This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa File: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (raw, json) Hash identifier: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU= Subject key identifier: 8F:7C:F0:FC:40:7D:2E:0E:65:BF:95:E1:B8:7C:E1:11:7B:1D:E0:92 Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Certificate serial: 019B7FF1D421B5035E89434B68E180419AD4 Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57152 IP address blocks: 185.70.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d4:21:b5:03:5e:89:43:4b:68:e1:80:41:9a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f7cf0fc407d2e0e65bf95e1b87ce1117b1de092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:a2:f1:2d:ab:e5:5b:17:f2:3d:5c:28:85: 30:11:74:8a:f1:64:9d:11:15:5b:98:e4:7c:a0:d6: 73:0d:32:c1:3d:0b:31:d4:47:e8:b0:5d:a7:6c:68: d5:9c:ff:53:3a:e2:93:a8:de:93:53:d0:bf:bc:52: de:7d:ff:0a:23:87:10:3f:47:10:82:4c:0b:ed:cd: f2:fb:20:70:68:90:62:db:aa:02:dd:de:84:18:82: 61:f1:ea:3f:bc:46:09:73:98:9e:1b:15:36:cd:29: df:24:84:ba:bb:6c:8f:71:da:8c:cf:d8:30:1d:50: 48:6d:0e:ea:02:b3:fe:1e:46:fa:8a:02:d3:06:63: dd:5b:bf:d8:5d:49:a7:59:07:0e:d0:11:ec:62:42: 5b:b1:2b:ec:35:62:4c:58:e2:a1:0c:77:19:c6:26: da:df:e6:46:87:46:06:a7:28:11:8e:bf:51:e3:73: 71:15:2d:06:d3:e6:aa:83:0f:04:08:8b:99:c0:4c: ac:6b:2a:9e:b1:af:85:2a:52:bd:c4:ea:6f:37:34: ed:c3:67:32:8d:b8:88:c7:8a:2b:e6:8c:e0:1f:10: ad:b0:3e:6f:a5:f4:49:e0:bc:25:2d:1b:35:eb:3d: c2:59:99:87:93:06:2c:a6:27:42:05:08:31:e8:8a: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7C:F0:FC:40:7D:2E:0E:65:BF:95:E1:B8:7C:E1:11:7B:1D:E0:92 X509v3 Authority Key Identifier: keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.97.0/24 Signature Algorithm: sha256WithRSAEncryption 44:62:63:f4:d1:f0:e3:9f:81:b5:79:8d:3a:9d:95:7a:60:34: 59:2d:0c:0d:13:e2:a8:70:2e:fe:74:f6:ce:56:2b:a0:93:0e: 28:b1:cb:38:e3:7d:ed:c5:b7:f5:34:38:19:bd:76:cf:d0:84: ec:0d:4f:5a:33:55:35:bf:79:5e:15:94:8c:7d:52:bb:ad:e7: 5f:63:57:aa:ab:f5:91:60:a9:f7:4c:26:d5:c7:45:31:45:75: cc:14:f0:23:07:8f:73:c2:0b:91:8d:ef:f4:b4:8b:43:49:b7: 60:fd:af:66:2c:54:5f:aa:cf:e9:a7:81:00:a0:64:9a:61:c6: cb:8a:17:ca:6d:aa:c4:34:d3:82:7c:d0:e7:27:76:a2:ec:aa: 5e:26:7b:69:be:b1:93:7e:a0:30:33:dd:f5:a0:92:b1:f4:e2: 12:f9:aa:84:96:13:09:2d:fd:cd:78:67:d6:59:c1:52:bb:19: bd:85:e0:c8:af:fd:eb:dc:df:ed:23:c0:74:ac:f8:9e:a5:02: dc:1c:a5:4e:5b:bd:63:da:84:ce:0a:86:f1:14:15:ce:84:85: 49:d2:53:e7:4c:5f:e1:68:ff:4c:1a:3d:10:9f:4b:20:7f:71: 0b:c1:4c:9a:4f:90:af:c0:b6:d6:76:13:22:6e:84:cb:fe:34: 26:25:ad:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8dQhtQNeiUNLaOGAQZrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm NmM3M2IwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjdjZjBmYzQwN2QyZTBlNjViZjk1ZTFiODdjZTExMTdiMWRlMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjqi8S2r5VsX8j1cKIUwEXSK8WSd ERVbmOR8oNZzDTLBPQsx1EfosF2nbGjVnP9TOuKTqN6TU9C/vFLeff8KI4cQP0cQ gkwL7c3y+yBwaJBi26oC3d6EGIJh8eo/vEYJc5ieGxU2zSnfJIS6u2yPcdqMz9gw HVBIbQ7qArP+Hkb6igLTBmPdW7/YXUmnWQcO0BHsYkJbsSvsNWJMWOKhDHcZxiba 3+ZGh0YGpygRjr9R43NxFS0G0+aqgw8ECIuZwEysayqesa+FKlK9xOpvNzTtw2cy jbiIx4or5ozgHxCtsD5vpfRJ4LwlLRs16z3CWZmHkwYspidCBQgx6IpADQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI988PxAfS4OZb+V4bh84RF7HeCSMB8GA1UdIwQY MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt NWVhOGY1M2FiNDkxLzEvajN6d19FQjlMZzVsdjVYaHVIemhFWHNkNEpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUZhMA0G CSqGSIb3DQEBCwUAA4IBAQBEYmP00fDjn4G1eY06nZV6YDRZLQwNE+KocC7+dPbO Viugkw4oscs4433txbf1NDgZvXbP0ITsDU9aM1U1v3leFZSMfVK7redfY1eqq/WR YKn3TCbVx0UxRXXMFPAjB49zwguRje/0tItDSbdg/a9mLFRfqs/pp4EAoGSaYcbL ihfKbarENNOCfNDnJ3ai7KpeJntpvrGTfqAwM931oJKx9OIS+aqElhMJLf3NeGfW WcFSuxm9heDIr/3r3N/tI8B0rPiepQLcHKVOW71j2oTOCobxFBXOhIVJ0lPnTF/h aP9MGj0Qn0sgf3ELwUyaT5CvwLbWdhMiboTL/jQmJa1l -----END CERTIFICATE-----Generated at Mon Jan 26 11:40:02 2026 by rpki-client