This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/uLD67uNvCc4ky2TYfWAY_NstWnE.roa File: uLD67uNvCc4ky2TYfWAY_NstWnE.roa (raw, json) Hash identifier: J64Q9GWUgcn8Guex3fYi7oSiRMd56hoswqyttiC77H4= Subject key identifier: B8:B0:FA:EE:E3:6F:09:CE:24:CB:64:D8:7D:60:18:FC:DB:2D:5A:71 Certificate issuer: /CN=218dd6c0618bbfeff1a84c94fd64189e1845b188 Certificate serial: 019C139446129EFF44C12A3F325EAC6D8823 Authority key identifier: 21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/uLD67uNvCc4ky2TYfWAY_NstWnE.roa Signing time: Sat 31 Jan 2026 10:23:30 +0000 ROA not before: Sat 31 Jan 2026 10:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205506 IP address blocks: 86.104.30.0/23 maxlen: 23 86.104.30.0/24 maxlen: 24 86.104.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.mft rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:13:94:46:12:9e:ff:44:c1:2a:3f:32:5e:ac:6d:88:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=218dd6c0618bbfeff1a84c94fd64189e1845b188 Validity Not Before: Jan 31 10:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8b0faeee36f09ce24cb64d87d6018fcdb2d5a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:ff:41:b2:eb:08:6a:8f:ac:e3:c5:0a:90: 09:a2:6d:d5:e5:cc:49:ee:28:4b:c6:f9:06:98:8f: fb:18:72:4f:3c:48:ef:88:33:01:d7:c9:1b:53:06: 34:4b:a3:80:20:ad:ff:c2:5b:ba:d0:8b:be:9b:e9: f5:43:9f:2c:93:3b:d3:f1:5b:9e:bb:b9:5d:1a:16: cb:d9:8b:46:db:aa:94:b7:c7:bd:2f:ff:05:ef:31: 27:14:97:af:7e:9f:ba:5a:7f:61:10:3e:68:98:8d: ea:79:0c:b8:65:79:08:17:50:f0:09:7f:3f:60:cd: d6:dc:10:d4:a6:9b:30:97:2b:e0:0f:96:f7:5f:80: 5b:f5:cc:69:95:e4:e4:6b:50:c1:7a:39:d5:ee:55: 34:75:ae:13:7e:40:8f:6b:60:ad:6b:57:16:ec:10: c2:06:f5:5b:b2:a2:48:36:6b:00:3e:13:33:14:9f: 2f:63:fa:6b:b8:cc:c4:5b:f2:10:a6:a0:c8:4c:92: cf:5a:90:73:cb:b2:47:b2:bf:6f:7d:cd:b4:96:81: b3:2b:b5:98:05:f6:87:0b:60:74:83:1e:0a:67:6d: 8b:1c:32:cf:bb:f4:cf:08:2c:7f:d8:92:02:21:6c: 74:0a:be:a5:ce:84:7c:f6:d3:62:77:be:6d:34:2f: 01:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B0:FA:EE:E3:6F:09:CE:24:CB:64:D8:7D:60:18:FC:DB:2D:5A:71 X509v3 Authority Key Identifier: keyid:21:8D:D6:C0:61:8B:BF:EF:F1:A8:4C:94:FD:64:18:9E:18:45:B1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IY3WwGGLv-_xqEyU_WQYnhhFsYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/uLD67uNvCc4ky2TYfWAY_NstWnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/aa3601-95e2-4ac6-b581-9bb6bb281ea7/1/IY3WwGGLv-_xqEyU_WQYnhhFsYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.104.30.0/23 