This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/dAQCpkChDXivo83BdGELDocTtqk.roa File: dAQCpkChDXivo83BdGELDocTtqk.roa (raw, json) Hash identifier: mZTjMOwz5EP4FW7lbGwFeLhUXKrB721JuRQlVI85W/o= Subject key identifier: 74:04:02:A6:40:A1:0D:78:AF:A3:CD:C1:74:61:0B:0E:87:13:B6:A9 Certificate issuer: /CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Certificate serial: 019B7FF142142101D33B725A98D480AF66C7 Authority key identifier: E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/dAQCpkChDXivo83BdGELDocTtqk.roa Signing time: Fri 02 Jan 2026 18:21:16 +0000 ROA not before: Fri 02 Jan 2026 18:21:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208885 IP address blocks: 86.54.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.mft rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:42:14:21:01:d3:3b:72:5a:98:d4:80:af:66:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e6c2e0d3fdc215a389c7043ca5a1a06be2c558ef Validity Not Before: Jan 2 18:21:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740402a640a10d78afa3cdc174610b0e8713b6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:83:5c:a0:25:51:ad:d0:52:97:46:76:7f: 75:55:51:aa:e6:f9:01:b7:79:5b:21:fd:86:9c:a0: e7:d8:b2:65:21:9e:37:e1:90:e0:d4:dd:e3:dc:c6: e0:07:9a:b2:44:0f:fd:77:51:fb:92:4a:9e:e6:be: f8:f2:4a:26:69:09:14:4d:7c:86:f4:72:6e:a4:38: 9e:41:e5:78:e4:92:b2:70:0a:b9:b8:01:44:98:1c: da:38:b3:4c:42:72:96:e6:0f:41:47:37:3a:40:fc: da:75:b8:ff:b7:cf:90:bd:60:6c:29:14:d7:d8:91: b9:b3:08:43:d0:5a:b2:37:10:6d:18:df:f2:da:14: ca:59:07:e1:44:1d:6b:ed:cb:af:28:39:e8:2a:aa: a6:8e:fd:f5:de:8a:49:2e:c6:86:a9:f7:01:bd:4d: d6:66:ac:11:bc:58:b6:39:4b:21:44:dc:db:31:89: a0:56:47:8b:55:98:5f:06:7c:57:bb:48:c4:12:82: 1f:fb:5f:c0:79:98:ce:35:fb:36:d0:6d:96:75:31: ac:b3:aa:9f:fb:41:19:c4:37:72:5d:42:6a:43:da: 4f:ae:67:b9:b1:4e:88:3f:93:08:99:06:50:75:80: c8:2b:34:71:03:3c:79:99:63:6d:e2:f3:ae:b0:b8: b6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:04:02:A6:40:A1:0D:78:AF:A3:CD:C1:74:61:0B:0E:87:13:B6:A9 X509v3 Authority Key Identifier: keyid:E6:C2:E0:D3:FD:C2:15:A3:89:C7:04:3C:A5:A1:A0:6B:E2:C5:58:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5sLg0_3CFaOJxwQ8paGga-LFWO8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/dAQCpkChDXivo83BdGELDocTtqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/29176b-1038-4417-bdad-f3e052bab144/1/5sLg0_3CFaOJxwQ8paGga-LFWO8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.24.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:76:43:a6:94:1f:58:d7:7e:ec:06:b9:b7:67:bb:ac:bf:f2: 34:64:16:29:17:c9:16:18:66:20:20:dc:24:53:58:c3:48:12: 50:5c:ac:48:c5:cf:34:74:f5:17:a6:d3:33:14:b8:e2:b4:c7: f7:c8:03:cc:2e:56:7e:d2:7f:5d:d8:b2:04:b2:ea:14:5a:67: cd:d4:d0:52:c1:46:25:5f:d6:2a:4f:5f:79:bc:fb:a3:67:b2: 11:18:5e:b1:aa:26:67:b3:07:a4:96:f1:ae:81:28:3f:f5:dc: c7:f4:85:dd:25:ae:a5:ec:26:06:5c:dd:da:4a:ce:3d:fa:cc: eb:14:99:39:20:82:80:4f:f3:bd:09:e2:bf:0d:b4:e6:d2:38: fd:1e:82:af:4a:49:82:23:24:27:6c:04:39:d8:56:39:a9:3b: ee:0c:69:ac:36:f7:6e:1f:27:bb:b8:2f:97:56:18:65:4a:da: ce:1e:a6:d9:ca:29:06:1d:8f:73:53:41:24:97:d4:60:ae:9f: ef:8d:ad:64:12:9e:12:3d:ad:63:33:ef:8b:6a:7e:04:42:0f: 84:ab:43:7e:6c:d5:4a:b1:88:20:e7:e9:7a:a9:9c:d0:87:d8: 2a:dc:97:56:53:01:4e:6a:c6:22:1c:a2:30:57:61:ef:69:ab: af:c4:f7:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8UIUIQHTO3JamNSAr2bHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2YzJlMGQzZmRjMjE1YTM4OWM3MDQzY2E1YTFhMDZiZTJj NTU4ZWYwHhcNMjYwMTAyMTgyMTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDA0MDJhNjQwYTEwZDc4YWZhM2NkYzE3NDYxMGIwZTg3MTNiNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbeDXKAlUa3QUpdGdn91VVGq5vkB t3lbIf2GnKDn2LJlIZ434ZDg1N3j3MbgB5qyRA/9d1H7kkqe5r748komaQkUTXyG 9HJupDieQeV45JKycAq5uAFEmBzaOLNMQnKW5g9BRzc6QPzadbj/t8+QvWBsKRTX 2JG5swhD0FqyNxBtGN/y2hTKWQfhRB1r7cuvKDnoKqqmjv313opJLsaGqfcBvU3W ZqwRvFi2OUshRNzbMYmgVkeLVZhfBnxXu0jEEoIf+1/AeZjONfs20G2WdTGss6qf +0EZxDdyXUJqQ9pPrme5sU6IP5MImQZQdYDIKzRxAzx5mWNt4vOusLi2CwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHQEAqZAoQ14r6PNwXRhCw6HE7apMB8GA1UdIwQY MBaAFObC4NP9whWjiccEPKWhoGvixVjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQt ZjNlMDUyYmFiMTQ0LzEvZEFRQ3BrQ2hEWGl2bzgzQmRHRUxEb2NUdHFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTE3NmItMTAzOC00NDE3LWJkYWQtZjNlMDUyYmFiMTQ0 LzEvNXNMZzBfM0NGYU9KeHdROHBhR2dhLUxGV084LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjYYMA0G CSqGSIb3DQEBCwUAA4IBAQB6dkOmlB9Y137sBrm3Z7usv/I0ZBYpF8kWGGYgINwk U1jDSBJQXKxIxc80dPUXptMzFLjitMf3yAPMLlZ+0n9d2LIEsuoUWmfN1NBSwUYl X9YqT195vPujZ7IRGF6xqiZnsweklvGugSg/9dzH9IXdJa6l7CYGXN3aSs49+szr FJk5IIKAT/O9CeK/DbTm0jj9HoKvSkmCIyQnbAQ52FY5qTvuDGmsNvduHye7uC+X VhhlStrOHqbZyikGHY9zU0Ekl9Rgrp/vja1kEp4SPa1jM++Lan4EQg+Eq0N+bNVK sYgg5+l6qZzQh9gq3JdWUwFOasYiHKIwV2HvaauvxPdC -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:09 2026 by rpki-client