This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ECtLWMVzwOZgCeREOIEtd2ceymI.roa File: ECtLWMVzwOZgCeREOIEtd2ceymI.roa (raw, json) Hash identifier: fHGaNvUIUj3FjoH0hKJ1fC57VETbpNrkjc9oXVCr5zU= Subject key identifier: 10:2B:4B:58:C5:73:C0:E6:60:09:E4:44:38:81:2D:77:67:1E:CA:62 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C117D4992A72663D4D09A133F2A6F97 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ECtLWMVzwOZgCeREOIEtd2ceymI.roa Signing time: Fri 02 Jan 2026 00:17:59 +0000 ROA not before: Fri 02 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48031 IP address blocks: 86.111.230.0/24 maxlen: 24 86.111.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:49:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7d:49:92:a7:26:63:d4:d0:9a:13:3f:2a:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=102b4b58c573c0e66009e44438812d77671eca62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:ab:fd:fa:74:06:51:ae:81:4b:41:1e:3c: 12:50:e4:f9:b0:40:ac:e1:3c:5b:59:4c:9c:cc:13: 4e:03:50:40:11:1c:99:c3:f3:93:7c:d1:31:bf:de: cd:62:7c:94:31:f5:7b:09:1d:34:30:dd:ce:95:12: 3a:eb:8b:b8:6f:5f:1f:eb:b4:f9:4d:6c:fa:90:3d: 61:58:fe:10:7a:6c:c9:63:18:3e:d5:e5:68:b7:d1: e5:7e:4f:cd:08:73:d9:bb:c4:56:96:39:d5:1f:51: 95:0b:a1:10:8e:c9:51:5c:7f:eb:10:a8:40:a8:5d: 1d:0f:9b:8d:cb:21:d4:78:ff:45:c6:d1:a6:e6:f3: 4c:69:54:cd:dc:dd:19:d5:c2:88:a3:8a:17:a6:2a: 32:b0:12:11:d6:57:33:ae:18:9b:9a:3d:f2:de:eb: 14:51:fe:77:0b:71:29:58:f3:c6:4d:68:43:6a:53: 5b:f1:84:4d:e7:79:ba:1d:12:40:fe:0f:f0:7c:fe: 69:94:47:13:f2:ad:d9:e8:32:20:03:6b:67:ab:dd: 35:9c:bf:ab:ff:5d:28:bc:f1:3e:32:c6:63:40:e0: f2:a6:4e:01:b7:1d:80:e7:bd:25:ed:67:9f:69:ae: 37:de:d5:70:93:23:24:48:82:49:42:4a:c5:a4:7c: 20:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2B:4B:58:C5:73:C0:E6:60:09:E4:44:38:81:2D:77:67:1E:CA:62 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ECtLWMVzwOZgCeREOIEtd2ceymI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.230.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:33:95:7e:49:70:49:a6:48:87:0d:3e:b4:d9:c2:ac:d3:7b: c3:4b:b5:7d:84:a3:0c:da:c6:40:54:36:b0:f6:40:02:be:66: de:0d:74:6b:22:42:42:4e:4e:82:a1:02:3a:06:4d:92:75:3f: 93:98:89:90:c6:60:28:d3:8e:0d:00:df:04:37:97:fd:fa:e4: 9b:d9:0a:20:cf:a2:33:b9:0d:2b:ea:22:8d:ad:3e:e4:12:0c: b0:41:8f:f7:d7:af:a7:91:98:5d:99:f0:62:07:a4:e2:57:d0: c9:7f:f8:e3:6b:38:30:1c:4e:72:66:14:c2:04:97:27:2b:53: 0e:12:f8:f7:d3:e1:5b:0b:3c:cd:c0:7a:3e:96:67:1c:47:fb: 44:96:2b:7e:7e:09:c1:20:c5:ab:49:c1:ca:43:ed:0f:82:27: 9b:e4:11:2c:25:cd:a2:d8:93:aa:d3:8b:cb:af:9f:14:3b:7f: 85:cc:6e:d6:47:44:42:51:d1:b6:ed:6f:fc:dc:04:a7:62:82: d8:00:fb:52:42:76:76:0e:9c:2c:29:18:eb:f2:7e:bb:67:8e: cd:ea:24:df:3a:4e:7d:6b:16:83:29:cb:f5:ba:4f:c9:4e:dc: f7:42:0e:3c:c8:ac:06:82:b5:08:4d:b2:98:ed:2a:62:f8:c3: d4:47:15:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EX1JkqcmY9TQmhM/Km+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDJiNGI1OGM1NzNjMGU2NjAwOWU0NDQzODgxMmQ3NzY3MWVjYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7qr/fp0BlGugUtBHjwSUOT5sECs 4TxbWUyczBNOA1BAERyZw/OTfNExv97NYnyUMfV7CR00MN3OlRI664u4b18f67T5 TWz6kD1hWP4QemzJYxg+1eVot9Hlfk/NCHPZu8RWljnVH1GVC6EQjslRXH/rEKhA qF0dD5uNyyHUeP9FxtGm5vNMaVTN3N0Z1cKIo4oXpioysBIR1lczrhibmj3y3usU Uf53C3EpWPPGTWhDalNb8YRN53m6HRJA/g/wfP5plEcT8q3Z6DIgA2tnq901nL+r /10ovPE+MsZjQODypk4Btx2A570l7Wefaa433tVwkyMkSIJJQkrFpHwgTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBArS1jFc8DmYAnkRDiBLXdnHspiMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvRUN0TFdNVnp3T1pnQ2VSRU9JRXRkMmNleW1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm/mMA0G CSqGSIb3DQEBCwUAA4IBAQCPM5V+SXBJpkiHDT602cKs03vDS7V9hKMM2sZAVDaw 9kACvmbeDXRrIkJCTk6CoQI6Bk2SdT+TmImQxmAo044NAN8EN5f9+uSb2Qogz6Iz uQ0r6iKNrT7kEgywQY/316+nkZhdmfBiB6TiV9DJf/jjazgwHE5yZhTCBJcnK1MO Evj30+FbCzzNwHo+lmccR/tElit+fgnBIMWrScHKQ+0Pgieb5BEsJc2i2JOq04vL r58UO3+FzG7WR0RCUdG27W/83ASnYoLYAPtSQnZ2DpwsKRjr8n67Z47N6iTfOk59 axaDKcv1uk/JTtz3Qg48yKwGgrUITbKY7Spi+MPURxVP -----END CERTIFICATE-----Generated at Tue Jan 20 00:00:11 2026 by rpki-client