This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa File: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (raw, json) Hash identifier: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8= Subject key identifier: 75:92:6C:DD:CF:8F:B3:68:24:69:E5:0A:A8:88:79:F5:B6:C5:4D:B0 Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B7EA72FBA38BC46A631E970ECDADCA7F1 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209342 IP address blocks: 86.60.49.0/24 maxlen: 24 86.60.50.0/24 maxlen: 24 86.60.51.0/24 maxlen: 24 86.60.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2f:ba:38:bc:46:a6:31:e9:70:ec:da:dc:a7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75926cddcf8fb3682469e50aa88879f5b6c54db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:38:54:5d:29:61:e6:97:db:1f:dd:23:eb:8d: 73:87:00:2d:fd:b3:7a:d8:15:22:48:81:8e:f6:70: c3:0d:ab:b3:ba:ee:cf:a2:b5:10:c7:c4:ba:1e:a4: 0e:45:49:98:3e:f5:22:c7:13:d1:bc:52:c1:2f:78: 99:34:70:80:c9:6f:c7:36:83:87:67:a6:72:97:97: e1:0f:a1:69:be:02:e5:a4:6b:a8:f5:a2:4c:87:93: ae:75:07:c5:e7:cf:04:15:ac:23:7b:e0:e6:95:00: 47:f8:f7:4b:19:9f:2f:42:7b:82:ef:b6:db:9d:7d: c8:40:31:6d:79:11:88:ad:cf:b3:11:8d:e5:f5:32: 1d:4e:33:d1:da:19:f2:fc:ff:e1:a9:a6:f4:5c:72: 93:8f:0a:22:d1:7c:b4:4d:8d:4f:15:b7:02:df:cb: 46:ad:21:c4:80:0d:09:c3:c7:a1:a0:f9:a0:88:9d: de:18:c7:e0:10:4d:61:83:34:3a:1d:80:61:0e:06: cb:dc:5c:32:c6:5e:5f:38:55:ae:82:4f:25:d1:aa: 0c:13:04:ca:35:17:18:07:03:3f:f7:26:33:53:d2: f5:75:92:e2:2a:e0:a7:04:02:0d:92:7e:20:b2:6e: f4:0a:87:f0:5e:40:91:72:a2:0d:01:85:a9:85:67: 27:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:92:6C:DD:CF:8F:B3:68:24:69:E5:0A:A8:88:79:F5:B6:C5:4D:B0 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.60.49.0-86.60.51.255 86.60.96.0/24 Signature Algorithm: sha256WithRSAEncryption 92:98:33:81:47:30:72:d2:33:ef:7c:bc:d3:46:bc:e1:c6:e1: 66:26:82:e0:b5:42:10:3b:2e:e3:73:5f:03:81:0e:dd:95:f7: 19:17:9f:6f:10:2f:45:6c:30:6a:59:ee:ce:03:3c:fc:0e:3c: 86:e0:02:46:f3:51:48:85:86:96:53:c9:a7:40:36:eb:8c:1d: 67:93:36:c8:60:47:0a:25:d6:7a:da:f6:73:55:41:53:83:04: 44:33:ee:14:44:6a:6b:79:1f:2c:60:13:e7:bd:83:14:9b:bd: 9e:13:0a:17:4b:d7:17:0b:e8:bc:a3:fd:8d:b7:10:82:5d:27: 2a:aa:0d:00:87:ba:16:29:52:e1:5e:72:be:36:f4:e4:80:a8: 47:bc:9a:c6:36:2f:e6:9b:5a:11:89:c3:e4:65:b7:37:80:8a: 64:81:9a:19:a7:49:fa:b9:ff:53:34:3a:53:48:33:53:ce:be: e1:b0:25:0a:d5:e3:29:06:8f:ab:9a:bd:56:73:d9:8a:12:a4: 1d:74:1c:c5:5d:15:49:e1:73:fb:08:b9:e3:c7:29:c2:c5:b6: 0a:4c:20:57:5e:43:44:e9:f5:2e:19:91:f0:6e:17:b6:ca:22: 5b:8f:fa:2b:24:bd:5b:eb:fb:11:1a:f5:15:89:3a:7a:93:7c: 23:1d:d1:95 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+py+6OLxGpjHpcOza3KfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTkyNmNkZGNmOGZiMzY4MjQ2OWU1MGFhODg4NzlmNWI2YzU0ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzhUXSlh5pfbH90j641zhwAt/bN6 2BUiSIGO9nDDDauzuu7PorUQx8S6HqQORUmYPvUixxPRvFLBL3iZNHCAyW/HNoOH Z6Zyl5fhD6FpvgLlpGuo9aJMh5OudQfF588EFawje+DmlQBH+PdLGZ8vQnuC77bb nX3IQDFteRGIrc+zEY3l9TIdTjPR2hny/P/hqab0XHKTjwoi0Xy0TY1PFbcC38tG rSHEgA0Jw8ehoPmgiJ3eGMfgEE1hgzQ6HYBhDgbL3Fwyxl5fOFWugk8l0aoMEwTK NRcYBwM/9yYzU9L1dZLiKuCnBAINkn4gsm70CofwXkCRcqINAYWphWcn7QIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHWSbN3Pj7NoJGnlCqiIefW2xU2wMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvZFpKczNjLVBzMmdrYWVVS3FJaDU5YmJGVGJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABWPDED BAJWPDADBABWPGAwDQYJKoZIhvcNAQELBQADggEBAJKYM4FHMHLSM+98vNNGvOHG 4WYmguC1QhA7LuNzXwOBDt2V9xkXn28QL0VsMGpZ7s4DPPwOPIbgAkbzUUiFhpZT yadANuuMHWeTNshgRwol1nra9nNVQVODBEQz7hREamt5HyxgE+e9gxSbvZ4TChdL 1xcL6Lyj/Y23EIJdJyqqDQCHuhYpUuFecr429OSAqEe8msY2L+abWhGJw+RltzeA imSBmhmnSfq5/1M0OlNIM1POvuGwJQrV4ykGj6uavVZz2YoSpB10HMVdFUnhc/sI uePHKcLFtgpMIFdeQ0Tp9S4ZkfBuF7bKIluP+iskvVvr+xEa9RWJOnqTfCMd0ZU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:29 2026 by rpki-client