This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa File: 1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa (raw, json) Hash identifier: wO9W+0kJ3rqdKQX4KDV5BoK4htjNlrERtnZ8OUi4AyI= Subject key identifier: FB:3A:3E:BE:ED:C7:E4:13:D9:67:B9:32:6B:7C:FB:29:01:BE:3B:C3 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0AE76D8E2C8696934DE29D082691 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 86.110.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0a:e7:6d:8e:2c:86:96:93:4d:e2:9d:08:26:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3a3ebeedc7e413d967b9326b7cfb2901be3bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:40:8d:e8:c4:d6:31:78:2f:9c:93:53:a2:1e: 56:69:43:d9:50:df:24:b5:e5:a2:09:b2:d7:b5:b5: 25:46:11:2c:88:c9:67:ae:7e:9f:1c:5e:e6:c7:ce: ff:f6:34:ef:dc:7e:d0:ad:44:7f:73:9e:81:de:c2: 92:87:47:57:bc:e0:66:e4:c5:13:0f:3e:38:9f:d6: 74:24:5f:f3:da:27:bb:cd:61:0c:68:22:9a:63:3f: 84:98:e2:e1:ca:72:f5:eb:9a:80:05:cc:9b:71:ea: 74:93:02:64:99:a9:00:73:1c:c8:98:37:f2:cd:1d: 28:02:ab:d8:f8:8e:e4:68:49:41:9e:7e:c1:ad:d2: e6:82:98:ac:ab:6e:d1:47:07:bf:7f:a3:0d:94:c2: ed:72:70:6c:87:84:7d:98:29:90:45:9f:fa:8f:cf: 24:51:f2:ea:52:4f:bc:69:a0:db:37:fc:78:09:57: 14:0b:e6:f1:2c:19:c3:f5:b0:cc:17:b6:ee:fe:97: e9:0a:b3:1c:85:5e:65:77:16:ff:e7:b3:bf:71:f1: c8:3b:d3:c0:28:4f:ba:c0:19:91:c0:50:90:69:d4: 89:e3:fb:38:7d:7b:58:9c:dd:91:6c:5d:af:8a:f8: 95:79:ca:40:64:66:a4:23:c0:28:9f:55:25:04:82: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3A:3E:BE:ED:C7:E4:13:D9:67:B9:32:6B:7C:FB:29:01:BE:3B:C3 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1-zo-vu3H5BPZZ7kya3z7KQG-O8M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.62.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:71:a2:93:8c:c1:6a:ce:91:5b:3d:ee:96:90:d5:43:cf:25: fd:1d:99:06:bd:ac:0a:0c:97:c0:9e:71:10:74:6a:47:1a:b1: 94:04:3d:2e:38:9a:a0:99:da:84:40:57:ba:71:52:8e:a1:b3: 6c:b4:c9:a5:7f:2e:bd:55:92:b6:7e:5a:08:69:99:16:07:4f: b5:73:06:11:44:9a:da:10:bc:19:6d:f3:2c:7a:9a:7c:36:2e: e5:10:fd:3f:67:e0:9f:15:89:ef:17:4c:ad:9f:23:cb:80:ba: cc:50:34:a4:c9:24:df:31:dd:6b:e8:c1:f8:3d:ec:2e:fa:0c: 2c:ba:a5:6b:91:0a:11:39:a5:31:48:7f:16:4b:e9:d2:b3:95: 36:78:d6:16:b6:e9:35:83:cc:6c:3e:ba:f8:f6:99:48:8e:ca: 52:54:d4:a4:68:1e:a9:2c:c7:23:b2:9c:e8:47:b3:c5:a4:77: 61:2d:2a:a3:2b:f9:13:03:a6:64:2f:90:71:79:7e:ce:44:a7: 00:b6:fa:e5:18:7c:1e:d8:ba:db:a0:5c:c1:ec:fa:6d:ba:e6: a9:6a:7a:c6:c3:55:9d:84:57:58:bc:80:e8:0c:34:54:77:b3: 45:ef:5a:be:d0:40:3e:4b:8b:fc:11:c5:2e:ac:65:6a:f3:23: 72:da:08:83 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57QrnbY4shpaTTeKdCCaRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNhM2ViZWVkYzdlNDEzZDk2N2I5MzI2YjdjZmIyOTAxYmUzYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkCN6MTWMXgvnJNToh5WaUPZUN8k teWiCbLXtbUlRhEsiMlnrn6fHF7mx87/9jTv3H7QrUR/c56B3sKSh0dXvOBm5MUT Dz44n9Z0JF/z2ie7zWEMaCKaYz+EmOLhynL165qABcybcep0kwJkmakAcxzImDfy zR0oAqvY+I7kaElBnn7BrdLmgpisq27RRwe/f6MNlMLtcnBsh4R9mCmQRZ/6j88k UfLqUk+8aaDbN/x4CVcUC+bxLBnD9bDMF7bu/pfpCrMchV5ldxb/57O/cfHIO9PA KE+6wBmRwFCQadSJ4/s4fXtYnN2RbF2viviVecpAZGakI8Aon1UlBIL8pQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPs6Pr7tx+QT2We5Mmt8+ykBvjvDMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvMS16by12dTNINUJQWlo3a3lhM3o3S1FHLU84TS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmEvZTFhZDdhLTEyZTctNGZkMC1iNjFlLWQxYTc3NzJkYjA3 Ni8xL0Z3WjVkLV9SUzhpZnNOcTZBN3NQWUEtN0FZUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFZuPjAN BgkqhkiG9w0BAQsFAAOCAQEAXXGik4zBas6RWz3ulpDVQ88l/R2ZBr2sCgyXwJ5x EHRqRxqxlAQ9LjiaoJnahEBXunFSjqGzbLTJpX8uvVWStn5aCGmZFgdPtXMGEUSa 2hC8GW3zLHqafDYu5RD9P2fgnxWJ7xdMrZ8jy4C6zFA0pMkk3zHda+jB+D3sLvoM LLqla5EKETmlMUh/Fkvp0rOVNnjWFrbpNYPMbD66+PaZSI7KUlTUpGgeqSzHI7Kc 6EezxaR3YS0qoyv5EwOmZC+QcXl+zkSnALb65Rh8Hti626Bcwez6bbrmqWp6xsNV nYRXWLyA6Aw0VHezRe9avtBAPkuL/BHFLqxlavMjctoIgw== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:30 2026 by rpki-client