This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5mgaVTwc81k_-lWFvXVKEcTiPPo.roa File: 5mgaVTwc81k_-lWFvXVKEcTiPPo.roa (raw, json) Hash identifier: 11K2QoqogM8fAbXGwRlStmLC9YSeK0XdufefEf085rE= Subject key identifier: E6:68:1A:55:3C:1C:F3:59:3F:FA:55:85:BD:75:4A:11:C4:E2:3C:FA Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146E930642CE5BB5F1991942863835 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5mgaVTwc81k_-lWFvXVKEcTiPPo.roa Signing time: Fri 02 Jan 2026 14:20:04 +0000 ROA not before: Fri 02 Jan 2026 14:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 193.233.21.0/24 maxlen: 24 193.233.132.0/24 maxlen: 24 193.233.230.0/24 maxlen: 24 193.233.231.0/24 maxlen: 24 193.233.248.0/24 maxlen: 24 193.233.249.0/24 maxlen: 24 193.233.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6e:93:06:42:ce:5b:b5:f1:99:19:42:86:38:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6681a553c1cf3593ffa5585bd754a11c4e23cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:62:70:5e:ff:e2:97:10:d9:28:79:ed:a7:9c: 8f:50:7a:2e:05:e6:9d:46:c0:b0:0d:27:72:17:6f: c5:3a:2c:e8:9b:30:04:1d:d2:35:b1:89:94:51:ac: 7b:30:3b:21:4c:66:bd:26:54:64:53:91:50:6b:c4: 2f:53:67:55:b8:bb:b3:c6:40:b8:48:d2:28:a9:6c: 49:f2:71:b4:19:46:a2:3d:87:b4:69:6c:e5:da:28: 80:10:9d:6a:79:95:ad:67:e8:8d:c2:b8:75:76:9f: c7:64:32:7f:fa:dd:7b:65:bc:2b:f8:a0:e1:96:64: 23:5f:ae:56:8b:86:59:96:fc:10:1e:16:0c:e1:6a: 8a:50:5a:bf:4e:f4:21:27:a0:4e:31:df:a8:ca:23: bc:ee:31:29:9a:71:1d:74:5d:c4:d0:a0:c9:0b:d8: a8:5c:59:f0:3c:3a:40:80:f6:b8:3e:86:7a:29:e9: 47:85:39:f1:a0:89:c6:13:dd:98:88:05:66:f9:ec: e9:6a:0c:46:01:ed:ae:51:09:5c:b3:24:d7:b8:93: 99:4e:77:e3:f7:97:92:24:a9:64:27:24:28:16:1a: bb:19:30:44:ed:df:8f:dc:2a:df:be:4b:8f:66:0a: 76:25:df:1d:87:3c:20:0e:12:82:57:14:31:cd:9d: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:68:1A:55:3C:1C:F3:59:3F:FA:55:85:BD:75:4A:11:C4:E2:3C:FA X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5mgaVTwc81k_-lWFvXVKEcTiPPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.21.0/24 193.233.132.0/24 193.233.230.0/23 193.233.248.0-193.233.250.255 Signature Algorithm: sha256WithRSAEncryption 95:3d:33:ac:7f:31:8d:09:07:3b:42:8e:39:4c:5f:12:9f:12: 9b:c2:27:4c:c5:ae:f4:a6:54:2c:bd:ea:1a:12:df:f8:09:f6: 55:2c:b0:79:e7:8b:57:44:b5:24:16:ca:4d:57:41:7a:63:30: e9:8c:8a:8f:cb:8b:72:a3:aa:92:5d:52:5a:2b:30:26:b2:ce: c1:ae:e3:27:85:63:82:7d:62:12:c1:84:d5:41:fc:4a:56:d2: dd:14:b1:f0:c4:89:17:59:13:3a:18:58:00:32:60:bf:6c:41: 97:08:34:8b:02:9d:67:e8:c9:02:33:38:e2:07:30:68:5b:ac: 3c:2c:51:da:11:b2:66:85:b0:40:e2:1e:2b:13:60:d0:a6:4d: 59:28:d6:51:b9:12:d1:6b:50:6f:3c:46:12:66:95:2f:81:32: 47:bb:be:18:51:2d:c9:33:05:92:be:cf:72:d4:eb:a2:cd:82: 15:6d:47:26:31:2d:30:1b:8e:82:69:ca:b2:71:82:79:e0:e6: 15:72:ae:54:88:1c:d1:c7:5f:b4:e7:91:8a:5d:61:c1:58:bf: d8:f7:70:cc:00:74:d2:d7:4e:86:54:3c:e3:85:29:fd:c6:9d: 04:3c:d0:5f:70:9c:31:86:98:8f:b7:4c:67:c5:96:6b:ff:44: d8:5f:e3:c9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FG6TBkLOW7XxmRlChjg1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjY4MWE1NTNjMWNmMzU5M2ZmYTU1ODViZDc1NGExMWM0ZTIzY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWJwXv/ilxDZKHntp5yPUHouBead RsCwDSdyF2/FOizomzAEHdI1sYmUUax7MDshTGa9JlRkU5FQa8QvU2dVuLuzxkC4 SNIoqWxJ8nG0GUaiPYe0aWzl2iiAEJ1qeZWtZ+iNwrh1dp/HZDJ/+t17Zbwr+KDh lmQjX65Wi4ZZlvwQHhYM4WqKUFq/TvQhJ6BOMd+oyiO87jEpmnEddF3E0KDJC9io XFnwPDpAgPa4PoZ6KelHhTnxoInGE92YiAVm+ezpagxGAe2uUQlcsyTXuJOZTnfj 95eSJKlkJyQoFhq7GTBE7d+P3CrfvkuPZgp2Jd8dhzwgDhKCVxQxzZ2P5wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOZoGlU8HPNZP/pVhb11ShHE4jz6MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvNW1nYVZUd2M4MWtfLWxXRnZYVktFY1RpUFBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwekVAwQA wemEAwQBwenmMAwDBAPB6fgDBADB6fowDQYJKoZIhvcNAQELBQADggEBAJU9M6x/ MY0JBztCjjlMXxKfEpvCJ0zFrvSmVCy96hoS3/gJ9lUssHnni1dEtSQWyk1XQXpj MOmMio/Li3KjqpJdUlorMCayzsGu4yeFY4J9YhLBhNVB/EpW0t0UsfDEiRdZEzoY WAAyYL9sQZcINIsCnWfoyQIzOOIHMGhbrDwsUdoRsmaFsEDiHisTYNCmTVko1lG5 EtFrUG88RhJmlS+BMke7vhhRLckzBZK+z3LU66LNghVtRyYxLTAbjoJpyrJxgnng 5hVyrlSIHNHHX7TnkYpdYcFYv9j3cMwAdNLXToZUPOOFKf3GnQQ80F9wnDGGmI+3 TGfFlmv/RNhf48k= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:45 2026 by rpki-client