This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/J9FY2qroRIRJPM9mPDgO48qgTbE.roa File: J9FY2qroRIRJPM9mPDgO48qgTbE.roa (raw, json) Hash identifier: yx1+DdoiXQhyMmS5jvrhikl5bF1DwyLGoQlsUY1c8yo= Subject key identifier: 27:D1:58:DA:AA:E8:44:84:49:3C:CF:66:3C:38:0E:E3:CA:A0:4D:B1 Certificate issuer: /CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6 Certificate serial: 019B77592942E4902C713495D6BFB2750DC1 Authority key identifier: 07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/J9FY2qroRIRJPM9mPDgO48qgTbE.roa Signing time: Thu 01 Jan 2026 02:18:10 +0000 ROA not before: Thu 01 Jan 2026 02:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59817 IP address blocks: 185.70.56.0/22 maxlen: 24 185.70.59.0/24 maxlen: 24 2a03:34a0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.mft rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:29:42:e4:90:2c:71:34:95:d6:bf:b2:75:0d:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=077a0fb99e52ae4fa1d66faad93f42e6d07886a6 Validity Not Before: Jan 1 02:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27d158daaae84484493ccf663c380ee3caa04db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:74:cc:f9:6c:75:94:41:f8:3b:16:1b:23:f8: 1b:59:91:bf:c4:1a:08:95:68:39:b4:dd:54:c1:d6: b0:b5:88:13:95:29:a0:ff:a6:ea:53:df:cb:82:ad: ce:f0:59:37:f6:cf:d1:55:b8:ee:e0:19:20:3a:de: 4e:2f:43:8f:14:41:1e:ad:cd:db:ea:c5:f0:2a:36: 4c:b5:52:b7:b1:7c:23:c4:22:21:b9:d5:7b:13:ef: b6:31:5c:e9:d5:aa:8c:31:93:10:91:e3:c6:35:7d: c1:3e:1b:c5:0c:8b:84:c7:65:ea:40:a8:09:cd:fb: 99:23:85:6b:9a:f6:a9:b6:b8:05:b9:0c:b7:24:f1: 61:8b:e2:c0:a2:49:c5:a1:41:1c:80:96:aa:68:24: e2:e0:47:b2:b7:62:92:86:13:3d:9e:61:44:da:e0: ba:02:72:31:bd:91:a6:2c:78:9e:b9:a5:29:22:6c: c1:ff:e8:12:cd:9c:46:58:5a:f9:49:95:46:42:c9: a1:a9:8d:86:5e:39:9c:13:42:a7:ec:33:a3:ba:9a: 1d:ba:97:1e:4e:06:3d:b7:1e:91:34:21:ea:64:e0: 78:4b:37:58:83:0a:f5:af:00:7e:16:5a:92:0e:53: fd:fa:bf:19:a0:c9:a8:b9:8f:35:8b:33:ca:02:7e: 74:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D1:58:DA:AA:E8:44:84:49:3C:CF:66:3C:38:0E:E3:CA:A0:4D:B1 X509v3 Authority Key Identifier: keyid:07:7A:0F:B9:9E:52:AE:4F:A1:D6:6F:AA:D9:3F:42:E6:D0:78:86:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/J9FY2qroRIRJPM9mPDgO48qgTbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d3e9bd-446b-4116-8453-d467cc6e7d8f/1/B3oPuZ5Srk-h1m-q2T9C5tB4hqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.56.0/22 IPv6: 