This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Gf6kX1JHE0_FXWrEsMk6tyjF3pc.roa File: Gf6kX1JHE0_FXWrEsMk6tyjF3pc.roa (raw, json) Hash identifier: d+k29stJg3BWbZLFV4+41hUZONMyYOayuJ6NKtih4PA= Subject key identifier: 19:FE:A4:5F:52:47:13:4F:C5:5D:6A:C4:B0:C9:3A:B7:28:C5:DE:97 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F145B9EE1234AFB853629B10A09963E Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Gf6kX1JHE0_FXWrEsMk6tyjF3pc.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204833 IP address blocks: 193.233.6.0/24 maxlen: 24 193.233.8.0/24 maxlen: 24 193.233.17.0/24 maxlen: 24 193.233.78.0/24 maxlen: 24 193.233.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5b:9e:e1:23:4a:fb:85:36:29:b1:0a:09:96:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19fea45f5247134fc55d6ac4b0c93ab728c5de97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8e:ee:e7:13:c6:b5:47:33:ed:a8:5a:4b:64: f3:a9:b5:c6:22:0f:ce:90:8d:7e:19:af:de:b2:e4: 65:9b:04:a8:29:db:5b:4a:e9:98:62:2f:7b:9c:dd: 4b:d0:eb:2b:74:e3:71:61:bd:45:d5:7d:4f:a4:7a: 32:80:ca:6b:60:29:10:43:7b:35:0a:e8:41:70:ca: c0:df:d4:08:40:e5:5b:3d:88:ac:ae:27:bf:ca:3c: e3:c8:ae:5c:7f:da:df:e9:42:ee:d6:98:00:79:5e: e6:7b:a4:c0:2d:f5:a5:af:74:0e:7f:15:6e:39:fe: 3c:24:7b:c0:ec:f2:04:0d:a8:e0:c3:bc:2f:db:33: 21:79:5d:31:27:8d:91:40:6b:a0:c1:7f:fc:30:e1: 91:5f:dc:82:ca:31:a6:a0:5f:f2:a7:65:17:2f:80: a7:65:6e:b4:ce:68:d7:9a:b7:df:5c:18:d7:b6:c0: 64:64:a9:c0:1b:ab:33:31:90:f5:95:cc:7f:da:72: 54:6b:12:1e:d1:f5:90:dd:e0:3f:87:92:15:6c:bf: b0:58:ae:c5:ad:d4:54:ea:67:7c:1b:36:fd:64:4e: e3:64:1b:5a:01:0a:4f:d5:d2:14:83:31:17:2c:55: 7b:98:38:79:6d:37:85:41:5c:2b:67:1b:14:8a:75: b2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:A4:5F:52:47:13:4F:C5:5D:6A:C4:B0:C9:3A:B7:28:C5:DE:97 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Gf6kX1JHE0_FXWrEsMk6tyjF3pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.6.0/24 193.233.8.0/24 193.233.17.0/24 193.233.78.0/24 193.233.160.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:6b:43:8c:fc:8f:af:db:45:55:0f:b1:3b:38:fd:33:42:83: f6:52:24:71:b8:2a:40:73:ed:7f:43:67:f5:a4:f3:ea:f8:6a: 46:16:5a:3c:56:59:9b:7a:72:fe:00:f9:5d:99:bb:7c:7f:b3: 7e:27:15:44:b7:dd:0e:c1:ec:28:ee:ac:1b:4f:7b:45:41:a3: ad:61:5d:d3:5f:83:06:d4:1e:66:01:99:2d:83:07:c1:3d:9d: e8:10:9c:95:33:d9:d7:97:a8:cf:e1:88:ca:42:11:c4:ff:85: 29:59:a1:e3:11:e8:44:8e:33:b3:ca:f7:fb:b4:cf:dd:53:f9: 79:de:9d:ae:9d:c0:46:06:3f:13:35:d1:87:1d:34:6d:83:43: bf:01:9e:9d:7c:11:35:a5:8f:8e:8e:58:5b:7c:f0:7e:bf:e0: 74:ec:88:e5:7d:a0:0f:a7:98:59:b7:dc:a8:19:10:75:d1:70: d6:d4:a4:71:57:26:0c:94:58:58:63:00:3a:00:e8:79:7f:23: 93:4d:5b:89:e4:34:60:2c:a5:a4:d2:b9:9b:13:c1:3f:7d:32: 9f:07:4c:22:b6:3e:8a:51:68:e7:71:12:73:36:f4:aa:c4:a2: ab:eb:66:f2:f6:49:3a:d8:c9:c3:fb:26:28:42:d5:f2:61:1f: b7:9a:7e:9a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/FFue4SNK+4U2KbEKCZY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWZlYTQ1ZjUyNDcxMzRmYzU1ZDZhYzRiMGM5M2FiNzI4YzVkZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA647u5xPGtUcz7ahaS2TzqbXGIg/O kI1+Ga/esuRlmwSoKdtbSumYYi97nN1L0OsrdONxYb1F1X1PpHoygMprYCkQQ3s1 CuhBcMrA39QIQOVbPYisrie/yjzjyK5cf9rf6ULu1pgAeV7me6TALfWlr3QOfxVu Of48JHvA7PIEDajgw7wv2zMheV0xJ42RQGugwX/8MOGRX9yCyjGmoF/yp2UXL4Cn ZW60zmjXmrffXBjXtsBkZKnAG6szMZD1lcx/2nJUaxIe0fWQ3eA/h5IVbL+wWK7F rdRU6md8Gzb9ZE7jZBtaAQpP1dIUgzEXLFV7mDh5bTeFQVwrZxsUinWypwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBn+pF9SRxNPxV1qxLDJOrcoxd6XMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvR2Y2a1gxSkhFMF9GWFdyRXNNazZ0eWpGM3BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAwekGAwQA wekIAwQAwekRAwQAwelOAwQAwemgMA0GCSqGSIb3DQEBCwUAA4IBAQCKa0OM/I+v 20VVD7E7OP0zQoP2UiRxuCpAc+1/Q2f1pPPq+GpGFlo8VlmbenL+APldmbt8f7N+ JxVEt90Owewo7qwbT3tFQaOtYV3TX4MG1B5mAZktgwfBPZ3oEJyVM9nXl6jP4YjK QhHE/4UpWaHjEehEjjOzyvf7tM/dU/l53p2uncBGBj8TNdGHHTRtg0O/AZ6dfBE1 pY+OjlhbfPB+v+B07IjlfaAPp5hZt9yoGRB10XDW1KRxVyYMlFhYYwA6AOh5fyOT TVuJ5DRgLKWk0rmbE8E/fTKfB0witj6KUWjncRJzNvSqxKKr62by9kk62MnD+yYo QtXyYR+3mn6a -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:53 2026 by rpki-client