This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/_Na7vfMNE6KH8ABANOjjdG6uU4g.roa File: _Na7vfMNE6KH8ABANOjjdG6uU4g.roa (raw, json) Hash identifier: ucbQ9Dez3TCtvipedZVK8XnEorKB2QzPJMl5rkm50kY= Subject key identifier: FC:D6:BB:BD:F3:0D:13:A2:87:F0:00:40:34:E8:E3:74:6E:AE:53:88 Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Certificate serial: 019B7D5D073BE96C5078EF0969B4DCBE8543 Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/_Na7vfMNE6KH8ABANOjjdG6uU4g.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 86.54.20.0/24 maxlen: 24 86.54.228.0/24 maxlen: 24 86.54.235.0/24 maxlen: 24 86.54.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:07:3b:e9:6c:50:78:ef:09:69:b4:dc:be:85:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0 Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcd6bbbdf30d13a287f0004034e8e3746eae5388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:3a:31:ed:c2:71:46:e3:bc:63:bd:f2:cc: 60:52:e2:f3:55:94:51:4c:ed:d6:1a:d9:0e:ef:47: 80:a7:50:70:53:7e:23:d3:ef:72:ea:95:aa:3d:62: 73:71:d3:6f:2e:c9:c9:a8:3b:3d:7f:9c:b0:92:79: 81:da:e9:5a:06:5a:1c:3b:87:49:ff:65:66:53:37: ec:3a:47:e7:7b:93:6a:b8:13:b1:0a:db:3a:fb:c6: fc:39:b3:19:2e:0c:10:20:1d:6f:50:5d:42:f3:cc: 37:e7:46:3b:2f:55:38:dc:96:ac:f1:f6:b3:87:a5: fd:80:ff:49:49:3d:88:4b:d4:e1:45:53:b6:28:89: 9c:43:14:04:8e:56:99:f0:37:4c:bb:ae:60:e4:dd: f8:44:b2:eb:ea:46:97:44:47:40:e2:f9:95:f6:32: cd:7c:cd:e8:22:b3:45:b8:8b:fb:a5:02:56:7c:67: 2d:7c:17:51:30:68:22:8a:0c:df:93:6a:10:7d:31: fb:3c:05:39:4e:4a:a2:5a:c4:ed:d0:d9:8d:96:d9: 47:f4:68:8a:de:e6:29:c4:b5:8c:49:e0:16:57:15: 81:ac:43:3b:0e:02:e1:d0:b4:89:dd:78:19:b3:c5: 19:6b:b7:f6:5d:02:fc:61:32:ba:0e:48:14:cb:67: 2f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D6:BB:BD:F3:0D:13:A2:87:F0:00:40:34:E8:E3:74:6E:AE:53:88 X509v3 Authority Key Identifier: keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/_Na7vfMNE6KH8ABANOjjdG6uU4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.20.0/24 86.54.228.0/24 86.54.235.0/24 86.54.249.0/24 Signature Algorithm: sha256WithRSAEncryption 05:8e:3c:90:80:ab:40:c7:12:8c:81:8e:12:ab:00:9c:ac:7f: 27:22:3f:58:50:bd:0f:bd:14:4a:0a:30:9d:09:dd:d8:59:6a: b5:2c:7f:6e:dc:ca:4a:79:b9:3b:5f:63:57:ec:17:dd:ca:eb: 55:37:1e:85:b3:68:1e:e9:f4:dd:91:6e:cd:04:30:90:43:c7: cc:c7:33:1d:05:1e:78:54:5f:a9:0b:65:8a:b8:92:f8:21:cc: 0b:01:63:48:e1:0f:2d:36:4b:e3:7b:50:cb:ee:fa:13:a5:c8: 70:25:80:15:eb:d0:81:af:14:6c:6a:26:e0:12:75:ae:57:bb: f2:47:06:10:ca:56:3f:6f:91:d2:24:b1:52:ec:b6:61:1c:06: fd:93:86:f0:93:8a:31:47:06:f6:ab:24:b8:d5:85:72:1e:74: ea:56:9d:ce:28:30:bd:2c:51:19:c9:de:30:ad:72:81:3e:4e: ea:69:8c:2a:e1:bc:b9:f3:23:c7:f9:bb:fa:2e:4f:90:f9:ac: 59:0a:61:bf:62:bf:a6:75:e0:45:9a:db:11:c7:ef:30:ff:a3: 4c:34:8e:07:a9:0a:40:af:82:8f:b2:7b:f5:77:35:3e:ca:9f: 0b:60:16:16:fd:d7:cf:b8:52:1c:ea:3b:8c:c0:f5:7a:d6:3d: 0c:4d:b8:45 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XQc76WxQeO8JabTcvoVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz ZGNiZjAwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Q2YmJiZGYzMGQxM2EyODdmMDAwNDAzNGU4ZTM3NDZlYWU1Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBc6Me3CcUbjvGO98sxgUuLzVZRR TO3WGtkO70eAp1BwU34j0+9y6pWqPWJzcdNvLsnJqDs9f5ywknmB2ulaBlocO4dJ /2VmUzfsOkfne5NquBOxCts6+8b8ObMZLgwQIB1vUF1C88w350Y7L1U43Jas8faz h6X9gP9JST2IS9ThRVO2KImcQxQEjlaZ8DdMu65g5N34RLLr6kaXREdA4vmV9jLN fM3oIrNFuIv7pQJWfGctfBdRMGgiigzfk2oQfTH7PAU5TkqiWsTt0NmNltlH9GiK 3uYpxLWMSeAWVxWBrEM7DgLh0LSJ3XgZs8UZa7f2XQL8YTK6DkgUy2cvNwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPzWu73zDROih/AAQDTo43RurlOIMB8GA1UdIwQY MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt YjRhYWEyM2ZkYWE5LzEvX05hN3ZmTU5FNktIOEFCQU5PampkRzZ1VTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5 LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVjYUAwQA VjbkAwQAVjbrAwQAVjb5MA0GCSqGSIb3DQEBCwUAA4IBAQAFjjyQgKtAxxKMgY4S qwCcrH8nIj9YUL0PvRRKCjCdCd3YWWq1LH9u3MpKebk7X2NX7BfdyutVNx6Fs2ge 6fTdkW7NBDCQQ8fMxzMdBR54VF+pC2WKuJL4IcwLAWNI4Q8tNkvje1DL7voTpchw JYAV69CBrxRsaibgEnWuV7vyRwYQylY/b5HSJLFS7LZhHAb9k4bwk4oxRwb2qyS4 1YVyHnTqVp3OKDC9LFEZyd4wrXKBPk7qaYwq4by58yPH+bv6Lk+Q+axZCmG/Yr+m deBFmtsRx+8w/6NMNI4HqQpAr4KPsnv1dzU+yp8LYBYW/dfPuFIc6juMwPV61j0M TbhF -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:16 2026 by rpki-client