This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/y7qKboIw1vY6cdl8tXLdQz3UMGU.roa File: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (raw, json) Hash identifier: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc= Subject key identifier: CB:BA:8A:6E:82:30:D6:F6:3A:71:D9:7C:B5:72:DD:43:3D:D4:30:65 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019B7DC8A7CE2AC79D5ADC1F7C60AF955ED2 Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/y7qKboIw1vY6cdl8tXLdQz3UMGU.roa Signing time: Fri 02 Jan 2026 08:17:40 +0000 ROA not before: Fri 02 Jan 2026 08:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 213.137.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a7:ce:2a:c7:9d:5a:dc:1f:7c:60:af:95:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jan 2 08:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cbba8a6e8230d6f63a71d97cb572dd433dd43065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:f1:39:7e:3c:c4:b5:1b:3b:75:1e:4b:93: 08:77:08:87:8f:d1:28:dd:99:b1:fd:d7:1e:11:ab: 37:57:27:ca:cd:3c:9b:f8:1d:f0:fa:2a:69:60:32: ce:73:8c:3b:04:2c:c2:d1:6d:3d:6d:2a:ed:bf:17: 83:c2:51:31:9a:f7:42:ba:5c:59:0b:bf:f9:dd:8b: 28:a8:57:2a:d8:bd:28:80:b8:fb:61:b1:c8:83:31: 49:97:d8:2a:53:1a:58:47:8e:0d:b8:6a:ee:f7:8d: 3f:b3:4e:21:47:89:5c:d9:cd:09:6d:09:c0:c6:52: 9a:6b:aa:a5:5b:f4:c2:a8:9e:e3:a6:54:65:64:ea: 7f:bc:53:a6:26:1c:74:db:b7:36:42:c4:e0:40:60: e7:69:03:36:da:1e:09:ac:03:0d:a2:46:d6:92:f3: 30:06:16:1f:e3:e1:ad:f8:6b:7c:ab:63:dc:4f:ee: d7:7e:4b:81:86:77:7a:3d:ea:51:77:9c:5d:55:93: 2d:9b:30:51:ce:67:69:7c:45:15:89:eb:1f:e5:2d: 15:4b:6d:cb:60:47:62:7b:ec:64:94:b4:c7:eb:e3: 7d:cd:dc:f2:96:f1:3f:e0:d7:59:7b:6c:5b:db:73: 04:68:61:64:ed:05:64:79:21:53:a5:ba:fc:9f:b1: a1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:8A:6E:82:30:D6:F6:3A:71:D9:7C:B5:72:DD:43:3D:D4:30:65 X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/y7qKboIw1vY6cdl8tXLdQz3UMGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.88.0/24 Signature Algorithm: sha256WithRSAEncryption 23:87:56:66:05:84:7b:3b:4a:b8:9e:f5:05:3f:34:91:72:35: f6:74:66:d6:96:93:82:83:95:5c:f4:37:b2:92:ee:3e:e4:0d: 80:86:c5:cf:8e:fd:5a:7a:82:56:13:76:de:fe:9c:8c:8d:17: a7:fb:30:b1:a6:b1:53:1c:e1:81:dc:70:2c:d9:ec:c0:4e:50: eb:3c:68:2d:0f:9c:38:21:a9:b7:2b:79:f7:6f:83:bd:03:07: cd:45:34:f8:ac:0d:fd:e9:86:0c:3b:70:04:70:fa:84:d3:ab: 7a:fd:32:93:ea:da:db:ca:ea:e8:0d:16:6b:05:55:e9:ec:6a: 0e:67:a0:24:8c:af:d3:f4:33:89:49:04:6b:e2:a8:eb:10:58: 67:98:25:65:90:0d:83:f6:61:4a:7c:db:5c:f2:ab:db:d8:92: 41:90:9e:ad:9a:4a:86:b8:48:7e:70:7e:66:98:38:15:bd:e9: ff:67:13:3f:59:7e:6a:cb:6d:9b:fd:d6:5f:60:c2:be:84:6c: c0:fa:11:fe:6c:3d:22:e5:18:0d:31:9d:ca:d9:6b:c1:25:2f: 91:a3:8e:54:39:2c:1f:8a:ab:a1:46:86:97:33:16:ac:30:82: f9:92:5f:fe:eb:e7:4a:f3:84:ca:81:41:cf:8f:f9:dd:f0:20: 48:00:23:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yKfOKsedWtwffGCvlV7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwMTAyMDgxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYmJhOGE2ZTgyMzBkNmY2M2E3MWQ5N2NiNTcyZGQ0MzNkZDQzMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zbxOX48xLUbO3UeS5MIdwiHj9Eo 3Zmx/dceEas3VyfKzTyb+B3w+ippYDLOc4w7BCzC0W09bSrtvxeDwlExmvdCulxZ C7/53YsoqFcq2L0ogLj7YbHIgzFJl9gqUxpYR44NuGru940/s04hR4lc2c0JbQnA xlKaa6qlW/TCqJ7jplRlZOp/vFOmJhx027c2QsTgQGDnaQM22h4JrAMNokbWkvMw BhYf4+Gt+Gt8q2PcT+7XfkuBhnd6PepRd5xdVZMtmzBRzmdpfEUViesf5S0VS23L YEdie+xklLTH6+N9zdzylvE/4NdZe2xb23MEaGFk7QVkeSFTpbr8n7GhuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMu6im6CMNb2OnHZfLVy3UM91DBlMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEveTdxS2JvSXcxdlk2Y2RsOHRYTGRRejNVTUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YlYMA0G CSqGSIb3DQEBCwUAA4IBAQAjh1ZmBYR7O0q4nvUFPzSRcjX2dGbWlpOCg5Vc9Dey ku4+5A2AhsXPjv1aeoJWE3be/pyMjRen+zCxprFTHOGB3HAs2ezATlDrPGgtD5w4 Iam3K3n3b4O9AwfNRTT4rA396YYMO3AEcPqE06t6/TKT6trbyuroDRZrBVXp7GoO Z6AkjK/T9DOJSQRr4qjrEFhnmCVlkA2D9mFKfNtc8qvb2JJBkJ6tmkqGuEh+cH5m mDgVven/ZxM/WX5qy22b/dZfYMK+hGzA+hH+bD0i5RgNMZ3K2WvBJS+Ro45UOSwf iquhRoaXMxasMIL5kl/+6+dK84TKgUHPj/nd8CBIACNf -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:53 2026 by rpki-client