This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/B4wYxFww_X_iDCxVsYXjZhIjnK4.roa File: B4wYxFww_X_iDCxVsYXjZhIjnK4.roa (raw, json) Hash identifier: zX0gMbFt42KJdtED5J978ZIE/4qbULnV//fheUtafIs= Subject key identifier: 07:8C:18:C4:5C:30:FD:7F:E2:0C:2C:55:B1:85:E3:66:12:23:9C:AE Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0D4A4DE2876FC394D5F3C5FD02B4 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/B4wYxFww_X_iDCxVsYXjZhIjnK4.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55701 IP address blocks: 86.110.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0d:4a:4d:e2:87:6f:c3:94:d5:f3:c5:fd:02:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078c18c45c30fd7fe20c2c55b185e36612239cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:23:07:72:1a:5c:18:6b:3a:7d:43:98:fb:6d: 9b:3c:93:f4:ca:fc:b5:41:91:49:e8:14:3a:c2:3f: 47:f0:e9:24:ab:9f:df:b1:29:47:5e:e6:de:47:e0: c7:3d:6f:ef:f1:1f:ca:58:51:74:b5:ee:fb:d1:f7: cd:4b:70:ee:d1:a5:74:c0:9c:32:b9:76:1a:51:5f: 8c:0c:0f:c4:fe:7e:ef:b5:fb:a0:3b:0a:2c:e1:d0: d6:f2:d4:52:70:41:8f:91:a8:4b:f2:46:cf:ef:2e: a7:fc:df:6b:f3:7b:fc:52:a7:d7:29:0b:c2:e6:b0: a6:48:c9:38:35:ed:16:4b:01:82:6d:15:46:46:88: 2e:bc:78:16:be:09:18:52:be:4c:bd:d2:19:6e:aa: 63:75:bb:92:da:e9:81:e8:b8:ed:48:bc:2c:27:5b: 52:62:4b:38:fa:a3:21:13:de:6b:20:3d:e4:ef:eb: 8f:7f:f6:4d:31:d1:10:ec:42:49:9a:3b:2b:a5:9d: 21:af:3c:5a:4b:39:81:5c:86:7a:72:2a:29:e3:1d: dc:f8:30:b6:f2:3a:d9:64:3c:be:09:9b:bd:94:fd: e8:6f:b6:3b:3b:30:1e:53:78:e3:d6:c3:94:4f:51: 31:bc:6d:bd:a0:d3:36:c1:e0:fb:73:98:86:37:9f: 6b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:18:C4:5C:30:FD:7F:E2:0C:2C:55:B1:85:E3:66:12:23:9C:AE X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/B4wYxFww_X_iDCxVsYXjZhIjnK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.37.0/24 Signature Algorithm: sha256WithRSAEncryption 52:02:4a:92:df:71:04:18:d5:2a:4c:c9:1e:1e:bd:39:f8:f6: 0a:2f:db:28:ea:09:2b:87:d7:56:b5:29:41:50:19:af:5d:6d: a8:94:0d:a0:ad:8f:0a:0f:b8:c7:a6:84:92:2c:07:14:8e:b2: f8:fb:6e:96:53:65:39:e5:a4:98:6a:2b:40:f4:3f:b2:5f:b3: 24:63:d8:69:16:dc:39:0d:28:40:ba:3c:ff:82:44:93:12:eb: ba:c7:34:c9:e0:d1:3d:ac:2d:9a:04:f3:43:96:58:7b:89:2c: e3:29:9a:57:1a:da:2f:3f:62:3c:55:b0:5b:15:b3:8e:df:fd: a4:f5:82:09:70:1b:af:d5:64:53:69:21:9b:58:96:1a:7f:10: 00:6e:89:bc:e0:b1:8e:93:01:5e:8e:ef:6e:d4:dd:99:9e:80: 84:f0:1f:3e:10:13:11:97:32:36:11:21:be:a1:1e:83:df:06: 4a:09:fd:f7:d9:f6:a7:cb:96:1c:6e:2e:9e:4a:f1:59:ab:e9: b8:54:cc:0e:45:54:de:78:52:04:fa:6b:99:6d:b7:8a:9c:15: de:ad:b7:da:71:bc:f7:39:47:7a:48:f1:fa:86:ac:18:b0:53: 4b:8d:51:c0:4f:dc:fc:11:65:1f:5a:20:4e:f3:24:db:83:56: b6:f7:11:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Q1KTeKHb8OU1fPF/QK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzhjMThjNDVjMzBmZDdmZTIwYzJjNTViMTg1ZTM2NjEyMjM5Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iMHchpcGGs6fUOY+22bPJP0yvy1 QZFJ6BQ6wj9H8Okkq5/fsSlHXubeR+DHPW/v8R/KWFF0te770ffNS3Du0aV0wJwy uXYaUV+MDA/E/n7vtfugOwos4dDW8tRScEGPkahL8kbP7y6n/N9r83v8UqfXKQvC 5rCmSMk4Ne0WSwGCbRVGRoguvHgWvgkYUr5MvdIZbqpjdbuS2umB6LjtSLwsJ1tS Yks4+qMhE95rID3k7+uPf/ZNMdEQ7EJJmjsrpZ0hrzxaSzmBXIZ6ciop4x3c+DC2 8jrZZDy+CZu9lP3ob7Y7OzAeU3jj1sOUT1ExvG29oNM2weD7c5iGN59r6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeMGMRcMP1/4gwsVbGF42YSI5yuMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvQjR3WXhGd3dfWF9pREN4VnNZWGpaaElqbks0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4lMA0G CSqGSIb3DQEBCwUAA4IBAQBSAkqS33EEGNUqTMkeHr05+PYKL9so6gkrh9dWtSlB UBmvXW2olA2grY8KD7jHpoSSLAcUjrL4+26WU2U55aSYaitA9D+yX7MkY9hpFtw5 DShAujz/gkSTEuu6xzTJ4NE9rC2aBPNDllh7iSzjKZpXGtovP2I8VbBbFbOO3/2k 9YIJcBuv1WRTaSGbWJYafxAAbom84LGOkwFeju9u1N2ZnoCE8B8+EBMRlzI2ESG+ oR6D3wZKCf332fany5Ycbi6eSvFZq+m4VMwORVTeeFIE+muZbbeKnBXerbfacbz3 OUd6SPH6hqwYsFNLjVHAT9z8EWUfWiBO8yTbg1a29xHp -----END CERTIFICATE-----Generated at Wed Jan 7 06:30:04 2026 by rpki-client