Signature Algorithm: sha256WithRSAEncryption 58:29:e8:b0:c8:0d:9c:79:eb:f1:4f:53:f6:c1:16:0e:fd:26: 1a:22:a6:dd:40:68:f7:06:67:9c:1b:55:00:02:17:b7:fd:dc: 62:d6:1b:6d:64:71:d1:01:78:35:4e:70:55:d3:aa:f5:c3:c3: a9:02:1f:26:50:b2:62:37:82:ca:10:30:d0:1a:e2:7c:56:27: be:63:bf:6e:6a:82:3f:4a:3d:05:6f:0f:67:f9:53:4a:a8:75: b6:75:12:da:e0:c5:b6:35:65:2f:24:c3:be:d2:8d:8f:69:6b: f6:0c:b0:17:9c:3f:c9:d9:8f:99:42:bc:3a:67:0a:ef:9e:88: b6:ea:84:32:f1:92:5b:e5:5c:1a:f1:40:1c:fe:b5:c7:a8:11: e5:bc:de:24:9e:23:b6:45:3e:c5:5e:2a:05:17:56:12:f9:ba: 8b:58:aa:45:4c:52:45:66:d0:92:5a:d5:02:ac:c0:4a:b5:39: ab:d5:4f:e3:93:71:56:e3:83:1f:08:56:61:db:c5:03:08:b1: 06:0c:db:55:80:09:4b:b8:d7:75:90:6a:95:58:21:6a:bc:c0: 52:c4:70:f7:07:cf:d8:17:0f:bf:e2:c5:1a:bb:50:fe:4b:8d: 24:ab:2c:17:86:c4:cf:97:a9:5a:a7:f4:f6:af:8d:1d:47:84: 04:70:aa:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwTlEYSnv9EwSo/Ml6sbYgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxOGRkNmMwNjE4YmJmZWZmMWE4NGM5NGZkNjQxODllMTg0 NWIxODgwHhcNMjYwMTMxMTAyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGIwZmFlZWUzNmYwOWNlMjRjYjY0ZDg3ZDYwMThmY2RiMmQ1YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9v/QbLrCGqPrOPFCpAJom3V5cxJ 7ihLxvkGmI/7GHJPPEjviDMB18kbUwY0S6OAIK3/wlu60Iu+m+n1Q58skzvT8Vue u7ldGhbL2YtG26qUt8e9L/8F7zEnFJevfp+6Wn9hED5omI3qeQy4ZXkIF1DwCX8/ YM3W3BDUppswlyvgD5b3X4Bb9cxpleTka1DBejnV7lU0da4TfkCPa2Cta1cW7BDC BvVbsqJINmsAPhMzFJ8vY/pruMzEW/IQpqDITJLPWpBzy7JHsr9vfc20loGzK7WY BfaHC2B0gx4KZ22LHDLPu/TPCCx/2JICIWx0Cr6lzoR89tNid75tNC8BjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLiw+u7jbwnOJMtk2H1gGPzbLVpxMB8GA1UdIwQY MBaAFCGN1sBhi7/v8ahMlP1kGJ4YRbGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEt OWJiNmJiMjgxZWE3LzEvdUxENjd1TnZDYzRreTJUWWZXQVlfTnN0V25FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hYTM2MDEtOTVlMi00YWM2LWI1ODEtOWJiNmJiMjgxZWE3 LzEvSVkzV3dHR0x2LV94cUV5VV9XUVluaGhGc1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVmgeMA0G CSqGSIb3DQEBCwUAA4IBAQBYKeiwyA2ceevxT1P2wRYO/SYaIqbdQGj3BmecG1UA Ahe3/dxi1httZHHRAXg1TnBV06r1w8OpAh8mULJiN4LKEDDQGuJ8Vie+Y79uaoI/ Sj0Fbw9n+VNKqHW2dRLa4MW2NWUvJMO+0o2PaWv2DLAXnD/J2Y+ZQrw6Zwrvnoi2 6oQy8ZJb5Vwa8UAc/rXHqBHlvN4kniO2RT7FXioFF1YS+bqLWKpFTFJFZtCSWtUC rMBKtTmr1U/jk3FW44MfCFZh28UDCLEGDNtVgAlLuNd1kGqVWCFqvMBSxHD3B8/Y Fw+/4sUau1D+S40kqywXhsTPl6lap/T2r40dR4QEcKqj -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:52 2026 by rpki-client