This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/l0u1ZgD_wkFu-jXVsD4k8LefOK0.roa
File: l0u1ZgD_wkFu-jXVsD4k8LefOK0.roa (raw, json)
Hash identifier: wyT0rfdl3UIxwy2bnK6DkEEPhoUSpiOu2RM7rqGu98Q=
Subject key identifier: 97:4B:B5:66:00:FF:C2:41:6E:FA:35:D5:B0:3E:24:F0:B7:9F:38:AD
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019B7759599B6EA0D2654E6D83A3950A09E2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/l0u1ZgD_wkFu-jXVsD4k8LefOK0.roa
Signing time: Thu 01 Jan 2026 02:18:22 +0000
ROA not before: Thu 01 Jan 2026 02:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57060
IP address blocks: 86.105.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:59:9b:6e:a0:d2:65:4e:6d:83:a3:95:0a:09:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 02:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=974bb56600ffc2416efa35d5b03e24f0b79f38ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:a9:3c:b5:8e:86:20:92:c5:a6:19:fc:48:
62:11:6c:07:69:1b:f7:31:03:d4:62:3e:b4:37:75:
ff:f4:fb:84:c3:4a:6c:5a:2f:7e:f8:61:69:97:f3:
26:95:e6:bf:1d:74:de:20:92:a2:45:91:20:5e:45:
92:26:94:dc:cb:fb:14:d6:d9:ef:cd:bc:ca:dc:83:
82:30:6d:b6:06:e4:10:26:61:18:7c:92:83:f0:be:
ac:25:53:0b:11:6f:bb:f3:24:14:b8:9a:2b:3c:09:
01:96:59:dd:c5:59:52:e1:82:97:4b:ce:d5:ea:81:
e5:95:dc:86:b8:51:94:37:bd:cb:27:9c:d2:97:2e:
01:7e:11:5e:e8:e4:6c:ac:d4:14:4e:0a:52:33:cc:
fc:61:22:9b:c7:b0:99:62:59:c1:89:e5:6c:aa:5c:
7f:ad:ad:24:d1:09:27:a5:81:bb:74:5e:a4:44:17:
31:6b:fa:75:1f:33:35:63:a7:7f:cc:6d:48:3f:94:
2c:4a:38:06:4c:67:0b:9d:d4:0d:14:18:67:98:34:
3b:40:5c:01:f0:4a:96:f0:ee:a4:33:1a:7f:62:e0:
89:de:6f:fd:f1:60:0e:e0:bf:2f:4c:f1:7c:b3:de:
20:20:c7:fd:94:3f:af:4b:d2:43:05:d6:4d:aa:71:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:B5:66:00:FF:C2:41:6E:FA:35:D5:B0:3E:24:F0:B7:9F:38:AD
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/l0u1ZgD_wkFu-jXVsD4k8LefOK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.105.27.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:32:f8:74:15:02:17:e5:c7:30:0e:84:f2:55:a4:ad:82:a8:
cd:de:87:6e:ad:91:2d:05:2f:41:9d:22:43:c0:ec:22:6a:8f:
b0:92:73:c7:4f:7c:14:20:09:52:3a:3b:df:77:b6:37:fa:97:
52:09:61:c8:1c:59:70:5d:f8:48:a5:21:bd:93:d4:35:81:62:
0f:bc:93:84:93:5d:cc:e2:ca:dd:e4:5c:4f:90:83:05:50:10:
b8:d1:dd:d9:93:48:e8:70:09:a0:40:68:ef:83:75:6f:94:0c:
77:95:11:29:58:fb:62:af:37:09:9f:f0:53:2b:0e:91:15:9d:
cd:35:fd:6f:c0:08:12:d0:08:22:a8:c6:82:e5:20:15:60:82:
ee:8d:ed:50:c0:e4:49:8a:7b:a8:c3:0e:4d:fb:35:66:4a:18:
b3:69:23:49:17:97:7a:ba:94:6b:cb:ef:0d:7d:31:a8:2c:2e:
6a:ab:3f:88:a5:fc:3b:3b:a1:8d:b5:60:56:d6:07:aa:df:14:
e6:1b:8b:7f:57:9a:b0:e3:a9:16:f1:b9:08:12:64:a4:b4:4d:
ac:a5:dd:54:06:af:8a:2a:11:c2:9b:8e:68:93:18:58:67:6a:
64:e7:f2:4d:1a:cb:6e:15:92:1b:c8:3d:18:71:61:18:1a:3f:
39:13:3f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:06:51 2026 by rpki-client