This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa File: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (raw, json) Hash identifier: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY= Subject key identifier: F3:A1:72:6F:71:BB:49:46:32:CC:CE:AE:79:9B:96:2D:BF:F5:5E:EA Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf Certificate serial: 019B77C6BD83949A3A239CA6A0A68F5550C8 Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa Signing time: Thu 01 Jan 2026 04:17:51 +0000 ROA not before: Thu 01 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207083 IP address blocks: 185.169.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:bd:83:94:9a:3a:23:9c:a6:a0:a6:8f:55:50:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf Validity Not Before: Jan 1 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3a1726f71bb494632ccceae799b962dbff55eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:ee:60:51:e8:15:32:d4:ff:8b:f3:df:c6: 2b:19:ed:d1:c3:1b:f3:e0:4e:4a:1e:e4:ac:2f:05: 7a:5e:10:d0:18:53:c1:f7:52:1e:e5:90:25:5d:7c: 51:7c:9f:38:e6:be:2c:5f:e2:16:90:3c:2e:82:37: c1:1a:89:83:5d:9c:47:d4:d3:37:1d:17:22:2b:90: 70:5c:57:1a:e3:ab:78:3a:ef:f6:e0:76:56:db:0c: da:0c:41:1f:d7:56:ce:c7:e6:9d:c4:ee:e3:32:48: 0d:4c:d1:7f:99:72:68:03:e2:f2:fd:6a:a4:14:05: 01:63:85:a3:53:61:09:c7:f3:2e:9f:a9:34:b6:1d: 09:be:e4:f4:e5:6d:e7:dc:4a:46:85:b3:8e:4f:df: 91:5d:0a:b1:24:54:4c:af:e1:04:24:1a:02:06:70: 98:3a:87:75:0f:dd:79:0c:48:2b:29:56:cf:d0:ad: e3:d2:99:69:98:3e:ae:ed:5d:d3:27:ee:b5:a1:bd: 89:4e:3c:bf:4c:cb:af:72:31:e2:ae:f8:12:77:8d: a3:ae:46:97:9c:fd:45:3a:7e:56:13:43:4c:08:ea: 02:46:39:79:ea:2d:cd:65:51:d8:9b:f3:00:4b:0a: ce:07:2f:af:ec:05:18:53:b2:55:7a:9e:02:a9:03: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A1:72:6F:71:BB:49:46:32:CC:CE:AE:79:9B:96:2D:BF:F5:5E:EA X509v3 Authority Key Identifier: keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.79.0/24 Signature Algorithm: sha256WithRSAEncryption 36:72:19:c5:8c:bd:5a:37:5f:36:3a:e2:6b:1a:2c:1f:23:cc: d7:00:b7:20:d6:d7:c6:ca:af:6d:17:56:27:6e:03:08:75:60: ea:64:25:f5:15:53:9d:e5:27:02:83:f0:52:55:60:58:28:05: ea:d6:d0:5d:19:49:da:17:e9:3f:91:ca:77:0e:fe:c6:82:61: 40:8b:e8:85:29:b0:43:8b:ac:6a:10:94:89:a5:9c:cc:4b:2d: f4:85:28:5f:71:43:64:9a:58:bc:52:19:3d:f2:99:4c:0d:90: a1:1a:67:c4:02:db:35:50:ff:f5:1e:97:04:20:73:30:28:ff: 90:79:aa:9f:27:ee:98:fa:07:0b:1f:c2:58:e5:d6:b9:6d:2d: 37:96:25:b8:98:73:2e:b5:fd:bb:e4:f7:46:25:11:ed:af:40: 0d:b9:c8:29:0e:18:d2:fa:33:52:ff:95:8e:95:ed:67:fa:22: 5a:03:81:bd:27:cd:8f:ff:e4:b1:f6:f5:f7:dd:07:4c:2c:0c: fe:9b:27:ce:34:96:0e:26:0e:63:5a:8a:e0:26:64:71:d7:1c: 55:05:b9:81:a7:b7:ee:75:2f:6a:33:bf:13:e0:ef:db:cb:47: 61:27:3d:ce:ec:6a:89:ac:5c:66:ac:a6:29:2c:b9:39:66:02: 96:ed:a9:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xr2DlJo6I5ymoKaPVVDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYzdiNTFkYmYzNWFhNDIzOWFiZGFkNTVmOTY2OTQ1NjU5 NDAxY2YwHhcNMjYwMTAxMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2ExNzI2ZjcxYmI0OTQ2MzJjY2NlYWU3OTliOTYyZGJmZjU1ZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzXuYFHoFTLU/4vz38YrGe3Rwxvz 4E5KHuSsLwV6XhDQGFPB91Ie5ZAlXXxRfJ845r4sX+IWkDwugjfBGomDXZxH1NM3 HRciK5BwXFca46t4Ou/24HZW2wzaDEEf11bOx+adxO7jMkgNTNF/mXJoA+Ly/Wqk FAUBY4WjU2EJx/Mun6k0th0JvuT05W3n3EpGhbOOT9+RXQqxJFRMr+EEJBoCBnCY Ood1D915DEgrKVbP0K3j0plpmD6u7V3TJ+61ob2JTjy/TMuvcjHirvgSd42jrkaX nP1FOn5WE0NMCOoCRjl56i3NZVHYm/MASwrOBy+v7AUYU7JVep4CqQOJWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOhcm9xu0lGMszOrnmbli2/9V7qMB8GA1UdIwQY MBaAFCvHtR2/NapCOava1V+WaUVllAHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQt MmEzODEyNGJhZDhjLzEvODZGeWIzRzdTVVl5ek02dWVadVdMYl8xWHVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iMWI5MWMtYjUyYi00YmRmLWJhMGQtMmEzODEyNGJhZDhj LzEvSzhlMUhiODFxa0k1cTlyVlg1WnBSV1dVQWM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAualPMA0G CSqGSIb3DQEBCwUAA4IBAQA2chnFjL1aN182OuJrGiwfI8zXALcg1tfGyq9tF1Yn bgMIdWDqZCX1FVOd5ScCg/BSVWBYKAXq1tBdGUnaF+k/kcp3Dv7GgmFAi+iFKbBD i6xqEJSJpZzMSy30hShfcUNkmli8Uhk98plMDZChGmfEAts1UP/1HpcEIHMwKP+Q eaqfJ+6Y+gcLH8JY5da5bS03liW4mHMutf275PdGJRHtr0ANucgpDhjS+jNS/5WO le1n+iJaA4G9J82P/+Sx9vX33QdMLAz+myfONJYOJg5jWorgJmRx1xxVBbmBp7fu dS9qM78T4O/by0dhJz3O7GqJrFxmrKYpLLk5ZgKW7al0 -----END CERTIFICATE-----Generated at Wed Jan 21 03:29:22 2026 by rpki-client