This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/N05s_5a3w3HdPwHndeW4TXw7h6U.roa File: N05s_5a3w3HdPwHndeW4TXw7h6U.roa (raw, json) Hash identifier: zMd3ILzvBYwRFgfVmFTSVbRSDNQFTpENGVlPNVAqtTA= Subject key identifier: 37:4E:6C:FF:96:B7:C3:71:DD:3F:01:E7:75:E5:B8:4D:7C:3B:87:A5 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F145B24CA09D705115675D2E855B056 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/N05s_5a3w3HdPwHndeW4TXw7h6U.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203344 IP address blocks: 193.233.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5b:24:ca:09:d7:05:11:56:75:d2:e8:55:b0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=374e6cff96b7c371dd3f01e775e5b84d7c3b87a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:5d:d0:66:32:c4:f1:e2:ac:7b:38:f9:2c: ca:0b:99:31:1d:9f:c5:8f:4f:a6:a4:a6:bc:c7:12: de:ef:f8:c2:9c:6f:77:19:bd:00:05:34:d2:ad:78: 37:2f:21:69:d9:86:3f:2d:3a:fe:07:56:fb:5c:29: 39:d8:ce:84:29:b1:04:f2:47:ac:c5:30:6f:50:f7: 09:54:00:6b:78:3f:f8:42:43:14:5f:21:65:da:2d: 59:ea:85:a7:1a:3b:82:b4:93:b0:46:48:ce:d6:45: 05:9c:3b:bc:8a:ab:00:1e:7b:a7:48:ac:3b:79:67: 7f:0d:46:20:69:3f:dd:59:16:67:53:fb:35:e0:ef: f6:e1:df:7a:3c:cb:7c:36:70:99:d9:33:8c:a8:f0: 75:63:af:fc:8a:54:ed:5f:03:59:ba:75:c5:70:96: 45:82:94:ee:ed:47:59:48:f1:19:0a:88:84:ba:e1: d5:25:c2:eb:92:83:5f:20:c2:f2:1f:ab:a7:35:60: cd:b8:f7:a0:1c:12:ca:1b:07:15:70:a6:4c:b9:c1: f4:d3:51:7f:fd:79:1f:15:29:83:73:ee:f1:1d:9d: 24:8c:9b:5c:d6:0b:89:4e:2f:ab:03:7a:5d:81:9d: 32:2a:7d:3a:db:a3:8c:76:d3:d3:cd:1d:0f:80:bc: 28:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4E:6C:FF:96:B7:C3:71:DD:3F:01:E7:75:E5:B8:4D:7C:3B:87:A5 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/N05s_5a3w3HdPwHndeW4TXw7h6U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.153.0/24 Signature Algorithm: sha256WithRSAEncryption 92:40:46:fb:74:cb:22:70:a6:36:fd:c2:b2:17:9f:25:6f:63: b9:ec:42:39:e3:e3:37:c2:90:49:18:53:69:0e:78:e9:21:86: 52:ee:54:4c:a2:49:21:6a:96:c5:5f:5a:3a:e5:9e:bf:1c:6a: 89:96:cb:09:f7:19:1e:40:8a:92:86:d2:49:c4:ca:da:7e:d1: 74:65:02:71:11:ac:03:d8:67:b8:48:2b:f1:40:13:07:10:9f: 5f:14:44:ef:d4:45:73:4d:5d:13:b7:aa:28:5d:89:df:f0:e7: d0:a0:e2:94:23:06:8d:de:f2:89:19:3f:97:22:7c:c1:e5:a9: a4:9a:d7:06:fe:41:ab:ae:02:c5:b1:8d:5b:ff:81:3e:84:ce: aa:e5:70:b9:71:6e:48:a2:e4:18:99:9c:f1:e5:be:80:c4:40: 35:1e:10:6f:13:f9:1b:7e:ae:b1:d2:6c:e2:49:97:15:44:e4: b1:53:32:20:f6:27:c3:78:b3:ff:3b:68:e5:38:b0:1b:9a:4e: b1:a3:c2:ad:1c:d3:c5:58:85:b7:3f:30:c3:95:90:87:20:48: c7:10:43:0a:c6:e4:1e:9e:8e:05:24:d0:bc:ac:4e:6c:6f:62: c5:af:75:3e:64:72:b1:e3:e3:94:6f:b3:7b:8a:09:28:19:fc: 60:2c:15:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFskygnXBRFWddLoVbBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzRlNmNmZjk2YjdjMzcxZGQzZjAxZTc3NWU1Yjg0ZDdjM2I4N2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUhd0GYyxPHirHs4+SzKC5kxHZ/F j0+mpKa8xxLe7/jCnG93Gb0ABTTSrXg3LyFp2YY/LTr+B1b7XCk52M6EKbEE8kes xTBvUPcJVABreD/4QkMUXyFl2i1Z6oWnGjuCtJOwRkjO1kUFnDu8iqsAHnunSKw7 eWd/DUYgaT/dWRZnU/s14O/24d96PMt8NnCZ2TOMqPB1Y6/8ilTtXwNZunXFcJZF gpTu7UdZSPEZCoiEuuHVJcLrkoNfIMLyH6unNWDNuPegHBLKGwcVcKZMucH001F/ /XkfFSmDc+7xHZ0kjJtc1guJTi+rA3pdgZ0yKn0626OMdtPTzR0PgLwoFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdObP+Wt8Nx3T8B53XluE18O4elMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvTjA1c181YTN3M0hkUHdIbmRlVzRUWHc3aDZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemZMA0G CSqGSIb3DQEBCwUAA4IBAQCSQEb7dMsicKY2/cKyF58lb2O57EI54+M3wpBJGFNp DnjpIYZS7lRMokkhapbFX1o65Z6/HGqJlssJ9xkeQIqShtJJxMraftF0ZQJxEawD 2Ge4SCvxQBMHEJ9fFETv1EVzTV0Tt6ooXYnf8OfQoOKUIwaN3vKJGT+XInzB5amk mtcG/kGrrgLFsY1b/4E+hM6q5XC5cW5IouQYmZzx5b6AxEA1HhBvE/kbfq6x0mzi SZcVROSxUzIg9ifDeLP/O2jlOLAbmk6xo8KtHNPFWIW3PzDDlZCHIEjHEEMKxuQe no4FJNC8rE5sb2LFr3U+ZHKx4+OUb7N7igkoGfxgLBWL -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:48 2026 by rpki-client