This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/fxCBjLdqX_evkWfiqAm6qjLArlI.roa File: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (raw, json) Hash identifier: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY= Subject key identifier: 7F:10:81:8C:B7:6A:5F:F7:AF:91:67:E2:A8:09:BA:AA:32:C0:AE:52 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019B76EADB88749817604B82DB7CC563D6FF Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/fxCBjLdqX_evkWfiqAm6qjLArlI.roa Signing time: Thu 01 Jan 2026 00:17:41 +0000 ROA not before: Thu 01 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208284 IP address blocks: 212.70.172.0/24 maxlen: 24 212.70.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:db:88:74:98:17:60:4b:82:db:7c:c5:63:d6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jan 1 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f10818cb76a5ff7af9167e2a809baaa32c0ae52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6d:79:47:0c:f0:93:99:b3:69:12:68:3d:c4: 37:e2:81:5a:cc:ae:e4:0c:d1:2a:2e:7d:62:2e:fb: 9d:b4:b5:62:51:65:51:2d:62:e4:b7:49:d8:ae:3b: 26:ae:d3:1e:4c:d4:a2:45:46:77:dc:3b:8a:db:e6: f8:17:9e:18:7f:3c:08:5f:34:74:a8:65:cc:59:ad: b9:b9:c5:ac:42:77:a0:31:d6:cc:7f:b4:9b:57:52: 15:e5:57:ed:22:a9:87:78:6a:df:8c:d8:c2:bb:d6: 76:b3:cb:8f:28:6e:f0:82:8e:87:7d:56:fe:94:6f: 49:e9:ff:bf:f4:46:e0:71:0a:65:d9:6a:1c:94:99: 41:93:8a:d4:13:59:4c:8c:36:07:f5:0c:a3:3a:c5: 6f:2e:5c:68:88:e0:71:ba:50:83:6c:92:ca:14:83: 41:4c:df:9d:6a:f7:48:1a:37:95:77:53:63:45:5b: 65:6b:95:1f:aa:a3:7c:ee:91:67:41:67:ab:e6:18: c1:52:20:5a:10:10:b3:3e:e5:91:f6:aa:9a:fb:ab: 2c:8d:63:41:b9:15:ab:9f:c7:48:e7:2f:e0:e8:40: 41:8c:4e:7b:2b:8e:77:8e:a9:df:46:8f:6b:91:e4: 83:f9:f5:83:f6:c1:e4:78:c4:c8:38:01:1d:23:d4: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:10:81:8C:B7:6A:5F:F7:AF:91:67:E2:A8:09:BA:AA:32:C0:AE:52 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/fxCBjLdqX_evkWfiqAm6qjLArlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.70.172.0/24 212.70.174.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:7e:74:51:d3:9d:1b:62:19:3c:c9:40:44:6d:fd:3a:46:ca: 98:12:26:96:21:ea:ea:b5:f1:c3:d8:06:40:c6:6b:2c:e9:f3: 24:94:ab:5c:f0:bf:71:95:dd:19:36:bd:06:96:e8:37:2c:7e: 17:68:c3:7f:4d:5d:fa:89:e8:44:ac:86:e2:5a:f7:b7:d0:33: 4a:4a:a1:3e:fd:25:37:ee:88:9b:96:5a:da:34:61:6c:02:a7: 68:fa:ce:f0:04:a8:0e:b0:71:27:38:6a:ca:d3:bb:0b:2c:b5: d6:22:c2:3e:86:78:7a:11:1f:df:06:d4:53:2a:84:21:2d:93: ac:c2:3e:af:7a:30:95:3b:69:a4:d9:5c:d9:56:94:d7:9e:3c: e6:4e:ad:95:40:20:bd:31:88:87:37:a8:46:79:66:82:4e:f3: c6:b0:4a:bb:a8:18:86:d8:3b:c4:d1:58:cf:a9:0a:82:bb:f5: 34:d8:9e:2d:d1:ad:93:61:1b:dd:84:df:e6:ae:34:22:d4:27: 77:fe:bf:87:7e:36:97:e7:36:02:7b:60:9a:31:1b:04:e9:af: 0f:c4:b7:19:7e:ae:c3:38:bd:a4:b8:87:3a:4e:b3:7b:30:0e: 8b:14:ca:40:1a:ea:e0:17:91:b7:26:db:9d:3f:6b:86:82:84: 0d:0c:0e:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26tuIdJgXYEuC23zFY9b/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjEwODE4Y2I3NmE1ZmY3YWY5MTY3ZTJhODA5YmFhYTMyYzBhZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1W15Rwzwk5mzaRJoPcQ34oFazK7k DNEqLn1iLvudtLViUWVRLWLkt0nYrjsmrtMeTNSiRUZ33DuK2+b4F54YfzwIXzR0 qGXMWa25ucWsQnegMdbMf7SbV1IV5VftIqmHeGrfjNjCu9Z2s8uPKG7wgo6HfVb+ lG9J6f+/9EbgcQpl2WoclJlBk4rUE1lMjDYH9QyjOsVvLlxoiOBxulCDbJLKFINB TN+davdIGjeVd1NjRVtla5UfqqN87pFnQWer5hjBUiBaEBCzPuWR9qqa+6ssjWNB uRWrn8dI5y/g6EBBjE57K453jqnfRo9rkeSD+fWD9sHkeMTIOAEdI9RpAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH8QgYy3al/3r5Fn4qgJuqoywK5SMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvZnhDQmpMZHFYX2V2a1dmaXFBbTZxakxBcmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1EasAwQA 1EauMA0GCSqGSIb3DQEBCwUAA4IBAQBcfnRR050bYhk8yUBEbf06RsqYEiaWIerq tfHD2AZAxmss6fMklKtc8L9xld0ZNr0Glug3LH4XaMN/TV36iehErIbiWve30DNK SqE+/SU37oibllraNGFsAqdo+s7wBKgOsHEnOGrK07sLLLXWIsI+hnh6ER/fBtRT KoQhLZOswj6vejCVO2mk2VzZVpTXnjzmTq2VQCC9MYiHN6hGeWaCTvPGsEq7qBiG 2DvE0VjPqQqCu/U02J4t0a2TYRvdhN/mrjQi1Cd3/r+HfjaX5zYCe2CaMRsE6a8P xLcZfq7DOL2kuIc6TrN7MA6LFMpAGurgF5G3JtudP2uGgoQNDA4Q -----END CERTIFICATE-----Generated at Tue Jan 27 09:56:30 2026 by rpki-client