This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/V6PjcYmhGQWLxxjIZLe4mvCHNVU.roa File: V6PjcYmhGQWLxxjIZLe4mvCHNVU.roa (raw, json) Hash identifier: LYWfxAvntHxWiTedVjIQ23CyQsVCwTJDdktIYYaQ6Z8= Subject key identifier: 57:A3:E3:71:89:A1:19:05:8B:C7:18:C8:64:B7:B8:9A:F0:87:35:55 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1461C418D90149243270A17F91C88D Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/V6PjcYmhGQWLxxjIZLe4mvCHNVU.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209183 IP address blocks: 193.233.100.0/24 maxlen: 24 193.233.101.0/24 maxlen: 24 193.233.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:61:c4:18:d9:01:49:24:32:70:a1:7f:91:c8:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57a3e37189a119058bc718c864b7b89af0873555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:03:a0:13:4d:0d:6f:ae:75:b1:0b:00:d0: a9:a2:0d:c5:fd:15:9a:28:93:59:18:72:70:9d:94: 67:fc:ac:d9:e4:64:92:b2:40:e2:31:5f:92:5b:df: ab:6f:49:16:2c:97:f5:0b:bc:a2:26:07:9d:d8:74: e3:a5:54:dd:7a:27:e6:8a:20:32:a6:3e:8f:d7:16: 84:82:ec:16:31:8f:a2:f5:fd:32:3e:07:44:0e:d0: 93:e2:4a:ee:a9:f6:9d:7d:0b:f5:35:81:cb:2b:81: 2c:d2:13:dc:b6:d7:12:8e:35:b8:83:d3:a7:d5:d4: 67:ef:1e:98:80:d4:3e:4e:9e:77:10:65:6d:a9:da: 9f:0a:4c:11:8e:b9:42:00:00:aa:3e:ef:96:8b:4c: 47:7e:e9:bf:5a:23:5f:02:44:ee:7d:b2:b7:66:0b: 54:29:e9:59:6a:0d:68:52:f8:b5:82:a0:dd:2a:36: 33:01:ab:6a:62:5e:84:ff:2f:c3:3c:af:b7:0e:93: 94:d6:73:0b:38:b9:00:8c:6d:04:11:b0:49:28:31: bc:58:f6:6e:fa:49:2f:fc:ca:60:9e:36:fa:25:2a: b6:50:b2:a7:46:9b:76:9b:52:af:be:a0:e7:ee:8b: 4d:20:ea:80:d3:c5:35:44:56:0f:7d:ef:d9:95:2a: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:E3:71:89:A1:19:05:8B:C7:18:C8:64:B7:B8:9A:F0:87:35:55 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/V6PjcYmhGQWLxxjIZLe4mvCHNVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.100.0/23 193.233.228.0/24 Signature Algorithm: sha256WithRSAEncryption 04:74:5e:44:fd:61:93:08:ae:e2:e2:b5:48:43:9e:2a:e7:44: 4e:78:73:9b:bb:c2:03:02:a8:36:3f:6b:dc:0a:7e:41:db:7d: 8c:b6:47:b3:ce:b4:43:71:af:c4:61:cc:7c:00:9e:f4:1e:c8: 42:ec:ba:2e:74:b6:5b:23:2a:bb:29:75:61:07:25:f6:83:7f: 37:42:da:68:4c:e2:cf:0c:96:82:ed:98:b2:03:fe:f7:35:e2: 7d:a3:39:ba:44:73:58:87:ec:bc:53:2e:ee:29:f4:4a:7a:28: a2:b4:a0:1a:d7:02:a9:f0:c7:10:1a:2c:94:69:03:0f:4d:fd: 51:3f:dd:a6:4c:60:dc:d3:d9:11:af:84:43:a2:b2:a9:dd:bd: 63:ba:63:83:dd:19:31:de:d7:73:07:86:77:1c:39:b5:8a:39: 02:80:b7:45:38:2e:78:c5:b6:ad:c7:da:63:88:a2:94:b1:21: 90:23:89:d8:38:4c:1b:27:35:da:7a:f5:bf:58:9c:43:60:10: 9f:f5:81:9b:a3:49:9c:20:5c:fb:76:33:40:b2:fc:95:98:a7: 2d:a2:ca:fa:42:a5:6f:0e:2e:99:1a:61:4e:c1:83:a5:81:fd: a8:14:89:d3:b2:94:4b:3e:74:d8:8e:65:93:9b:ed:7b:17:23: e9:77:49:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FGHEGNkBSSQycKF/kciNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2EzZTM3MTg5YTExOTA1OGJjNzE4Yzg2NGI3Yjg5YWYwODczNTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXoDoBNNDW+udbELANCpog3F/RWa KJNZGHJwnZRn/KzZ5GSSskDiMV+SW9+rb0kWLJf1C7yiJged2HTjpVTdeifmiiAy pj6P1xaEguwWMY+i9f0yPgdEDtCT4kruqfadfQv1NYHLK4Es0hPcttcSjjW4g9On 1dRn7x6YgNQ+Tp53EGVtqdqfCkwRjrlCAACqPu+Wi0xHfum/WiNfAkTufbK3ZgtU KelZag1oUvi1gqDdKjYzAatqYl6E/y/DPK+3DpOU1nMLOLkAjG0EEbBJKDG8WPZu +kkv/Mpgnjb6JSq2ULKnRpt2m1KvvqDn7otNIOqA08U1RFYPfe/ZlSpnAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFej43GJoRkFi8cYyGS3uJrwhzVVMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvVjZQamNZbWhHUVdMeHhqSVpMZTRtdkNITlZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwelkAwQA wenkMA0GCSqGSIb3DQEBCwUAA4IBAQAEdF5E/WGTCK7i4rVIQ54q50ROeHObu8ID Aqg2P2vcCn5B232MtkezzrRDca/EYcx8AJ70HshC7LoudLZbIyq7KXVhByX2g383 QtpoTOLPDJaC7ZiyA/73NeJ9ozm6RHNYh+y8Uy7uKfRKeiiitKAa1wKp8McQGiyU aQMPTf1RP92mTGDc09kRr4RDorKp3b1jumOD3Rkx3tdzB4Z3HDm1ijkCgLdFOC54 xbatx9pjiKKUsSGQI4nYOEwbJzXaevW/WJxDYBCf9YGbo0mcIFz7djNAsvyVmKct osr6QqVvDi6ZGmFOwYOlgf2oFInTspRLPnTYjmWTm+17FyPpd0mT -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:42 2026 by rpki-client