This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bCOP39p472Lk-lkmW7HPI2seXtc.roa File: bCOP39p472Lk-lkmW7HPI2seXtc.roa (raw, json) Hash identifier: LFvAsIyeBJmUq7QEzxWZPznh8Eot8p72RV5zfPuvMYU= Subject key identifier: 6C:23:8F:DF:DA:78:EF:62:E4:FA:59:26:5B:B1:CF:23:6B:1E:5E:D7 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED0DD19272DF00C90CA7E69731BE16 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bCOP39p472Lk-lkmW7HPI2seXtc.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 86.110.40.0/24 maxlen: 24 86.110.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0d:d1:92:72:df:00:c9:0c:a7:e6:97:31:be:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c238fdfda78ef62e4fa59265bb1cf236b1e5ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:a7:25:15:f7:27:3b:5a:4b:9f:c2:86:06: ae:6c:0e:cb:58:24:3a:f3:d1:0d:d6:81:29:f5:62: 63:28:e2:12:fe:c1:7f:6d:57:9a:be:3d:5e:72:6c: fc:ae:e3:00:d5:2a:70:9b:4b:ba:e9:0d:a9:70:cc: 04:02:d3:af:e3:d0:b8:d5:87:c6:04:18:85:30:fb: d3:a7:73:23:92:ac:2c:63:fe:af:c7:75:1d:54:aa: e0:aa:5c:b1:e5:01:da:b5:63:b3:03:16:50:7c:48: cb:02:51:28:ce:dc:ec:e9:54:be:24:83:10:6c:be: e0:8d:1c:15:19:ee:36:e9:59:d7:46:87:c0:bd:46: b8:30:0f:8b:1b:f3:e9:0f:89:9c:65:03:7c:76:1a: c2:78:a5:b0:5d:92:20:bd:e1:4d:16:90:70:1b:42: 1f:f3:b5:66:fd:44:69:c6:0f:83:ad:92:b9:1b:3c: 44:5b:0e:2a:be:67:ce:ec:40:9c:f9:1e:46:49:f0: 3a:5e:08:95:70:9b:63:77:87:8a:c5:40:36:fd:9d: 6f:09:8c:c5:00:0e:95:28:74:ec:1a:1a:0c:0a:25: f3:fd:62:d8:3c:e6:6f:d9:82:9d:e0:a9:1d:f6:bc: be:a7:d5:02:d3:05:fb:05:4f:09:ee:2a:39:61:64: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:23:8F:DF:DA:78:EF:62:E4:FA:59:26:5B:B1:CF:23:6B:1E:5E:D7 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/bCOP39p472Lk-lkmW7HPI2seXtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.40.0/23 Signature Algorithm: sha256WithRSAEncryption 11:0d:b7:43:df:23:62:0f:23:79:48:f5:90:4e:e5:f6:f2:91: 1f:41:7f:05:77:8d:f8:2b:c1:ab:8a:b8:d3:04:96:63:5c:08: 09:50:21:bb:99:a8:a5:d1:de:b9:0e:c4:fd:f7:eb:16:fd:fc: 28:ee:57:76:95:34:61:d7:b1:0a:e3:1e:de:81:e3:e1:0a:d4: e5:4c:75:c1:79:40:36:1f:d4:0a:fe:a0:71:3d:c0:f3:79:e2: 88:92:84:17:53:2b:28:ef:d1:5e:ea:5a:4f:6a:c7:e1:12:6c: 4d:36:8e:d9:29:40:81:99:28:75:9a:31:b0:28:0b:a7:13:9b: e7:0e:2d:2e:a7:b5:10:20:d3:fe:98:05:c4:4a:c8:ac:2f:62: e8:ed:77:d3:53:99:45:3b:b0:21:69:7f:23:df:c0:b4:45:ee: d0:aa:98:9a:e1:65:ea:eb:52:8d:de:47:39:cb:c4:44:c3:42: ff:c8:fd:99:a6:61:d9:45:5f:d0:51:40:d4:a1:5c:74:3b:3b: 71:e9:0c:d2:c5:21:bf:6b:47:58:c2:01:50:d3:f2:49:86:34: b8:09:45:a3:e8:9e:5c:9b:29:83:a1:fd:14:87:68:22:a1:ea: e1:dc:dd:38:09:4c:7e:6a:f1:d6:5a:60:bc:a7:66:b4:b8:04: 28:d3:da:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Q3RknLfAMkMp+aXMb4WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzIzOGZkZmRhNzhlZjYyZTRmYTU5MjY1YmIxY2YyMzZiMWU1ZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVWnJRX3JztaS5/ChgaubA7LWCQ6 89EN1oEp9WJjKOIS/sF/bVeavj1ecmz8ruMA1Spwm0u66Q2pcMwEAtOv49C41YfG BBiFMPvTp3MjkqwsY/6vx3UdVKrgqlyx5QHatWOzAxZQfEjLAlEoztzs6VS+JIMQ bL7gjRwVGe426VnXRofAvUa4MA+LG/PpD4mcZQN8dhrCeKWwXZIgveFNFpBwG0If 87Vm/URpxg+DrZK5GzxEWw4qvmfO7ECc+R5GSfA6XgiVcJtjd4eKxUA2/Z1vCYzF AA6VKHTsGhoMCiXz/WLYPOZv2YKd4Kkd9ry+p9UC0wX7BU8J7io5YWSS7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwjj9/aeO9i5PpZJluxzyNrHl7XMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvYkNPUDM5cDQ3MkxrLWxrbVc3SFBJMnNlWHRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm4oMA0G CSqGSIb3DQEBCwUAA4IBAQARDbdD3yNiDyN5SPWQTuX28pEfQX8Fd434K8GrirjT BJZjXAgJUCG7mail0d65DsT99+sW/fwo7ld2lTRh17EK4x7egePhCtTlTHXBeUA2 H9QK/qBxPcDzeeKIkoQXUyso79Fe6lpPasfhEmxNNo7ZKUCBmSh1mjGwKAunE5vn Di0up7UQINP+mAXESsisL2Lo7XfTU5lFO7AhaX8j38C0Re7Qqpia4WXq61KN3kc5 y8REw0L/yP2ZpmHZRV/QUUDUoVx0Oztx6QzSxSG/a0dYwgFQ0/JJhjS4CUWj6J5c mymDof0Uh2gioerh3N04CUx+avHWWmC8p2a0uAQo09qu -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:30 2026 by rpki-client