This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/z86jrAzTG4VqsqwKpEyjDskLZ1M.roa
File: z86jrAzTG4VqsqwKpEyjDskLZ1M.roa (raw, json)
Hash identifier: yErgbazANn72petgN069uULkhkpzFlbI5lafDujMOms=
Subject key identifier: CF:CE:A3:AC:0C:D3:1B:85:6A:B2:AC:0A:A4:4C:A3:0E:C9:0B:67:53
Certificate issuer: /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial: 019B7A5B67C6CE09A31FB700796D68E201E8
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/z86jrAzTG4VqsqwKpEyjDskLZ1M.roa
Signing time: Thu 01 Jan 2026 16:19:29 +0000
ROA not before: Thu 01 Jan 2026 16:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 62.132.26.0/23 maxlen: 23
194.45.24.0/23 maxlen: 23
2001:698::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Jan 2026 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:67:c6:ce:09:a3:1f:b7:00:79:6d:68:e2:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Validity
Not Before: Jan 1 16:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfcea3ac0cd31b856ab2ac0aa44ca30ec90b6753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:6a:69:1c:09:b2:ba:d7:bc:12:3e:a5:53:
be:d9:a7:59:a6:53:27:c7:21:35:9f:ee:51:8b:a6:
87:18:b5:51:4c:75:f6:aa:53:89:cc:bd:25:5d:71:
28:85:51:74:34:2d:4f:a8:dc:e5:1f:ce:9a:b4:68:
dc:70:ae:63:8d:7a:3e:51:89:f4:d1:d1:4f:e0:fa:
8b:6c:bc:e6:e3:dd:1b:04:2b:26:84:3b:9c:9b:47:
9e:c8:b7:98:73:cd:b7:c7:89:75:52:eb:81:42:a0:
05:21:e2:bd:d9:03:95:de:d8:32:3a:a0:46:d3:a2:
30:f9:9e:82:72:f8:35:44:6d:a8:9c:db:68:b6:87:
e6:b2:4c:38:42:8c:71:8a:4a:7f:8b:66:59:31:bc:
8a:25:54:54:8e:e3:35:8b:7d:5d:36:b6:74:6d:c6:
16:1b:43:e9:1f:b6:eb:2b:74:38:15:1a:8b:e7:6d:
3b:54:7e:57:bb:17:eb:fa:7e:c0:2e:d2:40:c0:d2:
db:87:e3:fd:fd:bb:70:e4:3a:a3:86:00:a8:66:72:
db:9c:dc:00:a0:2a:99:e0:e8:5a:b1:5b:a7:40:98:
df:ee:2e:3d:96:58:e8:7b:10:39:dc:fc:d5:3a:db:
92:0c:e0:c7:95:66:0e:9f:86:da:ee:06:ec:52:d9:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CE:A3:AC:0C:D3:1B:85:6A:B2:AC:0A:A4:4C:A3:0E:C9:0B:67:53
X509v3 Authority Key Identifier:
keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/z86jrAzTG4VqsqwKpEyjDskLZ1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.26.0/23
194.45.24.0/23
IPv6:
2001:698::/47
Signature Algorithm: sha256WithRSAEncryption
0b:ad:73:35:b6:75:0c:71:6d:ca:2a:9f:75:79:7e:4e:72:64:
02:25:88:3f:4f:e7:18:dc:64:57:ee:c4:45:f4:e4:04:0c:e5:
f0:eb:0f:85:78:b9:76:12:af:a3:0b:ad:66:f5:24:f0:2d:13:
03:02:32:36:76:b8:df:fd:0d:71:ce:ef:9c:7e:56:54:ee:0a:
9c:c0:f8:66:3d:5e:27:98:0c:41:84:6f:e0:e6:0a:69:c3:35:
d3:ff:4b:a1:9c:0c:33:aa:ce:2f:5c:f7:bc:97:52:59:74:5c:
7d:d4:71:26:a4:74:cd:73:5d:ef:96:b1:5b:a5:d6:93:d8:61:
5c:66:29:01:c3:9c:fe:3d:c2:a2:03:77:84:c8:ce:86:4f:a8:
3f:53:3f:0d:60:2b:74:38:93:70:74:b3:0b:81:d3:bb:7a:a3:
95:f9:dd:6a:a6:0c:c1:79:2f:1e:ee:3f:71:b3:49:e7:ab:26:
dd:31:e1:79:ca:00:e9:fc:34:9b:f7:3e:28:39:33:93:b3:6d:
eb:55:6d:6b:f9:44:be:c1:36:cd:d4:f8:fc:68:d7:69:42:9a:
86:80:0b:da:d3:32:82:bb:13:2d:23:ff:47:89:63:8c:91:90:
7e:ea:d6:9a:bc:68:66:27:2a:c5:84:6f:2a:26:40:0f:74:1d:
e9:cf:69:6f
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZt6W2fGzgmjH7cAeW1o4gHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmNlYTNhYzBjZDMxYjg1NmFiMmFjMGFhNDRjYTMwZWM5MGI2NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJRqaRwJsrrXvBI+pVO+2adZplMn
xyE1n+5Ri6aHGLVRTHX2qlOJzL0lXXEohVF0NC1PqNzlH86atGjccK5jjXo+UYn0
0dFP4PqLbLzm490bBCsmhDucm0eeyLeYc823x4l1UuuBQqAFIeK92QOV3tgyOqBG
06Iw+Z6Ccvg1RG2onNtotofmskw4Qoxxikp/i2ZZMbyKJVRUjuM1i31dNrZ0bcYW
G0PpH7brK3Q4FRqL5207VH5Xuxfr+n7ALtJAwNLbh+P9/btw5DqjhgCoZnLbnNwA
oCqZ4OhasVunQJjf7i49lljoexA53PzVOtuSDODHlWYOn4ba7gbsUtlZUQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFM/Oo6wM0xuFarKsCqRMow7JC2dTMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvejg2anJBelRHNFZxc3F3S3BFeWpEc2tMWjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBPoQaAwQB
wi0YMA8EAgACMAkDBwEgAQaYAAAwDQYJKoZIhvcNAQELBQADggEBAAutczW2dQxx
bcoqn3V5fk5yZAIliD9P5xjcZFfuxEX05AQM5fDrD4V4uXYSr6MLrWb1JPAtEwMC
MjZ2uN/9DXHO75x+VlTuCpzA+GY9XieYDEGEb+DmCmnDNdP/S6GcDDOqzi9c97yX
Ull0XH3UcSakdM1zXe+WsVul1pPYYVxmKQHDnP49wqIDd4TIzoZPqD9TPw1gK3Q4
k3B0swuB07t6o5X53WqmDMF5Lx7uP3GzSeerJt0x4XnKAOn8NJv3Pig5M5OzbetV
bWv5RL7BNs3U+Pxo12lCmoaAC9rTMoK7Ey0j/0eJY4yRkH7q1pq8aGYnKsWEbyom
QA90HenPaW8=
-----END CERTIFICATE-----
Generated at Sun Jan 18 15:29:28 2026 by rpki-client