This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/86kV-CBVfnQcJyHUwtgj6mE9ynY.roa File: 86kV-CBVfnQcJyHUwtgj6mE9ynY.roa (raw, json) Hash identifier: HD7vMFw1ZLvs7IG1Ix80v+8FBmp78WtI8pixF8GnWyU= Subject key identifier: F3:A9:15:F8:20:55:7E:74:1C:27:21:D4:C2:D8:23:EA:61:3D:CA:76 Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a Certificate serial: 019B797E3CEE1EA64CA8EF24D612DD25339B Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/86kV-CBVfnQcJyHUwtgj6mE9ynY.roa Signing time: Thu 01 Jan 2026 12:17:54 +0000 ROA not before: Thu 01 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61145 IP address blocks: 185.8.112.0/22 maxlen: 24 194.38.12.0/22 maxlen: 22 2a03:38c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:3c:ee:1e:a6:4c:a8:ef:24:d6:12:dd:25:33:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a Validity Not Before: Jan 1 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3a915f820557e741c2721d4c2d823ea613dca76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:98:f8:2d:a3:46:c6:a6:9e:79:6a:c9:ff:0b: e4:31:37:49:11:21:68:02:9a:86:3e:32:50:4e:3b: 02:f7:a9:03:9d:23:be:55:fd:55:b8:e2:e8:4c:ff: cf:61:9b:7e:87:d9:26:88:e6:54:33:f5:52:3f:ec: 4a:d4:44:79:8a:a6:10:99:4b:92:74:e8:ad:20:0e: 20:1d:40:4a:e8:ce:84:7c:17:89:c3:ed:82:0e:b3: 75:d0:df:a5:4c:a7:e5:41:06:52:93:d1:f5:64:1e: 10:aa:41:0d:b8:ec:af:c2:dd:cc:5c:68:9d:16:85: 7f:0f:73:3e:a8:21:4b:2e:11:62:e2:55:28:ae:03: 96:77:b0:91:3e:56:6d:64:1c:62:ed:26:84:29:ef: d0:d4:d7:c0:d7:f5:f0:19:da:02:a7:f9:53:7a:85: 88:ec:85:f4:41:69:d9:cc:21:ad:77:3a:bf:9b:58: 02:97:d2:5b:fb:7e:84:33:ce:b4:b1:4b:f2:11:bf: d0:52:4a:2c:62:5b:bb:6a:60:51:a0:d9:a3:9c:05: 2c:e3:39:09:1a:4f:96:82:c1:13:f9:79:75:65:54: 28:cc:d1:30:4d:8c:5e:e4:c7:a8:95:89:d2:53:4a: b1:ac:c7:d1:7b:07:54:79:b3:ae:81:37:76:72:69: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A9:15:F8:20:55:7E:74:1C:27:21:D4:C2:D8:23:EA:61:3D:CA:76 X509v3 Authority Key Identifier: keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/86kV-CBVfnQcJyHUwtgj6mE9ynY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.8.112.0/22 194.38.12.0/22 IPv6: 2a03:38c0::/32 Signature Algorithm: sha256WithRSAEncryption 64:15:7f:78:eb:a2:0e:5b:24:dd:df:f3:14:7e:61:cf:6a:28: 80:3d:b1:d2:e0:47:22:6d:1e:02:bc:3f:86:75:18:db:ff:2b: 0e:e0:cd:08:f3:a1:45:6a:1c:6e:53:1d:db:97:90:3a:d0:5e: 5f:45:16:80:03:ff:47:25:36:c8:82:72:a4:9d:28:e7:1a:35: e9:84:b4:68:30:06:2e:d0:37:a2:f2:f8:27:95:ce:f4:84:e7: ff:57:4a:74:52:a6:1f:81:c6:fa:7b:68:f7:73:6a:86:10:df: be:93:5e:82:12:77:dd:37:44:55:ca:dc:15:31:60:4a:86:84: 2a:ee:b5:3e:21:fe:da:07:bd:dc:b0:70:70:0b:cb:c5:8f:8e: 29:a5:a3:28:0e:85:00:27:9a:e0:d3:ab:95:a8:15:41:83:a9: 87:a2:49:55:53:19:36:5d:2c:a8:25:7c:c6:b7:18:4b:e0:95: 20:73:84:bb:34:6e:d2:bb:9a:75:b3:e9:5a:dd:0b:2c:a7:04: 8f:b5:88:42:d6:59:93:93:a3:4b:ce:82:db:32:ff:af:23:e2: 65:89:3e:90:8b:66:98:8e:e6:ee:5d:08:0a:4b:9d:ac:b3:d7: 51:c1:c3:56:19:93:60:ca:9d:fa:da:69:ab:f8:da:c2:a3:1a: d7:e2:ea:48 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fjzuHqZMqO8k1hLdJTObMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YTBmZmNhYjQ0YTZhYjc2Mjg1ZmQ4YjE1ZmJhOWFlMDQ3 MmMwMGEwHhcNMjYwMTAxMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2E5MTVmODIwNTU3ZTc0MWMyNzIxZDRjMmQ4MjNlYTYxM2RjYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Jj4LaNGxqaeeWrJ/wvkMTdJESFo ApqGPjJQTjsC96kDnSO+Vf1VuOLoTP/PYZt+h9kmiOZUM/VSP+xK1ER5iqYQmUuS dOitIA4gHUBK6M6EfBeJw+2CDrN10N+lTKflQQZSk9H1ZB4QqkENuOyvwt3MXGid FoV/D3M+qCFLLhFi4lUorgOWd7CRPlZtZBxi7SaEKe/Q1NfA1/XwGdoCp/lTeoWI 7IX0QWnZzCGtdzq/m1gCl9Jb+36EM860sUvyEb/QUkosYlu7amBRoNmjnAUs4zkJ Gk+WgsET+Xl1ZVQozNEwTYxe5MeolYnSU0qxrMfRewdUebOugTd2cmksVQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPOpFfggVX50HCch1MLYI+phPcp2MB8GA1UdIwQY MBaAFPag/8q0Smq3YoX9ixX7qa4EcsAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMt YWU0NjA5NDM4OWJhLzEvODZrVi1DQlZmblFjSnlIVXd0Z2o2bUU5eW5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMtYWU0NjA5NDM4OWJh LzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQhwAwQC wiYMMA0EAgACMAcDBQAqAzjAMA0GCSqGSIb3DQEBCwUAA4IBAQBkFX9466IOWyTd 3/MUfmHPaiiAPbHS4EcibR4CvD+GdRjb/ysO4M0I86FFahxuUx3bl5A60F5fRRaA A/9HJTbIgnKknSjnGjXphLRoMAYu0Dei8vgnlc70hOf/V0p0UqYfgcb6e2j3c2qG EN++k16CEnfdN0RVytwVMWBKhoQq7rU+If7aB73csHBwC8vFj44ppaMoDoUAJ5rg 06uVqBVBg6mHoklVUxk2XSyoJXzGtxhL4JUgc4S7NG7Su5p1s+la3QsspwSPtYhC 1lmTk6NLzoLbMv+vI+JliT6Qi2aYjubuXQgKS52ss9dRwcNWGZNgyp362mmr+NrC oxrX4upI -----END CERTIFICATE-----Generated at Mon Feb 9 22:25:08 2026 by rpki-client