This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/0JmF5AUf0p1M1z9cP8mMD5KuZZw.roa File: 0JmF5AUf0p1M1z9cP8mMD5KuZZw.roa (raw, json) Hash identifier: 2ujywu7q9GEhSwmWa2kGn1zM3yGE7yjc2x2WOVXA/9Y= Subject key identifier: D0:99:85:E4:05:1F:D2:9D:4C:D7:3F:5C:3F:C9:8C:0F:92:AE:65:9C Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1469DBA5C2733445C56CBEC0946CED Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/0JmF5AUf0p1M1z9cP8mMD5KuZZw.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213114 IP address blocks: 193.233.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:69:db:a5:c2:73:34:45:c5:6c:be:c0:94:6c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d09985e4051fd29d4cd73f5c3fc98c0f92ae659c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e6:2f:12:ad:1e:eb:cd:4e:a1:43:64:af:fc: 16:0b:0e:5b:c5:23:a7:2d:85:cd:6f:ba:24:b2:ac: 25:74:4a:52:9f:dc:67:41:2b:0b:56:86:5c:90:8a: 1c:ad:c9:51:9f:ba:68:33:46:42:8a:6e:2e:08:5d: f3:1d:c3:47:ea:b6:e9:b8:66:25:80:cb:aa:70:a6: 27:73:7e:18:0d:7f:69:2d:a3:67:d8:30:61:d9:91: 03:fb:f9:bb:87:76:86:0e:b7:26:f9:9a:5d:73:6b: 5d:30:e8:e0:9c:0e:48:d1:6c:74:b3:67:d1:1d:9e: 99:1c:fa:73:62:02:86:13:bb:23:94:e3:d8:ee:7f: 07:18:c6:e0:8e:78:e2:7d:4e:cb:61:74:a0:64:fc: db:c8:6b:9a:e1:37:98:a4:4c:3a:3d:5b:38:2e:c6: 93:54:b9:8f:2b:4b:84:b0:df:f1:1f:20:52:c7:31: 96:b8:63:c0:fe:8d:7c:27:a8:29:6e:70:92:41:2c: 32:06:98:a6:47:f8:e3:20:f0:a3:80:66:53:7c:ae: 6a:7a:da:a2:91:7d:88:2b:43:5b:a6:5a:f1:a1:7d: 95:0a:d5:4e:30:bd:36:1e:c3:a8:23:70:2b:21:59: bb:0a:64:d0:93:22:51:7b:8f:68:4c:4b:9a:eb:cb: d3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:99:85:E4:05:1F:D2:9D:4C:D7:3F:5C:3F:C9:8C:0F:92:AE:65:9C X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/0JmF5AUf0p1M1z9cP8mMD5KuZZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.229.0/24 Signature Algorithm: sha256WithRSAEncryption 93:8c:80:57:62:76:7b:8a:52:d8:43:73:74:41:40:5b:48:5a: 69:11:19:ec:87:97:60:0a:9c:fc:4e:60:2d:d1:9f:ed:73:b1: 1f:c2:86:fb:98:d1:af:e8:e0:0a:a0:18:d6:01:d0:ed:7c:0e: 6b:1a:1b:f7:86:0c:a2:ff:89:a2:c7:2c:da:e1:e8:4d:d7:92: a6:03:f7:d7:ac:75:47:a0:b2:3f:4f:18:ab:1a:b2:ad:52:95: 1a:9e:fd:69:d9:67:ed:69:24:a7:1a:0e:9b:f2:56:82:e7:6f: b5:1e:3e:fd:3f:65:71:d2:1d:7e:52:08:74:5b:d9:d3:04:0f: 98:45:b1:2e:c5:18:ed:9b:03:d6:a6:9e:63:a6:cf:4c:fb:bf: 6a:8a:dc:f5:56:92:92:15:92:f8:c7:92:7f:37:98:60:8c:fd: e5:f0:76:7c:cb:3c:28:15:75:02:2c:30:e7:eb:8d:a7:a2:0c: 0c:ca:27:9d:9f:03:9e:05:c1:26:2c:0c:d4:3e:5f:30:3d:a1: 7e:0b:32:d8:4c:cc:70:7a:5d:1f:fb:01:8e:48:99:4d:16:36: 6c:fe:bc:f5:e6:58:ca:61:1c:ef:a8:25:05:7b:97:3e:c7:d4: 7e:92:7d:9c:75:87:8f:18:48:15:6e:32:e1:14:65:94:f1:29: 72:30:02:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGnbpcJzNEXFbL7AlGztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDk5ODVlNDA1MWZkMjlkNGNkNzNmNWMzZmM5OGMwZjkyYWU2NTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+YvEq0e681OoUNkr/wWCw5bxSOn LYXNb7oksqwldEpSn9xnQSsLVoZckIocrclRn7poM0ZCim4uCF3zHcNH6rbpuGYl gMuqcKYnc34YDX9pLaNn2DBh2ZED+/m7h3aGDrcm+Zpdc2tdMOjgnA5I0Wx0s2fR HZ6ZHPpzYgKGE7sjlOPY7n8HGMbgjnjifU7LYXSgZPzbyGua4TeYpEw6PVs4LsaT VLmPK0uEsN/xHyBSxzGWuGPA/o18J6gpbnCSQSwyBpimR/jjIPCjgGZTfK5qetqi kX2IK0NbplrxoX2VCtVOML02HsOoI3ArIVm7CmTQkyJRe49oTEua68vTFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCZheQFH9KdTNc/XD/JjA+SrmWcMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvMEptRjVBVWYwcDFNMXo5Y1A4bU1ENUt1Wlp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwenlMA0G CSqGSIb3DQEBCwUAA4IBAQCTjIBXYnZ7ilLYQ3N0QUBbSFppERnsh5dgCpz8TmAt 0Z/tc7Efwob7mNGv6OAKoBjWAdDtfA5rGhv3hgyi/4mixyza4ehN15KmA/fXrHVH oLI/TxirGrKtUpUanv1p2WftaSSnGg6b8laC52+1Hj79P2Vx0h1+Ugh0W9nTBA+Y RbEuxRjtmwPWpp5jps9M+79qitz1VpKSFZL4x5J/N5hgjP3l8HZ8yzwoFXUCLDDn 642nogwMyiednwOeBcEmLAzUPl8wPaF+CzLYTMxwel0f+wGOSJlNFjZs/rz15ljK YRzvqCUFe5c+x9R+kn2cdYePGEgVbjLhFGWU8SlyMALi -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:44 2026 by rpki-client