This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dPcC6P2Ub94KhMYnU4O-c5682vk.roa File: dPcC6P2Ub94KhMYnU4O-c5682vk.roa (raw, json) Hash identifier: g/ztEAIPkKUjRwwmBVeCjJEZxo+DRe9x5QOVITmEu/0= Subject key identifier: 74:F7:02:E8:FD:94:6F:DE:0A:84:C6:27:53:83:BE:73:9E:BC:DA:F9 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED07B660C38311C90BFB757BA1BC97 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dPcC6P2Ub94KhMYnU4O-c5682vk.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 86.110.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:07:b6:60:c3:83:11:c9:0b:fb:75:7b:a1:bc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74f702e8fd946fde0a84c6275383be739ebcdaf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d4:9c:cc:8a:79:a8:ee:80:fb:c5:15:d6:b0: dc:44:41:2a:03:19:64:c1:3b:2f:38:5b:b1:0b:cf: cf:96:4c:2a:56:81:9c:94:fa:0f:03:5b:6b:c6:b7: 38:1d:44:fb:65:de:5e:e0:58:b6:fc:46:7d:b6:de: 4a:66:f8:27:b7:a5:03:fa:62:9b:f7:8e:1c:27:02: 3e:42:e8:82:09:18:53:6f:3b:d4:41:f1:63:00:f3: 59:c9:a7:e8:6f:88:5f:b8:f9:5f:b9:d6:49:a3:49: 46:8f:0e:75:d3:0e:cc:21:de:17:16:14:2e:4c:de: df:eb:c6:c3:07:76:63:f5:af:f3:7e:e4:7a:dd:e3: 39:97:7a:23:0d:b9:49:5f:06:ca:37:b2:35:65:5b: 84:51:93:fa:0c:43:1b:50:0f:fe:1c:a8:0d:81:da: 4f:e8:78:17:07:cc:5c:bc:2d:4a:89:e6:3f:ce:ed: 2b:52:49:e5:24:21:ad:72:4c:f6:00:ea:1d:64:d6: 14:bb:1e:26:f3:e8:c0:7b:87:ca:18:55:18:04:79: 8e:b6:64:87:08:6e:85:0b:b5:0c:82:ca:9e:e9:63: 01:e3:e8:60:3b:51:5f:6d:7c:bc:b3:fb:86:d6:d9: bd:62:3a:d9:fd:90:ac:c6:94:c5:97:c8:39:5f:a3: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F7:02:E8:FD:94:6F:DE:0A:84:C6:27:53:83:BE:73:9E:BC:DA:F9 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/dPcC6P2Ub94KhMYnU4O-c5682vk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.57.0/24 Signature Algorithm: sha256WithRSAEncryption 24:8b:98:bf:ca:24:77:f4:d3:e9:62:f4:f0:55:71:9e:ea:92: 52:05:7f:87:b6:94:ba:3f:6d:fa:c4:f4:71:d1:83:ba:b6:8e: 02:eb:25:0a:9e:60:c0:48:ca:7a:c6:94:77:90:41:7f:cc:90: e6:1b:04:8a:b1:53:6c:5f:d8:3f:c8:15:36:f3:63:fe:ce:c2: 3d:49:06:15:13:2a:62:74:a9:82:c1:4d:07:92:dd:9d:94:3d: c6:2d:65:6f:61:0e:31:65:69:b5:47:6f:e2:f2:cc:b6:62:13: 82:5a:63:af:59:c2:f4:d1:b7:e9:d5:a6:55:6a:fb:b8:5e:9a: fa:2b:39:64:6d:29:4c:0c:f5:84:3d:02:4b:cf:13:c0:65:c9: a8:b3:00:77:6d:32:b0:ce:42:84:db:d0:bd:fd:7d:b6:27:ae: 14:9c:84:d0:d7:08:a0:b6:2a:b8:e7:fa:b7:ba:bd:be:97:47: f9:07:9d:2d:29:90:13:57:2c:0a:76:3f:59:82:80:2c:c4:b4: c6:59:4e:d5:e8:38:ab:27:40:49:4f:7b:8d:a7:50:33:68:9f: 38:89:43:96:9d:0d:68:51:21:a5:68:e3:3b:33:58:b5:d8:45: 60:25:7c:7d:32:23:39:37:af:74:89:89:df:9e:d8:4a:7f:ab: 74:d2:e0:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Qe2YMODEckL+3V7obyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGY3MDJlOGZkOTQ2ZmRlMGE4NGM2Mjc1MzgzYmU3MzllYmNkYWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09SczIp5qO6A+8UV1rDcREEqAxlk wTsvOFuxC8/PlkwqVoGclPoPA1trxrc4HUT7Zd5e4Fi2/EZ9tt5KZvgnt6UD+mKb 944cJwI+QuiCCRhTbzvUQfFjAPNZyafob4hfuPlfudZJo0lGjw510w7MId4XFhQu TN7f68bDB3Zj9a/zfuR63eM5l3ojDblJXwbKN7I1ZVuEUZP6DEMbUA/+HKgNgdpP 6HgXB8xcvC1KieY/zu0rUknlJCGtckz2AOodZNYUux4m8+jAe4fKGFUYBHmOtmSH CG6FC7UMgsqe6WMB4+hgO1FfbXy8s/uG1tm9YjrZ/ZCsxpTFl8g5X6NN4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHT3Auj9lG/eCoTGJ1ODvnOevNr5MB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvZFBjQzZQMlViOTRLaE1ZblU0Ty1jNTY4MnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm45MA0G CSqGSIb3DQEBCwUAA4IBAQAki5i/yiR39NPpYvTwVXGe6pJSBX+HtpS6P236xPRx 0YO6to4C6yUKnmDASMp6xpR3kEF/zJDmGwSKsVNsX9g/yBU282P+zsI9SQYVEypi dKmCwU0Hkt2dlD3GLWVvYQ4xZWm1R2/i8sy2YhOCWmOvWcL00bfp1aZVavu4Xpr6 KzlkbSlMDPWEPQJLzxPAZcmoswB3bTKwzkKE29C9/X22J64UnITQ1wigtiq45/q3 ur2+l0f5B50tKZATVywKdj9ZgoAsxLTGWU7V6DirJ0BJT3uNp1AzaJ84iUOWnQ1o USGlaOM7M1i12EVgJXx9MiM5N690iYnfnthKf6t00uBj -----END CERTIFICATE-----Generated at Thu Jan 8 17:32:23 2026 by rpki-client