1grQCWH0osUqyAVSfE= Subject key identifier: EF:44:F6:57:AC:F6:7C:57:F9:9C:F7:08:D6:0A:F7:95:5F:98:D0:89 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14989BCB85E345C8E039E5D52133B4 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/70T2V6z2fFf5nPcI1gr3lV-Y0Ik.roa Signing time: Fri 02 Jan 2026 14:20:14 +0000 ROA not before: Fri 02 Jan 2026 14:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 84.233.132.0/23 maxlen: 24 84.233.164.0/23 maxlen: 24 84.233.200.0/23 maxlen: 24 84.233.220.0/23 maxlen: 24 84.233.232.0/23 maxlen: 24 84.233.240.0/23 maxlen: 24 195.86.2.0/23 maxlen: 24 195.86.8.0/21 maxlen: 24 195.86.16.0/22 maxlen: 24 195.86.20.0/23 maxlen: 24 195.86.28.0/22 maxlen: 24 195.86.32.0/22 maxlen: 24 195.86.36.0/23 maxlen: 24 195.86.44.0/22 maxlen: 24 195.86.50.0/23 maxlen: 24 195.86.52.0/22 maxlen: 24 195.86.60.0/22 maxlen: 24 195.86.64.0/23 maxlen: 24 195.86.68.0/22 maxlen: 24 195.86.72.0/21 maxlen: 24 195.86.80.0/20 maxlen: 24 195.86.96.0/20 maxlen: 24 195.86.114.0/23 maxlen: 24 195.86.116.0/22 maxlen: 24 195.86.120.0/22 maxlen: 24 195.86.128.0/23 maxlen: 24 195.86.132.0/22 maxlen: 24 195.86.136.0/21 maxlen: 24 195.86.144.0/20 maxlen: 24 195.86.162.0/23 maxlen: 24 195.86.164.0/22 maxlen: 24 195.86.168.0/21 maxlen: 24 195.86.176.0/20 maxlen: 24 195.86.192.0/20 maxlen: 24 195.86.212.0/22 maxlen: 24 195.86.216.0/23 maxlen: 24 195.86.224.0/21 maxlen: 24 195.86.232.0/22 maxlen: 24 195.86.236.0/23 maxlen: 24 195.86.242.0/23 maxlen: 24 195.86.244.0/22 maxlen: 24 195.86.248.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:98:9b:cb:85:e3:45:c8:e0:39:e5:d5:21:33:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef44f657acf67c57f99cf708d60af7955f98d089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a6:2f:c3:a2:3f:b4:d5:ae:b2:7d:75:c5:a7: 9e:3a:5c:e4:4c:aa:d1:7a:74:12:5d:9c:0b:0e:91: 6b:16:d1:2b:76:ed:17:d0:cb:8d:7a:51:f0:8d:db: 39:4a:2d:12:27:bf:19:0c:d8:be:7a:c2:2e:91:3f: 9f:23:cc:9b:9a:a3:dd:d1:65:13:60:d4:e3:f5:ba: 4f:48:2e:bd:88:be:38:57:a3:fa:22:6b:e6:bc:68: fd:3f:7f:f9:c4:ed:d3:46:e7:f5:4f:1d:e1:38:dc: 38:a1:30:df:02:15:f7:07:94:fd:0c:8b:6d:14:58: 9c:65:3c:43:68:23:ee:f3:59:25:80:47:64:80:f1: 3b:95:bd:b7:03:62:0d:78:be:b0:ab:3c:c1:69:84: f8:88:23:7a:39:5b:54:74:58:cb:e5:d7:3d:23:ff: 83:85:fc:c1:5f:e1:5e:8c:87:7f:0a:85:f5:4c:9c: 06:87:15:31:1b:04:aa:c3:5f:47:84:18:c6:39:17: b1:be:62:ef:c1:66:26:2d:c1:44:cd:47:4c:d1:8f: 42:22:5d:90:a3:d2:f4:ce:bc:f9:22:ac:3d:f3:cc: 0e:b1:49:8c:f4:4d:df:3c:dd:da:43:05:f7:47:40: ca:7a:88:04:6c:f0:b7:e5:b7:c2:44:8b:01:27:a1: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:44:F6:57:AC:F6:7C:57:F9:9C:F7:08:D6:0A:F7:95:5F:98:D0:89 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/70T2V6z2fFf5nPcI1gr3lV-Y0Ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.233.132.0/23 84.233.164.0/23 