This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UBwlsBOcsvceDf4XTpZixMOaWAg.roa File: UBwlsBOcsvceDf4XTpZixMOaWAg.roa (raw, json) Hash identifier: TUYaSbyrZ/SZ/9RxEKmafYeur2NXRhsYT5Asmy7x4KM= Subject key identifier: 50:1C:25:B0:13:9C:B2:F7:1E:0D:FE:17:4E:96:62:C4:C3:9A:58:08 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14459CC4D7D183726C588BB025C7D9 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UBwlsBOcsvceDf4XTpZixMOaWAg.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35783 IP address blocks: 193.233.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:45:9c:c4:d7:d1:83:72:6c:58:8b:b0:25:c7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=501c25b0139cb2f71e0dfe174e9662c4c39a5808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:d1:51:3b:25:c0:56:99:22:94:8a:50:62:60: e8:0b:90:c1:23:35:93:60:59:ba:2b:6e:8f:97:aa: 72:af:f7:ec:41:00:54:43:49:8d:75:6f:84:82:fa: c7:06:3d:7b:ad:a7:aa:12:6f:54:35:52:08:6e:ab: 2f:25:e0:bd:c3:53:04:46:5b:ab:34:be:f2:8b:b4: 5d:7b:70:1a:cf:0a:62:5c:f3:3b:fd:18:a8:c8:e5: 9d:82:d6:b6:e8:4a:ba:d9:13:8d:8c:40:cc:03:0e: 4e:72:1e:9f:5b:59:56:53:c4:a3:bd:2f:57:7d:b8: e6:dc:6d:8b:da:9d:1a:4b:3d:cb:e0:92:85:8a:86: c3:4f:fc:52:84:96:5a:eb:5c:a3:fd:66:2b:1c:58: 9e:5b:a7:c2:1c:a9:85:6a:e6:6e:df:ee:6f:c8:e0: 11:f3:74:e3:d6:58:f5:e1:cf:a3:c6:03:a4:a5:e9: c7:cd:a4:cb:00:9a:29:dc:8b:59:a6:30:ec:b4:9c: 09:b6:09:7c:c1:3d:82:21:28:29:df:a5:43:29:a2: 0d:4b:b5:1f:8b:99:66:24:d2:38:21:41:0b:e3:18: 8d:ee:2c:1b:f5:d2:9d:bd:ca:41:89:cb:7a:9d:83: ee:35:01:64:11:a8:d0:ee:9f:9b:e8:05:fa:e5:3b: b3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:25:B0:13:9C:B2:F7:1E:0D:FE:17:4E:96:62:C4:C3:9A:58:08 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UBwlsBOcsvceDf4XTpZixMOaWAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.173.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:3b:06:3f:32:bf:04:e2:f0:f1:a9:6c:56:22:92:c5:2a:4b: dd:82:60:20:16:a3:d1:77:92:3b:af:ba:b1:f0:5c:58:c5:16: 6d:7b:6a:50:92:4b:5a:f1:bb:39:3c:0d:a0:62:2a:2e:38:7c: 1f:00:14:f3:4a:ba:28:0e:55:b6:74:61:ff:07:b3:62:89:d6: d6:8f:c3:d6:c0:cd:75:9f:92:aa:31:05:3b:d2:40:96:f5:5d: 92:6a:56:53:a6:a7:ae:1f:c8:5c:34:bf:52:a6:69:03:2d:a1: 96:d2:ea:cd:86:b1:a2:69:44:7c:c1:14:bd:cf:c3:01:5c:25: ae:f9:54:14:cb:ee:1e:4d:9b:ee:25:93:9e:97:77:5b:33:b8: 56:20:4d:c1:6e:e3:d9:7e:1d:db:4f:d9:57:95:82:d3:b1:3d: b1:e8:62:54:23:30:a3:4d:33:5b:b6:12:33:2d:33:08:05:68: 85:1b:55:37:2b:1f:b7:51:68:cf:0e:5f:d2:1a:27:c6:78:e1: f6:b7:91:4e:ea:f4:78:42:aa:01:0a:18:ca:7c:05:b9:49:cf: 71:7d:5c:30:86:9d:12:41:31:51:d8:4a:da:68:78:95:e3:93: 29:5a:2b:df:0b:77:30:70:1e:3f:81:ef:6c:ed:dc:1c:3a:39: 71:2a:15:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEWcxNfRg3JsWIuwJcfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDFjMjViMDEzOWNiMmY3MWUwZGZlMTc0ZTk2NjJjNGMzOWE1ODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dFROyXAVpkilIpQYmDoC5DBIzWT YFm6K26Pl6pyr/fsQQBUQ0mNdW+EgvrHBj17raeqEm9UNVIIbqsvJeC9w1MERlur NL7yi7Rde3AazwpiXPM7/RioyOWdgta26Eq62RONjEDMAw5Och6fW1lWU8SjvS9X fbjm3G2L2p0aSz3L4JKFiobDT/xShJZa61yj/WYrHFieW6fCHKmFauZu3+5vyOAR 83Tj1lj14c+jxgOkpenHzaTLAJop3ItZpjDstJwJtgl8wT2CISgp36VDKaINS7Uf i5lmJNI4IUEL4xiN7iwb9dKdvcpBict6nYPuNQFkEajQ7p+b6AX65Tuz+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFAcJbATnLL3Hg3+F06WYsTDmlgIMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvVUJ3bHNCT2NzdmNlRGY0WFRwWml4TU9hV0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemtMA0G CSqGSIb3DQEBCwUAA4IBAQBqOwY/Mr8E4vDxqWxWIpLFKkvdgmAgFqPRd5I7r7qx 8FxYxRZte2pQkkta8bs5PA2gYiouOHwfABTzSrooDlW2dGH/B7NiidbWj8PWwM11 n5KqMQU70kCW9V2SalZTpqeuH8hcNL9SpmkDLaGW0urNhrGiaUR8wRS9z8MBXCWu +VQUy+4eTZvuJZOel3dbM7hWIE3BbuPZfh3bT9lXlYLTsT2x6GJUIzCjTTNbthIz LTMIBWiFG1U3Kx+3UWjPDl/SGifGeOH2t5FO6vR4QqoBChjKfAW5Sc9xfVwwhp0S QTFR2EraaHiV45MpWivfC3cwcB4/ge9s7dwcOjlxKhXX -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:54 2026 by rpki-client