This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/sSsX9lAuTzO9VldLxQMeK-5adaY.roa File: sSsX9lAuTzO9VldLxQMeK-5adaY.roa (raw, json) Hash identifier: iur8WTZ1EdrXyR3WNetyiFe4lZT9wDb3S5el30eYdBE= Subject key identifier: B1:2B:17:F6:50:2E:4F:33:BD:56:57:4B:C5:03:1E:2B:EE:5A:75:A6 Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED1131F2194D430F71A39792B3E5E4 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/sSsX9lAuTzO9VldLxQMeK-5adaY.roa Signing time: Thu 01 Jan 2026 14:18:58 +0000 ROA not before: Thu 01 Jan 2026 14:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 86.110.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:11:31:f2:19:4d:43:0f:71:a3:97:92:b3:e5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b12b17f6502e4f33bd56574bc5031e2bee5a75a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:6c:c5:98:b7:b4:fe:b4:af:19:7a:0d:15: 34:21:53:5b:b8:27:21:43:75:27:eb:88:a5:75:03: f8:dc:c2:c0:91:34:11:94:46:c7:d3:8c:ac:6f:a3: b6:7c:9b:30:e9:88:97:bd:70:fb:02:98:27:27:6f: ef:5f:cd:f8:22:20:93:0c:8c:89:25:40:50:c6:11: dc:13:ef:c0:9f:cf:d3:18:05:4b:a3:ea:11:da:4e: 9e:b1:e9:a8:d6:63:8c:39:d4:2a:9f:c1:64:d4:86: f6:0c:9a:d5:7f:64:b0:5d:af:92:1a:36:30:11:3e: 98:11:10:81:c0:2e:bd:2d:7e:98:ff:bf:e4:1b:d8: d1:81:a8:a3:ea:86:dc:8a:fe:7f:50:fa:23:6f:13: 08:66:a9:dd:ad:8e:6a:71:36:87:e6:d2:b9:d9:c9: 8a:92:69:d6:ed:f9:ae:84:0a:de:fd:dc:5d:14:8e: 39:1d:5c:aa:5d:05:7e:63:0c:87:31:f4:5d:84:db: 13:cc:a2:4c:80:ec:2a:49:8f:fe:64:10:78:0e:85: ac:43:8d:a7:f5:ac:ed:09:5b:86:04:97:df:7d:fc: ea:e2:d0:55:60:84:73:c4:64:d9:38:37:35:14:da: 10:b9:9b:79:dd:42:a6:54:1e:af:38:a9:bf:47:a1: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2B:17:F6:50:2E:4F:33:BD:56:57:4B:C5:03:1E:2B:EE:5A:75:A6 X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/sSsX9lAuTzO9VldLxQMeK-5adaY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.44.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:19:5b:0f:49:85:6f:af:2b:3c:3c:86:4e:89:9d:60:b3:b7: 53:7b:b0:d1:1d:66:4b:0b:3b:59:a3:20:f1:79:3f:a9:14:f5: dd:db:0d:7c:50:b2:08:ca:d9:44:56:2c:e6:f7:55:ce:85:a0: 8d:c8:2f:fe:6c:01:af:50:a5:3d:0c:98:96:47:9d:9d:3a:de: fa:bf:de:d5:de:9a:77:27:a3:d0:18:3f:e9:a6:d7:c1:70:ed: 1b:fc:68:48:73:d6:2c:22:8e:b1:d4:c2:46:09:7d:9c:b8:60: 71:fa:fb:99:f6:b3:f6:ff:ec:f8:e3:f1:ea:39:b0:db:65:24: f2:f7:9b:23:7d:a1:03:7e:b9:84:0f:cd:0e:e1:50:de:fb:f4: f8:bc:57:5a:1f:91:83:54:18:ec:70:e1:47:98:9a:fc:73:bd: b4:99:4d:54:d6:24:72:d4:8b:85:81:96:64:88:16:f5:71:81: d9:8e:a2:ce:9b:1e:c5:90:da:05:b9:82:02:c3:89:22:ca:b1: be:63:a6:a3:98:00:05:21:c4:ed:06:76:04:2f:ff:e4:b9:e9: 3e:29:46:bb:a3:10:76:4a:c7:08:d7:90:77:c3:df:13:b3:24: c6:e3:2a:3c:4a:f6:30:30:18:16:66:35:0d:b8:f9:5a:f2:28: 3e:15:72:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57REx8hlNQw9xo5eSs+XkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTJiMTdmNjUwMmU0ZjMzYmQ1NjU3NGJjNTAzMWUyYmVlNWE3NWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq51sxZi3tP60rxl6DRU0IVNbuCch Q3Un64ildQP43MLAkTQRlEbH04ysb6O2fJsw6YiXvXD7ApgnJ2/vX834IiCTDIyJ JUBQxhHcE+/An8/TGAVLo+oR2k6esemo1mOMOdQqn8Fk1Ib2DJrVf2SwXa+SGjYw ET6YERCBwC69LX6Y/7/kG9jRgaij6obciv5/UPojbxMIZqndrY5qcTaH5tK52cmK kmnW7fmuhAre/dxdFI45HVyqXQV+YwyHMfRdhNsTzKJMgOwqSY/+ZBB4DoWsQ42n 9aztCVuGBJffffzq4tBVYIRzxGTZODc1FNoQuZt53UKmVB6vOKm/R6H72wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLErF/ZQLk8zvVZXS8UDHivuWnWmMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvc1NzWDlsQXVUek85VmxkTHhRTWVLLTVhZGFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4sMA0G CSqGSIb3DQEBCwUAA4IBAQANGVsPSYVvrys8PIZOiZ1gs7dTe7DRHWZLCztZoyDx eT+pFPXd2w18ULIIytlEVizm91XOhaCNyC/+bAGvUKU9DJiWR52dOt76v97V3pp3 J6PQGD/pptfBcO0b/GhIc9YsIo6x1MJGCX2cuGBx+vuZ9rP2/+z44/HqObDbZSTy 95sjfaEDfrmED80O4VDe+/T4vFdaH5GDVBjscOFHmJr8c720mU1U1iRy1IuFgZZk iBb1cYHZjqLOmx7FkNoFuYICw4kiyrG+Y6ajmAAFIcTtBnYEL//kuek+KUa7oxB2 SscI15B3w98TsyTG4yo8SvYwMBgWZjUNuPla8ig+FXKr -----END CERTIFICATE-----Generated at Mon Jan 19 05:21:51 2026 by rpki-client