This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/0tktadOdx4n8mac4w9y4uxxnQb4.roa File: 0tktadOdx4n8mac4w9y4uxxnQb4.roa (raw, json) Hash identifier: n46RKOzZ9/eSRXSwMZil9zlLwS3ZgBVtTMxO4eNCf08= Subject key identifier: D2:D9:2D:69:D3:9D:C7:89:FC:99:A7:38:C3:DC:B8:BB:1C:67:41:BE Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e Certificate serial: 019B7C80D2D4BA288418F685B63B5AAA1D65 Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/0tktadOdx4n8mac4w9y4uxxnQb4.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39345 IP address blocks: 86.107.246.0/24 maxlen: 32 86.107.247.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d2:d4:ba:28:84:18:f6:85:b6:3b:5a:aa:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2d92d69d39dc789fc99a738c3dcb8bb1c6741be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e0:98:47:7c:0c:4b:98:02:a4:1b:4e:ab:b4: 5e:84:5d:81:c7:eb:ec:02:cd:f8:c0:91:5c:00:ad: da:b2:de:0b:17:1a:15:2b:8b:ca:00:e5:65:64:97: 6e:12:35:84:6c:c4:6a:e2:1e:2f:5c:e9:72:b7:e6: 37:7b:28:ff:d3:69:57:c7:4b:d1:80:10:87:8d:0b: a3:16:f9:40:3a:ed:cb:2f:2a:6f:2f:e7:f6:70:dd: ee:db:fd:38:19:9c:46:63:82:f6:80:26:8a:29:7b: 23:64:8d:c5:80:2d:10:bc:f1:d3:4e:56:e0:2d:39: 48:52:17:50:1d:6e:66:11:eb:b9:57:34:70:09:48: d1:26:ca:c1:f5:ed:45:83:64:33:33:e0:23:39:3e: db:e8:70:e6:b4:ea:d1:e8:bb:5e:3e:09:90:7f:57: d9:93:6e:a7:13:fc:0b:2c:89:59:f8:46:ac:fa:3e: 88:63:67:da:cb:bd:25:f2:fd:eb:00:a5:5a:d4:c6: 72:41:dd:2f:e2:44:f9:3b:07:6e:58:8a:cb:38:46: 7d:e9:f0:3a:6f:17:b8:e4:e6:e2:02:37:6a:7f:62: f2:aa:02:2a:f9:24:60:77:89:a9:0e:2d:4f:f0:e2: 27:03:fa:61:9f:ac:8f:87:f6:67:8f:9b:4b:03:ca: f4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D9:2D:69:D3:9D:C7:89:FC:99:A7:38:C3:DC:B8:BB:1C:67:41:BE X509v3 Authority Key Identifier: keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/0tktadOdx4n8mac4w9y4uxxnQb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.107.246.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:06:49:c8:28:3c:59:2c:8c:8e:6e:d8:bc:9a:ae:9b:09:b2: b6:99:4a:25:2c:7c:dc:19:9b:c0:24:d0:3f:eb:99:47:b8:4e: 7b:ed:4d:62:c7:e6:5d:50:06:df:77:fa:d6:95:fd:37:20:9a: 16:0f:e0:5b:ff:13:8d:f7:37:56:c2:e9:c6:59:f4:45:5c:89: 46:48:99:b1:16:4d:c1:32:12:8d:23:b2:d5:42:ae:d6:00:5f: c1:ba:43:60:ea:b6:ab:69:f6:4f:12:1b:83:49:a9:d1:21:cb: b3:41:16:5c:50:98:38:62:4e:4c:00:29:2b:95:f9:11:41:fe: af:43:f9:3b:f4:6c:dc:70:65:15:e4:2d:f1:74:6f:d0:58:7e: b2:7b:77:f8:3a:73:0b:ac:f3:f2:38:03:b5:e5:d6:63:ff:71: 3b:eb:74:28:a1:c4:ee:33:55:4f:33:6c:1c:81:ba:a9:ed:20: 3d:b0:9e:36:4a:29:1b:13:e8:1f:e5:fd:7b:85:36:30:a5:11: 7c:e0:e1:29:ab:0c:18:75:77:ea:5e:8e:7a:56:25:e0:8f:69: a5:cd:0f:5d:a6:08:f1:be:e3:09:1c:cb:5c:1e:ac:78:ee:c5: 0a:cc:e9:3e:06:6c:de:55:16:31:42:ca:be:79:70:1e:e4:e2: 7e:cd:9b:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNLUuiiEGPaFtjtaqh1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4 YjI2NmUwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQ5MmQ2OWQzOWRjNzg5ZmM5OWE3MzhjM2RjYjhiYjFjNjc0MWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+CYR3wMS5gCpBtOq7RehF2Bx+vs As34wJFcAK3ast4LFxoVK4vKAOVlZJduEjWEbMRq4h4vXOlyt+Y3eyj/02lXx0vR gBCHjQujFvlAOu3LLypvL+f2cN3u2/04GZxGY4L2gCaKKXsjZI3FgC0QvPHTTlbg LTlIUhdQHW5mEeu5VzRwCUjRJsrB9e1Fg2QzM+AjOT7b6HDmtOrR6LtePgmQf1fZ k26nE/wLLIlZ+Eas+j6IY2fay70l8v3rAKVa1MZyQd0v4kT5OwduWIrLOEZ96fA6 bxe45ObiAjdqf2LyqgIq+SRgd4mpDi1P8OInA/phn6yPh/Znj5tLA8r0KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLZLWnTnceJ/JmnOMPcuLscZ0G+MB8GA1UdIwQY MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt NDYxYWIwZWNlZTAxLzEvMHRrdGFkT2R4NG44bWFjNHc5eTR1eHhuUWI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVmv2MA0G CSqGSIb3DQEBCwUAA4IBAQBbBknIKDxZLIyObti8mq6bCbK2mUolLHzcGZvAJNA/ 65lHuE577U1ix+ZdUAbfd/rWlf03IJoWD+Bb/xON9zdWwunGWfRFXIlGSJmxFk3B MhKNI7LVQq7WAF/BukNg6rarafZPEhuDSanRIcuzQRZcUJg4Yk5MACkrlfkRQf6v Q/k79GzccGUV5C3xdG/QWH6ye3f4OnMLrPPyOAO15dZj/3E763QoocTuM1VPM2wc gbqp7SA9sJ42SikbE+gf5f17hTYwpRF84OEpqwwYdXfqXo56ViXgj2mlzQ9dpgjx vuMJHMtcHqx47sUKzOk+BmzeVRYxQsq+eXAe5OJ+zZtD -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:40 2026 by rpki-client