This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/tMgRfPFkf85axNNxn8QEdnO-WoY.roa File: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (raw, json) Hash identifier: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4= Subject key identifier: B4:C8:11:7C:F1:64:7F:CE:5A:C4:D3:71:9F:C4:04:76:73:BE:5A:86 Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Certificate serial: 019B79EBC1F78E35ACB3DF8F8BF171450D51 Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/tMgRfPFkf85axNNxn8QEdnO-WoY.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48749 IP address blocks: 86.107.59.0/24 maxlen: 24 2a05:8883:ffff::/48 maxlen: 48 2a0f:55c7:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c1:f7:8e:35:ac:b3:df:8f:8b:f1:71:45:0d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b4c8117cf1647fce5ac4d3719fc4047673be5a86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e6:d9:fc:f2:bf:53:81:5d:36:c1:76:51:83: 33:41:ce:89:34:18:3a:d6:ee:a3:cb:92:8c:a9:ed: 93:a6:49:49:c2:a5:dc:90:41:5d:97:f0:f6:e0:f4: c5:c1:83:bd:86:56:6c:bf:a7:c4:cf:2f:b4:a0:29: 10:1b:c0:d9:16:cc:a9:59:61:7c:52:94:00:71:ae: 55:ca:28:19:f0:30:1d:b7:26:8b:9d:1b:64:f1:5d: fc:ce:06:6a:d2:96:c9:7f:ce:a0:19:d5:f0:71:89: a3:18:ea:f9:65:ed:05:af:b6:42:2a:9f:93:da:41: 0e:97:6b:7d:63:49:ee:cd:85:0c:bb:d5:2c:be:cf: 2c:c6:af:d1:76:28:a2:e7:99:97:05:e2:c9:04:cb: 64:bf:01:f6:02:76:5a:20:4f:b5:af:0f:da:71:a8: 84:6a:e5:18:c5:f5:02:9f:a1:d3:c5:3f:77:af:2a: a2:dc:3a:0b:9a:2d:86:67:6f:56:a0:08:1f:53:0a: 21:7f:c2:45:98:17:76:94:ea:d5:0c:94:fd:37:b6: 7a:40:85:ea:97:e2:45:25:f1:07:64:c9:c5:73:07: 6c:7f:a5:ff:26:cc:fc:df:e9:b6:ca:66:cf:93:b3: 91:a1:23:11:47:d4:c0:7a:4f:7f:3d:cb:ee:05:81: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C8:11:7C:F1:64:7F:CE:5A:C4:D3:71:9F:C4:04:76:73:BE:5A:86 X509v3 Authority Key Identifier: keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/tMgRfPFkf85axNNxn8QEdnO-WoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.59.0/24 IPv6: 2a05:8883:ffff::/48 2a0f:55c7:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 70:2d:10:23:89:51:4b:c9:fe:a5:d9:29:9c:45:da:7a:17:27: 9b:80:ec:2a:54:dd:3f:e1:6d:ee:5f:1e:39:e3:4d:d5:1d:3c: 02:18:17:f8:a0:de:3a:6f:1e:14:e3:d7:e5:05:85:3b:11:86: ca:71:8b:48:49:42:5c:8c:02:8e:22:ca:d3:a6:20:6c:dd:2e: c2:f6:52:dd:42:24:3d:56:d3:9d:18:9b:18:26:1f:0a:fe:cf: b9:ee:e9:e0:bb:78:01:0f:6b:f6:4b:4e:b5:93:89:e8:77:44: 3c:c2:3f:af:26:57:5d:ac:70:d6:0d:84:e4:3f:fb:ec:11:93: 41:f2:81:00:47:1a:68:7a:e9:c1:ba:df:c5:c2:db:7c:88:07: ea:bd:38:32:3d:23:4b:0a:de:b9:22:77:a0:0b:af:69:1b:d3: d2:9d:64:4f:ad:cd:f2:11:33:0f:2e:31:f7:de:55:cd:cd:0f: af:1c:59:8e:8c:28:ec:52:3c:81:67:b2:36:2d:4d:70:79:1f: 2a:f5:1e:30:3a:0b:1d:58:41:ed:84:b2:69:a9:6c:94:bb:de: 0a:ce:c8:eb:1c:1a:a1:a3:18:30:32:b7:a9:1d:e1:46:87:10: a1:c9:30:8b:bc:c8:98:b4:2c:aa:20:f0:15:11:ed:b0:92:45: 11:ed:e0:a0 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt568H3jjWss9+Pi/FxRQ1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljNTQyZjVkZjNjMWFjYjg1N2ZkNTBlZWIwMTZlZWQwNzM4 NWZmOGMwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNGM4MTE3Y2YxNjQ3ZmNlNWFjNGQzNzE5ZmM0MDQ3NjczYmU1YTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtubZ/PK/U4FdNsF2UYMzQc6JNBg6 1u6jy5KMqe2TpklJwqXckEFdl/D24PTFwYO9hlZsv6fEzy+0oCkQG8DZFsypWWF8 UpQAca5VyigZ8DAdtyaLnRtk8V38zgZq0pbJf86gGdXwcYmjGOr5Ze0Fr7ZCKp+T 2kEOl2t9Y0nuzYUMu9Usvs8sxq/Rdiii55mXBeLJBMtkvwH2AnZaIE+1rw/acaiE auUYxfUCn6HTxT93ryqi3DoLmi2GZ29WoAgfUwohf8JFmBd2lOrVDJT9N7Z6QIXq l+JFJfEHZMnFcwdsf6X/Jsz83+m2ymbPk7ORoSMRR9TAek9/PcvuBYHL3wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLTIEXzxZH/OWsTTcZ/EBHZzvlqGMB8GA1UdIwQY MBaAFJxUL13zway4V/1Q7rAW7tBzhf+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUt MjVkYmY0MzgwNGM1LzEvdE1nUmZQRmtmODVheE5OeG44UUVkbk8tV29ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mYjc5MWItODAxMy00NThhLTlhMWUtMjVkYmY0MzgwNGM1 LzEvbkZRdlhmUEJyTGhYX1ZEdXNCYnUwSE9GXzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAVms7MBgE AgACMBIDBwAqBYiD//8DBwAqD1XH//8wDQYJKoZIhvcNAQELBQADggEBAHAtECOJ UUvJ/qXZKZxF2noXJ5uA7CpU3T/hbe5fHjnjTdUdPAIYF/ig3jpvHhTj1+UFhTsR hspxi0hJQlyMAo4iytOmIGzdLsL2Ut1CJD1W050YmxgmHwr+z7nu6eC7eAEPa/ZL TrWTieh3RDzCP68mV12scNYNhOQ/++wRk0HygQBHGmh66cG638XC23yIB+q9ODI9 I0sK3rkid6ALr2kb09KdZE+tzfIRMw8uMffeVc3ND68cWY6MKOxSPIFnsjYtTXB5 Hyr1HjA6Cx1YQe2EsmmpbJS73grOyOscGqGjGDAyt6kd4UaHEKHJMIu8yJi0LKog 8BUR7bCSRRHt4KA= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:09 2026 by rpki-client