This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/S0T2kL_9PWLHXGxcH-DefO6iYPU.roa File: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (raw, json) Hash identifier: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4= Subject key identifier: 4B:44:F6:90:BF:FD:3D:62:C7:5C:6C:5C:1F:E0:DE:7C:EE:A2:60:F5 Certificate issuer: /CN=9535e5d3845921b9d5fdf23637c59811b838634f Certificate serial: 019B7E38B7BEEF15F265F99358099A081BAE Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/S0T2kL_9PWLHXGxcH-DefO6iYPU.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197726 IP address blocks: 212.86.110.0/24 maxlen: 24 212.86.111.0/24 maxlen: 24 212.86.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b7:be:ef:15:f2:65:f9:93:58:09:9a:08:1b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b44f690bffd3d62c75c6c5c1fe0de7ceea260f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:bc:fd:40:eb:1f:5e:33:f0:39:20:67:b5: a4:79:30:f9:9b:7b:e6:fb:a1:59:47:ee:ec:c5:ae: db:bf:bf:72:a9:c2:cb:03:11:97:fc:7b:d4:b4:4c: 45:f5:e1:f3:de:5d:2d:f8:e9:72:3d:93:45:88:ef: 64:65:6a:1c:bb:f0:88:6e:ca:24:62:31:33:73:77: 14:20:37:fd:8f:cb:03:1c:4d:3a:a4:89:47:50:be: be:70:14:4c:e6:ea:87:1b:21:45:98:24:9c:d1:0b: 26:de:c8:26:12:9e:1b:09:dc:20:06:84:b4:2b:d2: 3a:f4:f8:10:f6:c8:0f:ab:51:7e:d9:43:33:6b:4e: 9d:8c:60:a8:f5:69:49:58:00:0b:9d:aa:b0:94:ae: 8b:1e:cc:db:f2:94:18:5a:b2:be:53:c0:61:27:5e: 1d:39:97:76:72:8a:fc:7e:98:9f:a8:a2:61:ee:81: 7c:e6:2c:b4:6b:5b:61:47:05:b3:1a:87:7f:b8:cd: af:4f:b1:11:28:9a:59:d9:9e:df:6f:48:25:33:4b: 1b:11:21:dd:92:5c:19:ed:d6:e2:d7:56:2d:81:6e: 98:3a:dc:81:31:2d:50:19:c9:00:97:19:bb:47:f2: ad:96:af:43:23:10:63:cd:45:06:ef:a1:12:8f:a3: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:44:F6:90:BF:FD:3D:62:C7:5C:6C:5C:1F:E0:DE:7C:EE:A2:60:F5 X509v3 Authority Key Identifier: keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/S0T2kL_9PWLHXGxcH-DefO6iYPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.86.110.0/23 212.86.113.0/24 Signature Algorithm: sha256WithRSAEncryption 16:ed:05:55:b6:5e:f2:46:a8:fa:d5:01:1f:4c:78:57:71:05: ef:71:6f:82:ee:89:86:71:ae:bf:b2:0a:35:cf:3e:5f:ef:a7: 89:ee:bc:f8:2d:5e:84:14:b3:19:ac:21:73:ca:40:b7:c5:1f: 29:01:f3:d4:67:f7:98:66:93:8b:b7:49:68:66:de:08:9c:7b: 0d:6f:2e:bc:dd:80:90:5a:f2:4d:7b:7c:51:a5:0b:c6:ea:ce: e6:5a:53:5c:b8:a9:7b:89:25:3a:be:b3:03:64:87:47:da:61: 40:d9:b4:a8:7e:19:7d:b7:ec:3b:2f:ac:83:d3:fe:73:de:b8: 0c:5c:06:a7:69:54:8c:78:2b:97:8d:c6:b9:26:30:6b:42:01: aa:38:96:a4:34:91:bf:74:7d:23:85:72:c7:bb:b2:1d:47:df: 6f:7a:6a:e7:48:da:27:c4:39:7f:32:c2:62:61:cc:51:ae:65: 89:0f:c9:35:7a:5b:6f:4d:f9:fe:1e:44:48:ac:47:6a:17:6a: a3:90:79:a1:23:f7:29:7e:14:4f:9b:c6:b2:6f:93:3e:a6:e8: 19:c2:6e:06:45:8d:7a:15:59:53:4a:65:4f:80:e3:a0:bc:95: 1b:a9:f2:c5:79:f1:2a:35:dd:38:e9:f3:c8:0c:ea:b4:95:ef: b3:95:9d:ba -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OLe+7xXyZfmTWAmaCBuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1MzVlNWQzODQ1OTIxYjlkNWZkZjIzNjM3YzU5ODExYjgz ODYzNGYwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjQ0ZjY5MGJmZmQzZDYyYzc1YzZjNWMxZmUwZGU3Y2VlYTI2MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1i8/UDrH14z8DkgZ7WkeTD5m3vm +6FZR+7sxa7bv79yqcLLAxGX/HvUtExF9eHz3l0t+OlyPZNFiO9kZWocu/CIbsok YjEzc3cUIDf9j8sDHE06pIlHUL6+cBRM5uqHGyFFmCSc0Qsm3sgmEp4bCdwgBoS0 K9I69PgQ9sgPq1F+2UMza06djGCo9WlJWAALnaqwlK6LHszb8pQYWrK+U8BhJ14d OZd2cor8fpifqKJh7oF85iy0a1thRwWzGod/uM2vT7ERKJpZ2Z7fb0glM0sbESHd klwZ7dbi11YtgW6YOtyBMS1QGckAlxm7R/Ktlq9DIxBjzUUG76ESj6MQKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEtE9pC//T1ix1xsXB/g3nzuomD1MB8GA1UdIwQY MBaAFJU15dOEWSG51f3yNjfFmBG4OGNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYt OWNlZjkxN2I4ZTM3LzEvUzBUMmtMXzlQV0xIWEd4Y0gtRGVmTzZpWVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mZGQyNTUtZDYxZS00MGI2LWE3OGYtOWNlZjkxN2I4ZTM3 LzEvbFRYbDA0UlpJYm5WX2ZJMk44V1lFYmc0WTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1FZuAwQA 1FZxMA0GCSqGSIb3DQEBCwUAA4IBAQAW7QVVtl7yRqj61QEfTHhXcQXvcW+C7omG ca6/sgo1zz5f76eJ7rz4LV6EFLMZrCFzykC3xR8pAfPUZ/eYZpOLt0loZt4InHsN by683YCQWvJNe3xRpQvG6s7mWlNcuKl7iSU6vrMDZIdH2mFA2bSofhl9t+w7L6yD 0/5z3rgMXAanaVSMeCuXjca5JjBrQgGqOJakNJG/dH0jhXLHu7IdR99vemrnSNon xDl/MsJiYcxRrmWJD8k1eltvTfn+HkRIrEdqF2qjkHmhI/cpfhRPm8ayb5M+pugZ wm4GRY16FVlTSmVPgOOgvJUbqfLFefEqNd046fPIDOq0le+zlZ26 -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:27 2026 by rpki-client