This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/70s-mLr3U_SMas2jXgHR7oT8OgE.roa File: 70s-mLr3U_SMas2jXgHR7oT8OgE.roa (raw, json) Hash identifier: +SI5mdQ2uiLN19lu+/+DYwmYvZL+z5jlEM8iDMq6vEk= Subject key identifier: EF:4B:3E:98:BA:F7:53:F4:8C:6A:CD:A3:5E:01:D1:EE:84:FC:3A:01 Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80A984F1B7FA92070797F7F0389BAF Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/70s-mLr3U_SMas2jXgHR7oT8OgE.roa Signing time: Fri 02 Jan 2026 02:19:25 +0000 ROA not before: Fri 02 Jan 2026 02:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62425 IP address blocks: 84.32.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a9:84:f1:b7:fa:92:07:07:97:f7:f0:38:9b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef4b3e98baf753f48c6acda35e01d1ee84fc3a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e2:2c:b0:50:16:18:7d:ea:64:6f:a0:eb:88: 81:66:4c:c8:ab:93:d8:74:98:e5:2f:bf:80:47:bd: 45:b1:35:9f:0e:b2:9f:2c:ef:bc:80:f0:fc:f8:dc: 44:56:f8:7b:38:22:8a:08:16:44:2c:4b:de:c6:c9: b1:52:06:6f:e0:84:5d:fc:3d:36:9c:6b:df:92:e2: e8:6f:45:5e:55:eb:26:72:b3:a8:c5:ee:c2:20:cc: 60:c4:64:70:02:7c:70:44:6c:6b:b7:ea:9b:78:f0: d2:96:40:23:f0:64:d8:67:f9:7e:2d:e9:ef:44:c9: 91:a1:ea:02:d6:28:1f:26:31:50:e9:f3:ad:74:4f: cf:d7:f4:6d:5c:cf:ed:8a:ff:0c:7f:38:0c:04:72: 95:e6:60:cc:28:f4:98:1a:81:c7:86:b1:27:77:9b: 2c:8f:29:74:9f:eb:c3:8f:61:2a:4f:0c:ab:dc:de: 33:5b:95:c4:8f:74:71:1d:39:d0:8d:28:b3:a5:5b: 8b:20:bc:3c:a7:02:2f:31:dc:a0:25:63:56:5f:2f: e3:a5:05:c1:1a:d0:9d:3e:eb:d3:e0:a0:ad:1b:22: 74:33:7d:fb:4d:f0:35:a1:a8:ea:c1:bc:87:a7:cb: 21:d6:f4:6d:be:3b:d7:af:2a:ba:86:5d:20:6f:6f: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4B:3E:98:BA:F7:53:F4:8C:6A:CD:A3:5E:01:D1:EE:84:FC:3A:01 X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/70s-mLr3U_SMas2jXgHR7oT8OgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.230.0/24 Signature Algorithm: sha256WithRSAEncryption 01:26:91:90:59:e1:7b:0a:d3:23:29:74:4d:f9:a1:3f:4d:57: 62:fc:fd:ca:9b:5c:5c:08:e5:eb:97:71:3b:66:26:49:cc:f3: 99:64:dd:f3:ac:72:36:71:10:02:aa:78:e3:ae:8d:81:d8:2c: ed:63:c3:53:04:69:8b:d7:91:2a:ea:5b:2f:12:f8:88:f1:3b: 4b:06:7a:bc:c4:8f:e4:0e:2d:06:00:20:41:5c:b3:0f:c3:d8: 5b:c6:6e:29:53:26:7f:8f:22:ad:6b:74:29:79:1b:87:37:96: 98:c2:41:35:e5:b2:fb:4f:81:a6:8f:f9:da:c3:34:38:79:62: 1b:ce:ee:82:58:33:63:12:fa:3c:62:4c:89:5d:f2:df:11:9f: 98:ad:61:f6:64:41:42:47:6d:9d:be:e9:30:02:56:0a:58:72: cd:02:f3:5b:73:c1:30:45:dc:dd:5d:09:82:2f:15:eb:13:9f: a0:7e:b1:0f:c9:8a:1c:bf:21:b4:76:dc:9d:1c:1f:99:11:a9: 7c:ce:26:1d:0e:15:76:b1:12:3b:c9:e7:da:7d:91:6c:73:45: 02:3e:01:2f:9e:4c:95:6e:3b:b8:f1:f2:33:52:9d:26:2c:4d: 0e:23:9b:ef:34:20:13:5d:27:c9:b7:5c:0e:ed:c3:66:0c:1c: d6:84:59:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKmE8bf6kgcHl/fwOJuvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjRiM2U5OGJhZjc1M2Y0OGM2YWNkYTM1ZTAxZDFlZTg0ZmMzYTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOIssFAWGH3qZG+g64iBZkzIq5PY dJjlL7+AR71FsTWfDrKfLO+8gPD8+NxEVvh7OCKKCBZELEvexsmxUgZv4IRd/D02 nGvfkuLob0VeVesmcrOoxe7CIMxgxGRwAnxwRGxrt+qbePDSlkAj8GTYZ/l+Lenv RMmRoeoC1igfJjFQ6fOtdE/P1/RtXM/tiv8MfzgMBHKV5mDMKPSYGoHHhrEnd5ss jyl0n+vDj2EqTwyr3N4zW5XEj3RxHTnQjSizpVuLILw8pwIvMdygJWNWXy/jpQXB GtCdPuvT4KCtGyJ0M337TfA1oajqwbyHp8sh1vRtvjvXryq6hl0gb29rmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO9LPpi691P0jGrNo14B0e6E/DoBMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvNzBzLW1McjNVX1NNYXMyalhnSFI3b1Q4T2dFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDmMA0G CSqGSIb3DQEBCwUAA4IBAQABJpGQWeF7CtMjKXRN+aE/TVdi/P3Km1xcCOXrl3E7 ZiZJzPOZZN3zrHI2cRACqnjjro2B2CztY8NTBGmL15Eq6lsvEviI8TtLBnq8xI/k Di0GACBBXLMPw9hbxm4pUyZ/jyKta3QpeRuHN5aYwkE15bL7T4Gmj/nawzQ4eWIb zu6CWDNjEvo8YkyJXfLfEZ+YrWH2ZEFCR22dvukwAlYKWHLNAvNbc8EwRdzdXQmC LxXrE5+gfrEPyYocvyG0dtydHB+ZEal8ziYdDhV2sRI7yefafZFsc0UCPgEvnkyV bju48fIzUp0mLE0OI5vvNCATXSfJt1wO7cNmDBzWhFkU -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:06 2026 by rpki-client