This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/K9ovqsNkHrun-AyiDfVXcpSSomk.roa File: K9ovqsNkHrun-AyiDfVXcpSSomk.roa (raw, json) Hash identifier: OJcOgsa/Cof/2dj63icVfURXOJgy3TdipR3e9Z4Re7g= Subject key identifier: 2B:DA:2F:AA:C3:64:1E:BB:A7:F8:0C:A2:0D:F5:57:72:94:92:A2:69 Certificate issuer: /CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Certificate serial: 019B7D5C7D81DEA70ED5DBE856A388D70AB7 Authority key identifier: E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/K9ovqsNkHrun-AyiDfVXcpSSomk.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49127 IP address blocks: 86.106.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:7d:81:de:a7:0e:d5:db:e8:56:a3:88:d7:0a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8477ad21cb789143313c40b19f8cc0023de88a6 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bda2faac3641ebba7f80ca20df557729492a269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bc:36:b3:35:44:15:65:6b:0d:4b:f8:52:3f: 59:d6:16:cf:82:56:d1:18:d4:8f:6f:c6:db:5e:cf: bd:2e:11:9f:bd:a6:64:94:ca:c7:e1:7d:1a:14:3f: 58:15:1c:e0:90:b8:e1:84:4b:a8:15:a7:1a:25:f3: 71:b0:41:3d:ad:32:5d:75:5f:a7:81:be:3c:47:d6: e9:a7:ca:08:99:2d:5f:73:62:46:a6:58:3e:e1:43: 26:5a:11:fb:be:fa:fb:9c:c9:f1:29:fe:95:c2:b3: 9f:ac:88:e2:b8:6e:72:b5:df:a9:b0:4e:17:14:04: 31:d3:de:8b:4d:db:d1:af:47:ec:ae:dd:72:a8:37: 1d:6e:4c:a5:c6:5d:b6:ba:e9:88:c9:22:98:e2:61: 94:a9:bc:80:59:2a:d9:af:12:78:9d:90:c5:df:d7: 0e:a8:b4:98:80:af:2c:4b:61:a2:e4:08:73:0e:cd: 56:2b:8d:a1:15:03:28:7f:6f:da:44:d3:74:ee:12: 03:b2:70:1e:4c:58:ea:9d:5b:35:5f:2b:36:60:1e: dc:6e:8a:8b:10:05:0d:2f:ef:7e:99:d7:29:ce:87: aa:2f:c4:f0:ba:91:2d:f2:8b:9d:60:5f:44:7b:c8: c6:79:ef:6c:6a:a9:3f:19:1f:60:2f:5a:5b:e6:ac: 21:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DA:2F:AA:C3:64:1E:BB:A7:F8:0C:A2:0D:F5:57:72:94:92:A2:69 X509v3 Authority Key Identifier: keyid:E8:47:7A:D2:1C:B7:89:14:33:13:C4:0B:19:F8:CC:00:23:DE:88:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ed60hy3iRQzE8QLGfjMACPeiKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/K9ovqsNkHrun-AyiDfVXcpSSomk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/742a04-17af-4f40-a140-604584895925/1/6Ed60hy3iRQzE8QLGfjMACPeiKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.75.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:e8:22:ea:26:6e:f6:f5:bc:4a:4a:f4:e3:70:7c:e9:a2:ea: 32:d1:89:77:aa:2a:af:87:86:1d:cb:ee:bb:29:da:aa:e0:5c: d0:39:7c:8f:40:d9:2e:04:41:74:44:7d:06:cc:aa:2b:b6:8d: 56:b7:30:93:df:65:69:63:7a:3d:00:a3:90:41:26:f3:77:eb: 64:51:79:74:52:18:3b:b2:a0:1f:64:df:7e:da:5e:fb:2b:f3: 39:52:4c:2a:aa:58:6e:84:c9:bd:97:5c:ba:c5:84:92:79:8f: 8c:fa:2e:ea:86:6e:45:34:39:ae:13:1b:fe:b3:9f:fa:8b:af: 7d:43:83:35:a0:30:0a:1b:ba:dd:b7:21:80:d1:10:50:c2:53: 03:94:70:95:a1:e7:47:92:9d:39:ec:a1:6e:76:85:a5:47:ce: fb:d3:86:e3:0a:c0:90:b3:e2:79:fc:eb:b3:4a:5f:1c:6c:2b: 4d:ab:fc:80:f2:fe:e6:34:f9:a5:ca:f7:3e:2b:c1:65:3e:3b: 58:02:2a:fc:90:88:04:f5:c7:92:db:5a:70:74:dc:35:fd:7a: 67:98:14:71:1d:ae:80:c3:e2:27:f9:d1:60:9c:fb:c4:7f:6f: 3b:c3:ed:dd:79:b3:7b:b9:d0:0b:c2:b0:49:7a:56:07:c8:dd: f0:d6:b6:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XH2B3qcO1dvoVqOI1wq3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDc3YWQyMWNiNzg5MTQzMzEzYzQwYjE5ZjhjYzAwMjNk ZTg4YTYwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmRhMmZhYWMzNjQxZWJiYTdmODBjYTIwZGY1NTc3Mjk0OTJhMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrw2szVEFWVrDUv4Uj9Z1hbPglbR GNSPb8bbXs+9LhGfvaZklMrH4X0aFD9YFRzgkLjhhEuoFacaJfNxsEE9rTJddV+n gb48R9bpp8oImS1fc2JGplg+4UMmWhH7vvr7nMnxKf6VwrOfrIjiuG5ytd+psE4X FAQx096LTdvRr0fsrt1yqDcdbkylxl22uumIySKY4mGUqbyAWSrZrxJ4nZDF39cO qLSYgK8sS2Gi5AhzDs1WK42hFQMof2/aRNN07hIDsnAeTFjqnVs1Xys2YB7cboqL EAUNL+9+mdcpzoeqL8TwupEt8oudYF9Ee8jGee9saqk/GR9gL1pb5qwhlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCvaL6rDZB67p/gMog31V3KUkqJpMB8GA1UdIwQY MBaAFOhHetIct4kUMxPECxn4zAAj3oimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAt NjA0NTg0ODk1OTI1LzEvSzlvdnFzTmtIcnVuLUF5aURmVlhjcFNTb21rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi83NDJhMDQtMTdhZi00ZjQwLWExNDAtNjA0NTg0ODk1OTI1 LzEvNkVkNjBoeTNpUlF6RThRTEdmak1BQ1BlaUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVmpLMA0G CSqGSIb3DQEBCwUAA4IBAQBs6CLqJm729bxKSvTjcHzpouoy0Yl3qiqvh4Ydy+67 Kdqq4FzQOXyPQNkuBEF0RH0GzKorto1WtzCT32VpY3o9AKOQQSbzd+tkUXl0Uhg7 sqAfZN9+2l77K/M5UkwqqlhuhMm9l1y6xYSSeY+M+i7qhm5FNDmuExv+s5/6i699 Q4M1oDAKG7rdtyGA0RBQwlMDlHCVoedHkp057KFudoWlR87704bjCsCQs+J5/Ouz Sl8cbCtNq/yA8v7mNPmlyvc+K8FlPjtYAir8kIgE9ceS21pwdNw1/XpnmBRxHa6A w+In+dFgnPvEf287w+3debN7udALwrBJelYHyN3w1raw -----END CERTIFICATE-----Generated at Sun Jan 25 13:04:42 2026 by rpki-client