This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa File: 86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa (raw, json) Hash identifier: /zwRSRtTHoD1Z/LaEwVytkEcz+iBaapPIdZRoSCcCHI= Subject key identifier: F3:A4:1D:92:05:F4:65:3E:D2:E0:33:6E:B8:78:EB:18:50:A1:D3:10 Certificate issuer: /CN=b814345affd1506af9af32ec0d77399b7664aa3f Certificate serial: 019B77592D3A81C6387DA9F82CD0E5C5E1F2 Authority key identifier: B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197641 IP address blocks: 45.144.104.0/22 maxlen: 22 2a0e:ec40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.mft rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2d:3a:81:c6:38:7d:a9:f8:2c:d0:e5:c5:e1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b814345affd1506af9af32ec0d77399b7664aa3f Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3a41d9205f4653ed2e0336eb878eb1850a1d310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:67:3d:4c:ae:16:c4:89:2b:eb:c5:3b:7e:24: f2:51:9c:0b:75:7b:2a:b7:e1:94:98:73:33:43:2d: 7a:29:de:37:5a:ff:9f:44:2b:44:4e:a5:2b:09:40: 84:f3:71:2f:c6:88:a0:f5:29:69:c2:b5:b7:94:2e: 71:0a:55:3f:2b:22:1c:eb:e4:5d:15:59:f8:60:53: ef:77:5d:fb:f4:f8:1a:f7:bb:fb:b6:59:e4:89:58: 2a:1b:b0:8b:63:96:d7:c5:e8:29:b4:bb:cc:f0:06: 5b:1d:f4:d1:9b:61:5a:4d:40:33:c8:1a:cb:c3:98: 2b:61:70:54:77:61:b2:65:34:cb:9a:cc:2a:e7:f9: bd:26:64:35:a3:79:53:e7:21:c4:c5:86:29:13:92: 01:44:d4:f3:70:a4:b7:e0:8e:d8:e6:39:9c:67:54: c5:c4:8d:c1:b7:e8:1f:c3:0e:47:e2:0f:71:fc:55: 6b:68:30:3f:9d:43:5a:0f:df:5f:95:bd:94:22:20: 15:d4:20:8c:4f:20:52:9f:f7:e0:6c:e3:56:15:97: 48:e6:75:10:3a:cd:30:61:07:42:04:5b:58:cd:9d: b4:ef:f8:0c:b8:0c:3c:ec:84:bb:51:ab:2e:23:c3: 5a:8a:30:ac:f6:e9:56:fa:44:08:d7:1d:28:47:b1: 85:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:1D:92:05:F4:65:3E:D2:E0:33:6E:B8:78:EB:18:50:A1:D3:10 X509v3 Authority Key Identifier: keyid:B8:14:34:5A:FF:D1:50:6A:F9:AF:32:EC:0D:77:39:9B:76:64:AA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/86QdkgX0ZT7S4DNuuHjrGFCh0xA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/50b18f-9a7d-452c-a6d5-9de7525ba712/1/uBQ0Wv_RUGr5rzLsDXc5m3Zkqj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.104.0/22 IPv6: 2a0e:ec40::/29 Signature Algorithm: sha256WithRSAEncryption 81:b3:db:bf:02:14:38:2d:e5:07:95:85:f0:1e:0b:e5:2b:43: 75:cf:67:61:4b:af:18:99:4f:7f:87:82:fe:e6:5a:6f:f8:96: 7b:09:9c:12:93:de:f1:63:aa:3a:86:8d:fa:fb:b9:77:ca:97: ed:2f:9d:45:ab:4f:7c:01:81:8f:4f:03:86:0b:21:eb:cf:d7: 1b:d2:51:01:32:28:46:ca:f1:ff:3e:bb:06:cb:1d:69:ef:f6: 80:0a:c5:d1:8c:c4:15:c2:8e:4d:79:11:0c:92:9c:3b:97:db: 67:e9:e6:96:08:78:d1:df:26:7b:89:9c:0f:c5:a5:74:5f:a2: 10:06:94:eb:5d:25:b7:68:f8:af:c6:80:ba:eb:45:ce:6e:a5: 51:16:06:b4:11:0a:0d:46:59:99:2b:5d:80:93:b6:21:03:9e: a8:65:e5:ca:eb:e6:dd:c5:23:d3:37:48:2e:56:65:6a:6b:17: e1:37:b0:61:12:f6:58:47:c9:6a:a3:de:58:c8:6b:1d:07:fc: ee:94:67:83:15:9d:a0:ba:3f:37:8b:26:df:24:1c:f9:b4:4c: 1d:c0:f9:3b:c0:3f:1d:b7:b2:1e:3d:a2:64:be:61:0d:9e:6e: aa:78:56:53:3d:76:ec:9a:6e:12:1f:32:79:96:69:39:43:d7: 45:96:48:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WS06gcY4fan4LNDlxeHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MTQzNDVhZmZkMTUwNmFmOWFmMzJlYzBkNzczOTliNzY2 NGFhM2YwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2E0MWQ5MjA1ZjQ2NTNlZDJlMDMzNmViODc4ZWIxODUwYTFkMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Gc9TK4WxIkr68U7fiTyUZwLdXsq t+GUmHMzQy16Kd43Wv+fRCtETqUrCUCE83Evxoig9SlpwrW3lC5xClU/KyIc6+Rd FVn4YFPvd1379Pga97v7tlnkiVgqG7CLY5bXxegptLvM8AZbHfTRm2FaTUAzyBrL w5grYXBUd2GyZTTLmswq5/m9JmQ1o3lT5yHExYYpE5IBRNTzcKS34I7Y5jmcZ1TF xI3Bt+gfww5H4g9x/FVraDA/nUNaD99flb2UIiAV1CCMTyBSn/fgbONWFZdI5nUQ Os0wYQdCBFtYzZ207/gMuAw87IS7UasuI8NaijCs9ulW+kQI1x0oR7GFIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPOkHZIF9GU+0uAzbrh46xhQodMQMB8GA1UdIwQY MBaAFLgUNFr/0VBq+a8y7A13OZt2ZKo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUt OWRlNzUyNWJhNzEyLzEvODZRZGtnWDBaVDdTNEROdXVIanJHRkNoMHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MGIxOGYtOWE3ZC00NTJjLWE2ZDUtOWRlNzUyNWJhNzEy LzEvdUJRMFd2X1JVR3I1cnpMc0RYYzVtM1prcWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZBoMA0E AgACMAcDBQMqDuxAMA0GCSqGSIb3DQEBCwUAA4IBAQCBs9u/AhQ4LeUHlYXwHgvl K0N1z2dhS68YmU9/h4L+5lpv+JZ7CZwSk97xY6o6ho36+7l3ypftL51Fq098AYGP TwOGCyHrz9cb0lEBMihGyvH/PrsGyx1p7/aACsXRjMQVwo5NeREMkpw7l9tn6eaW CHjR3yZ7iZwPxaV0X6IQBpTrXSW3aPivxoC660XObqVRFga0EQoNRlmZK12Ak7Yh A56oZeXK6+bdxSPTN0guVmVqaxfhN7BhEvZYR8lqo95YyGsdB/zulGeDFZ2guj83 iybfJBz5tEwdwPk7wD8dt7IePaJkvmENnm6qeFZTPXbsmm4SHzJ5lmk5Q9dFlkiJ -----END CERTIFICATE-----Generated at Fri Jan 2 19:42:53 2026 by rpki-client