This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hjJ2dh9WkCJvId42nBaNK0DfJQ4.roa File: hjJ2dh9WkCJvId42nBaNK0DfJQ4.roa (raw, json) Hash identifier: soNvW/tmStKQSGFafN9/NKP7RG5wnZ/o8P4a68ZfACw= Subject key identifier: 86:32:76:76:1F:56:90:22:6F:21:DE:36:9C:16:8D:2B:40:DF:25:0E Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Certificate serial: 019B0C4A3BA90C5AA99D0F843BD7C2A1EF16 Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hjJ2dh9WkCJvId42nBaNK0DfJQ4.roa Signing time: Thu 11 Dec 2025 07:22:29 +0000 ROA not before: Thu 11 Dec 2025 07:22:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215152 IP address blocks: 86.110.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:4a:3b:a9:0c:5a:a9:9d:0f:84:3b:d7:c2:a1:ef:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184 Validity Not Before: Dec 11 07:22:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=863276761f5690226f21de369c168d2b40df250e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c7:5f:c0:eb:fb:60:dd:32:89:38:88:c3:3d: 06:92:d3:5e:60:9a:55:64:9c:bf:c5:45:6a:8d:e7: b3:25:51:b2:f3:6f:5f:08:f7:a7:c9:32:c0:b9:9b: bf:a9:1a:f9:79:92:35:08:63:05:eb:d8:23:da:8d: 6b:90:a5:e9:11:a7:96:8b:39:e8:99:e0:c4:f6:0a: 00:88:04:7c:0f:b5:90:09:66:aa:62:b2:8d:8c:a8: 5f:6a:9a:b1:9c:ab:e2:92:41:c1:d7:38:86:ba:d6: a1:f6:05:23:c1:ec:17:71:f5:74:59:6f:da:74:e6: 6e:89:40:33:cc:79:4f:fd:44:20:8c:b3:9a:6c:80: c0:18:08:59:45:c9:8b:6e:c5:0a:cd:fa:42:86:28: 3d:86:ae:22:fe:2d:8d:53:de:03:86:2f:fd:58:31: 9f:d8:76:c0:a5:55:31:9c:fe:99:ea:b2:c4:83:a5: dc:ab:d1:d9:4d:96:2f:59:85:c1:e0:32:e8:00:60: 21:55:1f:87:ae:30:67:68:e3:0b:4d:1c:63:b8:37: da:c6:ed:52:68:dc:0a:d3:98:43:06:d3:e8:22:e7: f0:78:ea:6a:eb:ac:20:88:f5:40:55:6c:ee:3b:73: 64:cf:b2:62:a5:07:39:34:25:03:32:df:68:8f:8f: 65:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:76:76:1F:56:90:22:6F:21:DE:36:9C:16:8D:2B:40:DF:25:0E X509v3 Authority Key Identifier: keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/hjJ2dh9WkCJvId42nBaNK0DfJQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.110.44.0/24 Signature Algorithm: sha256WithRSAEncryption 59:37:72:66:10:73:eb:e6:24:33:d7:94:c2:6c:c0:0d:82:63: ae:52:58:18:ac:65:93:fb:be:39:f7:36:35:52:e0:43:e4:81: 0e:aa:54:64:38:de:63:86:82:07:15:5b:bb:a6:9e:ff:1a:04: f3:b5:69:23:5d:2a:8a:d6:44:91:90:5b:90:da:9d:a7:c7:11: 47:3a:73:89:1f:3c:88:f6:eb:80:97:38:21:64:80:99:88:48: 2e:22:c2:d6:d8:62:21:a6:a0:2e:08:db:94:af:76:59:c2:90: 50:2f:cd:e0:3c:8d:e2:65:27:9d:c3:30:05:05:2f:4f:ea:6a: cb:0d:6c:d6:b9:e1:2d:b3:31:1a:e4:5b:9d:cb:6a:a2:94:9f: c5:cf:b8:34:be:ca:ed:8d:90:6c:6a:05:63:93:a5:e7:4f:ec: 6b:6d:08:5a:4a:01:27:3c:70:3d:45:82:c5:a6:41:2e:f2:91: 06:ca:cb:c2:a0:17:21:3a:73:29:f7:5b:19:e3:c6:f3:9c:c7: 04:a3:44:c4:da:ee:a9:04:db:ed:f8:d9:e8:1f:9c:85:cb:c3: f7:73:10:a7:95:2c:45:ae:04:1a:77:97:ef:8e:2b:72:67:b1: ca:b4:40:e6:8d:08:0e:0b:82:98:95:5b:77:9b:cd:28:42:6e: 53:dd:ba:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsMSjupDFqpnQ+EO9fCoe8WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi YjAxODQwHhcNMjUxMjExMDcyMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjMyNzY3NjFmNTY5MDIyNmYyMWRlMzY5YzE2OGQyYjQwZGYyNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sdfwOv7YN0yiTiIwz0GktNeYJpV ZJy/xUVqjeezJVGy829fCPenyTLAuZu/qRr5eZI1CGMF69gj2o1rkKXpEaeWizno meDE9goAiAR8D7WQCWaqYrKNjKhfapqxnKvikkHB1ziGutah9gUjwewXcfV0WW/a dOZuiUAzzHlP/UQgjLOabIDAGAhZRcmLbsUKzfpChig9hq4i/i2NU94Dhi/9WDGf 2HbApVUxnP6Z6rLEg6Xcq9HZTZYvWYXB4DLoAGAhVR+HrjBnaOMLTRxjuDfaxu1S aNwK05hDBtPoIufweOpq66wgiPVAVWzuO3Nkz7JipQc5NCUDMt9oj49l6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIYydnYfVpAibyHeNpwWjStA3yUOMB8GA1UdIwQY MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvaGpKMmRoOVdrQ0p2SWQ0Mm5CYU5LMERmSlE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm4sMA0G CSqGSIb3DQEBCwUAA4IBAQBZN3JmEHPr5iQz15TCbMANgmOuUlgYrGWT+7459zY1 UuBD5IEOqlRkON5jhoIHFVu7pp7/GgTztWkjXSqK1kSRkFuQ2p2nxxFHOnOJHzyI 9uuAlzghZICZiEguIsLW2GIhpqAuCNuUr3ZZwpBQL83gPI3iZSedwzAFBS9P6mrL DWzWueEtszEa5Fudy2qilJ/Fz7g0vsrtjZBsagVjk6XnT+xrbQhaSgEnPHA9RYLF pkEu8pEGysvCoBchOnMp91sZ48bznMcEo0TE2u6pBNvt+NnoH5yFy8P3cxCnlSxF rgQad5fvjityZ7HKtEDmjQgOC4KYlVt3m80oQm5T3brk -----END CERTIFICATE-----Generated at Sat Dec 20 12:32:45 2025 by rpki-client