This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Rx4cfPAWQD8k3rTsqtQSf1ijrxM.roa File: Rx4cfPAWQD8k3rTsqtQSf1ijrxM.roa (raw, json) Hash identifier: 2cQE/bta7Bs/nPUSLTbUH3oNLBqATBJabPOyJh28HuY= Subject key identifier: 47:1E:1C:7C:F0:16:40:3F:24:DE:B4:EC:AA:D4:12:7F:58:A3:AF:13 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144C4A509532D60EFA9513AC57506B Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Rx4cfPAWQD8k3rTsqtQSf1ijrxM.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49954 IP address blocks: 193.233.154.0/24 maxlen: 24 193.233.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4c:4a:50:95:32:d6:0e:fa:95:13:ac:57:50:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=471e1c7cf016403f24deb4ecaad4127f58a3af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:8a:de:5b:01:06:30:13:dd:69:c3:2f:ea:b7: 63:56:df:64:29:10:c0:93:96:34:0d:4c:01:c9:62: 0a:77:1b:3a:73:94:1b:ac:c5:3f:0c:63:6f:87:ed: a5:c8:78:25:55:08:dc:c5:f6:b7:0e:11:6f:d7:fd: 83:fe:7f:f7:c6:01:de:5f:e6:9b:6d:2c:5f:b0:85: 09:85:89:76:08:0a:93:52:4f:b6:be:a7:96:3f:e5: 46:d6:69:8d:cc:c6:07:43:e4:47:12:44:18:c0:66: 4b:c9:a7:60:43:97:bf:c2:7b:70:e3:4a:10:f4:a6: a8:02:19:58:06:1c:ed:7a:94:c7:1c:5b:14:8a:a7: 77:0a:c5:8b:aa:18:ee:ae:2e:82:c9:82:d4:a3:ca: 49:a9:82:40:25:79:60:73:ab:89:0b:8d:23:22:95: bd:9b:a9:f7:ee:5a:ec:f0:40:c4:2d:fb:18:5c:a5: e7:f5:ec:aa:44:81:22:c1:22:fc:f1:0e:8b:49:02: 1d:e5:17:e0:39:f3:aa:38:60:cc:3a:76:e1:f6:af: 0d:30:43:b7:15:00:76:3a:44:ac:ed:22:04:bb:17: 22:f6:aa:4f:57:38:e4:59:6e:fc:bd:89:0a:5c:61: 89:aa:a2:6f:e5:a2:14:08:91:d1:d5:1c:fa:ee:6d: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1E:1C:7C:F0:16:40:3F:24:DE:B4:EC:AA:D4:12:7F:58:A3:AF:13 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Rx4cfPAWQD8k3rTsqtQSf1ijrxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.154.0/24 193.233.159.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f7:28:c6:c7:31:af:6d:99:eb:0a:6d:e8:76:30:f1:af:ee: 5c:b1:c0:ad:72:f4:30:85:67:5d:e5:3d:7d:8c:d4:de:39:ca: 57:ad:7c:f0:84:f3:b0:2f:d1:c3:83:b0:e7:fc:e5:cb:f1:cc: 8a:cb:c7:9c:dd:67:78:93:aa:91:a7:a5:f8:ba:1b:bd:d2:26: c3:87:d4:68:ef:86:af:4a:ad:7f:ae:99:77:0b:77:9f:a0:c2: 59:b6:3c:b8:f9:d6:01:fa:a5:7b:52:cb:1d:f4:b9:e6:bc:e3: 49:3f:7f:d2:a8:8f:0e:70:1f:bf:10:46:fd:18:9b:2b:01:a5: 89:81:fe:26:29:8a:b3:f4:b8:da:0c:e6:70:cb:04:e7:d2:59: 93:f0:7f:0a:54:60:92:a0:fd:5b:07:37:8f:d4:f7:f7:f8:d4: 2d:09:c5:41:3f:81:a6:82:e6:c8:f5:c0:19:17:31:4e:f9:f1: d2:a8:45:3c:9d:e2:33:d1:1d:12:97:b7:76:46:22:5f:18:ef: a1:92:d3:b7:5c:96:5f:9d:98:35:e0:51:dc:f6:b1:4e:39:d8: 31:b3:4a:2f:f7:b4:ec:87:af:80:03:24:11:3f:51:73:92:60: 9c:77:aa:8d:fb:da:1f:a3:a1:2e:6e:6e:33:19:9c:72:3c:bc: 33:40:79:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FExKUJUy1g76lROsV1BrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzFlMWM3Y2YwMTY0MDNmMjRkZWI0ZWNhYWQ0MTI3ZjU4YTNhZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64reWwEGMBPdacMv6rdjVt9kKRDA k5Y0DUwByWIKdxs6c5QbrMU/DGNvh+2lyHglVQjcxfa3DhFv1/2D/n/3xgHeX+ab bSxfsIUJhYl2CAqTUk+2vqeWP+VG1mmNzMYHQ+RHEkQYwGZLyadgQ5e/wntw40oQ 9KaoAhlYBhztepTHHFsUiqd3CsWLqhjuri6CyYLUo8pJqYJAJXlgc6uJC40jIpW9 m6n37lrs8EDELfsYXKXn9eyqRIEiwSL88Q6LSQId5RfgOfOqOGDMOnbh9q8NMEO3 FQB2OkSs7SIEuxci9qpPVzjkWW78vYkKXGGJqqJv5aIUCJHR1Rz67m1XKQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEceHHzwFkA/JN607KrUEn9Yo68TMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvUng0Y2ZQQVdRRDhrM3JUc3F0UVNmMWlqcnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwemaAwQA wemfMA0GCSqGSIb3DQEBCwUAA4IBAQA39yjGxzGvbZnrCm3odjDxr+5cscCtcvQw hWdd5T19jNTeOcpXrXzwhPOwL9HDg7Dn/OXL8cyKy8ec3Wd4k6qRp6X4uhu90ibD h9Ro74avSq1/rpl3C3efoMJZtjy4+dYB+qV7Ussd9LnmvONJP3/SqI8OcB+/EEb9 GJsrAaWJgf4mKYqz9LjaDOZwywTn0lmT8H8KVGCSoP1bBzeP1Pf3+NQtCcVBP4Gm gubI9cAZFzFO+fHSqEU8neIz0R0Sl7d2RiJfGO+hktO3XJZfnZg14FHc9rFOOdgx s0ov97Tsh6+AAyQRP1FzkmCcd6qN+9ofo6Eubm4zGZxyPLwzQHmT -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:46 2026 by rpki-client