This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/DcF4EXA1DH40O2Gur2tDFRiyLmI.roa File: DcF4EXA1DH40O2Gur2tDFRiyLmI.roa (raw, json) Hash identifier: QWh3tKlpjxXQZWrNQyG4IfuTceVp2rI45sJsjo7QbCM= Subject key identifier: 0D:C1:78:11:70:35:0C:7E:34:3B:61:AE:AF:6B:43:15:18:B2:2E:62 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019A55478AB33AC9766022A7D4E2370D7163 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/DcF4EXA1DH40O2Gur2tDFRiyLmI.roa Signing time: Wed 05 Nov 2025 18:29:03 +0000 ROA not before: Wed 05 Nov 2025 18:29:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 86.110.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:55:47:8a:b3:3a:c9:76:60:22:a7:d4:e2:37:0d:71:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Nov 5 18:29:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0dc1781170350c7e343b61aeaf6b431518b22e62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1b:c3:6f:51:28:3e:1e:39:44:40:ac:b7:df: e8:a0:19:9c:a5:3d:ba:40:a3:b6:4a:4c:39:4f:19: 1d:9e:34:61:66:d3:85:ce:bf:03:d1:84:be:80:ef: 87:ec:37:c1:b0:6c:3f:f1:76:bb:23:45:28:1e:ba: 6d:d6:89:43:be:06:cb:32:c1:b3:18:40:eb:cd:8d: 62:3e:27:95:33:6e:13:49:0d:f3:2a:03:c5:c4:e8: fb:15:99:2e:70:2f:4c:34:73:9b:d5:23:12:75:7d: 45:bc:90:d1:12:a4:70:15:4f:c3:5e:e3:df:3e:48: 2c:e1:6e:0e:1b:f6:86:a6:ae:3a:bc:89:e1:cf:7c: 7c:64:83:d5:6f:e7:74:57:16:b1:a1:e9:e6:15:f0: b2:bb:33:6b:20:d3:98:77:22:86:20:b6:38:88:38: 05:73:a5:46:d7:12:13:b7:35:8e:40:a2:c4:4a:41: 3a:3a:1d:d0:ab:b9:80:4e:3f:07:b5:10:05:ab:1a: 78:af:c0:ce:d6:fe:3a:58:b0:46:cc:fa:2d:5f:5b: d7:49:32:ad:13:d7:a1:83:1b:7b:77:c2:13:18:74: 17:f6:92:a4:2b:f3:b2:36:7f:df:92:17:49:18:3b: 6c:13:37:19:dc:7b:6b:fc:66:6e:1d:9f:f5:ba:df: 9b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C1:78:11:70:35:0C:7E:34:3B:61:AE:AF:6B:43:15:18:B2:2E:62 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/DcF4EXA1DH40O2Gur2tDFRiyLmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.63.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:b8:31:c4:23:78:1c:5a:e8:e3:a9:78:d1:5a:10:3c:88:2d: 27:3b:f6:17:73:c1:38:59:bd:b8:46:05:ee:7e:73:a1:8c:d9: 0d:85:9d:c7:74:2a:4b:65:41:0c:3f:b7:85:c7:06:35:44:21: ea:49:c4:31:27:3e:e2:e1:29:20:4d:2b:d2:0f:72:b0:11:f5: a5:b6:64:21:cd:7e:e6:8e:a0:cb:6a:ec:ae:78:ca:f6:5a:80: 3c:d5:87:d3:b0:dd:04:74:fc:64:95:29:15:83:52:db:07:1b: ab:a1:cd:f9:3c:33:28:d2:f7:0e:07:a1:e6:0f:28:6e:de:17: 19:d9:e7:b8:38:31:03:c0:99:93:60:87:f3:c9:82:73:b0:04: 2e:6b:1c:df:5c:50:7d:4b:6c:ec:4f:43:a1:38:6f:e8:09:f4: de:66:34:07:b7:a5:7f:ed:af:e9:40:e2:36:04:1a:c1:60:a0: d8:f6:c5:a1:f9:84:2c:14:70:9e:e5:4d:75:d8:8c:7b:21:be: fa:f5:3f:4f:83:98:85:1c:d4:38:dd:59:95:57:ca:a0:84:27: e4:46:bc:05:0a:c1:32:94:a0:5d:9f:38:a8:78:a0:d7:60:f9: 01:53:55:cd:d5:1e:1a:2b:07:6d:ff:50:81:7c:70:cf:7e:41: 81:b3:b0:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpVR4qzOsl2YCKn1OI3DXFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMTA1MTgyOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGMxNzgxMTcwMzUwYzdlMzQzYjYxYWVhZjZiNDMxNTE4YjIyZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxvDb1EoPh45RECst9/ooBmcpT26 QKO2Skw5TxkdnjRhZtOFzr8D0YS+gO+H7DfBsGw/8Xa7I0UoHrpt1olDvgbLMsGz GEDrzY1iPieVM24TSQ3zKgPFxOj7FZkucC9MNHOb1SMSdX1FvJDREqRwFU/DXuPf Pkgs4W4OG/aGpq46vInhz3x8ZIPVb+d0VxaxoenmFfCyuzNrINOYdyKGILY4iDgF c6VG1xITtzWOQKLESkE6Oh3Qq7mATj8HtRAFqxp4r8DO1v46WLBGzPotX1vXSTKt E9ehgxt7d8ITGHQX9pKkK/OyNn/fkhdJGDtsEzcZ3Htr/GZuHZ/1ut+bdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA3BeBFwNQx+NDthrq9rQxUYsi5iMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRGNGNEVYQTFESDQwTzJHdXIydERGUml5TG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4/MA0G CSqGSIb3DQEBCwUAA4IBAQBsuDHEI3gcWujjqXjRWhA8iC0nO/YXc8E4Wb24RgXu fnOhjNkNhZ3HdCpLZUEMP7eFxwY1RCHqScQxJz7i4SkgTSvSD3KwEfWltmQhzX7m jqDLauyueMr2WoA81YfTsN0EdPxklSkVg1LbBxuroc35PDMo0vcOB6HmDyhu3hcZ 2ee4ODEDwJmTYIfzyYJzsAQuaxzfXFB9S2zsT0OhOG/oCfTeZjQHt6V/7a/pQOI2 BBrBYKDY9sWh+YQsFHCe5U112Ix7Ib769T9Pg5iFHNQ43VmVV8qghCfkRrwFCsEy lKBdnzioeKDXYPkBU1XN1R4aKwdt/1CBfHDPfkGBs7D9 -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:31 2025 by rpki-client