This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/3sc6nhVLbwJ1z02F-PiOohjJ0J0.roa File: 3sc6nhVLbwJ1z02F-PiOohjJ0J0.roa (raw, json) Hash identifier: 0remMWTD7pdKNfkG6LLCexKquOrgh3mgrNIP1RZSi5k= Subject key identifier: DE:C7:3A:9E:15:4B:6F:02:75:CF:4D:85:F8:F8:8E:A2:18:C9:D0:9D Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019A91BC24F0E6FAA59464524DCD90E95543 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/3sc6nhVLbwJ1z02F-PiOohjJ0J0.roa Signing time: Mon 17 Nov 2025 12:13:37 +0000 ROA not before: Mon 17 Nov 2025 12:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 86.110.36.0/24 maxlen: 24 86.110.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:bc:24:f0:e6:fa:a5:94:64:52:4d:cd:90:e9:55:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Nov 17 12:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dec73a9e154b6f0275cf4d85f8f88ea218c9d09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:9f:bf:8a:30:d3:06:92:78:86:97:1f:6b: 5a:00:7c:7b:0b:c9:cd:fd:d4:ca:cc:9d:64:e6:ba: 25:ae:d0:7c:74:e7:5b:4a:1c:7b:01:4f:86:11:f3: b8:49:27:97:e9:3e:fe:dd:e0:3d:2f:63:7c:84:b6: 2f:df:2d:11:c2:0b:43:69:6b:9d:83:46:0d:5b:99: a7:e8:32:c1:4a:0f:4b:35:97:4e:4c:cd:14:be:d1: 70:86:1c:cb:75:2c:77:94:53:92:33:b5:3f:09:88: 73:01:e9:83:26:32:ee:47:45:13:2d:c8:a7:79:6f: 01:16:b3:a4:d5:3c:67:b4:1a:42:c1:85:d2:84:ee: bb:2b:74:c4:66:36:2a:4e:66:a8:f7:b6:a8:b4:8e: d7:34:74:55:bc:22:17:41:eb:b0:1f:f0:9c:98:06: 16:db:f5:d7:b1:87:1b:5a:10:b8:ac:05:af:13:02: 4d:e4:56:a3:7d:05:19:ce:bf:48:f6:68:91:c7:81: a2:58:4b:0b:87:19:0f:fe:0b:d2:c0:66:bc:12:b8: 0c:b0:e6:c6:4f:f9:46:fa:9c:08:61:54:dc:8a:e7: fb:e3:1a:d4:1c:cc:81:3b:c3:af:8f:fc:16:5a:f8: 9e:54:51:06:b6:ba:29:d5:6a:aa:98:82:ad:0f:db: e2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C7:3A:9E:15:4B:6F:02:75:CF:4D:85:F8:F8:8E:A2:18:C9:D0:9D X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/3sc6nhVLbwJ1z02F-PiOohjJ0J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.36.0/24 86.110.56.0/24 Signature Algorithm: sha256WithRSAEncryption 47:b0:69:f4:31:31:2f:51:50:b0:e7:a8:c4:ee:9c:0f:06:ce: bf:15:19:9b:31:c6:2e:9a:30:de:bd:7d:19:d4:3a:31:ab:1c: 8d:3f:a0:9b:ac:7c:0b:6d:69:21:8f:44:81:73:a3:b2:f4:13: 6b:d8:a8:f1:1a:20:33:0e:2b:a0:bf:fe:c0:26:31:9c:09:68: ba:ff:55:b8:d3:1e:62:3a:c8:f6:83:33:1c:f4:ef:df:8e:ec: 50:13:a1:fd:dc:66:9e:16:a2:eb:48:6c:f6:10:c3:66:7c:2c: 25:52:df:f6:7a:be:10:aa:58:58:f7:c6:e6:0e:38:d3:f2:03: eb:2e:79:c0:56:fa:1e:46:a0:dd:9e:db:10:cb:b6:47:e8:a0: 32:9b:b7:91:4d:ab:24:aa:85:2a:ba:c8:1c:b9:c4:41:64:91: 55:bb:69:09:da:8b:7f:90:2b:9f:6b:95:7b:0c:cc:ae:1d:f9: 21:93:f5:86:cd:56:cd:17:81:f6:42:11:f9:5c:4c:b2:1c:b9: 72:0d:d3:be:8d:58:10:f6:ea:27:fa:0e:49:91:05:01:da:15: 06:e6:98:7f:ad:a9:72:95:0c:88:3d:2b:6a:13:8c:18:04:a4: 92:e6:ba:ed:53:07:51:67:c8:26:31:b9:40:c3:0e:c0:bd:ee: 01:8a:83:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqRvCTw5vqllGRSTc2Q6VVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMTE3MTIxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWM3M2E5ZTE1NGI2ZjAyNzVjZjRkODVmOGY4OGVhMjE4YzlkMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJmfv4ow0waSeIaXH2taAHx7C8nN /dTKzJ1k5rolrtB8dOdbShx7AU+GEfO4SSeX6T7+3eA9L2N8hLYv3y0RwgtDaWud g0YNW5mn6DLBSg9LNZdOTM0UvtFwhhzLdSx3lFOSM7U/CYhzAemDJjLuR0UTLcin eW8BFrOk1TxntBpCwYXShO67K3TEZjYqTmao97aotI7XNHRVvCIXQeuwH/CcmAYW 2/XXsYcbWhC4rAWvEwJN5FajfQUZzr9I9miRx4GiWEsLhxkP/gvSwGa8ErgMsObG T/lG+pwIYVTciuf74xrUHMyBO8Ovj/wWWvieVFEGtrop1WqqmIKtD9viPQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN7HOp4VS28Cdc9Nhfj4jqIYydCdMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvM3NjNm5oVkxid0oxejAyRi1QaU9vaGpKMEowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4kAwQA Vm44MA0GCSqGSIb3DQEBCwUAA4IBAQBHsGn0MTEvUVCw56jE7pwPBs6/FRmbMcYu mjDevX0Z1DoxqxyNP6CbrHwLbWkhj0SBc6Oy9BNr2KjxGiAzDiugv/7AJjGcCWi6 /1W40x5iOsj2gzMc9O/fjuxQE6H93GaeFqLrSGz2EMNmfCwlUt/2er4QqlhY98bm DjjT8gPrLnnAVvoeRqDdntsQy7ZH6KAym7eRTaskqoUqusgcucRBZJFVu2kJ2ot/ kCufa5V7DMyuHfkhk/WGzVbNF4H2QhH5XEyyHLlyDdO+jVgQ9uon+g5JkQUB2hUG 5ph/ralylQyIPStqE4wYBKSS5rrtUwdRZ8gmMblAww7Ave4BioMs -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:11 2025 by rpki-client