This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa File: 86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa (raw, json) Hash identifier: qT66pNHhUkr1l00U8ii3NGUnnavLipuFk5yIEwpKx3Y= Subject key identifier: F3:A1:0E:20:52:45:7B:9C:52:44:A4:18:D1:01:35:7B:37:48:78:54 Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52 Certificate serial: 019B7B35BAF697764D297158A3BD98704A76 Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212672 IP address blocks: 185.39.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ba:f6:97:76:4d:29:71:58:a3:bd:98:70:4a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3a10e2052457b9c5244a418d101357b37487854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:7f:21:23:9f:cc:5f:e0:1d:a1:ac:39:fe: c4:fb:e7:a7:cd:2f:17:b1:ea:d3:5c:ae:6f:31:d5: b8:43:d0:79:fe:8f:ae:6a:37:1a:59:94:4b:57:1d: b5:d9:b0:a1:e5:cf:da:d2:1a:cb:ac:0e:b1:2d:38: a5:b1:13:d9:bf:60:72:e0:e6:9c:c7:cb:42:b1:d2: 1f:71:49:d5:d3:6b:d1:cd:07:20:5b:c6:d9:56:c1: 0f:ff:af:93:db:01:ab:a4:7c:90:af:60:b8:47:0e: a3:8b:54:0f:25:d3:52:51:5d:48:4e:fc:80:3f:27: 55:09:12:d2:bf:11:3e:8f:02:40:10:ef:3d:e5:c8: 04:67:fb:b5:46:a2:f0:7f:b7:05:4d:45:a9:ff:ff: c6:8f:38:73:86:cb:64:c0:ef:2c:76:94:ea:94:c6: c5:b2:ab:88:4f:c8:af:8a:8c:ec:6f:96:62:e2:40: e0:0f:e8:a8:e7:08:54:86:d1:ed:06:cc:46:df:07: d2:f8:98:2e:d4:b3:f9:cf:09:20:7f:61:a7:eb:53: 1d:63:0c:5b:2f:1f:de:ce:ff:e1:79:ef:5f:a8:34: 71:ab:0c:d1:cb:6a:ce:a9:0c:d5:b9:73:be:6c:3f: 03:5e:64:7d:60:d2:80:13:8d:59:2b:5b:fe:1f:6d: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A1:0E:20:52:45:7B:9C:52:44:A4:18:D1:01:35:7B:37:48:78:54 X509v3 Authority Key Identifier: keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/86EOIFJFe5xSRKQY0QE1ezdIeFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.77.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:8c:3b:08:bf:e5:15:85:53:35:76:f7:03:4d:f4:85:4d:52: 6c:0a:f8:3e:0c:a9:01:46:70:63:ea:1a:e8:42:a1:cc:d5:51: f0:32:be:cb:35:fd:9a:51:55:00:5d:55:22:2f:f8:91:a4:b0: 6f:70:98:e0:d4:ef:45:de:71:64:01:a3:22:63:ea:db:8e:42: 1e:06:7b:44:82:a7:2b:f7:99:b9:dc:38:50:64:a6:e4:67:64: 6d:6b:62:88:6a:f2:63:f4:95:9c:60:a3:5d:2e:f7:1a:e5:75: 82:c2:b1:91:da:d7:a5:05:48:73:9f:bd:e6:77:40:ad:b9:89: 80:03:ad:dd:79:08:cb:ff:b3:a9:ff:a7:d7:2c:86:1c:43:6c: 67:01:f3:5b:aa:a8:61:b3:d6:87:e9:3a:7f:3c:97:43:25:c5: 4a:e0:f4:5b:8f:43:54:e5:0c:54:fc:a0:77:6c:e9:76:d9:da: 4a:7a:3b:ee:5a:ee:be:64:5a:14:c8:7e:f9:c8:e8:56:88:f5: 65:3b:ed:df:ba:00:92:86:31:76:35:9b:b7:cf:dc:cd:84:c9: 95:ed:e1:94:b1:11:d4:4b:75:b0:10:c8:f9:cf:9f:e7:65:da: 14:ee:73:f9:86:ec:28:75:aa:a0:ba:2c:8b:b3:5f:7e:64:66: 80:85:5b:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nbr2l3ZNKXFYo72YcEp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl NGJiNTIwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2ExMGUyMDUyNDU3YjljNTI0NGE0MThkMTAxMzU3YjM3NDg3ODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdR/ISOfzF/gHaGsOf7E++enzS8X serTXK5vMdW4Q9B5/o+uajcaWZRLVx212bCh5c/a0hrLrA6xLTilsRPZv2By4Oac x8tCsdIfcUnV02vRzQcgW8bZVsEP/6+T2wGrpHyQr2C4Rw6ji1QPJdNSUV1ITvyA PydVCRLSvxE+jwJAEO895cgEZ/u1RqLwf7cFTUWp///GjzhzhstkwO8sdpTqlMbF squIT8iviozsb5Zi4kDgD+io5whUhtHtBsxG3wfS+Jgu1LP5zwkgf2Gn61MdYwxb Lx/ezv/hee9fqDRxqwzRy2rOqQzVuXO+bD8DXmR9YNKAE41ZK1v+H22HmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOhDiBSRXucUkSkGNEBNXs3SHhUMB8GA1UdIwQY MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt OWFkZTM5NmY3YzRjLzEvODZFT0lGSkZlNXhTUktRWTBRRTFlemRJZUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSdNMA0G CSqGSIb3DQEBCwUAA4IBAQAdjDsIv+UVhVM1dvcDTfSFTVJsCvg+DKkBRnBj6hro QqHM1VHwMr7LNf2aUVUAXVUiL/iRpLBvcJjg1O9F3nFkAaMiY+rbjkIeBntEgqcr 95m53DhQZKbkZ2Rta2KIavJj9JWcYKNdLvca5XWCwrGR2telBUhzn73md0CtuYmA A63deQjL/7Op/6fXLIYcQ2xnAfNbqqhhs9aH6Tp/PJdDJcVK4PRbj0NU5QxU/KB3 bOl22dpKejvuWu6+ZFoUyH75yOhWiPVlO+3fugCShjF2NZu3z9zNhMmV7eGUsRHU S3WwEMj5z5/nZdoU7nP5huwodaqguiyLs19+ZGaAhVuE -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:36 2026 by rpki-client