This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/59bhtOK6yzS6oYph8px6Z8lHYRg.roa File: 59bhtOK6yzS6oYph8px6Z8lHYRg.roa (raw, json) Hash identifier: dll8gFNBmYkHjUeAlM416fSamZ/Pr3+ONw0kxccS04c= Subject key identifier: E7:D6:E1:B4:E2:BA:CB:34:BA:A1:8A:61:F2:9C:7A:67:C9:47:61:18 Certificate issuer: /CN=836a73bed75aa4efa577ed90ad3562e21951d1b2 Certificate serial: 019B791046E3E152E80B91313A6038287FAD Authority key identifier: 83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/59bhtOK6yzS6oYph8px6Z8lHYRg.roa Signing time: Thu 01 Jan 2026 10:17:48 +0000 ROA not before: Thu 01 Jan 2026 10:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200797 IP address blocks: 185.95.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.mft rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:46:e3:e1:52:e8:0b:91:31:3a:60:38:28:7f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836a73bed75aa4efa577ed90ad3562e21951d1b2 Validity Not Before: Jan 1 10:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7d6e1b4e2bacb34baa18a61f29c7a67c9476118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:42:46:dc:b2:06:88:e7:0f:c8:b2:4b:3a: 32:3e:e7:3c:b3:22:33:4d:7f:66:2b:22:9b:c4:29: 09:72:e7:51:8a:25:de:04:c1:a6:f2:bc:8c:fd:8d: d7:2b:8a:f7:51:bc:16:bb:0f:79:d1:43:e7:37:ab: ec:25:b7:52:30:f9:87:26:da:e3:9d:8a:e6:c1:ef: 14:95:b9:b4:5f:fb:83:d1:2e:b9:66:2b:fa:bf:37: 86:d8:23:4f:ed:8b:67:78:74:eb:a7:68:a8:45:eb: 48:15:68:7e:cb:2c:c6:03:15:d5:4d:56:05:e2:94: 7d:7f:37:66:60:c6:db:cc:16:32:ad:f0:1c:e7:e4: cb:90:5d:df:a3:5d:a0:ee:32:97:f2:c5:95:71:64: b7:0b:6a:4b:dc:8d:cb:b7:03:cc:07:72:6a:24:8c: 4b:d0:ab:67:dc:56:9c:13:f7:ee:12:2e:b9:64:ea: a2:ad:15:59:4d:87:30:3e:77:39:dc:96:06:9f:0f: 8e:ee:30:e4:3e:b4:ce:b2:df:fc:d4:a3:af:87:9f: 78:f9:c2:fe:8d:4e:13:e2:b4:89:26:52:78:05:cf: ea:66:ab:4d:0d:b4:b9:7a:bc:bb:0f:59:3e:bc:f2: e8:75:63:fd:3d:da:54:23:40:7f:91:ad:b0:cc:56: fb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D6:E1:B4:E2:BA:CB:34:BA:A1:8A:61:F2:9C:7A:67:C9:47:61:18 X509v3 Authority Key Identifier: keyid:83:6A:73:BE:D7:5A:A4:EF:A5:77:ED:90:AD:35:62:E2:19:51:D1:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2pzvtdapO-ld-2QrTVi4hlR0bI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/59bhtOK6yzS6oYph8px6Z8lHYRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ab34ad-9e9a-4289-8727-b1acd75018c3/1/g2pzvtdapO-ld-2QrTVi4hlR0bI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.212.0/22 