This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GAjUfFscr7u9vtNHcyh0VzQvMmg.roa File: GAjUfFscr7u9vtNHcyh0VzQvMmg.roa (raw, json) Hash identifier: qYoeJ72KOGqzALH5im6zCsBG9Rld52Z6ElXrWX+tgxA= Subject key identifier: 18:08:D4:7C:5B:1C:AF:BB:BD:BE:D3:47:73:28:74:57:34:2F:32:68 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F145525EE53609C2BA32621F8EC6CED Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GAjUfFscr7u9vtNHcyh0VzQvMmg.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200019 IP address blocks: 193.233.161.0/24 maxlen: 24 193.233.202.0/23 maxlen: 24 193.233.244.0/24 maxlen: 24 193.233.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:55:25:ee:53:60:9c:2b:a3:26:21:f8:ec:6c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1808d47c5b1cafbbbdbed34773287457342f3268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:88:78:ef:65:0c:79:43:d6:ae:b7:62:42: f2:b5:7a:8f:ce:6a:e7:07:b3:0a:1b:1c:b1:39:6e: ed:65:e4:11:81:49:e4:44:c7:ba:c4:d7:3e:c3:d6: 7c:d5:31:67:b3:ad:7b:9c:77:29:29:e5:53:ad:dc: 00:0b:98:b4:b5:66:e5:2f:d0:36:09:a2:94:89:bf: 36:54:96:43:ba:dd:a8:46:28:35:84:36:70:98:b1: 54:b0:02:37:46:c7:19:fa:58:43:51:3b:07:f2:92: 38:70:7b:10:e7:a8:45:f8:fb:3f:4e:d4:59:a6:e9: 53:fb:92:f9:78:52:8a:06:12:bc:1e:54:d7:7e:3f: 60:32:b1:60:f3:64:f6:9e:0b:ea:ff:c6:72:6e:2f: d9:8d:ac:c1:36:05:01:83:d7:ef:93:9a:55:c7:25: ba:fe:d8:28:97:2c:31:80:9e:47:31:60:07:97:2e: f3:3c:f0:4b:22:20:96:f9:db:db:8e:c2:b6:a0:66: 7b:67:02:77:e3:a9:5d:61:7f:11:15:7a:ea:bb:db: d7:02:58:65:44:be:39:31:cd:94:38:4b:19:f2:59: 9e:45:aa:7d:d1:19:94:1f:01:f8:2e:bc:14:19:9a: a7:a4:ae:5e:58:69:9e:ce:24:37:08:3b:70:57:9e: 31:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:08:D4:7C:5B:1C:AF:BB:BD:BE:D3:47:73:28:74:57:34:2F:32:68 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GAjUfFscr7u9vtNHcyh0VzQvMmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.161.0/24 193.233.202.0/23 193.233.244.0/23 Signature Algorithm: sha256WithRSAEncryption 46:f2:c2:8d:cc:a5:ae:47:6f:5b:0c:fe:2a:81:11:61:58:35: 75:44:d9:f3:f6:a9:4f:2d:d0:ff:f0:78:a4:d9:da:78:f8:bc: 1b:ff:9f:69:10:08:a3:79:4d:74:11:de:36:1c:b4:d3:53:65: bf:ed:9b:e6:cb:17:b9:e9:b3:91:0b:24:97:6d:30:31:01:3c: 98:1c:69:29:49:37:4c:be:52:c7:03:f6:c9:f6:20:08:d5:78: 39:9e:5a:8e:29:29:18:62:6f:c6:31:08:6e:c4:fa:33:ee:ec: 50:61:a8:68:7a:8e:cc:52:36:08:7d:d5:21:f7:7d:61:bf:fe: fe:f0:3d:46:67:9d:45:fe:54:39:c1:4a:22:0f:25:f2:42:ff: 63:5a:e1:83:ec:8b:96:47:90:e7:7d:4d:59:e2:f9:f8:ce:31: 12:8c:34:14:21:57:cc:d2:20:95:30:9a:fe:b3:0d:a6:9e:97: 3d:f3:b7:c5:3a:f0:66:7b:01:21:3a:bf:9d:ba:f9:09:c1:94: bf:a4:8c:b2:c3:d9:c3:09:10:d9:e8:ec:3d:7d:63:00:09:0b: 7b:9e:45:44:9b:8d:af:bf:9d:a0:00:74:01:08:86:87:85:0d: 66:2f:fd:83:0c:b5:6e:04:94:a0:69:04:94:23:bb:12:b5:25: 3c:94:32:22 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FFUl7lNgnCujJiH47GztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODA4ZDQ3YzViMWNhZmJiYmRiZWQzNDc3MzI4NzQ1NzM0MmYzMjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeaIeO9lDHlD1q63YkLytXqPzmrn B7MKGxyxOW7tZeQRgUnkRMe6xNc+w9Z81TFns617nHcpKeVTrdwAC5i0tWblL9A2 CaKUib82VJZDut2oRig1hDZwmLFUsAI3RscZ+lhDUTsH8pI4cHsQ56hF+Ps/TtRZ pulT+5L5eFKKBhK8HlTXfj9gMrFg82T2ngvq/8Zybi/ZjazBNgUBg9fvk5pVxyW6 /tgolywxgJ5HMWAHly7zPPBLIiCW+dvbjsK2oGZ7ZwJ346ldYX8RFXrqu9vXAlhl RL45Mc2UOEsZ8lmeRap90RmUHwH4LrwUGZqnpK5eWGmeziQ3CDtwV54xTQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBgI1HxbHK+7vb7TR3ModFc0LzJoMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvR0FqVWZGc2NyN3U5dnROSGN5aDBWelF2TW1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwemhAwQB wenKAwQBwen0MA0GCSqGSIb3DQEBCwUAA4IBAQBG8sKNzKWuR29bDP4qgRFhWDV1 RNnz9qlPLdD/8Hik2dp4+Lwb/59pEAijeU10Ed42HLTTU2W/7Zvmyxe56bORCySX bTAxATyYHGkpSTdMvlLHA/bJ9iAI1Xg5nlqOKSkYYm/GMQhuxPoz7uxQYahoeo7M UjYIfdUh931hv/7+8D1GZ51F/lQ5wUoiDyXyQv9jWuGD7IuWR5DnfU1Z4vn4zjES jDQUIVfM0iCVMJr+sw2mnpc987fFOvBmewEhOr+duvkJwZS/pIyyw9nDCRDZ6Ow9 fWMACQt7nkVEm42vv52gAHQBCIaHhQ1mL/2DDLVuBJSgaQSUI7sStSU8lDIi -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:43 2026 by rpki-client