This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/O54_4ra4X-58spPAHkZ96hK7Qd4.roa File: O54_4ra4X-58spPAHkZ96hK7Qd4.roa (raw, json) Hash identifier: XMs23QJlM6k+FT4zVzoAiwVW1XAJLfr2hocnSVKE0hM= Subject key identifier: 3B:9E:3F:E2:B6:B8:5F:EE:7C:B2:93:C0:1E:46:7D:EA:12:BB:41:DE Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B8D8B093066327015FCEC24C937E603D6 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/O54_4ra4X-58spPAHkZ96hK7Qd4.roa Signing time: Mon 05 Jan 2026 09:44:17 +0000 ROA not before: Mon 05 Jan 2026 09:44:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202827 IP address blocks: 86.110.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:8b:09:30:66:32:70:15:fc:ec:24:c9:37:e6:03:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 5 09:44:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b9e3fe2b6b85fee7cb293c01e467dea12bb41de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:16:05:00:56:d2:c2:4f:01:cd:b3:ae:d3:3d: e5:b4:78:76:30:be:c8:a1:7b:ab:c1:96:9e:85:2f: af:6a:2b:9e:69:ae:dd:35:c7:30:1b:61:9d:81:cc: 80:7c:66:c2:0e:2d:c6:12:04:9b:1e:f5:4f:25:38: 42:c5:a8:eb:28:aa:0e:e1:72:f5:18:81:d7:aa:50: a2:1c:d6:92:99:92:55:73:a3:8e:d2:77:1b:39:63: 3f:52:ff:ab:01:4b:10:16:2d:c4:07:e9:59:b7:64: 58:18:b8:1b:f3:8d:09:2c:fd:03:f7:4a:90:fc:7c: 87:84:23:c7:ab:19:67:b6:65:f8:ca:55:fe:4e:73: f0:c1:ec:03:fa:c5:3e:7b:df:24:37:07:79:0e:ee: 1c:f1:92:c2:c8:2e:1b:b2:0e:6e:a4:a6:19:10:49: d3:9b:4c:9d:15:4c:a4:5f:7b:9c:3e:76:22:bf:36: 46:61:37:6d:b0:5f:37:9c:98:0a:e9:7d:b3:7f:00: 3e:95:ae:57:3b:33:c7:08:28:55:0a:65:52:f0:2d: bc:2c:ef:41:53:0c:30:54:d0:19:95:0a:68:2b:bb: 22:24:45:23:47:c1:21:44:80:32:3c:e7:08:c2:6e: 2f:01:85:c1:ed:e0:1d:0a:bd:2b:42:b0:90:34:51: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9E:3F:E2:B6:B8:5F:EE:7C:B2:93:C0:1E:46:7D:EA:12:BB:41:DE X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/O54_4ra4X-58spPAHkZ96hK7Qd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.51.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:29:11:d8:ce:2a:06:e5:de:e8:9e:a9:94:04:21:5d:7f:31: b7:5e:16:31:57:b7:a8:3f:9d:27:eb:93:86:09:89:78:25:41: eb:34:21:ff:5d:49:62:33:c9:f4:48:03:e7:32:f9:b5:24:da: 69:88:73:fb:bd:d9:87:6e:b4:28:04:a0:90:0d:57:32:ad:a2: b3:e6:64:62:d4:41:39:75:a3:14:37:37:44:c9:cd:f9:84:13: 4c:8a:d1:ad:31:3e:b7:95:c9:5c:82:63:7e:56:18:14:14:01: 65:87:80:ca:d4:3c:ff:45:c6:20:49:36:3e:a1:72:e3:d6:a7: 32:fd:5b:b6:04:3e:d5:a1:72:29:33:5b:75:25:f9:bd:43:9d: 46:5b:07:d6:8f:2c:a2:a8:7e:29:e7:dc:11:0f:6e:4d:08:21: c2:27:1d:75:79:81:a9:16:31:22:4f:29:7e:73:47:cc:b0:db: 34:9b:eb:fd:e1:16:55:45:3f:c7:8b:f2:8a:97:82:7e:47:f7: 7e:e5:02:15:a5:c8:45:45:2b:6d:60:61:60:c1:dc:53:a9:82: b0:83:69:0d:a5:f7:29:d1:4a:a9:94:dc:15:c5:97:b3:b9:51: 41:ed:63:06:7c:f1:16:88:62:49:f8:c8:1e:65:1f:d9:cc:8c: 6f:72:b2:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuNiwkwZjJwFfzsJMk35gPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTA1MDk0NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjllM2ZlMmI2Yjg1ZmVlN2NiMjkzYzAxZTQ2N2RlYTEyYmI0MWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxYFAFbSwk8BzbOu0z3ltHh2ML7I oXurwZaehS+vaiueaa7dNccwG2GdgcyAfGbCDi3GEgSbHvVPJThCxajrKKoO4XL1 GIHXqlCiHNaSmZJVc6OO0ncbOWM/Uv+rAUsQFi3EB+lZt2RYGLgb840JLP0D90qQ /HyHhCPHqxlntmX4ylX+TnPwwewD+sU+e98kNwd5Du4c8ZLCyC4bsg5upKYZEEnT m0ydFUykX3ucPnYivzZGYTdtsF83nJgK6X2zfwA+la5XOzPHCChVCmVS8C28LO9B UwwwVNAZlQpoK7siJEUjR8EhRIAyPOcIwm4vAYXB7eAdCr0rQrCQNFHYFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDueP+K2uF/ufLKTwB5GfeoSu0HeMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvTzU0XzRyYTRYLTU4c3BQQUhrWjk2aEs3UWQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4zMA0G CSqGSIb3DQEBCwUAA4IBAQAcKRHYzioG5d7onqmUBCFdfzG3XhYxV7eoP50n65OG CYl4JUHrNCH/XUliM8n0SAPnMvm1JNppiHP7vdmHbrQoBKCQDVcyraKz5mRi1EE5 daMUNzdEyc35hBNMitGtMT63lclcgmN+VhgUFAFlh4DK1Dz/RcYgSTY+oXLj1qcy /Vu2BD7VoXIpM1t1Jfm9Q51GWwfWjyyiqH4p59wRD25NCCHCJx11eYGpFjEiTyl+ c0fMsNs0m+v94RZVRT/Hi/KKl4J+R/d+5QIVpchFRSttYGFgwdxTqYKwg2kNpfcp 0UqplNwVxZezuVFB7WMGfPEWiGJJ+MgeZR/ZzIxvcrIj -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:33 2026 by rpki-client