This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa File: 0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa (raw, json) Hash identifier: 3Aof+qdhL+cCGNe+hdtvcBXfSgz4KVlL9GS8+nK3Uo0= Subject key identifier: D1:93:FC:4B:A8:AE:A1:68:7C:C6:0B:7B:E0:17:D7:F4:5B:22:59:41 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0F360C4701AD8C4A0A732B8F00CC Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211854 IP address blocks: 86.110.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0f:36:0c:47:01:ad:8c:4a:0a:73:2b:8f:00:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d193fc4ba8aea1687cc60b7be017d7f45b225941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:70:27:3f:a0:c7:5b:8a:ed:95:58:e8:81: e1:4e:55:62:a9:8f:66:ae:69:51:c6:c4:2b:53:4c: 6d:72:6f:60:06:dc:bf:16:0e:4c:ae:66:82:e0:ba: 3c:58:84:40:41:1b:19:4d:6b:6e:6c:59:34:c4:93: 8c:91:21:61:2f:1f:e4:9d:12:3e:b9:82:bc:64:8c: ad:7f:5d:15:3d:c9:de:3e:b6:18:b4:7e:b4:5b:91: c9:dc:70:8f:4e:fc:79:0f:70:09:44:82:56:d3:27: a0:f4:56:97:2b:b2:0f:11:08:0d:c5:dd:43:b6:6c: e5:1d:85:58:8a:5a:47:c0:34:26:dd:03:61:ad:3f: 8c:da:1a:9a:88:5b:ec:05:38:6b:bb:62:d3:0f:fb: bc:ec:1f:f7:40:70:11:d8:e2:d7:8e:69:d7:c0:96: 73:57:a8:24:37:d6:ba:52:f0:8c:01:30:5d:50:72: 6d:06:79:a4:8e:3b:57:25:3c:56:c0:e0:6f:17:57: 74:ce:1d:ea:a4:5e:b9:9c:27:ee:40:52:26:cd:63: 22:99:73:4a:a9:b7:32:e2:11:0b:93:fb:30:03:95: 60:ee:c8:03:26:8e:f9:ee:a3:42:67:33:2d:fb:4f: a6:66:1a:13:08:59:1c:b7:15:75:d7:51:aa:61:f4: 3b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:FC:4B:A8:AE:A1:68:7C:C6:0B:7B:E0:17:D7:F4:5B:22:59:41 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/0ZP8S6iuoWh8xgt74BfX9FsiWUE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.61.0/24 Signature Algorithm: sha256WithRSAEncryption 45:dd:dd:11:71:79:fa:3a:1a:77:3b:37:1a:e0:a6:d6:03:a2: b0:fc:50:3f:4d:41:cc:09:68:1c:66:72:52:46:19:2f:d6:25: 1a:99:05:a6:7a:76:83:f4:2f:0b:16:50:81:dc:37:10:1a:b3: 17:97:58:47:01:98:61:81:29:36:ed:00:53:14:71:dd:91:c0: 1c:a1:6e:e3:71:ae:ca:0e:5f:be:e6:8f:67:d1:ad:f8:2d:2b: 0f:ba:45:3e:89:25:ec:87:d9:7f:92:3f:53:12:a0:2d:05:15: 13:f6:6e:ab:2e:06:55:90:da:69:7f:7e:9b:95:09:7e:7a:35: 1e:19:9e:66:96:b7:b4:25:b4:11:4b:5c:52:55:a3:0f:76:14: 9c:84:72:69:3f:39:7e:04:92:c3:0e:ad:57:26:3d:2a:18:69: 56:a9:90:a8:fe:8e:55:cf:f7:10:dd:90:33:a7:67:b7:64:9a: fb:f6:44:e3:04:1c:f9:42:70:0a:f4:84:a7:66:73:8a:95:db: 2a:8c:e6:4c:65:46:b4:3b:0e:4c:5b:67:cc:d7:75:a7:df:e6: 7b:95:5f:42:15:5c:a3:4e:92:84:65:0f:c5:21:32:ea:fe:b9: 80:19:37:27:de:4e:e0:f6:18:a0:b7:6d:40:60:03:5d:a8:d6: d9:17:7c:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Q82DEcBrYxKCnMrjwDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTkzZmM0YmE4YWVhMTY4N2NjNjBiN2JlMDE3ZDdmNDViMjI1OTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArItwJz+gx1uK7ZVY6IHhTlViqY9m rmlRxsQrU0xtcm9gBty/Fg5MrmaC4Lo8WIRAQRsZTWtubFk0xJOMkSFhLx/knRI+ uYK8ZIytf10VPcnePrYYtH60W5HJ3HCPTvx5D3AJRIJW0yeg9FaXK7IPEQgNxd1D tmzlHYVYilpHwDQm3QNhrT+M2hqaiFvsBThru2LTD/u87B/3QHAR2OLXjmnXwJZz V6gkN9a6UvCMATBdUHJtBnmkjjtXJTxWwOBvF1d0zh3qpF65nCfuQFImzWMimXNK qbcy4hELk/swA5Vg7sgDJo757qNCZzMt+0+mZhoTCFkctxV111GqYfQ7/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGT/EuorqFofMYLe+AX1/RbIllBMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvMFpQOFM2aXVvV2g4eGd0NzRCZlg5RnNpV1VFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm49MA0G CSqGSIb3DQEBCwUAA4IBAQBF3d0RcXn6Ohp3Ozca4KbWA6Kw/FA/TUHMCWgcZnJS Rhkv1iUamQWmenaD9C8LFlCB3DcQGrMXl1hHAZhhgSk27QBTFHHdkcAcoW7jca7K Dl++5o9n0a34LSsPukU+iSXsh9l/kj9TEqAtBRUT9m6rLgZVkNppf36blQl+ejUe GZ5mlre0JbQRS1xSVaMPdhSchHJpPzl+BJLDDq1XJj0qGGlWqZCo/o5Vz/cQ3ZAz p2e3ZJr79kTjBBz5QnAK9ISnZnOKldsqjOZMZUa0Ow5MW2fM13Wn3+Z7lV9CFVyj TpKEZQ/FITLq/rmAGTcn3k7g9higt21AYANdqNbZF3wh -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client