This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/vrcNcGLKzc4126aByqCn10xR7hw.roa File: vrcNcGLKzc4126aByqCn10xR7hw.roa (raw, json) Hash identifier: BJLHLu3Ei5L0mbo/lskPrmlmi+TRNkPtsukA9ptks7A= Subject key identifier: BE:B7:0D:70:62:CA:CD:CE:35:DB:A6:81:CA:A0:A7:D7:4C:51:EE:1C Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B79ED10927FC71474684EF9C594CFF750 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/vrcNcGLKzc4126aByqCn10xR7hw.roa Signing time: Thu 01 Jan 2026 14:18:57 +0000 ROA not before: Thu 01 Jan 2026 14:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 86.110.36.0/24 maxlen: 24 86.110.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:10:92:7f:c7:14:74:68:4e:f9:c5:94:cf:f7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Jan 1 14:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=beb70d7062cacdce35dba681caa0a7d74c51ee1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e2:8e:44:4d:d2:4e:92:3f:cf:10:3e:ca:98: 9c:8a:59:99:e5:83:32:2b:b3:8c:c3:bc:64:81:76: d2:38:72:12:2b:ad:91:80:2f:41:1a:13:eb:2e:a0: f4:28:0c:0b:74:ac:2b:89:03:0f:74:f4:33:23:96: f3:bf:6c:b0:37:dd:a9:d2:c0:96:d9:59:05:7c:a2: 2d:93:d1:a4:99:30:26:92:4b:11:7c:6f:45:82:89: 9e:18:ea:d6:42:c8:90:21:2c:a6:e5:f3:44:74:a0: f0:56:dc:71:84:07:1b:dc:d7:4e:3f:05:92:f2:24: f8:10:c3:f7:8b:db:ec:e7:c1:a0:a6:62:9c:06:24: 26:1f:6f:34:d4:c8:2b:22:b9:8c:d8:a7:fd:d0:94: 4e:ad:51:d8:85:76:61:79:de:ba:92:81:f8:dc:7d: 91:6e:6f:bd:c7:c9:6b:92:de:ab:b6:55:e1:60:63: a0:85:5c:a3:20:2e:9a:33:c8:bc:af:eb:fe:51:ba: 67:bd:88:2a:da:8e:23:81:49:d7:23:00:49:ac:94: 15:3b:45:9b:5b:13:ed:e5:e6:82:5f:b1:89:45:9f: 6e:36:c5:3d:a2:7a:30:a4:10:8a:3e:75:50:50:ea: 83:d8:4b:f0:00:50:25:d5:b2:65:a7:1b:bf:98:4e: 00:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:0D:70:62:CA:CD:CE:35:DB:A6:81:CA:A0:A7:D7:4C:51:EE:1C X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/vrcNcGLKzc4126aByqCn10xR7hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.36.0/24 86.110.56.0/24 Signature Algorithm: sha256WithRSAEncryption 11:8f:b0:af:d4:cb:c3:da:af:76:d2:6b:bd:9a:a2:b0:27:2b: 41:f5:17:9b:72:87:6f:ed:15:9c:e9:80:72:b5:25:ca:81:e5: e5:8f:7d:5d:10:8e:de:f0:39:7d:ed:f3:d7:82:a7:11:a0:c0: 0c:a4:d7:7f:01:22:41:27:4b:29:3e:25:c1:87:6b:00:73:11: 5d:47:2b:13:e3:ad:b0:6a:dd:78:3f:23:dc:c2:ce:52:b6:fe: c3:f9:eb:c2:2c:a0:cd:3b:1d:c3:9a:d8:32:af:cf:15:7c:c1: c2:9f:94:69:82:d3:e1:79:8e:a8:ac:54:54:72:a8:dd:13:7e: d8:52:53:df:01:31:44:b4:92:8b:4d:11:d1:d0:ad:7a:89:95: 9a:d5:d4:21:24:52:69:9b:85:9f:2c:69:c6:1a:9c:38:80:a6: f4:93:ac:59:a9:a1:1d:08:f9:cd:50:59:b5:11:ad:61:ba:55: 82:1b:98:58:fc:2b:22:db:c9:b4:5c:01:aa:5e:ab:3f:fb:19: e8:ab:87:04:43:9f:26:8c:43:a2:23:da:b1:29:7e:90:9c:d2: 00:b1:23:19:35:6e:e6:1b:76:87:4c:4b:6f:6a:04:c6:d4:97: d8:c5:fd:da:d2:be:15:3a:26:59:ba:5e:74:15:60:40:78:de: 71:fb:04:cb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57RCSf8cUdGhO+cWUz/dQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjYwMTAxMTQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWI3MGQ3MDYyY2FjZGNlMzVkYmE2ODFjYWEwYTdkNzRjNTFlZTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuKORE3STpI/zxA+ypicilmZ5YMy K7OMw7xkgXbSOHISK62RgC9BGhPrLqD0KAwLdKwriQMPdPQzI5bzv2ywN92p0sCW 2VkFfKItk9GkmTAmkksRfG9FgomeGOrWQsiQISym5fNEdKDwVtxxhAcb3NdOPwWS 8iT4EMP3i9vs58GgpmKcBiQmH2801MgrIrmM2Kf90JROrVHYhXZhed66koH43H2R bm+9x8lrkt6rtlXhYGOghVyjIC6aM8i8r+v+UbpnvYgq2o4jgUnXIwBJrJQVO0Wb WxPt5eaCX7GJRZ9uNsU9onowpBCKPnVQUOqD2EvwAFAl1bJlpxu/mE4AOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL63DXBiys3ONdumgcqgp9dMUe4cMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvdnJjTmNHTEt6YzQxMjZhQnlxQ24xMHhSN2h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVm4kAwQA Vm44MA0GCSqGSIb3DQEBCwUAA4IBAQARj7Cv1MvD2q920mu9mqKwJytB9Rebcodv 7RWc6YBytSXKgeXlj31dEI7e8Dl97fPXgqcRoMAMpNd/ASJBJ0spPiXBh2sAcxFd RysT462wat14PyPcws5Stv7D+evCLKDNOx3Dmtgyr88VfMHCn5RpgtPheY6orFRU cqjdE37YUlPfATFEtJKLTRHR0K16iZWa1dQhJFJpm4WfLGnGGpw4gKb0k6xZqaEd CPnNUFm1Ea1hulWCG5hY/Csi28m0XAGqXqs/+xnoq4cEQ58mjEOiI9qxKX6QnNIA sSMZNW7mG3aHTEtvagTG1JfYxf3a0r4VOiZZul50FWBAeN5x+wTL -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:57 2026 by rpki-client