This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/0JfBT0p0CrOBrOnSNqKcd2zs54U.roa File: 0JfBT0p0CrOBrOnSNqKcd2zs54U.roa (raw, json) Hash identifier: kq7rId2JudcaMZV06WVJtRPoqBmh361b7mq/X2XmHrA= Subject key identifier: D0:97:C1:4F:4A:74:0A:B3:81:AC:E9:D2:36:A2:9C:77:6C:EC:E7:85 Certificate issuer: /CN=be84ae7c0503ac450934c9f6cff39a1537a5126d Certificate serial: 019B797DFA38B877910AECFAFAA1FBD6AFA0 Authority key identifier: BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/0JfBT0p0CrOBrOnSNqKcd2zs54U.roa Signing time: Thu 01 Jan 2026 12:17:37 +0000 ROA not before: Thu 01 Jan 2026 12:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45021 IP address blocks: 86.104.228.0/24 maxlen: 24 2a12:8e40:5668::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fa:38:b8:77:91:0a:ec:fa:fa:a1:fb:d6:af:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be84ae7c0503ac450934c9f6cff39a1537a5126d Validity Not Before: Jan 1 12:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d097c14f4a740ab381ace9d236a29c776cece785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:eb:95:05:c7:67:dd:5d:d5:80:0e:8c:da:a2: c1:26:ec:37:f2:7e:94:df:45:99:ee:1c:e6:ad:1e: 39:0c:85:99:98:de:43:ff:69:49:93:3c:8a:2f:cb: 4e:97:01:2a:86:fc:21:fe:e4:67:29:61:dd:a4:32: 82:59:c9:11:8f:4c:ed:58:60:ea:d3:68:41:3e:64: 23:a8:b8:5b:6a:dd:8e:a8:71:3f:20:d3:31:51:86: 4d:28:61:de:cd:50:2e:9f:ce:38:9e:0f:0c:07:57: 53:85:eb:9c:40:2e:5e:ef:1d:45:1b:86:bc:39:e1: 61:98:b3:aa:3b:52:69:ef:98:48:ca:be:ce:2b:ce: a7:08:92:71:b6:e3:d5:88:cb:55:9f:5e:58:cc:99: 41:3d:24:d9:27:5f:17:ff:7a:84:ee:76:50:ea:cb: 7a:ac:dd:84:2d:24:c7:f2:e1:3f:30:e2:63:99:a9: 76:68:45:50:76:6e:ff:79:dc:fa:a2:04:4b:f6:07: f6:45:b7:3a:e1:8f:90:8f:a9:f5:fa:ee:e0:76:ce: e3:91:b8:98:e8:0c:12:fe:ea:c1:cd:91:5d:f6:fc: ab:de:9f:39:62:c7:73:44:3b:dc:be:84:16:c2:bc: 5d:8d:08:89:cb:bc:26:d5:93:f5:db:a8:95:8f:c8: 4d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:97:C1:4F:4A:74:0A:B3:81:AC:E9:D2:36:A2:9C:77:6C:EC:E7:85 X509v3 Authority Key Identifier: keyid:BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/0JfBT0p0CrOBrOnSNqKcd2zs54U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.228.0/24 IPv6: 2a12:8e40:5668::/48 Signature Algorithm: sha256WithRSAEncryption 64:12:24:e8:b6:a9:3a:5f:75:cd:4a:a3:d4:69:4a:d6:03:49: 24:12:c1:9a:29:1f:d4:00:10:ce:7a:6a:e4:74:91:4b:91:6e: 2b:22:ed:c1:98:d6:52:20:9f:0b:70:e4:24:f8:09:89:2b:f9: 41:fb:4f:e1:9a:d8:9e:da:ae:0d:78:98:aa:b8:e1:ad:62:0d: 4b:9e:7a:dd:fb:4b:f7:62:b9:ec:de:f2:41:e4:13:81:e2:04: 03:2e:75:72:ee:18:13:58:8d:34:80:9e:b7:12:12:2d:2d:1b: cb:bf:a5:18:da:f8:73:6d:77:e4:15:89:58:02:d9:c1:09:37: 03:6a:2a:b6:ce:5b:84:a7:1a:fa:83:c3:0a:70:d9:c7:9e:8b: 8f:b1:b9:ef:31:e5:4a:88:e8:8b:40:4f:ef:e4:0f:40:54:39: 7b:32:2a:74:0a:17:72:f6:c0:ed:85:19:2c:13:5f:1b:ba:f5: 8d:47:2a:5e:8e:35:4d:1b:a0:14:08:72:cd:15:3a:82:c9:12: b9:88:54:14:f8:ad:fd:7e:c2:a4:4d:8a:f9:47:b9:0d:9c:fd: 7d:8a:cc:1d:7a:b8:0a:2c:fc:3f:71:86:fc:2f:f1:3a:42:e7: 24:09:01:5a:01:df:60:25:6b:60:ea:46:19:3d:ad:f0:25:47: ba:86:9a:ef -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ffo4uHeRCuz6+qH71q+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlODRhZTdjMDUwM2FjNDUwOTM0YzlmNmNmZjM5YTE1Mzdh NTEyNmQwHhcNMjYwMTAxMTIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDk3YzE0ZjRhNzQwYWIzODFhY2U5ZDIzNmEyOWM3NzZjZWNlNzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+uVBcdn3V3VgA6M2qLBJuw38n6U 30WZ7hzmrR45DIWZmN5D/2lJkzyKL8tOlwEqhvwh/uRnKWHdpDKCWckRj0ztWGDq 02hBPmQjqLhbat2OqHE/INMxUYZNKGHezVAun844ng8MB1dTheucQC5e7x1FG4a8 OeFhmLOqO1Jp75hIyr7OK86nCJJxtuPViMtVn15YzJlBPSTZJ18X/3qE7nZQ6st6 rN2ELSTH8uE/MOJjmal2aEVQdm7/edz6ogRL9gf2Rbc64Y+Qj6n1+u7gds7jkbiY 6AwS/urBzZFd9vyr3p85YsdzRDvcvoQWwrxdjQiJy7wm1ZP126iVj8hNBwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNCXwU9KdAqzgazp0jainHds7OeFMB8GA1UdIwQY MBaAFL6ErnwFA6xFCTTJ9s/zmhU3pRJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAt ODFhMmIzNDdkYTg0LzEvMEpmQlQwcDBDck9Cck9uU05xS2NkMnpzNTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAtODFhMmIzNDdkYTg0 LzEvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAVmjkMA8E AgACMAkDBwAqEo5AVmgwDQYJKoZIhvcNAQELBQADggEBAGQSJOi2qTpfdc1Ko9Rp StYDSSQSwZopH9QAEM56auR0kUuRbisi7cGY1lIgnwtw5CT4CYkr+UH7T+Ga2J7a rg14mKq44a1iDUueet37S/diueze8kHkE4HiBAMudXLuGBNYjTSAnrcSEi0tG8u/ pRja+HNtd+QViVgC2cEJNwNqKrbOW4SnGvqDwwpw2ceei4+xue8x5UqI6ItAT+/k D0BUOXsyKnQKF3L2wO2FGSwTXxu69Y1HKl6ONU0boBQIcs0VOoLJErmIVBT4rf1+ wqRNivlHuQ2c/X2KzB16uAos/D9xhvwv8TpC5yQJAVoB32Ala2DqRhk9rfAlR7qG mu8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:32 2026 by rpki-client