This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UrEDh6hvw8hbPuXz5C0d7RpFA2Y.roa File: UrEDh6hvw8hbPuXz5C0d7RpFA2Y.roa (raw, json) Hash identifier: QPMTalfou9LaFpwA/B5NGhDC6sC72kNZYa3gwVEFw+o= Subject key identifier: 52:B1:03:87:A8:6F:C3:C8:5B:3E:E5:F3:E4:2D:1D:ED:1A:45:03:66 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019BC63FCC120EB45C05CFBC3A996F218AA5 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UrEDh6hvw8hbPuXz5C0d7RpFA2Y.roa Signing time: Fri 16 Jan 2026 10:00:28 +0000 ROA not before: Fri 16 Jan 2026 10:00:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 86.110.44.0/24 maxlen: 24 86.110.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:3f:cc:12:0e:b4:5c:05:cf:bc:3a:99:6f:21:8a:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 16 10:00:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=52b10387a86fc3c85b3ee5f3e42d1ded1a450366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5d:d0:70:9f:57:30:79:ab:30:80:9f:b8:f6: 8f:9b:f8:96:65:a4:07:aa:36:0e:b5:7e:32:b3:3b: d4:64:de:ca:3c:e9:b9:3d:30:f7:bf:9e:0c:d2:4a: 0c:08:18:85:18:46:f0:f3:65:80:01:55:49:45:1c: 62:9d:98:ae:fb:3a:59:70:3e:cd:51:68:dd:46:33: a9:bb:7a:3a:b8:dd:f2:46:53:60:91:66:33:6c:66: 4c:9a:68:3e:1c:f2:a8:4c:c1:cb:b7:eb:1a:63:dc: 99:93:65:bb:2d:4a:ef:3d:af:9f:fc:83:cf:e3:ad: 56:3d:03:00:78:20:bb:a0:4b:43:47:ab:f6:1a:e3: 4f:48:3c:e2:68:93:09:78:ce:15:04:f4:f8:af:d4: e0:9b:66:db:4a:21:a4:a5:cb:3a:cc:d4:5f:76:9a: c2:3b:7c:1b:21:30:58:92:5f:96:15:21:80:f4:3a: 1e:2b:b8:5a:d1:2b:a2:51:7a:45:85:63:a9:31:9c: a4:a6:37:5c:91:03:95:a3:79:90:71:7e:4b:c8:a2: 75:52:05:a3:ca:fa:64:5d:46:97:4e:94:93:ec:35: 80:22:6c:80:c0:94:54:8b:2e:84:97:ca:19:fe:fe: 81:2c:a6:45:99:70:d0:09:5f:cc:ff:13:08:7d:36: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B1:03:87:A8:6F:C3:C8:5B:3E:E5:F3:E4:2D:1D:ED:1A:45:03:66 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/UrEDh6hvw8hbPuXz5C0d7RpFA2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.44.0/24 86.110.63.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:13:47:e2:4b:a6:f5:3f:90:c8:31:aa:6f:4a:12:8f:1b:eb: 08:9d:b5:62:8d:1f:e1:61:f8:a8:96:fe:c9:5a:c1:ea:10:99: 86:24:e9:47:d2:2e:fa:f8:75:b7:bf:43:b5:bf:c6:65:54:98: 12:d1:3b:d7:c2:a1:0d:86:41:1c:2e:90:01:60:07:81:10:f9: 64:8c:29:09:7a:46:f6:65:d3:fa:5f:b4:44:e2:1b:a8:4f:72: 88:7f:77:7a:44:1b:0c:37:b9:27:5b:c9:b7:89:5a:61:43:11: d0:6e:4b:0a:23:0f:a2:9b:86:03:4b:db:4d:8c:0b:ac:b8:45: 8f:29:b3:74:f4:d4:f5:6b:fd:23:f0:18:af:c1:b4:12:83:8b: 5a:5c:65:b1:98:39:44:26:3c:d5:33:df:ed:c0:60:37:ad:55: 3b:19:5c:4d:d6:dc:1d:08:e5:d1:21:51:20:be:c7:75:08:76: be:73:1e:cb:99:f7:22:ad:7b:06:2f:a2:93:8f:0f:fb:cf:21: 1a:be:20:94:6d:ff:8a:ad:87:cf:29:48:16:9a:6d:7a:f8:8a: bf:ec:eb:61:4f:4d:60:c6:87:51:b3:6e:36:02:cb:3f:80:ed: 84:3d:7b:24:1f:9a:92:18:dc:e9:1f:dd:9e:c1:97:53:e7:66: 40:10:e9:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvGP8wSDrRcBc+8OplvIYqlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTE2MTAwMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MmIxMDM4N2E4NmZjM2M4NWIzZWU1ZjNlNDJkMWRlZDFhNDUwMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl3QcJ9XMHmrMICfuPaPm/iWZaQH qjYOtX4yszvUZN7KPOm5PTD3v54M0koMCBiFGEbw82WAAVVJRRxinZiu+zpZcD7N UWjdRjOpu3o6uN3yRlNgkWYzbGZMmmg+HPKoTMHLt+saY9yZk2W7LUrvPa+f/IPP 461WPQMAeCC7oEtDR6v2GuNPSDziaJMJeM4VBPT4r9Tgm2bbSiGkpcs6zNRfdprC O3wbITBYkl+WFSGA9DoeK7ha0SuiUXpFhWOpMZykpjdckQOVo3mQcX5LyKJ1UgWj yvpkXUaXTpST7DWAImyAwJRUiy6El8oZ/v6BLKZFmXDQCV/M/xMIfTb3ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFKxA4eob8PIWz7l8+QtHe0aRQNmMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvVXJFRGg2aHZ3OGhiUHVYejVDMGQ3UnBGQTJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4sAwQA Vm4/MA0GCSqGSIb3DQEBCwUAA4IBAQCbE0fiS6b1P5DIMapvShKPG+sInbVijR/h Yfiolv7JWsHqEJmGJOlH0i76+HW3v0O1v8ZlVJgS0TvXwqENhkEcLpABYAeBEPlk jCkJekb2ZdP6X7RE4huoT3KIf3d6RBsMN7knW8m3iVphQxHQbksKIw+im4YDS9tN jAusuEWPKbN09NT1a/0j8BivwbQSg4taXGWxmDlEJjzVM9/twGA3rVU7GVxN1twd COXRIVEgvsd1CHa+cx7LmfcirXsGL6KTjw/7zyEaviCUbf+KrYfPKUgWmm16+Iq/ 7OthT01gxodRs242Ass/gO2EPXskH5qSGNzpH92ewZdT52ZAEOmo -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:34 2026 by rpki-client