This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa File: Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa (raw, json) Hash identifier: 3RHPyWH6kpXSP5rfHQPf6P61NWqvSrxvQJZ4KT7Fy8g= Subject key identifier: 1A:C7:DB:EA:EB:F8:CF:F5:11:57:99:9A:F5:B6:2A:E4:B2:C5:49:B3 Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE4320B26D2943568F0A5492BBD42D Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 86.104.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:43:20:b2:6d:29:43:56:8f:0a:54:92:bb:d4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ac7dbeaebf8cff51157999af5b62ae4b2c549b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:da:d1:73:11:ba:4e:2e:3a:18:34:18:7f:6b: a3:d1:18:6f:c4:64:6a:6f:fd:fd:87:fe:be:79:f5: 9e:ee:74:dd:e4:d2:29:f4:e2:b0:7b:21:46:30:2b: e0:5c:91:e6:bd:82:4b:17:6e:6e:6f:3a:cf:57:31: 72:a1:b8:91:bc:0f:a1:f1:b0:58:3e:56:ed:be:d8: 76:65:d9:2e:1d:b6:0b:68:cd:6d:b9:13:75:39:19: 66:ea:d3:e0:68:c2:d4:c5:5a:71:55:54:0c:92:36: 9e:6a:59:b9:4b:9e:69:1c:75:02:39:8d:c4:af:14: 5d:46:5c:3a:c1:9c:c4:ea:55:1a:ac:d8:33:43:d8: 1f:61:c5:a5:00:0d:e9:fc:ce:0b:74:ba:34:c0:40: c9:08:89:1c:1c:02:f5:4c:66:73:e1:ef:ef:33:0d: e4:a5:29:80:d2:a5:59:da:b7:49:29:8f:2d:3d:00: 0e:b0:4e:7c:2b:18:b5:8a:86:c2:be:08:48:1b:e0: d8:43:0d:e5:88:40:ae:7d:38:ce:26:c0:91:56:28: 79:7b:93:c1:fa:ca:2a:9b:85:aa:86:1d:8d:e2:d3: 59:93:8a:58:13:41:72:fa:f1:52:c2:6a:82:47:84: fe:f8:1a:44:7c:0b:8d:8f:ed:2f:0f:c2:55:3a:56: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C7:DB:EA:EB:F8:CF:F5:11:57:99:9A:F5:B6:2A:E4:B2:C5:49:B3 X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/Gsfb6uv4z_URV5ma9bYq5LLFSbM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.160.0/22 Signature Algorithm: sha256WithRSAEncryption 20:f1:47:31:17:e8:e4:9d:3d:44:79:fb:af:c2:a3:f9:ff:ca: e6:1c:5a:4b:41:73:fe:66:ad:87:16:2e:13:16:8e:72:4e:39: 7d:2c:76:c3:6f:65:b6:75:b6:8c:aa:d9:80:a5:8c:04:a2:0c: 0b:37:67:94:2a:53:73:08:75:7b:7b:9e:f9:5c:91:7b:92:f2: 6c:ec:9c:34:74:ca:cf:d6:ea:b7:ae:b1:1b:83:35:2f:a5:71: be:3b:97:b2:48:17:5e:64:9a:2c:40:76:3d:89:ac:28:07:c5: 7e:96:8d:96:a2:03:7e:26:e0:98:13:cd:cf:17:ba:fa:94:3d: a6:7f:7e:4e:f3:1f:b9:b4:30:56:f7:b7:19:d9:76:3e:d2:8c: 0d:5e:1a:1c:ae:df:0c:29:23:b6:08:37:1f:54:80:32:98:3d: 72:63:35:b1:01:d7:26:9c:b0:43:41:a6:f6:07:79:a0:e0:82: 08:fe:1f:a9:ed:44:0e:7f:84:1d:8c:58:34:b4:6c:2e:36:60: 71:e2:ac:ee:cb:66:89:3a:6b:2b:13:d6:97:6f:b5:15:e2:6c: e2:79:c6:67:10:a8:7a:d6:69:54:da:b7:54:63:8b:a9:42:b7: 6d:57:ee:65:a8:7b:e6:a7:d8:fa:c7:8a:9d:83:48:1d:b0:3f: 04:9d:65:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kMgsm0pQ1aPClSSu9QtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYWM3ZGJlYWViZjhjZmY1MTE1Nzk5OWFmNWI2MmFlNGIyYzU0OWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9rRcxG6Ti46GDQYf2uj0RhvxGRq b/39h/6+efWe7nTd5NIp9OKweyFGMCvgXJHmvYJLF25ubzrPVzFyobiRvA+h8bBY Plbtvth2ZdkuHbYLaM1tuRN1ORlm6tPgaMLUxVpxVVQMkjaealm5S55pHHUCOY3E rxRdRlw6wZzE6lUarNgzQ9gfYcWlAA3p/M4LdLo0wEDJCIkcHAL1TGZz4e/vMw3k pSmA0qVZ2rdJKY8tPQAOsE58Kxi1iobCvghIG+DYQw3liECufTjOJsCRVih5e5PB +soqm4Wqhh2N4tNZk4pYE0Fy+vFSwmqCR4T++BpEfAuNj+0vD8JVOla5/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBrH2+rr+M/1EVeZmvW2KuSyxUmzMB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvR3NmYjZ1djR6X1VSVjVtYTliWXE1TExGU2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVmigMA0G CSqGSIb3DQEBCwUAA4IBAQAg8UcxF+jknT1EefuvwqP5/8rmHFpLQXP+Zq2HFi4T Fo5yTjl9LHbDb2W2dbaMqtmApYwEogwLN2eUKlNzCHV7e575XJF7kvJs7Jw0dMrP 1uq3rrEbgzUvpXG+O5eySBdeZJosQHY9iawoB8V+lo2WogN+JuCYE83PF7r6lD2m f35O8x+5tDBW97cZ2XY+0owNXhocrt8MKSO2CDcfVIAymD1yYzWxAdcmnLBDQab2 B3mg4III/h+p7UQOf4QdjFg0tGwuNmBx4qzuy2aJOmsrE9aXb7UV4mziecZnEKh6 1mlU2rdUY4upQrdtV+5lqHvmp9j6x4qdg0gdsD8EnWXu -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:16 2026 by rpki-client