This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/_w77mxnXYMzjVPAP0_cpV98KsaE.roa File: _w77mxnXYMzjVPAP0_cpV98KsaE.roa (raw, json) Hash identifier: 32DhWPOHAuWUTGvH/e9uUEVHq8FhbwALLmQiYJ+C/yk= Subject key identifier: FF:0E:FB:9B:19:D7:60:CC:E3:54:F0:0F:D3:F7:29:57:DF:0A:B1:A1 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B0C4A39DCFA3AA8C262F538570DA43DD7 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/_w77mxnXYMzjVPAP0_cpV98KsaE.roa Signing time: Thu 11 Dec 2025 07:22:29 +0000 ROA not before: Thu 11 Dec 2025 07:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 86.110.34.0/24 maxlen: 24 86.110.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:4a:39:dc:fa:3a:a8:c2:62:f5:38:57:0d:a4:3d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Dec 11 07:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ff0efb9b19d760cce354f00fd3f72957df0ab1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:0b:61:bf:4e:77:1e:f0:0f:21:ec:08:db: 78:90:96:7c:1a:e0:f8:61:1c:29:5d:e8:b6:94:c2: 2d:e3:d0:8e:ee:bf:11:cd:2a:01:72:99:33:c5:71: c0:2f:bb:2d:fe:9b:fb:b9:6f:a9:8b:24:94:66:ee: 7f:29:a9:23:5a:ef:e9:37:66:20:5e:71:1c:d3:51: 71:2c:ba:51:c5:68:f3:f6:24:3d:71:f1:a9:15:86: fb:ee:fd:53:4a:75:2e:b8:04:16:04:10:4d:b3:3b: 58:4a:37:82:35:dd:3f:40:2c:2c:bc:d0:b0:50:45: 93:f7:d4:91:06:c1:00:45:9c:1a:fa:65:3e:d5:61: 51:54:72:fb:5c:76:90:fb:33:73:b5:5e:b8:77:ff: 35:6b:97:8f:00:67:1c:7b:f9:38:e1:b2:bc:43:6c: e2:99:e2:9c:58:2a:8a:7b:b3:ec:08:1a:99:73:0e: 22:77:7a:a1:8b:00:38:88:d3:48:e4:ad:e3:80:f0: 16:ac:24:48:0e:bc:4c:bd:ee:73:b7:52:96:12:2c: e2:06:61:02:4d:d7:a5:c4:66:83:e3:b7:19:97:85: 64:78:c0:1f:e8:59:33:f4:38:87:a0:78:af:aa:2e: d0:2e:b5:01:56:95:25:7e:c0:a4:e6:bc:6a:f9:ce: 9f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0E:FB:9B:19:D7:60:CC:E3:54:F0:0F:D3:F7:29:57:DF:0A:B1:A1 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/_w77mxnXYMzjVPAP0_cpV98KsaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.34.0/24 86.110.58.0/24 Signature Algorithm: sha256WithRSAEncryption 83:c2:5f:28:da:18:82:cf:a4:d2:4d:48:14:b4:2d:d1:fa:3f: 00:b3:7a:36:b1:f4:ad:c2:a1:5f:9a:13:17:91:62:56:85:6d: d2:c0:f2:c9:d4:e5:fa:1b:6c:ff:b2:02:3b:5f:8f:32:e3:10: cd:98:64:de:fb:5c:9d:62:74:78:8b:2d:7d:20:15:62:a8:53: d2:0b:02:67:51:6f:65:cb:16:94:e5:4c:a1:e5:10:41:60:85: 1d:04:23:aa:c5:41:12:92:69:b8:c7:27:85:f6:db:b7:62:ca: f6:8d:16:3c:f3:f4:ae:c3:73:08:dd:60:6d:2c:42:17:02:66: d0:c4:30:da:e9:b5:b6:7f:d4:7d:09:12:05:8a:fb:cc:20:b9: 04:ce:a4:99:b7:f5:52:79:d6:a2:bc:85:06:da:85:fd:18:07: 64:ee:5c:51:19:a5:a5:fc:d1:6a:5e:3f:30:a9:7d:9c:b0:40: 13:2e:21:9f:6a:29:1b:5f:62:63:df:c1:cd:dd:71:be:39:df: 23:d6:6c:d6:c3:53:c8:b2:5e:e9:50:6a:93:34:9a:59:28:3e: d3:a3:9d:ab:fb:29:f2:37:63:40:f6:e8:44:b8:e7:d4:97:ab: b9:0f:cb:50:e6:7a:b0:bb:4f:b6:64:60:28:b1:0b:96:b4:ce: 4f:ed:f8:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsMSjnc+jqowmL1OFcNpD3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMjExMDcyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjBlZmI5YjE5ZDc2MGNjZTM1NGYwMGZkM2Y3Mjk1N2RmMGFiMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi4LYb9Odx7wDyHsCNt4kJZ8GuD4 YRwpXei2lMIt49CO7r8RzSoBcpkzxXHAL7st/pv7uW+piySUZu5/KakjWu/pN2Yg XnEc01FxLLpRxWjz9iQ9cfGpFYb77v1TSnUuuAQWBBBNsztYSjeCNd0/QCwsvNCw UEWT99SRBsEARZwa+mU+1WFRVHL7XHaQ+zNztV64d/81a5ePAGcce/k44bK8Q2zi meKcWCqKe7PsCBqZcw4id3qhiwA4iNNI5K3jgPAWrCRIDrxMve5zt1KWEiziBmEC TdelxGaD47cZl4VkeMAf6Fkz9DiHoHivqi7QLrUBVpUlfsCk5rxq+c6fIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP8O+5sZ12DM41TwD9P3KVffCrGhMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvX3c3N214blhZTXpqVlBBUDBfY3BWOThLc2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4iAwQA Vm46MA0GCSqGSIb3DQEBCwUAA4IBAQCDwl8o2hiCz6TSTUgUtC3R+j8As3o2sfSt wqFfmhMXkWJWhW3SwPLJ1OX6G2z/sgI7X48y4xDNmGTe+1ydYnR4iy19IBViqFPS CwJnUW9lyxaU5Uyh5RBBYIUdBCOqxUESkmm4xyeF9tu3Ysr2jRY88/Suw3MI3WBt LEIXAmbQxDDa6bW2f9R9CRIFivvMILkEzqSZt/VSedaivIUG2oX9GAdk7lxRGaWl /NFqXj8wqX2csEATLiGfaikbX2Jj38HN3XG+Od8j1mzWw1PIsl7pUGqTNJpZKD7T o52r+ynyN2NA9uhEuOfUl6u5D8tQ5nqwu0+2ZGAosQuWtM5P7fhY -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:02 2025 by rpki-client