This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zn1hqwBORO6Mmcsro57n8jc8At4.roa File: Zn1hqwBORO6Mmcsro57n8jc8At4.roa (raw, json) Hash identifier: n8pCCy2cvaN5x6/PYqaH6AXZcAacQWn78ZDLkOqaWG8= Subject key identifier: 66:7D:61:AB:00:4E:44:EE:8C:99:CB:2B:A3:9E:E7:F2:37:3C:02:DE Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594629C7AE6139DC19B20F75B2A436 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zn1hqwBORO6Mmcsro57n8jc8At4.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35397 IP address blocks: 86.107.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:46:29:c7:ae:61:39:dc:19:b2:0f:75:b2:a4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=667d61ab004e44ee8c99cb2ba39ee7f2373c02de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:2a:e1:ba:06:2d:65:8f:ab:62:93:3e:32: 49:16:62:1c:9f:1c:98:45:ab:70:8c:78:81:32:d3: 9c:ef:3e:45:16:da:9b:a1:5f:63:7d:cf:03:8e:22: 88:bf:e9:d5:74:9b:e4:43:8a:ef:62:43:58:48:0c: f8:37:ee:d5:9a:49:e2:0a:c9:c4:ea:01:b9:1e:bc: 49:7f:2c:17:da:09:aa:86:9f:f0:9d:55:aa:6a:0c: c8:f1:9b:5e:33:62:a5:e4:52:30:63:4f:e4:92:11: b1:47:fb:8b:c2:18:2c:e9:15:a7:e3:67:ba:f1:22: 02:d7:ef:d0:d7:70:1b:25:b7:f2:79:b4:f5:f6:c3: a6:54:1d:f4:fe:31:1d:2e:d8:d0:96:88:e3:89:6c: 45:3b:72:2b:2b:06:72:5c:9d:27:08:1d:01:b2:03: 0f:a2:a8:05:c5:c4:be:9f:ab:4a:e0:64:5d:f6:ac: 6f:6d:87:d2:75:3d:42:6b:37:a2:36:db:14:25:cd: a0:f6:87:6e:dd:25:4b:32:9e:7c:23:a0:7f:cb:6c: ea:90:3d:46:a5:35:11:11:dd:34:00:45:92:7f:df: 89:ef:b5:b8:d4:da:ac:95:90:31:6e:9f:16:44:50: c1:e6:7c:55:72:2c:7f:69:1d:14:c9:d0:8b:33:f7: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7D:61:AB:00:4E:44:EE:8C:99:CB:2B:A3:9E:E7:F2:37:3C:02:DE X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/Zn1hqwBORO6Mmcsro57n8jc8At4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.240.0/24 Signature Algorithm: sha256WithRSAEncryption e7:a1:18:2b:df:b3:c6:f6:87:38:35:bf:35:d1:48:bd:de:d1: 4e:7e:f7:cf:da:9d:3f:b2:88:21:f6:a1:71:88:9d:11:82:12: 85:82:6e:be:5a:b7:ff:41:18:5e:97:d6:a1:45:41:20:bf:4d: c9:4d:05:75:92:b5:0e:c6:f1:79:58:98:46:9d:55:67:11:c6: 22:6f:2e:a8:8d:e7:a2:1d:25:e4:f9:50:f5:a5:ec:98:7e:83: 1a:67:70:c0:2b:4b:19:e5:0a:1f:fb:a7:45:b6:46:79:84:1f: e9:a1:cf:8f:8a:87:b9:8c:58:82:f6:5a:5a:21:5e:5b:ad:39: d3:06:0a:44:e0:c3:6c:50:c8:f6:75:cc:ff:40:d0:1d:03:e7: 74:22:b2:b6:32:b4:7e:dd:0b:42:26:b6:6b:b1:ac:50:bb:a1: 6f:9f:d6:e6:44:6e:75:55:d1:d5:77:ad:65:e9:ed:69:4b:87: 96:8b:fe:06:9e:1e:65:93:34:a9:da:82:f5:37:b2:d1:cb:3f: 52:21:42:f3:6c:38:37:f0:dd:8c:a7:a6:2e:22:fd:e6:2c:13: 4d:d0:d3:62:b7:23:fe:4e:9a:19:40:1d:ca:b8:2d:39:8a:7e: 6e:f1:e4:ae:f0:67:a8:5a:a1:cf:78:5f:01:1a:e8:ee:b3:3e: 90:51:78:70 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUYpx65hOdwZsg91sqQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjdkNjFhYjAwNGU0NGVlOGM5OWNiMmJhMzllZTdmMjM3M2MwMmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHIq4boGLWWPq2KTPjJJFmIcnxyY RatwjHiBMtOc7z5FFtqboV9jfc8DjiKIv+nVdJvkQ4rvYkNYSAz4N+7VmkniCsnE 6gG5HrxJfywX2gmqhp/wnVWqagzI8ZteM2Kl5FIwY0/kkhGxR/uLwhgs6RWn42e6 8SIC1+/Q13AbJbfyebT19sOmVB30/jEdLtjQlojjiWxFO3IrKwZyXJ0nCB0BsgMP oqgFxcS+n6tK4GRd9qxvbYfSdT1CazeiNtsUJc2g9odu3SVLMp58I6B/y2zqkD1G pTUREd00AEWSf9+J77W41NqslZAxbp8WRFDB5nxVcix/aR0UydCLM/fFuQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFGZ9YasATkTujJnLK6Oe5/I3PALeMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL1puMWhxd0JPUk82TW1jc3JvNTduOGpjOEF0NC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWa/Aw DQYJKoZIhvcNAQELBQADggEBAOehGCvfs8b2hzg1vzXRSL3e0U5+98/anT+yiCH2 oXGInRGCEoWCbr5at/9BGF6X1qFFQSC/TclNBXWStQ7G8XlYmEadVWcRxiJvLqiN 56IdJeT5UPWl7Jh+gxpncMArSxnlCh/7p0W2RnmEH+mhz4+Kh7mMWIL2WlohXlut OdMGCkTgw2xQyPZ1zP9A0B0D53QisrYytH7dC0ImtmuxrFC7oW+f1uZEbnVV0dV3 rWXp7WlLh5aL/gaeHmWTNKnagvU3stHLP1IhQvNsODfw3Yynpi4i/eYsE03Q02K3 I/5OmhlAHcq4LTmKfm7x5K7wZ6haoc94XwEa6O6zPpBReHA= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:16 2026 by rpki-client