This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/f9rNCsFzObsmXufIGxfL6R-yFCk.roa File: f9rNCsFzObsmXufIGxfL6R-yFCk.roa (raw, json) Hash identifier: si6wauF3TBoV3pmRSTWHYOpsqar2slO37/4OV4jqMcA= Subject key identifier: 7F:DA:CD:0A:C1:73:39:BB:26:5E:E7:C8:1B:17:CB:E9:1F:B2:14:29 Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b Certificate serial: 019B7A5ABC03B004D62DFD100A08FC59F8D6 Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/f9rNCsFzObsmXufIGxfL6R-yFCk.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50304 IP address blocks: 86.111.48.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.mft rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bc:03:b0:04:d6:2d:fd:10:0a:08:fc:59:f8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7fdacd0ac17339bb265ee7c81b17cbe91fb21429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:63:3f:75:c5:29:57:8d:97:03:59:ab:30:f4: ba:82:77:de:55:6a:67:2c:32:3e:e3:50:9d:93:f3: 1e:63:9e:06:c4:03:ae:2f:b7:92:03:15:3e:1d:72: 75:30:50:3d:47:41:db:13:7b:46:f0:ce:7c:aa:e9: 16:a1:91:bc:5a:d9:cd:2b:1b:17:c3:e7:0b:8c:aa: 19:21:27:e2:1f:2d:7c:66:bd:b9:07:5e:99:4e:1c: f4:c8:f4:1d:83:a1:24:97:54:0a:de:f1:4d:6f:42: 09:43:b8:f8:67:b6:19:ac:4f:f6:3d:9d:ca:2d:ea: 7b:25:76:80:99:64:e6:e6:2a:82:c2:22:42:80:7a: 47:5b:8c:f5:5c:35:b0:63:cf:e8:23:5a:e1:47:cb: 15:cf:06:7d:73:86:bc:ab:9d:59:17:11:35:e4:69: 20:e1:9c:b7:87:30:14:b0:43:2e:bf:d1:99:3e:16: 80:fa:b1:23:fa:e7:aa:57:18:5b:b5:47:7a:eb:b3: 66:06:cc:1b:21:f3:ea:f1:cb:41:d1:26:6f:2f:e4: 88:07:51:75:e0:10:1d:05:e9:82:bf:9e:4a:66:51: 4d:e4:6c:ed:d3:34:d2:f7:5a:c8:73:96:be:52:e3: 04:ab:59:9f:2b:b5:96:0d:f1:af:b5:4f:21:c6:5a: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DA:CD:0A:C1:73:39:BB:26:5E:E7:C8:1B:17:CB:E9:1F:B2:14:29 X509v3 Authority Key Identifier: keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/f9rNCsFzObsmXufIGxfL6R-yFCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.48.0/23 Signature Algorithm: sha256WithRSAEncryption 57:23:a0:80:29:1f:28:43:14:cc:c8:de:3e:41:7d:05:90:e0: 30:a4:33:54:6e:54:38:2f:46:e0:c6:a4:c8:5c:7c:f8:a4:5f: 64:6a:04:18:b3:28:a4:2f:06:20:82:b4:31:1c:96:41:4c:7c: 17:4d:b4:9e:f4:29:32:ce:0b:b6:9b:53:c5:ba:7d:7c:f0:ab: 6d:a6:1a:97:9f:02:f0:d6:95:96:93:fd:36:d5:8b:64:f4:36: 9c:d2:4c:b2:58:0a:7b:27:44:5a:cc:fd:03:ed:70:21:59:08: 66:1c:2f:1d:af:7c:2e:bf:a5:b2:d7:5d:3d:34:e6:75:6e:51: 91:22:98:78:45:b0:0c:7b:7f:23:de:0d:d7:27:0f:21:48:c5: 7b:2b:b7:b1:65:40:a6:5a:8c:e7:22:1f:41:0d:2f:31:1a:07: 26:9e:91:7f:0e:36:0e:37:72:39:89:fd:96:cf:c4:e5:e4:ed: d6:6f:f5:06:2e:68:21:0d:e4:fe:db:4d:52:1f:5a:d6:65:b7: e8:5f:ff:0f:6f:03:f0:a3:cd:6b:f0:e0:83:76:d7:f0:9c:2a: 4f:23:a6:2a:4e:1d:b6:f1:ed:a9:ff:80:db:df:c0:54:45:9d: d6:ad:81:28:98:91:2c:9d:32:57:5c:e7:8d:9d:70:ff:4d:cb: 59:5e:ee:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrwDsATWLf0QCgj8WfjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2 YjNjN2IwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmRhY2QwYWMxNzMzOWJiMjY1ZWU3YzgxYjE3Y2JlOTFmYjIxNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWM/dcUpV42XA1mrMPS6gnfeVWpn LDI+41Cdk/MeY54GxAOuL7eSAxU+HXJ1MFA9R0HbE3tG8M58qukWoZG8WtnNKxsX w+cLjKoZISfiHy18Zr25B16ZThz0yPQdg6Ekl1QK3vFNb0IJQ7j4Z7YZrE/2PZ3K Lep7JXaAmWTm5iqCwiJCgHpHW4z1XDWwY8/oI1rhR8sVzwZ9c4a8q51ZFxE15Gkg 4Zy3hzAUsEMuv9GZPhaA+rEj+ueqVxhbtUd667NmBswbIfPq8ctB0SZvL+SIB1F1 4BAdBemCv55KZlFN5Gzt0zTS91rIc5a+UuMEq1mfK7WWDfGvtU8hxlqlkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH/azQrBczm7Jl7nyBsXy+kfshQpMB8GA1UdIwQY MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt ZDNhNThiNWNiMGMwLzEvZjlyTkNzRnpPYnNtWHVmSUd4Zkw2Ui15RkNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm8wMA0G CSqGSIb3DQEBCwUAA4IBAQBXI6CAKR8oQxTMyN4+QX0FkOAwpDNUblQ4L0bgxqTI XHz4pF9kagQYsyikLwYggrQxHJZBTHwXTbSe9Ckyzgu2m1PFun188KttphqXnwLw 1pWWk/021Ytk9Dac0kyyWAp7J0RazP0D7XAhWQhmHC8dr3wuv6Wy1109NOZ1blGR Iph4RbAMe38j3g3XJw8hSMV7K7exZUCmWoznIh9BDS8xGgcmnpF/DjYON3I5if2W z8Tl5O3Wb/UGLmghDeT+201SH1rWZbfoX/8PbwPwo81r8OCDdtfwnCpPI6YqTh22 8e2p/4Db38BURZ3WrYEomJEsnTJXXOeNnXD/TctZXu4j -----END CERTIFICATE-----Generated at Fri Jan 23 21:39:54 2026 by rpki-client