This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/74hYT2gK0sb5mVOlRXh4hpjf2Wg.roa File: 74hYT2gK0sb5mVOlRXh4hpjf2Wg.roa (raw, json) Hash identifier: KDQsSgSZtyiIVHFzfImrnhrCnaAln2AZORY10VEdnzo= Subject key identifier: EF:88:58:4F:68:0A:D2:C6:F9:99:53:A5:45:78:78:86:98:DF:D9:68 Certificate issuer: /CN=2ea7626d600daf759376a6507e1d684386992d31 Certificate serial: 019B7B36B3B5DE6A328A13A2111B8B3363BC Authority key identifier: 2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/74hYT2gK0sb5mVOlRXh4hpjf2Wg.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57022 IP address blocks: 185.70.168.0/24 maxlen: 24 185.70.169.0/24 maxlen: 24 185.70.170.0/24 maxlen: 24 185.70.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.mft rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b3:b5:de:6a:32:8a:13:a2:11:1b:8b:33:63:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ea7626d600daf759376a6507e1d684386992d31 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef88584f680ad2c6f99953a54578788698dfd968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1e:24:65:f5:52:bd:39:35:02:9b:41:31:af: 2f:a4:c3:36:9b:6b:f3:eb:a2:a3:3a:85:be:80:a6: 0d:f1:cb:ba:ec:7a:ed:9c:63:49:fa:1b:12:9e:4a: c8:80:9d:b5:c4:5d:90:a3:96:b0:c6:d2:ee:16:65: 13:3d:8f:b3:58:31:b0:fb:77:6e:c9:bc:4a:79:59: b3:cc:19:47:7f:d2:ee:38:6d:23:f9:2b:7e:6b:6a: ac:e3:da:73:46:c9:0b:36:16:f7:72:2f:5d:f7:4a: d5:2d:54:f0:91:4b:63:dd:c7:9b:cc:b0:0f:52:c7: d4:6b:d1:fe:d5:87:1f:e7:5b:76:eb:ce:78:d3:94: 00:8d:c2:6b:97:ef:b1:c1:1d:a4:0f:02:fb:46:5b: e4:3c:65:51:e4:c2:d1:59:97:a4:74:0d:79:c4:ce: 75:55:00:38:f7:df:67:1c:6d:32:2f:8f:4c:5a:86: 85:ed:bc:63:22:65:9c:05:8b:0d:f3:0f:5d:e1:47: af:07:d3:f0:65:12:23:47:83:21:c9:82:73:70:57: 75:8f:73:a0:ed:b0:c2:a5:11:d4:03:fa:2e:16:17: bd:18:42:b0:76:3d:7d:52:d1:44:db:f5:d2:d0:c3: bc:0d:4f:4b:95:af:6a:19:3b:d0:b9:02:ac:1c:14: 18:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:88:58:4F:68:0A:D2:C6:F9:99:53:A5:45:78:78:86:98:DF:D9:68 X509v3 Authority Key Identifier: keyid:2E:A7:62:6D:60:0D:AF:75:93:76:A6:50:7E:1D:68:43:86:99:2D:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LqdibWANr3WTdqZQfh1oQ4aZLTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/74hYT2gK0sb5mVOlRXh4hpjf2Wg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0d6b47-8191-41e2-8113-6e56212cdf5c/1/LqdibWANr3WTdqZQfh1oQ4aZLTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.168.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:7c:42:28:8d:d7:9f:93:03:50:f6:75:5a:d4:e1:d5:49:3e: bf:5d:96:9b:38:72:0b:8b:d8:c4:bf:27:8c:6d:43:b6:4b:51: c6:ca:02:42:66:e3:8e:82:80:80:86:56:78:4d:42:86:c3:ec: 2c:76:46:87:2a:43:3a:4e:9e:02:98:59:fd:56:0c:12:c5:06: ca:4a:87:eb:18:67:c6:21:2d:aa:b1:21:23:71:ea:f8:2a:e7: 22:ea:b6:c3:20:7f:55:eb:19:9a:5e:e5:b1:90:25:d4:93:cf: d7:75:28:f3:0c:b3:d1:4c:be:e0:66:2a:be:3d:8c:1c:8a:1f: 0d:2d:bd:b5:14:cb:26:21:04:40:d0:84:d8:ae:3d:8a:34:91: 69:54:5e:82:9e:f2:4a:cb:fc:b3:84:cd:33:b6:f7:56:a7:8c: b3:04:98:2c:77:e6:06:ac:71:77:c1:03:e1:64:f1:a4:1b:01: bd:dd:6d:c3:76:0c:bf:9e:ab:30:2e:e6:69:89:46:19:b8:17: 84:79:44:1a:b8:95:f0:03:71:c9:fa:6f:ef:66:59:53:7f:e0: e9:bd:05:8e:8f:c8:e9:a9:9b:58:ac:d7:08:d6:17:c1:40:da: 85:3d:5a:ce:99:dc:8d:6a:25:d2:7d:80:28:eb:5c:12:99:b0: 89:7e:eb:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrO13moyihOiERuLM2O8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYTc2MjZkNjAwZGFmNzU5Mzc2YTY1MDdlMWQ2ODQzODY5 OTJkMzEwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjg4NTg0ZjY4MGFkMmM2Zjk5OTUzYTU0NTc4Nzg4Njk4ZGZkOTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR4kZfVSvTk1AptBMa8vpMM2m2vz 66KjOoW+gKYN8cu67HrtnGNJ+hsSnkrIgJ21xF2Qo5awxtLuFmUTPY+zWDGw+3du ybxKeVmzzBlHf9LuOG0j+St+a2qs49pzRskLNhb3ci9d90rVLVTwkUtj3cebzLAP UsfUa9H+1Ycf51t2685405QAjcJrl++xwR2kDwL7RlvkPGVR5MLRWZekdA15xM51 VQA4999nHG0yL49MWoaF7bxjImWcBYsN8w9d4UevB9PwZRIjR4MhyYJzcFd1j3Og 7bDCpRHUA/ouFhe9GEKwdj19UtFE2/XS0MO8DU9Lla9qGTvQuQKsHBQY5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO+IWE9oCtLG+ZlTpUV4eIaY39loMB8GA1UdIwQY MBaAFC6nYm1gDa91k3amUH4daEOGmS0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMt NmU1NjIxMmNkZjVjLzEvNzRoWVQyZ0swc2I1bVZPbFJYaDRocGpmMldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8wZDZiNDctODE5MS00MWUyLTgxMTMtNmU1NjIxMmNkZjVj LzEvTHFkaWJXQU5yM1dUZHFaUWZoMW9RNGFaTFRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUaoMA0G CSqGSIb3DQEBCwUAA4IBAQAvfEIojdefkwNQ9nVa1OHVST6/XZabOHILi9jEvyeM bUO2S1HGygJCZuOOgoCAhlZ4TUKGw+wsdkaHKkM6Tp4CmFn9VgwSxQbKSofrGGfG IS2qsSEjcer4Kuci6rbDIH9V6xmaXuWxkCXUk8/XdSjzDLPRTL7gZiq+PYwcih8N Lb21FMsmIQRA0ITYrj2KNJFpVF6CnvJKy/yzhM0ztvdWp4yzBJgsd+YGrHF3wQPh ZPGkGwG93W3Ddgy/nqswLuZpiUYZuBeEeUQauJXwA3HJ+m/vZllTf+DpvQWOj8jp qZtYrNcI1hfBQNqFPVrOmdyNaiXSfYAo61wSmbCJfuuw -----END CERTIFICATE-----Generated at Tue Feb 3 00:18:36 2026 by rpki-client