This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa File: 3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa (raw, json) Hash identifier: 2zWvHVgpKzwH8CHKZuYT/C7gjaJxfSRA4wNx6aFsjNQ= Subject key identifier: DE:59:F5:C7:68:3C:39:4F:AD:5C:2F:83:AD:7C:FD:8D:6D:17:D6:05 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED08E317928B39CC4BF8A5FD0C7A42 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 86.110.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:08:e3:17:92:8b:39:cc:4b:f8:a5:fd:0c:7a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de59f5c7683c394fad5c2f83ad7cfd8d6d17d605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:02:28:97:65:9e:24:10:ee:d4:3a:6c:76:69: 04:35:06:d0:bc:8b:4f:8c:48:94:6e:92:6d:ae:46: 27:72:a7:b6:a8:b7:ee:cb:5b:f7:84:66:9b:4c:f1: e1:e5:f3:99:6b:f7:dd:d2:cb:80:42:bd:5e:bd:b8: 6d:ac:d0:04:5d:33:f6:2c:34:2d:0f:7e:9f:d9:c1: 90:37:5a:a5:62:69:c9:d8:0c:a0:d3:64:10:57:3a: 2b:8e:58:e0:33:ec:d5:f1:b4:9c:21:43:e2:73:23: 26:2c:29:e4:a1:53:58:8e:d4:64:06:76:e2:02:2c: 79:3c:2b:e4:82:bf:73:5b:21:0e:a9:d0:4a:ad:9d: 16:74:ac:e6:0b:98:01:27:52:6d:a8:cb:c7:5b:62: 89:e8:57:9d:ec:74:d2:e3:27:23:58:6f:82:ba:87: 18:15:64:c8:f5:72:84:6d:0d:41:5c:97:c1:1c:e5: c3:e9:66:41:82:83:7d:3b:46:3e:53:a4:ce:91:7f: d9:83:0c:ec:c5:c8:a8:87:7f:56:e5:13:35:58:1a: d9:67:92:e7:7c:c5:8b:60:50:06:0d:b3:6e:03:d9: 1f:a5:3a:93:42:2d:6e:b0:06:b4:dc:d2:a4:06:be: 7e:b7:36:ee:b3:28:78:f4:1c:a7:fd:30:dd:ff:87: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:59:F5:C7:68:3C:39:4F:AD:5C:2F:83:AD:7C:FD:8D:6D:17:D6:05 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/3ln1x2g8OU-tXC-DrXz9jW0X1gU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.60.0/24 Signature Algorithm: sha256WithRSAEncryption 49:37:93:1e:77:45:24:6d:01:ca:52:e3:8d:7d:3f:a5:18:8b: 64:60:93:99:eb:18:82:94:5c:a9:90:d2:b6:68:34:f8:92:f1: bd:b8:35:39:4d:dd:02:88:e5:fa:45:66:0c:3d:cf:91:27:5a: 61:93:8e:c4:4f:b8:cf:53:25:7d:00:40:c7:12:8a:73:96:ab: b3:74:5d:c8:2f:20:4c:91:08:fe:f0:37:58:07:4a:4c:7e:ad: af:20:9c:07:3e:fa:a7:75:03:11:71:ca:8d:9f:a1:82:7f:63: 0d:9b:97:5b:a3:d6:85:b4:aa:48:f9:22:dd:c5:33:dd:6e:db: 96:7e:d0:c2:3f:02:68:e2:a5:cc:1b:22:7d:77:9e:14:1f:ab: 3f:54:ed:39:03:24:d6:4d:08:df:23:37:2f:91:b4:f5:dc:f8: 7a:97:7a:42:18:3b:66:3e:ce:10:d5:ed:b3:06:12:33:4f:c5: 7f:95:85:5e:28:f4:29:c7:c0:a6:99:57:47:8c:8a:de:78:82: fb:d0:22:85:0c:b9:4d:11:c3:ce:ce:07:a4:9d:d2:a7:04:a9: b1:2d:f6:8c:f3:b8:6f:82:75:45:99:91:71:8d:c6:e7:56:68: 70:26:67:41:89:f9:86:63:aa:52:0f:00:f7:44:9b:58:e4:c2: 60:51:c1:bb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QjjF5KLOcxL+KX9DHpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTU5ZjVjNzY4M2MzOTRmYWQ1YzJmODNhZDdjZmQ4ZDZkMTdkNjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwIol2WeJBDu1DpsdmkENQbQvItP jEiUbpJtrkYncqe2qLfuy1v3hGabTPHh5fOZa/fd0suAQr1evbhtrNAEXTP2LDQt D36f2cGQN1qlYmnJ2Ayg02QQVzorjljgM+zV8bScIUPicyMmLCnkoVNYjtRkBnbi Aix5PCvkgr9zWyEOqdBKrZ0WdKzmC5gBJ1JtqMvHW2KJ6Fed7HTS4ycjWG+CuocY FWTI9XKEbQ1BXJfBHOXD6WZBgoN9O0Y+U6TOkX/Zgwzsxcioh39W5RM1WBrZZ5Ln fMWLYFAGDbNuA9kfpTqTQi1usAa03NKkBr5+tzbusyh49Byn/TDd/4d+TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN5Z9cdoPDlPrVwvg618/Y1tF9YFMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvM2xuMXgyZzhPVS10WEMtRHJYejlqVzBYMWdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm48MA0G CSqGSIb3DQEBCwUAA4IBAQBJN5Med0UkbQHKUuONfT+lGItkYJOZ6xiClFypkNK2 aDT4kvG9uDU5Td0CiOX6RWYMPc+RJ1phk47ET7jPUyV9AEDHEopzlquzdF3ILyBM kQj+8DdYB0pMfq2vIJwHPvqndQMRccqNn6GCf2MNm5dbo9aFtKpI+SLdxTPdbtuW ftDCPwJo4qXMGyJ9d54UH6s/VO05AyTWTQjfIzcvkbT13Ph6l3pCGDtmPs4Q1e2z BhIzT8V/lYVeKPQpx8CmmVdHjIreeIL70CKFDLlNEcPOzgekndKnBKmxLfaM87hv gnVFmZFxjcbnVmhwJmdBifmGY6pSDwD3RJtY5MJgUcG7 -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:22 2026 by rpki-client