This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/E4moO9CLoHXgoV6vrJXJQ_jxi14.roa File: E4moO9CLoHXgoV6vrJXJQ_jxi14.roa (raw, json) Hash identifier: FEDRVix5XZV3UfT/XzbBUvsMscccpO5HTNPW06itXAo= Subject key identifier: 13:89:A8:3B:D0:8B:A0:75:E0:A1:5E:AF:AC:95:C9:43:F8:F1:8B:5E Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0DA2681364051EE10E26A1821F5D Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/E4moO9CLoHXgoV6vrJXJQ_jxi14.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202635 IP address blocks: 86.110.32.0/24 maxlen: 24 86.110.35.0/24 maxlen: 24 86.110.38.0/24 maxlen: 24 86.110.39.0/24 maxlen: 24 86.110.43.0/24 maxlen: 24 86.110.45.0/24 maxlen: 24 185.158.176.0/22 maxlen: 24 185.193.60.0/22 maxlen: 24 185.244.100.0/22 maxlen: 24 2a13:ca40::/32 maxlen: 32 2a13:ca41::/32 maxlen: 32 2a13:ca42::/32 maxlen: 32 2a13:ca43::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0d:a2:68:13:64:05:1e:e1:0e:26:a1:82:1f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1389a83bd08ba075e0a15eafac95c943f8f18b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:40:9d:bf:a3:aa:ef:b5:b8:f7:68:29:f2: f2:fc:e5:d8:0f:0c:2f:86:87:99:65:fe:c6:38:59: e2:69:26:65:0d:7a:a3:b4:0f:9d:20:de:70:70:51: e9:b6:fb:08:88:70:6d:3f:2d:a1:76:28:04:44:e0: 7c:3a:c6:48:54:23:bf:e0:44:ba:92:5a:81:57:01: d7:d1:bd:4b:51:3f:45:46:10:b3:01:48:e6:2e:00: b5:b3:90:e5:04:fb:17:27:07:69:36:39:cb:e3:10: fe:08:88:73:e9:8e:3f:dc:42:a8:02:28:ca:3e:01: ec:42:97:0f:00:83:6a:67:b0:07:dc:6e:c0:36:b8: 13:8a:71:b6:ef:a3:63:1e:d5:57:16:30:08:74:30: 90:e0:f5:30:a2:d7:32:3f:b8:64:f4:9b:85:f5:1f: 87:8e:3c:8a:23:7f:0a:88:4c:17:52:a8:e7:87:51: 51:b8:f0:c1:b0:d7:aa:09:9c:8e:c0:7f:5c:9d:2d: fc:2d:76:04:2a:cd:73:e9:1b:b2:95:c7:17:bb:56: d0:be:b4:ee:6b:d0:c5:ff:83:92:4b:e6:92:3f:ac: db:70:a2:a2:55:f5:cf:93:2e:0d:1b:ee:9e:00:88: dc:af:f2:5c:2d:ec:96:fe:85:df:75:3e:ca:28:9d: 60:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:89:A8:3B:D0:8B:A0:75:E0:A1:5E:AF:AC:95:C9:43:F8:F1:8B:5E X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/E4moO9CLoHXgoV6vrJXJQ_jxi14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.32.0/24 86.110.35.0/24 86.110.38.0/23 86.110.43.0/24 86.110.45.0/24 185.158.176.0/22 185.193.60.0/22 185.244.100.0/22 IPv6: 2a13:ca40::/30 Signature Algorithm: sha256WithRSAEncryption 17:89:9c:a6:8d:93:cc:ca:f4:60:5b:76:1d:dc:89:bd:ed:b9: b0:ee:bd:9c:da:a1:e5:30:51:d2:a9:12:3f:fc:d5:94:19:a7: fd:f1:93:ee:6a:b3:de:1d:69:84:d3:25:3b:98:08:f7:49:36: c2:d9:dc:0c:aa:1e:32:20:eb:0c:67:ab:20:22:c9:20:c7:64: af:f2:ce:97:30:c6:9d:c7:0b:6c:77:d9:45:4f:79:5f:3d:7c: 98:e6:cb:29:e9:8f:1b:9b:af:49:e8:69:76:74:89:83:2e:04: e8:6f:02:10:d3:4c:72:40:92:e6:28:b5:48:b5:e9:55:62:79: 5d:a8:d0:24:42:8a:54:4f:bc:02:e4:f6:f2:0b:3b:42:9c:fc: aa:14:e7:ef:41:52:fb:e8:b7:8d:d5:7b:0d:29:36:30:55:a9: 73:04:4d:4b:65:7f:9d:19:60:d5:c5:1a:ac:87:9e:71:c1:cd: ec:31:9d:d2:a3:a4:26:48:a2:2a:e7:cd:5a:42:2d:50:fe:03: 19:14:b0:f3:65:f1:3b:f2:fd:9c:5e:92:27:27:cc:23:f5:bf: 9d:6e:86:1c:a7:84:97:f8:95:1c:73:b8:98:b4:02:16:f5:5e: fc:9d:e2:24:44:db:d4:0c:98:71:c4:67:11:9f:ad:09:13:4d: c6:d2:1e:49 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt57Q2iaBNkBR7hDiahgh9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzg5YTgzYmQwOGJhMDc1ZTBhMTVlYWZhYzk1Yzk0M2Y4ZjE4YjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwFAnb+jqu+1uPdoKfLy/OXYDwwv hoeZZf7GOFniaSZlDXqjtA+dIN5wcFHptvsIiHBtPy2hdigEROB8OsZIVCO/4ES6 klqBVwHX0b1LUT9FRhCzAUjmLgC1s5DlBPsXJwdpNjnL4xD+CIhz6Y4/3EKoAijK PgHsQpcPAINqZ7AH3G7ANrgTinG276NjHtVXFjAIdDCQ4PUwotcyP7hk9JuF9R+H jjyKI38KiEwXUqjnh1FRuPDBsNeqCZyOwH9cnS38LXYEKs1z6RuylccXu1bQvrTu a9DF/4OSS+aSP6zbcKKiVfXPky4NG+6eAIjcr/JcLeyW/oXfdT7KKJ1ggQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFBOJqDvQi6B14KFer6yVyUP48YteMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvRTRtb085Q0xvSFhnb1Y2dnJKWEpRX2p4aTE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQAVm4gAwQA Vm4jAwQBVm4mAwQAVm4rAwQAVm4tAwQCuZ6wAwQCucE8AwQCufRkMA0EAgACMAcD BQIqE8pAMA0GCSqGSIb3DQEBCwUAA4IBAQAXiZymjZPMyvRgW3Yd3Im97bmw7r2c 2qHlMFHSqRI//NWUGaf98ZPuarPeHWmE0yU7mAj3STbC2dwMqh4yIOsMZ6sgIskg x2Sv8s6XMMadxwtsd9lFT3lfPXyY5ssp6Y8bm69J6Gl2dImDLgTobwIQ00xyQJLm KLVItelVYnldqNAkQopUT7wC5PbyCztCnPyqFOfvQVL76LeN1XsNKTYwValzBE1L ZX+dGWDVxRqsh55xwc3sMZ3So6QmSKIq581aQi1Q/gMZFLDzZfE78v2cXpInJ8wj 9b+dboYcp4SX+JUcc7iYtAIW9V78neIkRNvUDJhxxGcRn60JE03G0h5J -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:17 2026 by rpki-client