This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nv3XJW4SHiYOrTQVrxnoavOvwJ0.roa File: nv3XJW4SHiYOrTQVrxnoavOvwJ0.roa (raw, json) Hash identifier: FchrHLVpTQQsdpH665V5pFmlLVhCeW2ycJA4HdohxTU= Subject key identifier: 9E:FD:D7:25:6E:12:1E:26:0E:AD:34:15:AF:19:E8:6A:F3:AF:C0:9D Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED06EBF34429485821579EEDB4F0D3 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nv3XJW4SHiYOrTQVrxnoavOvwJ0.roa Signing time: Thu 01 Jan 2026 14:18:55 +0000 ROA not before: Thu 01 Jan 2026 14:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 86.110.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:06:eb:f3:44:29:48:58:21:57:9e:ed:b4:f0:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9efdd7256e121e260ead3415af19e86af3afc09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:bc:dd:1e:9c:00:58:1a:1c:6c:bb:a3:88: 60:06:e8:9b:5f:6e:e9:b0:03:56:fc:7d:66:50:0f: 81:b5:75:02:02:33:9b:b3:1e:92:e1:d2:e7:1f:ee: 37:24:01:8f:f0:64:e5:72:cb:f1:61:90:6d:9b:ed: d2:76:a4:d0:fc:48:68:07:21:67:69:dc:a2:46:16: 1d:3c:24:45:d9:2d:8d:4d:f3:5f:09:74:bb:11:7c: f9:b1:2b:ba:92:7e:a0:1d:76:13:6e:eb:4b:95:2b: 9f:66:23:e5:ba:5c:28:2a:e3:84:8c:10:6e:1c:06: df:6e:37:21:76:28:38:7b:23:4f:2d:27:a4:2b:d4: 27:41:df:a1:da:23:04:e8:df:6c:77:3e:e1:0f:33: 50:dc:46:c8:14:65:5a:a1:f8:50:8e:e4:a6:cf:0f: b6:b4:6c:82:a1:7a:7b:42:aa:d6:57:58:bf:9c:61: 4b:58:f6:0a:65:fa:2e:3f:16:b7:dd:1a:ad:9f:cf: a6:e0:e1:ab:d0:db:c5:73:7e:f6:4b:b2:11:f9:64: 46:6c:f3:5c:10:e9:bd:bc:1d:dd:21:0d:11:72:a8: 95:9d:eb:66:f3:51:a6:9c:94:15:d8:b8:6a:24:6b: 54:1a:8e:cb:3e:e0:dc:43:1c:f7:41:7c:5a:44:66: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FD:D7:25:6E:12:1E:26:0E:AD:34:15:AF:19:E8:6A:F3:AF:C0:9D X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/nv3XJW4SHiYOrTQVrxnoavOvwJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.44.0/24 Signature Algorithm: sha256WithRSAEncryption 51:6f:8c:4c:d1:e1:b3:1d:68:67:a1:1f:00:9b:aa:1d:a4:df: 2d:f4:a5:57:3d:c3:22:9b:cb:e9:47:28:ea:cb:1d:d7:92:7f: 67:c4:fe:a3:69:79:00:b7:1f:80:2f:99:69:39:63:1d:25:e0: 7f:73:df:9b:6f:a1:76:3f:df:81:ea:de:60:d9:10:ef:12:66: e9:3c:af:e8:0a:1d:a1:78:03:ef:bd:1d:f4:b6:ed:98:8a:df: 68:48:fc:73:9e:88:7f:56:6e:f2:4f:1e:35:6d:e4:a1:78:e2: fb:a1:34:0b:96:a3:03:b7:df:54:c3:be:23:f1:0a:e3:41:54: 4a:b3:9e:85:df:b8:62:b4:0b:a3:10:b6:3e:4c:09:5b:23:a7: d6:76:66:ae:1a:46:a5:89:33:cb:23:f3:72:d7:d9:8d:5c:5e: f8:ce:6d:7a:be:3c:55:1f:f6:3d:14:2a:b2:35:23:19:9e:96: d3:7f:46:26:26:22:bf:ef:01:0c:56:29:e0:85:8e:25:71:d6: fb:5e:69:95:34:18:d4:2f:9d:c9:4d:ce:a9:cb:38:a8:fc:38: 1d:bd:a2:bb:d3:11:ce:21:1a:23:95:35:21:6d:fc:31:2e:cb: 1e:77:00:cd:2a:fb:64:e2:cc:3a:fb:b5:a1:49:cb:28:7f:40: 09:1b:0d:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Qbr80QpSFghV57ttPDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZWZkZDcyNTZlMTIxZTI2MGVhZDM0MTVhZjE5ZTg2YWYzYWZjMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjW83R6cAFgaHGy7o4hgBuibX27p sANW/H1mUA+BtXUCAjObsx6S4dLnH+43JAGP8GTlcsvxYZBtm+3SdqTQ/EhoByFn adyiRhYdPCRF2S2NTfNfCXS7EXz5sSu6kn6gHXYTbutLlSufZiPlulwoKuOEjBBu HAbfbjchdig4eyNPLSekK9QnQd+h2iME6N9sdz7hDzNQ3EbIFGVaofhQjuSmzw+2 tGyCoXp7QqrWV1i/nGFLWPYKZfouPxa33Rqtn8+m4OGr0NvFc372S7IR+WRGbPNc EOm9vB3dIQ0RcqiVnetm81GmnJQV2LhqJGtUGo7LPuDcQxz3QXxaRGZ3owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ791yVuEh4mDq00Fa8Z6Grzr8CdMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvbnYzWEpXNFNIaVlPclRRVnJ4bm9hdk92d0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4sMA0G CSqGSIb3DQEBCwUAA4IBAQBRb4xM0eGzHWhnoR8Am6odpN8t9KVXPcMim8vpRyjq yx3Xkn9nxP6jaXkAtx+AL5lpOWMdJeB/c9+bb6F2P9+B6t5g2RDvEmbpPK/oCh2h eAPvvR30tu2Yit9oSPxznoh/Vm7yTx41beSheOL7oTQLlqMDt99Uw74j8QrjQVRK s56F37hitAujELY+TAlbI6fWdmauGkaliTPLI/Ny19mNXF74zm16vjxVH/Y9FCqy NSMZnpbTf0YmJiK/7wEMVinghY4lcdb7XmmVNBjUL53JTc6pyzio/DgdvaK70xHO IRojlTUhbfwxLssedwDNKvtk4sw6+7WhScsof0AJGw3f -----END CERTIFICATE-----Generated at Sun Jan 18 04:26:35 2026 by rpki-client