This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/22SPH9Kn4UuhJDJeWUsULSj1wfk.roa File: 22SPH9Kn4UuhJDJeWUsULSj1wfk.roa (raw, json) Hash identifier: kUif3GPLDkHnCQM50oWOp3AQz4WltfWKqH9gIzLBLmk= Subject key identifier: DB:64:8F:1F:D2:A7:E1:4B:A1:24:32:5E:59:4B:14:2D:28:F5:C1:F9 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B8D8B080EAC2228B053EF98D5CF0FFC40 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/22SPH9Kn4UuhJDJeWUsULSj1wfk.roa Signing time: Mon 05 Jan 2026 09:44:17 +0000 ROA not before: Mon 05 Jan 2026 09:44:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 86.110.33.0/24 maxlen: 24 86.110.34.0/24 maxlen: 24 86.110.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:8b:08:0e:ac:22:28:b0:53:ef:98:d5:cf:0f:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 5 09:44:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db648f1fd2a7e14ba124325e594b142d28f5c1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:a1:91:3b:36:60:2a:19:82:23:d0:05:d6: 52:a4:68:ae:09:d1:c6:07:12:4e:49:0f:1d:5a:f4: bd:2a:03:95:34:ac:dd:34:1a:e0:1c:b0:e9:ec:7f: 45:60:fc:c3:dd:99:14:0c:b1:9e:8e:e1:16:2b:f9: 0a:63:f4:0d:8c:e6:59:d0:f5:fd:fa:f3:72:29:16: 9b:ae:86:55:87:22:c1:e5:dd:ad:83:f6:98:11:45: ff:9b:d3:40:45:bd:91:ed:24:24:13:e0:84:4f:02: a7:28:ed:c3:97:b7:ce:b6:04:4b:57:9f:84:7e:d1: 44:c3:15:96:25:0d:b9:88:23:33:34:e9:62:5f:cf: d5:9b:6f:ae:ca:78:14:5b:3a:29:7a:bc:48:9a:28: f2:ff:71:65:f3:47:c0:30:7f:f6:d1:27:28:6f:dd: 25:e5:ba:3f:8a:f5:b1:62:fa:40:50:69:bf:5a:06: df:30:ae:87:24:ba:cc:01:b4:2a:ef:bf:ba:cf:fd: 9e:e2:2e:11:1e:a0:b6:fc:4b:49:fb:26:99:f9:cd: ba:e4:8f:2f:bd:d2:17:82:42:76:ce:7e:4b:d7:73: f6:47:d9:6e:c8:e7:36:52:24:43:98:7f:11:eb:df: 54:bf:85:3f:4b:c7:6b:77:89:2a:5c:14:01:74:49: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:64:8F:1F:D2:A7:E1:4B:A1:24:32:5E:59:4B:14:2D:28:F5:C1:F9 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/22SPH9Kn4UuhJDJeWUsULSj1wfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.33.0-86.110.34.255 86.110.58.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:85:5a:c6:5d:b2:d5:e6:3b:28:f9:34:7b:4f:8d:a0:8b:81: 3b:b7:c4:4e:da:ba:e6:7b:d1:9f:e4:8c:27:12:94:df:65:03: 00:14:29:71:90:4b:89:71:1d:48:d0:37:5e:14:ac:62:36:6a: b2:83:ff:74:27:fa:4e:cd:8d:4f:d0:71:a9:53:aa:32:52:54: 62:5d:57:c6:b5:78:0f:57:b8:65:87:bf:66:3b:fc:96:a4:43: 46:91:bc:99:50:a4:19:b3:a5:9c:f0:2a:ee:f3:a9:15:a3:39: 72:37:11:7a:69:29:dc:00:80:b2:75:67:5c:ce:f6:97:80:69: 02:3f:d9:f5:b3:a7:bd:4f:db:03:1c:5f:5f:7b:b7:61:a4:a6: 48:70:78:bd:b4:a1:84:8c:2c:57:d2:14:b2:88:ec:5b:3c:a9: d4:11:30:31:e3:fd:40:bb:9c:bc:14:d0:3a:0e:39:8a:95:8f: 7e:b3:52:e1:41:66:27:37:49:4b:57:9e:8d:84:2d:4b:83:76: 11:95:45:01:23:b1:ed:b5:08:77:44:6f:4d:60:a1:65:8a:20: c2:9a:bf:ac:c5:19:d3:15:8c:46:0a:68:7c:e3:20:64:92:38: 8f:1f:c8:52:f4:34:32:14:f3:7c:15:02:63:8b:c8:73:59:d2: 82:2d:53:6a -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuNiwgOrCIosFPvmNXPD/xAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTA1MDk0NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjY0OGYxZmQyYTdlMTRiYTEyNDMyNWU1OTRiMTQyZDI4ZjVjMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOihkTs2YCoZgiPQBdZSpGiuCdHG BxJOSQ8dWvS9KgOVNKzdNBrgHLDp7H9FYPzD3ZkUDLGejuEWK/kKY/QNjOZZ0PX9 +vNyKRabroZVhyLB5d2tg/aYEUX/m9NARb2R7SQkE+CETwKnKO3Dl7fOtgRLV5+E ftFEwxWWJQ25iCMzNOliX8/Vm2+uyngUWzoperxImijy/3Fl80fAMH/20Scob90l 5bo/ivWxYvpAUGm/WgbfMK6HJLrMAbQq77+6z/2e4i4RHqC2/EtJ+yaZ+c265I8v vdIXgkJ2zn5L13P2R9luyOc2UiRDmH8R699Uv4U/S8drd4kqXBQBdEnosQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNtkjx/Sp+FLoSQyXllLFC0o9cH5MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvMjJTUEg5S240VXVoSkRKZVdVc1VMU2oxd2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABWbiED BABWbiIDBABWbjowDQYJKoZIhvcNAQELBQADggEBAI2FWsZdstXmOyj5NHtPjaCL gTu3xE7auuZ70Z/kjCcSlN9lAwAUKXGQS4lxHUjQN14UrGI2arKD/3Qn+k7NjU/Q calTqjJSVGJdV8a1eA9XuGWHv2Y7/JakQ0aRvJlQpBmzpZzwKu7zqRWjOXI3EXpp KdwAgLJ1Z1zO9peAaQI/2fWzp71P2wMcX197t2GkpkhweL20oYSMLFfSFLKI7Fs8 qdQRMDHj/UC7nLwU0DoOOYqVj36zUuFBZic3SUtXno2ELUuDdhGVRQEjse21CHdE b01goWWKIMKav6zFGdMVjEYKaHzjIGSSOI8fyFL0NDIU83wVAmOLyHNZ0oItU2o= -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:40 2026 by rpki-client