Signature Algorithm: sha256WithRSAEncryption 69:fd:2a:d3:6c:d5:a3:ee:67:ab:8f:dc:f1:68:2e:57:20:f2: 2f:22:f6:79:43:de:0c:df:10:e4:31:c7:12:8b:11:df:ed:32: 2b:dc:18:b7:1b:84:91:00:5f:13:39:e7:c9:9a:ef:31:96:0e: 09:bd:dc:e9:b5:eb:37:ad:e2:eb:26:c8:9f:5f:ad:9b:d7:da: 4d:8c:ca:89:41:3c:e6:0e:b9:fd:91:4e:ff:f1:a3:7d:81:45: e3:5d:cb:bc:0c:2c:66:2e:1f:cf:53:7d:2b:7e:fe:30:92:ed: 0d:6b:5c:6a:87:4d:d1:5a:0d:e3:eb:e0:b4:3b:f2:7d:3a:a6: 70:42:e1:b3:75:ec:40:a7:df:fd:eb:2e:38:50:e4:2b:e0:57: 03:d7:b8:37:37:46:03:03:be:a5:d7:8f:74:07:45:db:3d:86: 94:7f:6e:4b:7a:57:39:81:3a:30:ac:00:fc:a9:2a:54:0a:53: 2d:2c:70:71:fd:c8:68:47:9c:cd:9a:90:07:68:32:06:0d:1b: be:ae:b2:aa:52:c0:a9:38:a8:3e:78:36:a1:57:07:3b:af:e6: e5:81:45:63:ce:83:a3:4d:20:ee:14:90:69:ea:c9:6f:df:d1: a7:85:33:d0:97:0d:63:e6:cd:c0:51:fa:15:09:c4:88:04:4d: 2b:4e:12:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EEbj4VLoC5ExOmA4KH+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNmE3M2JlZDc1YWE0ZWZhNTc3ZWQ5MGFkMzU2MmUyMTk1 MWQxYjIwHhcNMjYwMTAxMTAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2Q2ZTFiNGUyYmFjYjM0YmFhMThhNjFmMjljN2E2N2M5NDc2MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpCRtyyBojnD8iySzoyPuc8syIz TX9mKyKbxCkJcudRiiXeBMGm8ryM/Y3XK4r3UbwWuw950UPnN6vsJbdSMPmHJtrj nYrmwe8Ulbm0X/uD0S65Ziv6vzeG2CNP7YtneHTrp2ioRetIFWh+yyzGAxXVTVYF 4pR9fzdmYMbbzBYyrfAc5+TLkF3fo12g7jKX8sWVcWS3C2pL3I3LtwPMB3JqJIxL 0Ktn3FacE/fuEi65ZOqirRVZTYcwPnc53JYGnw+O7jDkPrTOst/81KOvh594+cL+ jU4T4rSJJlJ4Bc/qZqtNDbS5ery7D1k+vPLodWP9PdpUI0B/ka2wzFb7gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOfW4bTiuss0uqGKYfKcemfJR2EYMB8GA1UdIwQY MBaAFINqc77XWqTvpXftkK01YuIZUdGyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3Mjct YjFhY2Q3NTAxOGMzLzEvNTliaHRPSzZ5elM2b1lwaDhweDZaOGxIWVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hYjM0YWQtOWU5YS00Mjg5LTg3MjctYjFhY2Q3NTAxOGMz LzEvZzJwenZ0ZGFwTy1sZC0yUXJUVmk0aGxSMGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV/UMA0G CSqGSIb3DQEBCwUAA4IBAQBp/SrTbNWj7merj9zxaC5XIPIvIvZ5Q94M3xDkMccS ixHf7TIr3Bi3G4SRAF8TOefJmu8xlg4Jvdzptes3reLrJsifX62b19pNjMqJQTzm Drn9kU7/8aN9gUXjXcu8DCxmLh/PU30rfv4wku0Na1xqh03RWg3j6+C0O/J9OqZw QuGzdexAp9/96y44UOQr4FcD17g3N0YDA76l1490B0XbPYaUf25Lelc5gTowrAD8 qSpUClMtLHBx/choR5zNmpAHaDIGDRu+rrKqUsCpOKg+eDahVwc7r+blgUVjzoOj TSDuFJBp6slv39GnhTPQlw1j5s3AUfoVCcSIBE0rThLT -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:17 2026 by rpki-client