This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/c06039lKyV_J6xBbo-T4U-OvKpY.roa File: c06039lKyV_J6xBbo-T4U-OvKpY.roa (raw, json) Hash identifier: iZi7artEej/ZvwjEPmdFR6zAlAdw9xNqyuBRvLMxbow= Subject key identifier: 73:4E:B4:DF:D9:4A:C9:5F:C9:EB:10:5B:A3:E4:F8:53:E3:AF:2A:96 Certificate issuer: /CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Certificate serial: 019B797E9CC9E2D21A3813C1E31B9D6CBF76 Authority key identifier: 86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/c06039lKyV_J6xBbo-T4U-OvKpY.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213051 IP address blocks: 193.109.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.mft rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 18:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9c:c9:e2:d2:1a:38:13:c1:e3:1b:9d:6c:bf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86a8ff4c9c56667d99025d7f01591cbf77ad2f09 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=734eb4dfd94ac95fc9eb105ba3e4f853e3af2a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:2f:78:12:9c:d7:78:00:b9:45:b5:d9:b1: 66:19:c2:98:cb:97:a8:0a:90:ab:65:ca:94:6c:5c: 27:59:c2:8d:2c:17:16:94:51:ea:bd:b6:0b:41:a7: 4f:91:46:d9:68:c2:c8:54:28:99:0e:6d:1a:76:a8: ff:ed:56:31:52:b0:aa:26:64:bc:c1:83:38:48:1d: 0f:a5:a4:e0:e6:d9:b5:fa:a3:9f:18:42:5c:7f:60: 44:58:72:91:5f:b9:d4:5e:68:62:90:a7:94:4e:2b: 5c:95:33:4d:5e:2d:a1:9a:6d:a1:19:a8:ce:ca:5e: ac:52:70:79:86:2f:ac:2a:2a:69:e9:96:3c:e7:db: da:df:dc:7a:73:5c:03:0c:44:40:29:0a:ad:c6:a7: 72:3f:f9:76:85:24:c4:ed:82:0c:bb:1b:7e:9c:42: d8:66:11:41:8f:41:24:53:39:b2:c7:b4:d1:38:bc: 16:b1:94:02:e2:7d:d2:ab:c5:af:91:70:3d:c0:d4: 11:04:5d:57:f9:a7:91:15:45:4c:07:df:96:ff:fd: 86:17:da:d6:c7:66:2b:6f:33:cc:e9:27:b0:5f:75: 6a:02:3b:4e:44:a5:e3:9b:7d:af:64:0e:f5:c8:57: 41:7c:22:f8:4b:ee:0c:13:a3:d4:4d:04:61:7d:07: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:B4:DF:D9:4A:C9:5F:C9:EB:10:5B:A3:E4:F8:53:E3:AF:2A:96 X509v3 Authority Key Identifier: keyid:86:A8:FF:4C:9C:56:66:7D:99:02:5D:7F:01:59:1C:BF:77:AD:2F:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hqj_TJxWZn2ZAl1_AVkcv3etLwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/c06039lKyV_J6xBbo-T4U-OvKpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c921e8-6c94-4cc2-b9fd-06a49968c2d3/1/hqj_TJxWZn2ZAl1_AVkcv3etLwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.108.0/24 Signature Algorithm: sha256WithRSAEncryption 87:d8:56:d3:51:8a:b5:dc:be:95:94:dd:e2:d3:17:c6:75:3c: 23:d8:c0:3c:1f:9c:a4:d7:44:0a:de:10:b5:24:7d:01:cb:c7: 61:a2:13:73:c5:33:ad:00:e7:e6:f7:08:b5:08:e5:f7:d8:ef: 75:35:a4:8f:af:8a:f7:61:3b:b5:52:32:63:51:49:09:db:d9: a6:67:46:9d:bb:0f:67:39:e9:83:2a:e6:ae:b1:b5:89:6b:18: d0:4e:66:64:26:bc:89:db:c2:5b:a4:41:3c:97:f4:25:e3:57: ce:4e:38:39:5d:9b:9d:9c:97:5a:0a:fc:d5:95:f7:aa:a8:39: 9e:b5:f0:96:ff:81:a3:97:21:ea:62:f6:f0:36:b3:d0:37:7f: 71:32:6d:10:ac:75:a9:1a:e7:b8:10:10:ca:13:2d:97:1a:c8: ad:c4:39:a5:d0:e8:12:90:95:4f:66:c5:9f:12:c7:b7:cd:e5: 5e:4b:d1:bc:6a:46:0b:e8:a0:73:2f:fe:54:d3:85:9d:7e:67: b7:60:90:1a:3d:fa:d1:4e:bd:a8:a1:95:8d:24:ec:ec:59:dd: f3:eb:47:db:5d:90:f5:81:8d:40:48:bb:02:5f:2d:82:ed:74: 73:6f:2b:1e:b1:98:8d:5c:17:a2:f5:45:d7:18:d3:e0:88:1b: 9a:62:8f:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpzJ4tIaOBPB4xudbL92MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2YThmZjRjOWM1NjY2N2Q5OTAyNWQ3ZjAxNTkxY2JmNzdh ZDJmMDkwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzRlYjRkZmQ5NGFjOTVmYzllYjEwNWJhM2U0Zjg1M2UzYWYyYTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWUveBKc13gAuUW12bFmGcKYy5eo CpCrZcqUbFwnWcKNLBcWlFHqvbYLQadPkUbZaMLIVCiZDm0adqj/7VYxUrCqJmS8 wYM4SB0PpaTg5tm1+qOfGEJcf2BEWHKRX7nUXmhikKeUTitclTNNXi2hmm2hGajO yl6sUnB5hi+sKipp6ZY859va39x6c1wDDERAKQqtxqdyP/l2hSTE7YIMuxt+nELY ZhFBj0EkUzmyx7TROLwWsZQC4n3Sq8WvkXA9wNQRBF1X+aeRFUVMB9+W//2GF9rW x2YrbzPM6SewX3VqAjtORKXjm32vZA71yFdBfCL4S+4ME6PUTQRhfQctzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNOtN/ZSslfyesQW6Pk+FPjryqWMB8GA1UdIwQY MBaAFIao/0ycVmZ9mQJdfwFZHL93rS8JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQt MDZhNDk5NjhjMmQzLzEvYzA2MDM5bEt5Vl9KNnhCYm8tVDRVLU92S3BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jOTIxZTgtNmM5NC00Y2MyLWI5ZmQtMDZhNDk5NjhjMmQz LzEvaHFqX1RKeFdabjJaQWwxX0FWa2N2M2V0THdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW1sMA0G CSqGSIb3DQEBCwUAA4IBAQCH2FbTUYq13L6VlN3i0xfGdTwj2MA8H5yk10QK3hC1 JH0By8dhohNzxTOtAOfm9wi1COX32O91NaSPr4r3YTu1UjJjUUkJ29mmZ0aduw9n OemDKuausbWJaxjQTmZkJryJ28JbpEE8l/Ql41fOTjg5XZudnJdaCvzVlfeqqDme tfCW/4GjlyHqYvbwNrPQN39xMm0QrHWpGue4EBDKEy2XGsitxDml0OgSkJVPZsWf Ese3zeVeS9G8akYL6KBzL/5U04Wdfme3YJAaPfrRTr2ooZWNJOzsWd3z60fbXZD1 gY1ASLsCXy2C7XRzbysesZiNXBei9UXXGNPgiBuaYo8M -----END CERTIFICATE-----Generated at Fri Jan 16 03:59:12 2026 by rpki-client