This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/6WfI7AreDwm37Fgy62Hm_HjVPIM.roa File: 6WfI7AreDwm37Fgy62Hm_HjVPIM.roa (raw, json) Hash identifier: G4TpNMLm1OunCQZoJ8h7rE+E9esfv1Zs5yi2Rv7QUx0= Subject key identifier: E9:67:C8:EC:0A:DE:0F:09:B7:EC:58:32:EB:61:E6:FC:78:D5:3C:83 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0C3A48CAAAFA9D877D05E5393099 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/6WfI7AreDwm37Fgy62Hm_HjVPIM.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 86.110.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0c:3a:48:ca:aa:fa:9d:87:7d:05:e5:39:30:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e967c8ec0ade0f09b7ec5832eb61e6fc78d53c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4b:4d:c6:31:e2:7e:b5:82:82:a9:5e:d5:37: 1e:0a:92:0d:92:48:92:1f:13:cd:e9:0b:4c:da:1f: 78:7a:54:25:95:7a:ab:e3:ea:a4:74:b4:d1:ff:1f: 4a:50:c5:fa:19:de:d4:f8:8c:ca:b6:d9:75:9e:81: f2:51:8c:1d:87:b1:84:b3:35:c7:7d:98:b4:22:2c: 2a:3d:dd:5c:63:1d:37:78:ca:b3:80:5f:fa:91:4f: 9f:4b:c9:be:47:20:4c:04:09:ea:92:ef:d0:79:17: 72:75:70:cf:f6:27:1f:26:ba:48:9c:62:7b:12:6a: 83:9a:9e:12:0e:e1:14:4d:08:97:f6:a4:de:eb:e0: 6b:0a:d6:6d:45:13:71:36:3f:05:6c:69:f1:20:35: 54:da:24:73:b6:b1:48:c5:a9:ec:ce:81:c7:26:a3: 15:7d:3a:8a:ad:57:60:38:6f:40:f0:24:a0:03:c3: 8c:8f:47:ab:bc:9b:3e:90:94:e0:40:28:4a:a5:a8: 4d:2f:bf:c2:e4:94:15:49:11:3c:2a:a3:95:a1:a9: 2d:d1:c8:61:ec:0e:b7:22:75:3a:fc:4c:f2:ea:7a: 86:97:73:80:66:2c:d1:bd:da:b3:4f:1f:cb:12:6f: 0d:11:47:63:ad:1a:93:b1:92:ce:e4:ca:5d:8a:ba: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:67:C8:EC:0A:DE:0F:09:B7:EC:58:32:EB:61:E6:FC:78:D5:3C:83 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/6WfI7AreDwm37Fgy62Hm_HjVPIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.53.0/24 Signature Algorithm: sha256WithRSAEncryption b5:d9:ea:d1:e3:8b:60:a1:8d:34:15:92:7e:12:63:27:a1:12: 23:24:a9:f4:79:82:68:3d:93:80:06:30:4c:a0:29:b4:d7:eb: 00:75:9b:8d:bf:0f:db:15:1a:0a:d6:e4:41:95:e0:15:37:b3: 54:56:9f:51:48:70:a4:aa:e8:a6:01:46:0b:27:0e:eb:96:2a: 9a:23:9c:c0:1e:52:0c:67:04:85:91:b4:d6:22:5f:0b:5d:03: c4:94:34:f1:65:16:fd:74:2a:1a:55:ed:37:11:5e:5e:a1:c7: f3:40:1b:e0:07:ab:d4:a5:d9:85:59:e5:7c:5e:ac:37:62:f9: 1c:e9:0d:4c:8a:0c:a4:7b:bf:b1:1c:5a:8e:25:66:f3:26:47: 35:13:4b:9a:3f:03:68:8d:44:3d:c6:22:ae:e8:38:60:a4:b1: 7f:a0:6c:47:51:39:24:cc:3e:eb:af:87:a7:0f:04:87:fd:ad: d6:f9:67:56:1a:5b:08:82:3b:11:7f:5b:88:da:8e:e4:06:2b: ab:b6:52:af:59:7e:04:b4:85:67:82:fc:11:53:78:c9:cb:97: b3:3a:90:91:93:f5:64:c6:4d:2a:cd:0f:36:73:67:0c:e5:09: 52:00:be:7e:fa:44:76:e6:b2:33:4e:fa:b9:4f:e6:f7:0e:ae: 0f:10:99:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Qw6SMqq+p2HfQXlOTCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTY3YzhlYzBhZGUwZjA5YjdlYzU4MzJlYjYxZTZmYzc4ZDUzYzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60tNxjHifrWCgqle1TceCpINkkiS HxPN6QtM2h94elQllXqr4+qkdLTR/x9KUMX6Gd7U+IzKttl1noHyUYwdh7GEszXH fZi0IiwqPd1cYx03eMqzgF/6kU+fS8m+RyBMBAnqku/QeRdydXDP9icfJrpInGJ7 EmqDmp4SDuEUTQiX9qTe6+BrCtZtRRNxNj8FbGnxIDVU2iRztrFIxanszoHHJqMV fTqKrVdgOG9A8CSgA8OMj0ervJs+kJTgQChKpahNL7/C5JQVSRE8KqOVoakt0chh 7A63InU6/Ezy6nqGl3OAZizRvdqzTx/LEm8NEUdjrRqTsZLO5Mpdirr2TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOlnyOwK3g8Jt+xYMuth5vx41TyDMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvNldmSTdBcmVEd20zN0ZneTYySG1fSGpWUElNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm41MA0G CSqGSIb3DQEBCwUAA4IBAQC12erR44tgoY00FZJ+EmMnoRIjJKn0eYJoPZOABjBM oCm01+sAdZuNvw/bFRoK1uRBleAVN7NUVp9RSHCkquimAUYLJw7rliqaI5zAHlIM ZwSFkbTWIl8LXQPElDTxZRb9dCoaVe03EV5eocfzQBvgB6vUpdmFWeV8Xqw3Yvkc 6Q1Migyke7+xHFqOJWbzJkc1E0uaPwNojUQ9xiKu6DhgpLF/oGxHUTkkzD7rr4en DwSH/a3W+WdWGlsIgjsRf1uI2o7kBiurtlKvWX4EtIVngvwRU3jJy5ezOpCRk/Vk xk0qzQ82c2cM5QlSAL5++kR25rIzTvq5T+b3Dq4PEJkR -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:53 2026 by rpki-client