This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa File: KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa (raw, json) Hash identifier: Z/rqoZBNVfDm70QTbYQ7hfqHZXGsKtZpgexuaPzb1M4= Subject key identifier: 29:30:00:B9:1B:2A:99:19:5D:D6:7E:19:76:2A:9C:28:B1:BF:85:B2 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019B7DCA58CECA8B7BCFA0A37E4D3E050CA9 Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa Signing time: Fri 02 Jan 2026 08:19:31 +0000 ROA not before: Fri 02 Jan 2026 08:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42465 IP address blocks: 86.111.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:58:ce:ca:8b:7b:cf:a0:a3:7e:4d:3e:05:0c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Jan 2 08:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=293000b91b2a99195dd67e19762a9c28b1bf85b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:5f:61:a9:b1:3d:28:33:b1:b4:83:c4:e8: 8c:6a:69:47:eb:4b:91:98:39:56:36:37:55:bf:d5: 19:64:f2:d8:65:92:ea:a9:90:40:5d:75:75:a4:34: 7d:a1:fe:93:cd:b9:15:67:8e:12:e7:c5:52:8c:72: 46:d3:cc:4f:99:f1:a4:64:d0:26:a7:a4:fd:6f:44: 40:5f:5f:55:51:dc:e4:15:48:a0:e6:8b:dd:bf:48: 8b:7e:d6:66:47:6e:25:1a:4e:bc:68:57:80:a8:61: 5f:21:68:7a:33:9f:2b:43:61:00:1d:2c:40:89:96: ee:0b:f3:64:63:80:9a:a1:8f:31:2c:99:ec:89:f0: 2e:c6:74:9f:de:78:3c:37:b7:7d:ef:64:6e:19:a6: 0a:a1:8d:10:45:da:ab:51:9d:4b:16:46:98:ed:e7: c3:08:4b:a7:cb:f9:6d:cc:3a:2e:3c:75:98:1c:25: da:19:e7:35:b5:9c:10:25:70:0e:4e:b3:cc:1c:76: 36:1c:f2:5a:a0:85:3a:c8:fe:f6:f9:da:b7:e5:d8: 96:18:43:f6:16:30:19:26:c8:61:c3:9e:d0:58:41: 5a:2e:b6:ab:1a:75:93:30:60:eb:a7:69:b3:22:e1: eb:75:be:13:c9:55:a6:61:2e:35:03:13:90:8e:1d: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:30:00:B9:1B:2A:99:19:5D:D6:7E:19:76:2A:9C:28:B1:BF:85:B2 X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/KTAAuRsqmRld1n4ZdiqcKLG_hbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.111.216.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:15:e4:3d:d3:f8:38:32:e7:32:d3:fb:13:c6:7b:34:32:06: f9:a8:e6:d8:bb:19:d5:51:82:94:6c:8f:65:01:f3:b9:aa:a8: 90:5e:27:16:5b:0b:23:4c:60:35:ef:61:22:8c:8d:c3:ab:a2: 89:c6:13:f8:b0:83:d3:c3:c4:9a:62:b9:73:bc:0a:4f:60:7a: 31:2c:4d:0a:b9:c7:b3:49:79:0e:90:08:78:b5:84:5e:e5:f2: 28:6a:87:2b:98:04:99:b8:ff:f0:c6:b3:3f:2b:b4:5d:1e:6f: 85:b1:b2:72:8a:67:0a:6e:31:ef:2c:b0:7a:b9:ce:88:0d:8f: af:a5:21:16:f2:36:f6:7f:c6:25:be:5a:1e:54:8f:42:44:e3: 15:8f:79:36:c6:bb:91:f6:fb:55:70:63:c0:62:a9:ee:1a:06: 39:9a:b6:7c:a9:f8:1e:2e:d0:c5:bd:76:4b:f7:36:c8:8a:10: 61:3e:45:01:ab:0a:7d:dd:83:41:b8:3a:dd:5c:b0:3b:3f:d8: 7c:b2:9f:d1:33:b9:06:7b:3b:58:19:08:dc:41:57:cb:db:7b: 3b:8d:12:30:43:0b:f5:b5:84:75:a6:70:1d:e6:ac:5b:35:20: ec:d1:6b:21:39:8e:c3:f7:4c:4a:27:52:80:3e:35:86:67:7e: 4f:17:2e:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yljOyot7z6Cjfk0+BQypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjYwMTAyMDgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTMwMDBiOTFiMmE5OTE5NWRkNjdlMTk3NjJhOWMyOGIxYmY4NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ZfYamxPSgzsbSDxOiMamlH60uR mDlWNjdVv9UZZPLYZZLqqZBAXXV1pDR9of6TzbkVZ44S58VSjHJG08xPmfGkZNAm p6T9b0RAX19VUdzkFUig5ovdv0iLftZmR24lGk68aFeAqGFfIWh6M58rQ2EAHSxA iZbuC/NkY4CaoY8xLJnsifAuxnSf3ng8N7d972RuGaYKoY0QRdqrUZ1LFkaY7efD CEuny/ltzDouPHWYHCXaGec1tZwQJXAOTrPMHHY2HPJaoIU6yP72+dq35diWGEP2 FjAZJshhw57QWEFaLrarGnWTMGDrp2mzIuHrdb4TyVWmYS41AxOQjh0OvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCkwALkbKpkZXdZ+GXYqnCixv4WyMB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvS1RBQXVSc3FtUmxkMW40WmRpcWNLTEdfaGJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm/YMA0G CSqGSIb3DQEBCwUAA4IBAQAdFeQ90/g4Mucy0/sTxns0Mgb5qObYuxnVUYKUbI9l AfO5qqiQXicWWwsjTGA172EijI3Dq6KJxhP4sIPTw8SaYrlzvApPYHoxLE0Kucez SXkOkAh4tYRe5fIoaocrmASZuP/wxrM/K7RdHm+FsbJyimcKbjHvLLB6uc6IDY+v pSEW8jb2f8YlvloeVI9CROMVj3k2xruR9vtVcGPAYqnuGgY5mrZ8qfgeLtDFvXZL 9zbIihBhPkUBqwp93YNBuDrdXLA7P9h8sp/RM7kGeztYGQjcQVfL23s7jRIwQwv1 tYR1pnAd5qxbNSDs0WshOY7D90xKJ1KAPjWGZ35PFy4L -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:29 2026 by rpki-client