This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_sb2Ivp-z3q2cEiNFFQje50k48.roa File: 6_sb2Ivp-z3q2cEiNFFQje50k48.roa (raw, json) Hash identifier: C3LEHOyY7gV0he+WkY7qbCq3xVT1Fhibjs1U8uuOkcU= Subject key identifier: EB:FB:1B:D8:8B:E9:FB:3D:EA:D9:C1:22:34:51:50:8D:EE:74:93:8F Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14599FA8BB1F1A0222C6690DEAC41E Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_sb2Ivp-z3q2cEiNFFQje50k48.roa Signing time: Fri 02 Jan 2026 14:19:58 +0000 ROA not before: Fri 02 Jan 2026 14:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202999 IP address blocks: 193.233.9.0/24 maxlen: 24 193.233.56.0/24 maxlen: 24 193.233.57.0/24 maxlen: 27 193.233.58.0/24 maxlen: 24 193.233.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:59:9f:a8:bb:1f:1a:02:22:c6:69:0d:ea:c4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebfb1bd88be9fb3dead9c1223451508dee74938f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f1:bc:0c:bb:af:0e:1a:64:4d:1b:24:39:71: 2b:01:05:35:19:fd:67:b0:3f:b4:dc:45:12:80:d4: 46:96:d0:61:5d:6e:83:54:9b:fc:b6:cb:34:67:b2: d5:fe:f7:26:68:d4:11:8a:70:7d:f2:99:f8:2c:ff: 4a:6c:a3:67:f2:96:32:60:f0:0a:ff:b4:85:1d:6f: 8d:8b:fe:1d:f0:fc:ce:de:06:b5:2c:ff:15:15:7b: 27:5d:fa:45:3a:0e:ab:12:c8:76:2a:9a:ba:1a:57: fb:48:bf:bf:18:8b:db:fd:ce:c2:b6:71:8f:2b:af: 58:6c:3e:16:73:e3:c3:3d:cf:ad:0a:45:c3:c4:e7: 6b:c1:7b:7d:da:47:dc:06:d1:44:95:4a:5e:e4:fe: 30:6e:a3:06:fb:36:4e:50:4f:27:84:03:f9:81:d1: 20:0a:67:3e:df:20:26:7e:85:4e:01:60:40:57:f8: 5c:60:3c:4e:46:67:44:53:ba:1c:68:d1:3d:ca:5a: 96:3e:69:e8:e1:c4:a7:15:be:3b:c2:97:c1:54:df: cc:df:8a:2c:45:20:76:5b:5e:2d:eb:d0:1a:15:3a: fc:0e:e8:d4:f5:7f:cf:82:71:1c:f8:46:6d:07:b8: 6e:28:d9:45:69:bd:7c:27:f2:00:6e:36:49:f3:53: 13:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FB:1B:D8:8B:E9:FB:3D:EA:D9:C1:22:34:51:50:8D:EE:74:93:8F X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6_sb2Ivp-z3q2cEiNFFQje50k48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.9.0/24 193.233.56.0/22 Signature Algorithm: sha256WithRSAEncryption 52:ac:61:b3:a0:a1:5f:0f:85:88:65:38:71:23:b9:6f:a6:d5: 96:84:87:61:31:ec:74:1e:bf:11:31:c3:88:f5:15:d9:4a:dd: dc:9f:9d:38:b4:ab:df:44:67:01:88:c4:03:5a:75:c0:65:19: a5:eb:e4:fd:1a:df:67:03:5d:3e:a0:e3:3d:54:cc:79:69:3b: e5:f6:14:b7:d0:af:53:42:be:e2:2e:2d:99:b0:03:f0:7f:9d: bc:09:35:2b:b9:88:f1:52:4a:c0:fb:a2:71:06:18:ca:8e:40: 42:52:90:9a:6e:81:bf:ff:cf:1f:d2:da:08:01:80:fa:ce:d3: b7:1e:d2:3c:4c:6d:2a:0d:be:b1:71:59:4d:ed:40:2d:1d:20: 16:16:15:22:e0:7f:b5:e9:8e:c5:ae:6b:d4:14:92:03:35:9e: 9d:95:b8:95:fc:e6:a3:c9:21:df:66:3d:5c:0c:d2:5b:c4:cd: a2:ac:59:19:9b:65:65:39:db:af:14:02:4e:5a:7c:20:58:ee: 3b:4b:f6:48:d3:d3:8c:52:db:2a:18:5d:22:95:e5:1a:57:09: a4:88:4e:ed:7a:3d:aa:41:67:f6:19:e0:93:7e:bd:9a:b8:b7: 3a:92:46:8d:39:b2:b2:d3:b0:6b:37:d2:e4:ce:39:b5:ed:93: 3f:b3:fb:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FFmfqLsfGgIixmkN6sQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmZiMWJkODhiZTlmYjNkZWFkOWMxMjIzNDUxNTA4ZGVlNzQ5MzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfG8DLuvDhpkTRskOXErAQU1Gf1n sD+03EUSgNRGltBhXW6DVJv8tss0Z7LV/vcmaNQRinB98pn4LP9KbKNn8pYyYPAK /7SFHW+Ni/4d8PzO3ga1LP8VFXsnXfpFOg6rEsh2Kpq6Glf7SL+/GIvb/c7CtnGP K69YbD4Wc+PDPc+tCkXDxOdrwXt92kfcBtFElUpe5P4wbqMG+zZOUE8nhAP5gdEg Cmc+3yAmfoVOAWBAV/hcYDxORmdEU7ocaNE9ylqWPmno4cSnFb47wpfBVN/M34os RSB2W14t69AaFTr8DujU9X/PgnEc+EZtB7huKNlFab18J/IAbjZJ81MTpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOv7G9iL6fs96tnBIjRRUI3udJOPMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvNl9zYjJJdnAtejNxMmNFaU5GRlFqZTUwazQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwekJAwQC wek4MA0GCSqGSIb3DQEBCwUAA4IBAQBSrGGzoKFfD4WIZThxI7lvptWWhIdhMex0 Hr8RMcOI9RXZSt3cn504tKvfRGcBiMQDWnXAZRml6+T9Gt9nA10+oOM9VMx5aTvl 9hS30K9TQr7iLi2ZsAPwf528CTUruYjxUkrA+6JxBhjKjkBCUpCaboG//88f0toI AYD6ztO3HtI8TG0qDb6xcVlN7UAtHSAWFhUi4H+16Y7FrmvUFJIDNZ6dlbiV/Oaj ySHfZj1cDNJbxM2irFkZm2VlOduvFAJOWnwgWO47S/ZI09OMUtsqGF0ileUaVwmk iE7tej2qQWf2GeCTfr2auLc6kkaNObKy07BrN9Lkzjm17ZM/s/s4 -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:43 2026 by rpki-client