This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/t0K4HGcM7SYmbee1zvHwQlP_JGY.roa File: t0K4HGcM7SYmbee1zvHwQlP_JGY.roa (raw, json) Hash identifier: AGbfQJGLAl/VV+53Q0j0FQio/VcRd8jWfQfbs9NOEoY= Subject key identifier: B7:42:B8:1C:67:0C:ED:26:26:6D:E7:B5:CE:F1:F0:42:53:FF:24:66 Certificate issuer: /CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Certificate serial: 019B797E92D555D8250ABEFD26957370523B Authority key identifier: 6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/t0K4HGcM7SYmbee1zvHwQlP_JGY.roa Signing time: Thu 01 Jan 2026 12:18:16 +0000 ROA not before: Thu 01 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47526 IP address blocks: 86.109.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.mft rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:92:d5:55:d8:25:0a:be:fd:26:95:73:70:52:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc3e6cb2eb02fcc742baf91ab865c9b20d6484b Validity Not Before: Jan 1 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b742b81c670ced26266de7b5cef1f04253ff2466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c7:78:fe:c3:dd:87:93:47:67:6f:7b:b8:92: 52:8c:f4:f9:97:bc:7c:3a:fb:89:c2:c3:81:25:50: 6f:ce:47:02:ac:8c:38:ad:f6:f2:2e:e0:2c:97:db: fd:1b:8a:41:44:bb:7c:aa:a0:b9:23:27:ef:83:2c: 46:d8:d8:cc:95:76:f8:bb:3a:8b:83:83:4a:8e:53: 2a:2c:8b:73:1c:de:ae:ec:28:7d:28:1c:0a:3d:33: 0e:c0:1b:bf:5e:32:ce:53:08:43:aa:4f:90:7e:66: ba:d4:67:49:87:34:9e:24:f7:66:1f:a0:31:7a:44: 47:bd:be:97:b4:d4:cf:cf:36:94:2b:86:cf:3f:fa: 7a:75:fd:23:4a:2e:28:c9:b4:a5:23:e4:09:e3:7e: 4b:35:a5:63:51:0b:0d:54:24:8a:68:83:e9:14:64: 7f:88:07:04:b0:ef:5f:95:80:68:52:79:fe:78:9e: 43:20:10:2d:88:1b:c5:58:fe:0c:c7:8f:f9:a7:70: 81:3d:38:6c:00:54:d6:c2:57:db:5c:9a:08:df:ba: 8e:f4:51:91:47:c1:9b:bc:e9:6a:21:f1:6c:79:49: 3e:76:06:b5:bb:86:4d:3b:c7:20:08:d4:fa:ce:bd: 64:e3:71:99:68:da:20:55:9c:97:f0:02:d7:97:e1: e7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:42:B8:1C:67:0C:ED:26:26:6D:E7:B5:CE:F1:F0:42:53:FF:24:66 X509v3 Authority Key Identifier: keyid:6B:C3:E6:CB:2E:B0:2F:CC:74:2B:AF:91:AB:86:5C:9B:20:D6:48:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/t0K4HGcM7SYmbee1zvHwQlP_JGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f5e440-100f-4933-aabf-11098aa2ebc3/1/a8Pmyy6wL8x0K6-Rq4ZcmyDWSEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.231.0/24 Signature Algorithm: sha256WithRSAEncryption be:63:cd:75:28:56:e2:93:3e:60:30:a0:9d:ff:8d:ae:95:76: 60:42:62:8f:26:b1:62:f8:a9:a4:96:65:7b:34:d7:bd:74:c7: ff:40:fe:3b:2b:3b:6c:1f:37:f6:b5:f8:25:50:43:48:ef:bd: 29:2d:e5:a9:10:a7:ee:6a:65:45:9d:4d:1e:c5:2e:c4:58:29: 01:d4:2b:85:dc:09:31:62:7d:d8:47:64:bd:a2:d1:5a:2c:7e: 2c:37:2a:6f:e6:37:3a:aa:5d:7d:25:f4:76:73:fa:2a:67:e0: d9:42:bf:b2:38:04:e2:27:39:60:c6:b3:39:1a:d9:3f:35:2e: 5a:ed:b6:d1:58:87:d9:df:6e:f4:9c:40:6a:ed:91:ce:ea:76: 63:b2:6c:7d:26:4c:32:6c:18:0c:43:63:5f:c8:56:76:48:48: b8:f5:65:8f:82:81:12:7f:80:01:d3:8c:c5:57:1c:12:a3:f9: 89:e9:ef:98:66:3f:1d:24:08:4c:97:4f:89:ad:bb:de:e9:12: 60:de:a0:86:07:42:b8:8c:99:70:4f:02:9f:ec:eb:12:c9:f5: f6:eb:e5:02:d3:00:09:ba:d1:50:42:22:df:34:5a:b2:86:e3: fe:9d:94:59:07:da:f2:9a:2f:e2:f4:38:43:e9:f6:0e:ab:e5: d2:8e:1a:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpLVVdglCr79JpVzcFI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzNlNmNiMmViMDJmY2M3NDJiYWY5MWFiODY1YzliMjBk NjQ4NGIwHhcNMjYwMTAxMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQyYjgxYzY3MGNlZDI2MjY2ZGU3YjVjZWYxZjA0MjUzZmYyNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sd4/sPdh5NHZ297uJJSjPT5l7x8 OvuJwsOBJVBvzkcCrIw4rfbyLuAsl9v9G4pBRLt8qqC5IyfvgyxG2NjMlXb4uzqL g4NKjlMqLItzHN6u7Ch9KBwKPTMOwBu/XjLOUwhDqk+Qfma61GdJhzSeJPdmH6Ax ekRHvb6XtNTPzzaUK4bPP/p6df0jSi4oybSlI+QJ435LNaVjUQsNVCSKaIPpFGR/ iAcEsO9flYBoUnn+eJ5DIBAtiBvFWP4Mx4/5p3CBPThsAFTWwlfbXJoI37qO9FGR R8GbvOlqIfFseUk+dga1u4ZNO8cgCNT6zr1k43GZaNogVZyX8ALXl+HnOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLdCuBxnDO0mJm3ntc7x8EJT/yRmMB8GA1UdIwQY MBaAFGvD5ssusC/MdCuvkauGXJsg1khLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYt MTEwOThhYTJlYmMzLzEvdDBLNEhHY003U1ltYmVlMXp2SHdRbFBfSkdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNWU0NDAtMTAwZi00OTMzLWFhYmYtMTEwOThhYTJlYmMz LzEvYThQbXl5NndMOHgwSzYtUnE0WmNteURXU0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm3nMA0G CSqGSIb3DQEBCwUAA4IBAQC+Y811KFbikz5gMKCd/42ulXZgQmKPJrFi+KmklmV7 NNe9dMf/QP47KztsHzf2tfglUENI770pLeWpEKfuamVFnU0exS7EWCkB1CuF3Akx Yn3YR2S9otFaLH4sNypv5jc6ql19JfR2c/oqZ+DZQr+yOATiJzlgxrM5Gtk/NS5a 7bbRWIfZ3270nEBq7ZHO6nZjsmx9JkwybBgMQ2NfyFZ2SEi49WWPgoESf4AB04zF VxwSo/mJ6e+YZj8dJAhMl0+Jrbve6RJg3qCGB0K4jJlwTwKf7OsSyfX26+UC0wAJ utFQQiLfNFqyhuP+nZRZB9rymi/i9DhD6fYOq+XSjhoY -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:13 2026 by rpki-client