84.233.200.0/23 84.233.220.0/23 84.233.232.0/23 84.233.240.0/23 195.86.2.0/23 195.86.8.0-195.86.21.255 195.86.28.0-195.86.37.255 195.86.44.0/22 195.86.50.0-195.86.55.255 195.86.60.0-195.86.65.255 195.86.68.0-195.86.111.255 195.86.114.0-195.86.123.255 195.86.128.0/23 195.86.132.0-195.86.159.255 195.86.162.0-195.86.207.255 195.86.212.0-195.86.217.255 195.86.224.0-195.86.237.255 195.86.242.0-195.86.255.255 Signature Algorithm: sha256WithRSAEncryption 7a:98:72:d4:64:a0:48:01:b9:6c:e1:e0:76:84:5c:6e:b3:b4: e6:ef:45:b8:4c:85:89:0c:95:9b:de:53:b2:57:a1:e1:bd:ae: dc:fd:b3:84:82:2c:ee:6d:d8:39:3e:6e:9c:1a:01:24:57:2d: 70:d6:00:80:52:d0:6e:90:f4:ae:03:59:7e:13:b3:3b:73:5e: d0:91:18:fe:ab:a2:3a:33:51:94:8f:d7:bf:98:1b:25:de:77: 3b:9f:80:15:e1:61:35:53:5a:0d:a8:36:06:97:40:56:82:8f: b4:fa:9a:2f:9b:8e:fe:3b:e0:2d:e2:d8:66:ee:03:5e:02:0d: 90:ca:0f:d5:88:bb:99:dc:ef:a0:8f:98:14:ae:b3:71:6d:d3: 62:cc:2d:d9:4d:67:f3:4d:85:cd:ea:b4:18:d6:c0:49:fd:f1: b5:36:61:cd:89:58:99:dd:fc:34:02:72:cb:3f:0e:f4:b4:9f: a9:d8:00:34:e0:d2:c4:cf:48:00:a4:f5:67:6c:02:97:fd:29: 9f:ce:4b:bb:2e:aa:61:6e:a5:4e:ac:ae:8b:e5:92:1c:c7:2d: b1:19:0a:90:c5:90:7c:bc:44:83:29:28:8a:ba:2b:b5:a7:38: 48:1b:66:0f:6a:6e:14:a5:1c:27:bb:8a:b1:40:de:90:7c:40: be:01:ff:0c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgISAZt/FJiby4XjRcjgOeXVITO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjQ0ZjY1N2FjZjY3YzU3Zjk5Y2Y3MDhkNjBhZjc5NTVmOThkMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqYvw6I/tNWusn11xaeeOlzkTKrR enQSXZwLDpFrFtErdu0X0MuNelHwjds5Si0SJ78ZDNi+esIukT+fI8ybmqPd0WUT YNTj9bpPSC69iL44V6P6ImvmvGj9P3/5xO3TRuf1Tx3hONw4oTDfAhX3B5T9DItt FFicZTxDaCPu81klgEdkgPE7lb23A2INeL6wqzzBaYT4iCN6OVtUdFjL5dc9I/+D hfzBX+FejId/CoX1TJwGhxUxGwSqw19HhBjGORexvmLvwWYmLcFEzUdM0Y9CIl2Q o9L0zrz5Iqw988wOsUmM9E3fPN3aQwX3R0DKeogEbPC35bfCRIsBJ6HzuwIDAQAB o4IC1zCCAtMwHQYDVR0OBBYEFO9E9les9nxX+Zz3CNYK95VfmNCJMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvNzBUMlY2ejJmRmY1blBjSTFncjNsVi1ZMElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHsBggrBgEFBQcBBwEB/wSB3DCB2TCB1gQCAAEwgc8DBAFU 6YQDBAFU6aQDBAFU6cgDBAFU6dwDBAFU6egDBAFU6fADBAHDVgIwDAMEA8NWCAME AcNWFDAMAwQCw1YcAwQBw1YkAwQCw1YsMAwDBAHDVjIDBAPDVjAwDAMEAsNWPAME AcNWQDAMAwQCw1ZEAwQEw1ZgMAwDBAHDVnIDBALDVngDBAHDVoAwDAMEAsNWhAME BcNWgDAMAwQBw1aiAwQEw1bAMAwDBALDVtQDBAHDVtgwDAMEBcNW4AMEAcNW7DAL AwQBw1byAwMAw1YwDQYJKoZIhvcNAQELBQADggEBAHqYctRkoEgBuWzh4HaEXG6z tObvRbhMhYkMlZveU7JXoeG9rtz9s4SCLO5t2Dk+bpwaASRXLXDWAIBS0G6Q9K4D WX4TsztzXtCRGP6rojozUZSP17+YGyXedzufgBXhYTVTWg2oNgaXQFaCj7T6mi+b jv474C3i2GbuA14CDZDKD9WIu5nc76CPmBSus3Ft02LMLdlNZ/NNhc3qtBjWwEn9 8bU2Yc2JWJnd/DQCcss/DvS0n6nYADTg0sTPSACk9WdsApf9KZ/OS7suqmFupU6s rovlkhzHLbEZCpDFkHy8RIMpKIq6K7WnOEgbZg9qbhSlHCe7irFA3pB8QL4B/ww= -----END CERTIFICATE-----Generated at Sun Jan 18 04:28:06 2026 by rpki-client