2a03:34a0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:d7:9f:3f:a5:11:4d:9c:e2:d7:5a:71:fa:0c:10:95:33:9f: 6b:07:3d:53:ca:74:bf:8b:40:d2:96:9a:55:9d:06:ed:b5:46: 7b:11:4f:a7:7b:be:27:66:e3:a8:7a:45:23:82:d0:c1:3e:04: 37:83:1e:01:e7:50:05:22:06:46:ad:96:28:fa:4c:45:88:e3: c4:ef:66:63:68:a2:68:7e:4a:1a:65:9d:04:0c:cb:b3:06:37: b8:ec:f6:f0:f0:01:bc:eb:03:fd:b2:ac:5f:ca:a4:9b:55:c4: 61:91:30:b0:2a:c0:98:b9:57:b4:26:28:0e:b8:5a:7a:e8:bb: 93:30:1b:68:87:09:db:59:7b:3c:ea:6a:c3:41:c8:8e:f1:01: c1:59:2d:0c:cc:6f:18:20:a6:d6:2b:46:44:88:3f:20:26:77: 48:a3:e8:4a:5e:dc:a7:cd:38:17:30:14:50:d5:df:68:92:7a: ea:8a:9b:fe:92:89:62:1d:f5:9a:5b:19:e7:c5:52:f6:09:ff: ae:11:8b:72:dd:85:83:eb:dd:37:19:13:dd:f5:93:0d:e0:97: 35:6e:ef:38:46:2f:bf:da:6f:87:62:32:27:14:61:7f:30:a0: a1:f0:a7:90:23:48:12:14:e0:66:01:ab:b0:46:33:93:fe:7d: 71:07:e9:a2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WSlC5JAscTSV1r+ydQ3BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3N2EwZmI5OWU1MmFlNGZhMWQ2NmZhYWQ5M2Y0MmU2ZDA3 ODg2YTYwHhcNMjYwMTAxMDIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2QxNThkYWFhZTg0NDg0NDkzY2NmNjYzYzM4MGVlM2NhYTA0ZGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHTM+Wx1lEH4OxYbI/gbWZG/xBoI lWg5tN1UwdawtYgTlSmg/6bqU9/Lgq3O8Fk39s/RVbju4BkgOt5OL0OPFEEerc3b 6sXwKjZMtVK3sXwjxCIhudV7E++2MVzp1aqMMZMQkePGNX3BPhvFDIuEx2XqQKgJ zfuZI4VrmvaptrgFuQy3JPFhi+LAoknFoUEcgJaqaCTi4Eeyt2KShhM9nmFE2uC6 AnIxvZGmLHieuaUpImzB/+gSzZxGWFr5SZVGQsmhqY2GXjmcE0Kn7DOjupodupce TgY9tx6RNCHqZOB4SzdYgwr1rwB+FlqSDlP9+r8ZoMmouY81izPKAn50CwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCfRWNqq6ESESTzPZjw4DuPKoE2xMB8GA1UdIwQY MBaAFAd6D7meUq5PodZvqtk/QubQeIamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMt ZDQ2N2NjNmU3ZDhmLzEvSjlGWTJxcm9SSVJKUE05bVBEZ080OHFnVGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9kM2U5YmQtNDQ2Yi00MTE2LTg0NTMtZDQ2N2NjNmU3ZDhm LzEvQjNvUHVaNVNyay1oMW0tcTJUOUM1dEI0aHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUY4MA0E AgACMAcDBQAqAzSgMA0GCSqGSIb3DQEBCwUAA4IBAQBv158/pRFNnOLXWnH6DBCV M59rBz1TynS/i0DSlppVnQbttUZ7EU+ne74nZuOoekUjgtDBPgQ3gx4B51AFIgZG rZYo+kxFiOPE72ZjaKJofkoaZZ0EDMuzBje47Pbw8AG86wP9sqxfyqSbVcRhkTCw KsCYuVe0JigOuFp66LuTMBtohwnbWXs86mrDQciO8QHBWS0MzG8YIKbWK0ZEiD8g JndIo+hKXtynzTgXMBRQ1d9oknrqipv+koliHfWaWxnnxVL2Cf+uEYty3YWD6903 GRPd9ZMN4Jc1bu84Ri+/2m+HYjInFGF/MKCh8KeQI0gSFOBmAauwRjOT/n1xB+mi -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client