This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/RR4amUhd1_8NwNPE8mlsHXiS56g.roa File: RR4amUhd1_8NwNPE8mlsHXiS56g.roa (raw, json) Hash identifier: 1Mc5GJlb/1qqMkRnVaLF53jECYF+jJTQrL5JCMptfxs= Subject key identifier: 45:1E:1A:99:48:5D:D7:FF:0D:C0:D3:C4:F2:69:6C:1D:78:92:E7:A8 Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52 Certificate serial: 019B7B35B9C85B8F1DA7A85F34487D70B396 Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/RR4amUhd1_8NwNPE8mlsHXiS56g.roa Signing time: Thu 01 Jan 2026 20:17:57 +0000 ROA not before: Thu 01 Jan 2026 20:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20676 IP address blocks: 185.39.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:b9:c8:5b:8f:1d:a7:a8:5f:34:48:7d:70:b3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52 Validity Not Before: Jan 1 20:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=451e1a99485dd7ff0dc0d3c4f2696c1d7892e7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:18:43:19:39:c7:09:04:29:45:c2:c4:11: e7:6e:cd:d9:de:86:0c:0f:6b:53:cc:11:cd:e8:9e: c7:ce:85:cb:e0:50:81:19:08:4d:39:43:29:6c:a5: b3:59:5e:4d:d5:23:f7:6a:2a:20:0a:85:e0:74:bb: 74:c6:91:73:60:85:8a:30:be:2b:89:f6:a9:81:e8: 0d:9f:48:e7:75:63:aa:ff:6c:84:a3:24:60:9c:6a: 55:b2:5a:35:09:62:0f:14:41:b9:51:77:6b:4e:ea: 38:2e:1d:1e:98:a3:9d:a3:9a:19:b6:cf:3e:59:e1: 0e:90:0d:54:c6:c1:fe:a3:e9:72:a0:a7:79:1f:7d: e6:6d:71:43:96:63:5e:03:4d:c3:5b:7a:ab:8f:5f: 49:46:d6:81:c8:18:72:db:35:9a:94:87:28:90:1f: f0:5d:52:7b:f4:df:84:6f:9d:72:bf:28:e7:87:c1: f1:7f:4c:87:42:c9:28:3b:6d:1e:72:18:c5:c0:90: c3:2c:7f:83:62:cc:3a:54:1c:3f:60:79:c7:c8:bd: 99:3b:70:92:6a:bc:4c:a1:a4:a9:fb:75:e0:13:d8: 19:9c:97:41:58:61:61:0c:71:7e:ad:41:43:ac:c3: 21:33:00:db:95:86:26:6a:c1:47:77:50:0a:8a:be: bd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1E:1A:99:48:5D:D7:FF:0D:C0:D3:C4:F2:69:6C:1D:78:92:E7:A8 X509v3 Authority Key Identifier: keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/RR4amUhd1_8NwNPE8mlsHXiS56g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.77.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:c1:39:b3:e8:55:06:64:0b:57:c4:07:4d:ef:cb:eb:38:07: 3c:6b:b6:6e:99:5a:b4:55:81:ff:3d:11:e9:7e:91:ad:5c:aa: 29:fa:8f:7d:10:f1:2c:22:9d:4f:3e:d6:e1:ec:f8:46:74:01: b0:00:05:da:42:09:fe:e6:6f:1d:ba:c0:4d:53:26:81:2d:1c: f2:15:ad:42:5f:2f:3c:7c:5e:37:3c:fe:a3:f0:c2:52:c3:44: 29:36:a4:be:b9:18:83:48:28:08:9a:fb:ea:30:96:6e:e4:c6: 11:ea:cf:bc:1d:e8:72:b0:ff:bf:82:4d:33:60:a2:b2:41:42: 3f:5e:c5:12:8a:7d:2a:f0:6b:79:1c:98:82:34:3c:d3:4b:33: 11:f3:ae:eb:6a:69:16:79:61:84:44:bb:09:e7:2e:a7:bf:d4: 24:0d:24:91:08:e3:59:9c:45:2a:86:67:4a:49:5b:c6:07:53: a1:42:70:1b:c3:61:9e:13:cf:5d:23:9b:77:9c:45:b1:58:0d: d3:b7:af:e8:57:46:2f:84:35:dc:df:96:36:2b:42:b5:96:98: d7:6f:91:02:dd:36:65:ca:90:aa:90:17:e8:fc:f8:db:1b:e6: 55:f9:fa:78:32:6f:2a:75:54:c9:e5:9a:80:86:2b:7f:59:b9: 86:80:91:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NbnIW48dp6hfNEh9cLOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl NGJiNTIwHhcNMjYwMTAxMjAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTFlMWE5OTQ4NWRkN2ZmMGRjMGQzYzRmMjY5NmMxZDc4OTJlN2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ0YQxk5xwkEKUXCxBHnbs3Z3oYM D2tTzBHN6J7HzoXL4FCBGQhNOUMpbKWzWV5N1SP3aiogCoXgdLt0xpFzYIWKML4r ifapgegNn0jndWOq/2yEoyRgnGpVslo1CWIPFEG5UXdrTuo4Lh0emKOdo5oZts8+ WeEOkA1UxsH+o+lyoKd5H33mbXFDlmNeA03DW3qrj19JRtaByBhy2zWalIcokB/w XVJ79N+Eb51yvyjnh8Hxf0yHQskoO20echjFwJDDLH+DYsw6VBw/YHnHyL2ZO3CS arxMoaSp+3XgE9gZnJdBWGFhDHF+rUFDrMMhMwDblYYmasFHd1AKir69IQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUeGplIXdf/DcDTxPJpbB14kueoMB8GA1UdIwQY MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt OWFkZTM5NmY3YzRjLzEvUlI0YW1VaGQxXzhOd05QRThtbHNIWGlTNTZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSdNMA0G CSqGSIb3DQEBCwUAA4IBAQA/wTmz6FUGZAtXxAdN78vrOAc8a7ZumVq0VYH/PRHp fpGtXKop+o99EPEsIp1PPtbh7PhGdAGwAAXaQgn+5m8dusBNUyaBLRzyFa1CXy88 fF43PP6j8MJSw0QpNqS+uRiDSCgImvvqMJZu5MYR6s+8HehysP+/gk0zYKKyQUI/ XsUSin0q8Gt5HJiCNDzTSzMR867ramkWeWGERLsJ5y6nv9QkDSSRCONZnEUqhmdK SVvGB1OhQnAbw2GeE89dI5t3nEWxWA3Tt6/oV0YvhDXc35Y2K0K1lpjXb5EC3TZl ypCqkBfo/PjbG+ZV+fp4Mm8qdVTJ5ZqAhit/WbmGgJH9 -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:49 2026 by rpki-client