This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/IU6sqSJ6F2MiSf9zhO7VOkBsYbo.roa File: IU6sqSJ6F2MiSf9zhO7VOkBsYbo.roa (raw, json) Hash identifier: xDuhG5k3COqjsQtFYv6XULPASeM/eKdDCyUmbyjzEd0= Subject key identifier: 21:4E:AC:A9:22:7A:17:63:22:49:FF:73:84:EE:D5:3A:40:6C:61:BA Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED09651195391537EB77CC631DAE60 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/IU6sqSJ6F2MiSf9zhO7VOkBsYbo.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 86.110.46.0/24 maxlen: 24 86.110.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:09:65:11:95:39:15:37:eb:77:cc:63:1d:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=214eaca9227a17632249ff7384eed53a406c61ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:65:98:f2:d3:b1:73:dd:11:c8:16:cf:15:f2: 1a:6a:a3:3a:1a:49:74:be:4a:c2:37:09:b4:0c:51: 2b:a4:27:49:ed:8a:2b:3e:74:c1:0d:49:3f:57:06: ae:d6:18:10:6e:3d:a1:20:d4:6c:24:9c:d1:74:2d: 8d:a2:6c:d2:bb:63:a4:13:9a:a7:63:85:b8:91:a7: f2:a5:64:5c:c1:06:70:49:d2:53:a4:f9:0d:92:b7: 63:36:bb:e3:63:32:ee:a4:9d:c8:24:bd:43:c2:a4: a3:7a:2d:42:5c:3f:14:ff:53:ed:3a:25:1f:25:c5: 3b:35:56:9e:9e:ea:81:fd:98:81:f4:b1:a8:d7:4e: d9:1f:f3:04:ac:86:7d:38:e0:87:68:5d:7d:c2:51: 44:dc:6e:6f:72:e6:84:52:3e:6e:0d:35:21:11:5c: e6:99:16:46:f0:fd:8b:ae:e5:16:04:1e:87:48:fd: b1:31:86:7b:0a:5c:46:6a:e0:c0:2f:f3:0a:03:c9: 76:d8:72:f0:df:d8:2a:50:42:d6:91:a2:34:c4:7e: ce:f1:20:42:73:a5:79:c0:2e:93:57:e5:71:9c:c0: fa:73:ed:e9:e8:d9:76:45:04:e6:4b:88:9f:c7:5c: 85:ce:4e:bb:cd:4f:35:04:73:9a:ac:58:fb:e1:2c: e6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:AC:A9:22:7A:17:63:22:49:FF:73:84:EE:D5:3A:40:6C:61:BA X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/IU6sqSJ6F2MiSf9zhO7VOkBsYbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.46.0/24 86.110.52.0/24 Signature Algorithm: sha256WithRSAEncryption 78:13:ac:7f:cb:3a:c4:46:f0:4d:8a:f5:f4:6c:71:79:f2:c1: ea:f1:2a:10:37:2c:e6:47:f4:44:1b:f9:b8:c5:6a:a6:38:38: c9:2d:7c:97:67:f5:a7:ba:30:e5:64:0d:fc:dd:2f:a7:cc:4e: 88:9c:a1:da:3e:e6:63:da:ee:a0:d8:22:2f:79:01:f9:fb:42: a4:7b:7a:e3:06:cb:23:8c:43:23:93:36:50:f5:a7:d3:ae:2b: 59:31:93:a6:97:2d:15:b2:75:81:2f:da:c4:c8:26:64:b3:cd: 43:6f:4e:ec:7c:9d:b1:07:97:59:b2:7f:4d:e9:e9:c7:ce:de: a2:e9:7a:f0:f6:fd:f6:b7:1b:d8:cb:a2:00:f4:46:8d:55:13: 07:fa:6a:ef:48:88:bd:32:99:9c:95:37:80:60:57:b7:b3:7b: 3d:98:a6:29:da:b0:93:fa:73:91:f6:b4:3b:47:19:7f:8c:df: 3a:03:f5:5c:3b:cb:4c:1e:22:cc:d7:f7:46:d0:06:38:ee:09: 66:f8:b8:9f:06:f6:66:ba:82:80:09:4d:e7:d0:e6:cd:ff:b6: 27:67:09:8b:ee:8b:17:77:09:61:4c:c7:d0:0d:fb:dc:97:d7: 6b:51:47:3f:fc:ec:dc:c3:57:1a:c0:ef:98:1c:30:56:30:7d: 34:a8:62:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57QllEZU5FTfrd8xjHa5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTRlYWNhOTIyN2ExNzYzMjI0OWZmNzM4NGVlZDUzYTQwNmM2MWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGWY8tOxc90RyBbPFfIaaqM6Gkl0 vkrCNwm0DFErpCdJ7YorPnTBDUk/Vwau1hgQbj2hINRsJJzRdC2NomzSu2OkE5qn Y4W4kafypWRcwQZwSdJTpPkNkrdjNrvjYzLupJ3IJL1DwqSjei1CXD8U/1PtOiUf JcU7NVaenuqB/ZiB9LGo107ZH/MErIZ9OOCHaF19wlFE3G5vcuaEUj5uDTUhEVzm mRZG8P2LruUWBB6HSP2xMYZ7ClxGauDAL/MKA8l22HLw39gqUELWkaI0xH7O8SBC c6V5wC6TV+VxnMD6c+3p6Nl2RQTmS4ifx1yFzk67zU81BHOarFj74SzmXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCFOrKkiehdjIkn/c4Tu1TpAbGG6MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvSVU2c3FTSjZGMk1pU2Y5emhPN1ZPa0JzWWJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4uAwQA Vm40MA0GCSqGSIb3DQEBCwUAA4IBAQB4E6x/yzrERvBNivX0bHF58sHq8SoQNyzm R/REG/m4xWqmODjJLXyXZ/WnujDlZA383S+nzE6InKHaPuZj2u6g2CIveQH5+0Kk e3rjBssjjEMjkzZQ9afTritZMZOmly0VsnWBL9rEyCZks81Db07sfJ2xB5dZsn9N 6enHzt6i6Xrw9v32txvYy6IA9EaNVRMH+mrvSIi9MpmclTeAYFe3s3s9mKYp2rCT +nOR9rQ7Rxl/jN86A/VcO8tMHiLM1/dG0AY47glm+LifBvZmuoKACU3n0ObN/7Yn ZwmL7osXdwlhTMfQDfvcl9drUUc//Ozcw1cawO+YHDBWMH00qGKX -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:08 2026 by rpki-client