This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BcI7nBC320ac2WsvYuMldEZa-kY.roa File: BcI7nBC320ac2WsvYuMldEZa-kY.roa (raw, json) Hash identifier: zmUbLlpqD6lcyn8Am/UzqMhOCKY1JBh2OW8D2Bz+aSQ= Subject key identifier: 05:C2:3B:9C:10:B7:DB:46:9C:D9:6B:2F:62:E3:25:74:46:5A:FA:46 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1452FE16C40DA40311512426196752 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BcI7nBC320ac2WsvYuMldEZa-kY.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 193.233.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:52:fe:16:c4:0d:a4:03:11:51:24:26:19:67:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c23b9c10b7db469cd96b2f62e32574465afa46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:9b:5c:1e:d7:13:c6:10:2f:26:d8:da:94: ab:2b:69:f7:e2:99:af:4f:b8:02:1e:87:63:02:43: f5:55:df:8b:a8:c0:9a:39:db:c3:01:cc:62:00:be: 4c:80:f1:a5:e8:db:de:b6:25:b7:3b:d9:08:c8:54: 43:11:42:62:37:d9:24:d6:02:bd:90:d4:9f:c6:0c: 78:1c:40:5c:f8:19:2d:55:9f:66:86:e0:03:88:93: 51:72:e8:ec:16:04:96:7f:47:d7:a6:7d:4a:25:33: e7:45:e3:2b:e3:ee:b8:2d:41:29:d0:00:c2:59:3a: 9f:3a:80:62:e7:95:48:0b:af:a4:ef:f2:53:d6:ce: 67:b3:89:62:0e:3f:25:40:8d:4d:00:58:94:42:54: 4c:a2:20:22:cb:2a:0c:4a:2e:0f:c2:9d:f8:28:d8: e5:1a:80:8e:2c:9c:24:7a:2f:06:98:e3:5b:24:4a: 8a:37:80:2a:a5:e0:3a:b2:e4:99:fb:07:ca:3b:4c: bf:01:e8:7d:c6:08:f5:a3:29:4e:65:28:b3:4c:fb: 13:73:88:2f:77:79:8b:fe:0c:d9:69:6c:a1:42:45: 89:5e:c1:0b:da:ed:5c:93:56:a8:50:8a:6f:2a:ee: 9c:11:df:04:0e:f8:6d:96:cd:68:a6:ee:41:8a:c0: bc:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C2:3B:9C:10:B7:DB:46:9C:D9:6B:2F:62:E3:25:74:46:5A:FA:46 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BcI7nBC320ac2WsvYuMldEZa-kY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.19.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:fd:46:68:ca:6c:84:51:f8:49:3a:23:ef:5c:f3:fd:8b:96: 39:6c:a3:ae:9d:62:6d:50:88:6e:7f:f1:df:77:24:d3:40:d1: dc:be:9b:6f:e5:68:82:4e:ed:ab:7c:34:cc:39:a8:a9:48:99: 9f:33:d3:1d:d6:ec:99:63:fe:92:fe:a8:09:ff:00:4c:a0:c4: e2:48:05:ab:59:89:d7:50:db:3a:59:e9:c0:e9:63:40:e3:a3: 94:c7:22:64:53:98:d6:75:56:87:00:14:41:ba:bf:ac:1c:5e: 3c:ea:d3:28:fe:cb:33:1b:7b:3c:b4:f2:0a:f9:fa:5f:ae:8c: e1:06:a9:e8:27:32:43:e9:f4:d0:0e:26:5c:4e:53:53:ff:cd: 16:f6:e2:9a:40:49:95:52:86:ea:dc:19:e8:15:aa:c0:e2:9c: 11:b8:66:c9:39:58:d5:1b:e0:b4:ee:d8:25:93:a0:e6:45:c0: e9:59:a3:92:65:5f:5c:7c:f2:1c:1e:1d:b2:4d:39:01:eb:03: 05:23:d7:ce:17:d9:6b:d1:84:5e:99:0a:70:e8:d6:3c:a0:c0: e3:5f:6e:6b:fa:02:e6:98:a5:79:90:c5:dd:a6:1d:ee:0f:3a: 0a:3e:8e:07:9f:5f:ce:eb:ca:03:5f:50:02:bf:12:04:03:fe: bb:fb:a6:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFL+FsQNpAMRUSQmGWdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWMyM2I5YzEwYjdkYjQ2OWNkOTZiMmY2MmUzMjU3NDQ2NWFmYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPObXB7XE8YQLybY2pSrK2n34pmv T7gCHodjAkP1Vd+LqMCaOdvDAcxiAL5MgPGl6NvetiW3O9kIyFRDEUJiN9kk1gK9 kNSfxgx4HEBc+BktVZ9mhuADiJNRcujsFgSWf0fXpn1KJTPnReMr4+64LUEp0ADC WTqfOoBi55VIC6+k7/JT1s5ns4liDj8lQI1NAFiUQlRMoiAiyyoMSi4Pwp34KNjl GoCOLJwkei8GmONbJEqKN4AqpeA6suSZ+wfKO0y/Aeh9xgj1oylOZSizTPsTc4gv d3mL/gzZaWyhQkWJXsEL2u1ck1aoUIpvKu6cEd8EDvhtls1opu5BisC8kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXCO5wQt9tGnNlrL2LjJXRGWvpGMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvQmNJN25CQzMyMGFjMldzdll1TWxkRVphLWtZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekTMA0G CSqGSIb3DQEBCwUAA4IBAQAs/UZoymyEUfhJOiPvXPP9i5Y5bKOunWJtUIhuf/Hf dyTTQNHcvptv5WiCTu2rfDTMOaipSJmfM9Md1uyZY/6S/qgJ/wBMoMTiSAWrWYnX UNs6WenA6WNA46OUxyJkU5jWdVaHABRBur+sHF486tMo/sszG3s8tPIK+fpfrozh BqnoJzJD6fTQDiZcTlNT/80W9uKaQEmVUobq3BnoFarA4pwRuGbJOVjVG+C07tgl k6DmRcDpWaOSZV9cfPIcHh2yTTkB6wMFI9fOF9lr0YRemQpw6NY8oMDjX25r+gLm mKV5kMXdph3uDzoKPo4Hn1/O68oDX1ACvxIEA/67+6Yy -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:19 2026 by rpki-client