This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hH7j12IFv-CcBb30d4Usv2EiFm4.roa File: hH7j12IFv-CcBb30d4Usv2EiFm4.roa (raw, json) Hash identifier: CoyDAhKhM+mMzG1eCi9eK2Yf73BQJKrbAjUjxvFFJjM= Subject key identifier: 84:7E:E3:D7:62:05:BF:E0:9C:05:BD:F4:77:85:2C:BF:61:22:16:6E Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019A9BDB15B566211FB04AA8973BD6C7AA8B Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hH7j12IFv-CcBb30d4Usv2EiFm4.roa Signing time: Wed 19 Nov 2025 11:23:37 +0000 ROA not before: Wed 19 Nov 2025 11:23:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 86.110.34.0/24 maxlen: 24 86.110.44.0/24 maxlen: 24 86.110.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:db:15:b5:66:21:1f:b0:4a:a8:97:3b:d6:c7:aa:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Nov 19 11:23:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=847ee3d76205bfe09c05bdf477852cbf6122166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:03:62:8a:37:55:d3:d8:df:15:f1:7e:4c: 96:2d:99:6c:35:11:40:6f:3d:92:d0:d3:00:3b:37: 50:9c:0e:58:51:31:47:31:83:3c:67:55:e8:e4:d6: 96:ca:7c:c4:5c:c4:1a:68:c0:3f:e1:a7:19:6b:97: 99:6b:69:3e:c9:0a:d5:21:15:56:05:89:7e:b1:6b: c9:a6:b9:2e:9f:15:b7:a2:12:2b:3e:c8:c1:b6:b6: 84:99:0e:bc:c0:f3:4a:c2:c6:f2:2b:29:48:0e:b1: eb:f6:e9:2e:d9:36:ae:28:16:90:46:ae:e1:e2:f3: 08:df:a5:49:ab:ea:b8:31:41:61:db:b6:8d:f8:d3: b7:e4:70:ab:93:7b:04:bf:47:ab:a5:ef:5f:80:35: f0:7b:10:6a:f3:00:5f:7e:b5:c3:a4:d8:0e:5c:4b: f2:d7:92:60:79:2a:77:49:dc:e0:87:76:01:c8:bd: 44:11:8f:04:6d:c3:ce:fe:f9:d3:12:6b:06:1b:70: 3e:1b:10:de:16:ef:83:73:b1:87:86:2c:ef:de:f5: 9b:26:56:ee:64:f0:b4:b1:26:c1:56:a5:5a:c2:df: f1:f4:6b:fc:fe:4c:4e:e4:37:1d:df:b7:f0:f1:07: 85:2f:fd:60:94:37:65:3e:de:ef:0d:91:14:0c:f1: d1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:7E:E3:D7:62:05:BF:E0:9C:05:BD:F4:77:85:2C:BF:61:22:16:6E X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hH7j12IFv-CcBb30d4Usv2EiFm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.34.0/24 86.110.44.0/24 86.110.58.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:f8:49:1d:2f:0b:55:37:80:af:48:cc:1e:9b:f0:3b:b9:6d: cf:38:26:bc:5f:fe:b5:2e:c0:3e:8d:89:ce:c0:3e:fb:95:dd: fd:8e:67:79:33:41:11:99:0d:2c:db:fb:2b:72:80:50:ec:53: b7:e1:a6:eb:d0:08:4e:f8:d9:55:1c:b7:7b:67:14:7f:e0:5b: f1:cd:53:46:10:a9:a7:a9:6f:b3:34:14:5f:28:98:f9:e5:02: 96:61:04:da:49:5f:73:65:47:a5:9b:4b:0e:57:99:fe:27:69: 87:14:c0:6f:72:24:e4:9e:8a:be:e5:e0:80:6f:05:49:fe:6e: ad:bb:dd:58:23:5b:29:a8:7e:93:76:2f:4f:ee:21:5c:37:54: 3f:31:a5:62:bc:5d:34:96:db:86:3d:be:78:45:eb:b6:d0:89: 3d:68:2e:81:b2:81:39:78:b7:af:c2:6f:2a:02:17:87:84:3e: fe:61:74:7a:e0:64:dd:88:60:36:36:29:56:0a:1e:64:44:fb: bc:5a:3f:b0:bd:ca:be:4b:0d:1a:0a:a8:1a:98:0a:fb:f3:ce: 28:47:ab:fc:99:ef:e7:7b:cd:a3:b3:e0:98:ef:4e:36:d7:0a: 81:77:82:0f:14:ff:25:8f:da:53:5a:8f:ca:a9:83:ff:db:65: ef:93:fb:a4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqb2xW1ZiEfsEqolzvWx6qLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMTE5MTEyMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NDdlZTNkNzYyMDViZmUwOWMwNWJkZjQ3Nzg1MmNiZjYxMjIxNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7EDYoo3VdPY3xXxfkyWLZlsNRFA bz2S0NMAOzdQnA5YUTFHMYM8Z1Xo5NaWynzEXMQaaMA/4acZa5eZa2k+yQrVIRVW BYl+sWvJprkunxW3ohIrPsjBtraEmQ68wPNKwsbyKylIDrHr9uku2TauKBaQRq7h 4vMI36VJq+q4MUFh27aN+NO35HCrk3sEv0erpe9fgDXwexBq8wBffrXDpNgOXEvy 15JgeSp3Sdzgh3YByL1EEY8EbcPO/vnTEmsGG3A+GxDeFu+Dc7GHhizv3vWbJlbu ZPC0sSbBVqVawt/x9Gv8/kxO5Dcd37fw8QeFL/1glDdlPt7vDZEUDPHR6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIR+49diBb/gnAW99HeFLL9hIhZuMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvaEg3ajEySUZ2LUNjQmIzMGQ0VXN2MkVpRm00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVm4iAwQA Vm4sAwQAVm46MA0GCSqGSIb3DQEBCwUAA4IBAQBv+EkdLwtVN4CvSMwem/A7uW3P OCa8X/61LsA+jYnOwD77ld39jmd5M0ERmQ0s2/srcoBQ7FO34abr0AhO+NlVHLd7 ZxR/4FvxzVNGEKmnqW+zNBRfKJj55QKWYQTaSV9zZUelm0sOV5n+J2mHFMBvciTk noq+5eCAbwVJ/m6tu91YI1spqH6Tdi9P7iFcN1Q/MaVivF00ltuGPb54Reu20Ik9 aC6BsoE5eLevwm8qAheHhD7+YXR64GTdiGA2NilWCh5kRPu8Wj+wvcq+Sw0aCqga mAr7884oR6v8me/ne82js+CY70421wqBd4IPFP8lj9pTWo/KqYP/22Xvk/uk -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:34 2025 by rpki-client