This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/XPeFNku9EBkiqYLCgFVnzZlAius.roa File: XPeFNku9EBkiqYLCgFVnzZlAius.roa (raw, json) Hash identifier: 2tL0dZ3ZQfTY3OHXyQxi1rz4nTNFG7yFbNmMrWk6oAk= Subject key identifier: 5C:F7:85:36:4B:BD:10:19:22:A9:82:C2:80:55:67:CD:99:40:8A:EB Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B69A98BCDABE7B2A462AA2C3FB70E9DCB Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/XPeFNku9EBkiqYLCgFVnzZlAius.roa Signing time: Mon 29 Dec 2025 10:31:17 +0000 ROA not before: Mon 29 Dec 2025 10:31:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 86.110.34.0/24 maxlen: 24 86.110.51.0/24 maxlen: 24 86.110.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:a9:8b:cd:ab:e7:b2:a4:62:aa:2c:3f:b7:0e:9d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Dec 29 10:31:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5cf785364bbd101922a982c2805567cd99408aeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:22:17:a1:d4:04:ce:c9:ce:5c:34:c1:65: bc:63:94:89:15:77:f6:8b:f4:57:40:b7:58:3a:f8: ad:7c:43:fb:a7:05:43:74:9e:80:a8:f2:48:e8:ae: 20:c2:9a:c7:a6:ba:7e:27:72:c1:97:e0:43:76:f2: 37:c7:58:d6:74:fe:ad:b6:b1:04:eb:c8:eb:1b:4e: 55:f1:37:b1:b2:45:b2:e4:35:47:d6:af:50:38:0c: 97:65:cd:39:c6:89:3c:7a:d1:06:d9:fb:4c:b1:33: 0e:63:4a:13:d3:5e:f5:d5:a8:cb:c3:52:45:3d:71: f4:41:f7:6f:da:4a:f9:ea:84:af:29:ba:57:55:ee: 56:f4:40:3d:df:03:2c:f1:68:f7:94:a1:66:b2:74: 08:76:56:0b:3d:cf:77:ef:23:42:79:44:13:3c:c2: cb:f2:fd:19:c1:ee:f0:31:13:8d:a4:a2:2a:58:a5: 52:e4:d7:df:c2:5c:a5:a1:bd:26:a6:dc:d1:6e:f4: 69:d2:60:7f:70:90:4d:d2:15:87:e6:d3:78:61:98: ab:8a:50:20:0f:e9:c0:21:21:87:78:18:3b:34:c8: a6:73:7e:32:ab:f1:72:76:14:70:06:50:9b:64:59: 45:9f:96:f0:98:11:ee:bf:67:23:d5:9c:ad:6b:4b: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F7:85:36:4B:BD:10:19:22:A9:82:C2:80:55:67:CD:99:40:8A:EB X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/XPeFNku9EBkiqYLCgFVnzZlAius.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.34.0/24 86.110.51.0/24 86.110.58.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:39:53:0f:78:d7:0f:a4:8a:4e:b5:24:15:df:2a:02:dc:c2: f8:19:c3:4d:b2:62:b3:1e:b3:da:f7:c8:02:6c:61:12:a0:2c: 7b:e0:5a:73:9e:9a:9d:f1:32:27:c8:f2:58:d5:55:ec:10:2a: 06:2d:95:de:bf:51:06:cb:cd:34:45:21:d9:a5:b0:c1:46:9d: a6:43:02:95:4a:50:72:1d:e5:6c:28:01:40:aa:e8:35:b6:f0: 5c:46:7b:30:3b:c4:f3:5c:91:75:ec:d0:4f:5e:e4:d5:e7:27: 79:e2:e4:0f:c2:d8:b5:a2:3d:b1:f3:e6:cf:37:4b:32:8d:02: 9d:f4:b3:85:b8:51:5f:61:b4:49:3a:84:a3:60:c1:74:de:44: 6d:bf:18:8f:1d:06:a9:aa:42:e4:2b:a2:8f:7e:9b:e3:a3:a6: 02:4c:a3:83:57:09:e4:4e:fc:f6:38:22:57:fa:b0:9c:12:09: 41:84:a3:99:34:16:f6:26:61:e8:65:8a:8a:6f:6a:b2:4b:d1: a5:6c:08:d7:91:c6:ec:d3:32:d9:b5:b6:8c:91:57:d2:8b:95: 2a:43:c2:7b:23:7b:0a:e7:48:06:09:04:0f:21:3a:2b:dc:1b: e1:12:67:16:a6:20:c8:e7:46:21:a4:ae:a2:d7:cd:f6:05:ab: 0c:a9:65:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtpqYvNq+eypGKqLD+3Dp3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMjI5MTAzMTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Y2Y3ODUzNjRiYmQxMDE5MjJhOTgyYzI4MDU1NjdjZDk5NDA4YWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWkiF6HUBM7Jzlw0wWW8Y5SJFXf2 i/RXQLdYOvitfEP7pwVDdJ6AqPJI6K4gwprHprp+J3LBl+BDdvI3x1jWdP6ttrEE 68jrG05V8TexskWy5DVH1q9QOAyXZc05xok8etEG2ftMsTMOY0oT01711ajLw1JF PXH0Qfdv2kr56oSvKbpXVe5W9EA93wMs8Wj3lKFmsnQIdlYLPc937yNCeUQTPMLL 8v0Zwe7wMRONpKIqWKVS5Nffwlylob0mptzRbvRp0mB/cJBN0hWH5tN4YZirilAg D+nAISGHeBg7NMimc34yq/FydhRwBlCbZFlFn5bwmBHuv2cj1Zyta0tY4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFz3hTZLvRAZIqmCwoBVZ82ZQIrrMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvWFBlRk5rdTlFQmtpcVlMQ2dGVm56WmxBaXVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVm4iAwQA Vm4zAwQAVm46MA0GCSqGSIb3DQEBCwUAA4IBAQANOVMPeNcPpIpOtSQV3yoC3ML4 GcNNsmKzHrPa98gCbGESoCx74Fpznpqd8TInyPJY1VXsECoGLZXev1EGy800RSHZ pbDBRp2mQwKVSlByHeVsKAFAqug1tvBcRnswO8TzXJF17NBPXuTV5yd54uQPwti1 oj2x8+bPN0syjQKd9LOFuFFfYbRJOoSjYMF03kRtvxiPHQapqkLkK6KPfpvjo6YC TKODVwnkTvz2OCJX+rCcEglBhKOZNBb2JmHoZYqKb2qyS9GlbAjXkcbs0zLZtbaM kVfSi5UqQ8J7I3sK50gGCQQPITor3BvhEmcWpiDI50YhpK6i1832BasMqWWr -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:26 2025 by rpki-client