This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/qi5ZA3URPRKBFcrvMJgvff_lQec.roa File: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (raw, json) Hash identifier: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU= Subject key identifier: AA:2E:59:03:75:11:3D:12:81:15:CA:EF:30:98:2F:7D:FF:E5:41:E7 Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Certificate serial: 019B7FF1D3275C2200744E0E853351706A64 Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/qi5ZA3URPRKBFcrvMJgvff_lQec.roa Signing time: Fri 02 Jan 2026 18:21:53 +0000 ROA not before: Fri 02 Jan 2026 18:21:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6205 IP address blocks: 185.70.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d3:27:5c:22:00:74:4e:0e:85:33:51:70:6a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Validity Not Before: Jan 2 18:21:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa2e590375113d128115caef30982f7dffe541e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9d:e6:9a:44:c3:9f:e1:e3:62:92:0b:bd:d1: 02:26:05:f1:06:39:ca:4a:64:9e:f9:c6:99:47:9f: 52:44:a6:d8:a2:42:9d:6d:e2:23:5d:a1:99:75:12: c2:ab:99:42:5b:7e:46:bf:aa:1f:d0:dc:a0:d0:a8: cc:98:e4:66:c5:d0:1c:70:53:0b:13:30:22:77:e9: 40:8c:03:e1:78:12:8b:88:da:00:9c:80:10:c0:e1: ef:85:cf:39:09:97:be:45:6a:c0:03:d1:88:03:57: c8:64:67:0e:18:6e:fc:e5:cc:8f:a0:d8:b4:f5:b2: c1:4a:23:ea:39:ed:21:af:93:0b:dd:15:77:53:a4: 47:05:1f:b6:61:21:0a:9d:ae:f6:a9:22:6b:0d:55: 0e:e8:11:f6:db:af:55:a4:96:da:31:ff:57:89:6e: 2b:05:6f:22:1c:91:46:73:d1:b3:46:72:42:90:4f: 45:d2:75:f1:58:9a:6b:b4:c3:d8:13:73:22:c3:19: 07:0e:9f:6e:87:47:e9:01:1d:04:d8:ea:17:03:ef: 6e:d8:9a:8b:67:4c:53:ec:85:68:66:2b:36:0e:5e: 6c:1e:6c:5e:c7:39:33:af:17:85:b2:99:d8:7b:71: 4d:a1:28:e1:23:1e:5c:0a:84:dd:a7:7a:69:65:bb: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2E:59:03:75:11:3D:12:81:15:CA:EF:30:98:2F:7D:FF:E5:41:E7 X509v3 Authority Key Identifier: keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/qi5ZA3URPRKBFcrvMJgvff_lQec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.97.0/24 Signature Algorithm: sha256WithRSAEncryption 43:70:c8:d3:e0:48:27:c5:8c:87:b8:e2:4a:75:ce:bb:89:9f: 17:d3:70:bf:01:b2:26:32:52:14:09:ad:37:19:e3:6f:02:8c: 91:56:c6:6c:33:0b:16:6e:be:04:a6:ed:16:c1:c1:2b:88:af: 8d:57:62:5e:23:57:d5:fb:1b:ae:71:f5:aa:7f:ff:ad:20:40: 40:b0:db:a6:c0:9a:f3:2b:1b:00:ab:9d:ef:2c:77:b8:db:aa: 30:7d:43:b4:31:5d:4c:c6:f0:1a:51:58:93:d4:4b:51:11:bf: ed:b9:ab:d7:3b:8b:1d:b0:11:e4:62:dc:f2:e8:9d:52:8e:c2: a5:e7:1c:23:8e:b6:fc:12:97:53:af:f3:7f:42:6d:2f:98:ce: 41:18:86:28:0c:77:e1:cb:d8:13:2c:c3:00:3a:c3:47:f1:ab: 9a:58:0a:d4:be:2a:6b:55:06:43:5f:70:28:69:2f:a8:b3:09: 1f:d1:77:89:81:f5:81:02:7f:56:0d:d3:d2:c5:1b:04:36:03: 27:af:f6:97:b7:2e:37:92:c5:a3:34:1d:b4:2a:1a:ad:64:09: d9:b7:14:65:49:22:df:92:b8:eb:ec:f4:0e:ab:1c:19:c0:43: cf:74:aa:dc:0b:0f:3f:83:8b:ad:c9:8d:d1:b5:b4:0c:6b:71: ee:f4:0a:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8dMnXCIAdE4OhTNRcGpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm NmM3M2IwHhcNMjYwMTAyMTgyMTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTJlNTkwMzc1MTEzZDEyODExNWNhZWYzMDk4MmY3ZGZmZTU0MWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ3mmkTDn+HjYpILvdECJgXxBjnK SmSe+caZR59SRKbYokKdbeIjXaGZdRLCq5lCW35Gv6of0Nyg0KjMmORmxdAccFML EzAid+lAjAPheBKLiNoAnIAQwOHvhc85CZe+RWrAA9GIA1fIZGcOGG785cyPoNi0 9bLBSiPqOe0hr5ML3RV3U6RHBR+2YSEKna72qSJrDVUO6BH2269VpJbaMf9XiW4r BW8iHJFGc9GzRnJCkE9F0nXxWJprtMPYE3MiwxkHDp9uh0fpAR0E2OoXA+9u2JqL Z0xT7IVoZis2Dl5sHmxexzkzrxeFspnYe3FNoSjhIx5cCoTdp3ppZbsOMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKouWQN1ET0SgRXK7zCYL33/5UHnMB8GA1UdIwQY MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt NWVhOGY1M2FiNDkxLzEvcWk1WkEzVVJQUktCRmNydk1KZ3ZmZl9sUWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUZhMA0G CSqGSIb3DQEBCwUAA4IBAQBDcMjT4EgnxYyHuOJKdc67iZ8X03C/AbImMlIUCa03 GeNvAoyRVsZsMwsWbr4Epu0WwcEriK+NV2JeI1fV+xuucfWqf/+tIEBAsNumwJrz KxsAq53vLHe426owfUO0MV1MxvAaUViT1EtREb/tuavXO4sdsBHkYtzy6J1SjsKl 5xwjjrb8EpdTr/N/Qm0vmM5BGIYoDHfhy9gTLMMAOsNH8auaWArUviprVQZDX3Ao aS+oswkf0XeJgfWBAn9WDdPSxRsENgMnr/aXty43ksWjNB20KhqtZAnZtxRlSSLf krjr7PQOqxwZwEPPdKrcCw8/g4utyY3RtbQMa3Hu9Ar/ -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:00 2026 by rpki-client