This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/dZo66_L9wh2qbij7G3JOKCs449k.roa File: dZo66_L9wh2qbij7G3JOKCs449k.roa (raw, json) Hash identifier: EcfgXVOvSMiIqr4XDNVO8j7tZpRnQKNduJAQlIX28Ko= Subject key identifier: 75:9A:3A:EB:F2:FD:C2:1D:AA:6E:28:FB:1B:72:4E:28:2B:38:E3:D9 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8A8D2984F1898CF7A6D4014DE1340 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/dZo66_L9wh2qbij7G3JOKCs449k.roa Signing time: Fri 02 Jan 2026 08:17:41 +0000 ROA not before: Fri 02 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44213 IP address blocks: 213.137.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a8:d2:98:4f:18:98:cf:7a:6d:40:14:de:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=759a3aebf2fdc21daa6e28fb1b724e282b38e3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:64:82:9f:14:82:a8:ea:a8:c8:b5:4f:4b:2a: ed:3c:9e:33:f3:09:08:6c:2b:08:5e:1a:ef:cf:db: 52:2f:95:45:6e:38:e6:7b:fb:e2:97:4c:ed:c0:a4: 08:0f:ee:db:e7:67:93:df:7d:a1:f7:f4:e5:00:a5: ff:75:af:dc:a8:76:43:d5:1e:12:21:24:5d:db:2d: e6:21:b2:fc:13:ac:87:f7:24:6a:88:63:32:e3:07: c2:80:04:d6:da:63:22:c0:6d:c8:36:c4:b2:d0:32: 14:59:93:83:01:2d:94:33:4e:49:81:5b:34:ca:1d: cc:6d:a0:d6:40:cd:9f:0e:91:b7:5b:df:c6:0d:88: 73:bb:9a:72:8e:6d:b0:ae:c6:73:0b:1e:1b:44:61: 15:0f:e2:77:93:2e:8d:ae:77:5c:7e:f5:eb:a7:99: 77:d5:68:2d:bd:86:7a:09:f7:37:93:d2:e8:71:35: 0f:a5:eb:ac:a8:a8:c3:5c:c1:c9:a0:e9:eb:e3:0a: cd:c3:1d:86:28:77:09:0a:8d:10:56:e1:63:84:0d: 05:d5:6d:eb:52:0d:8f:12:eb:41:74:9e:f4:e9:af: ef:fe:f1:5e:01:80:13:ea:8e:8f:a1:a1:0f:0c:59: 50:07:9b:5f:83:af:c9:b2:98:c2:1c:4b:51:99:27: 0f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:9A:3A:EB:F2:FD:C2:1D:AA:6E:28:FB:1B:72:4E:28:2B:38:E3:D9 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/dZo66_L9wh2qbij7G3JOKCs449k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.82.0/24 Signature Algorithm: sha256WithRSAEncryption c6:f0:52:5c:2a:8f:44:bb:09:51:a8:1f:60:34:a9:fc:9a:a7: 44:27:ff:13:6c:73:de:92:53:9b:ab:78:3f:23:6d:ad:58:05: 3f:37:c4:53:0a:17:e7:a5:c7:a2:d8:f7:4a:cc:5a:b7:e3:ff: e5:11:9d:aa:69:6f:4c:e0:3f:da:95:df:89:4e:6b:c0:5a:88: 3f:82:35:ee:17:e9:16:55:22:d2:6f:49:14:13:01:ab:3d:ee: 13:b8:d7:86:4c:47:6e:6a:c5:2d:9b:e6:eb:73:16:6e:15:db: 9b:2e:e3:d7:30:35:67:b4:03:85:65:56:c2:d0:9c:46:37:7a: c6:7e:73:6b:ad:61:64:b6:50:1a:8e:ed:ab:c1:1d:e5:d1:7c: 76:7c:88:42:91:b2:4d:2f:67:47:11:8b:fe:e1:2d:19:95:e9: 35:5e:b8:00:0b:62:2d:7f:3b:85:18:9e:50:94:e2:e3:d0:f9: 9d:81:1d:78:3e:12:fe:3b:d6:88:7f:05:63:da:4d:3f:aa:19: e5:27:38:8f:77:06:71:7c:04:f9:81:52:70:8f:89:19:70:e7: b7:60:88:2d:70:ff:27:73:c3:46:1f:6d:d0:4a:a6:4f:ec:a8: d6:a3:4a:c4:c4:ac:fe:6d:e8:c3:7c:7a:56:4e:df:fd:e0:cd: d3:6b:63:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKjSmE8YmM96bUAU3hNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTlhM2FlYmYyZmRjMjFkYWE2ZTI4ZmIxYjcyNGUyODJiMzhlM2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22SCnxSCqOqoyLVPSyrtPJ4z8wkI bCsIXhrvz9tSL5VFbjjme/vil0ztwKQID+7b52eT332h9/TlAKX/da/cqHZD1R4S ISRd2y3mIbL8E6yH9yRqiGMy4wfCgATW2mMiwG3INsSy0DIUWZODAS2UM05JgVs0 yh3MbaDWQM2fDpG3W9/GDYhzu5pyjm2wrsZzCx4bRGEVD+J3ky6NrndcfvXrp5l3 1WgtvYZ6Cfc3k9LocTUPpeusqKjDXMHJoOnr4wrNwx2GKHcJCo0QVuFjhA0F1W3r Ug2PEutBdJ706a/v/vFeAYAT6o6PoaEPDFlQB5tfg6/JspjCHEtRmScPzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHWaOuvy/cIdqm4o+xtyTigrOOPZMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvZFpvNjZfTDl3aDJxYmlqN0czSk9LQ3M0NDlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YlSMA0G CSqGSIb3DQEBCwUAA4IBAQDG8FJcKo9EuwlRqB9gNKn8mqdEJ/8TbHPeklObq3g/ I22tWAU/N8RTChfnpcei2PdKzFq34//lEZ2qaW9M4D/ald+JTmvAWog/gjXuF+kW VSLSb0kUEwGrPe4TuNeGTEduasUtm+brcxZuFdubLuPXMDVntAOFZVbC0JxGN3rG fnNrrWFktlAaju2rwR3l0Xx2fIhCkbJNL2dHEYv+4S0Zlek1XrgAC2ItfzuFGJ5Q lOLj0PmdgR14PhL+O9aIfwVj2k0/qhnlJziPdwZxfAT5gVJwj4kZcOe3YIgtcP8n c8NGH23QSqZP7KjWo0rExKz+bejDfHpWTt/94M3Ta2NM -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:33 2026 by rpki-client