This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WrmMl5gPaXiDxuXVxWtbzg_m5-k.roa File: WrmMl5gPaXiDxuXVxWtbzg_m5-k.roa (raw, json) Hash identifier: 12YxbHuYYtbhZMITsjJIY70OvbZTJVBQLIoLTFBzWTo= Subject key identifier: 5A:B9:8C:97:98:0F:69:78:83:C6:E5:D5:C5:6B:5B:CE:0F:E6:E7:E9 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146C219C85089A947A4B73A1B26D77 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WrmMl5gPaXiDxuXVxWtbzg_m5-k.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215206 IP address blocks: 193.233.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6c:21:9c:85:08:9a:94:7a:4b:73:a1:b2:6d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab98c97980f697883c6e5d5c56b5bce0fe6e7e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:2b:43:07:8b:15:fc:14:8b:af:5b:5a:12: 68:c1:3a:a3:2f:69:42:eb:00:83:af:83:a4:3c:c9: 04:ce:2d:4a:4a:0b:ea:2e:00:13:41:eb:28:2c:34: 58:97:4e:26:81:47:45:43:f0:c5:78:69:e8:57:fb: ab:c8:6b:91:c0:af:ac:75:a2:36:8d:43:25:f4:04: c1:4f:51:a4:ab:f4:80:c5:f2:81:35:1b:ba:d7:86: 12:8d:e4:ec:6a:b7:fc:32:38:15:86:ac:83:45:81: 7c:79:65:c3:d3:75:45:1e:cf:9e:43:7e:8c:df:d1: 2d:4d:3a:3d:93:7d:e8:8a:91:f5:fe:1d:43:29:00: 48:95:af:84:ca:6c:dd:31:1b:1a:cc:c4:b4:9f:4c: e7:94:dd:b6:a9:9a:6b:55:7a:58:54:60:d0:7d:f0: bb:25:91:26:10:99:76:8c:ac:1d:55:eb:e8:e6:f6: 1e:93:61:23:50:88:37:a3:14:1b:13:1d:f7:ab:8a: 59:7f:0a:4c:59:83:71:55:83:cd:bd:ad:ba:2e:0e: af:db:be:ca:9a:88:c5:90:6a:58:7a:4d:e5:9a:c9: f2:db:d4:e7:f3:f0:e4:54:a1:48:3b:0d:61:27:f3: 0b:4e:69:98:15:9a:15:19:fb:93:5a:a7:40:c8:b7: 03:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B9:8C:97:98:0F:69:78:83:C6:E5:D5:C5:6B:5B:CE:0F:E6:E7:E9 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WrmMl5gPaXiDxuXVxWtbzg_m5-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.135.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:2c:e2:9d:15:6c:93:6f:ed:20:9d:3d:ab:9d:dc:91:30:ea: 75:1e:c5:fb:82:fb:8a:96:72:93:86:e1:7b:38:1c:09:b4:81: 9f:aa:70:0e:50:05:cd:97:18:53:f3:b4:83:97:24:0d:61:28: f8:51:67:40:c7:43:8c:85:cb:90:9e:40:7f:6b:5c:16:1d:28: f7:1d:da:b6:f1:6d:84:22:ce:d0:2a:43:33:39:f0:fc:13:e0: 74:bf:52:2a:7f:94:dd:ae:e9:df:f6:36:a2:81:94:35:f6:34: 63:64:8b:a0:99:16:dc:a0:ca:cf:59:da:e8:ad:e1:a5:0a:66: 54:60:93:bb:a6:93:b0:a2:b1:ce:4e:cb:cd:fd:87:6a:94:ff: 2e:5b:65:63:1e:b5:c0:5e:11:4d:40:40:6b:55:03:68:df:4a: b8:ca:c9:00:7b:87:ad:7b:a4:a0:88:df:16:03:43:bc:da:a8: 89:52:80:4d:ed:e9:d3:39:c5:3f:c6:79:cc:0d:5a:95:14:13: c5:7c:17:9a:81:69:ae:26:6d:22:ec:ec:c4:fd:84:11:74:28: eb:f0:17:81:4b:33:e9:8e:6c:72:3f:e3:ed:61:e1:50:bf:42: 7e:0a:da:67:7f:e8:2c:be:87:6b:25:3d:c4:29:59:19:41:9b: 18:f2:fd:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGwhnIUImpR6S3Ohsm13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWI5OGM5Nzk4MGY2OTc4ODNjNmU1ZDVjNTZiNWJjZTBmZTZlN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN4rQweLFfwUi69bWhJowTqjL2lC 6wCDr4OkPMkEzi1KSgvqLgATQesoLDRYl04mgUdFQ/DFeGnoV/uryGuRwK+sdaI2 jUMl9ATBT1Gkq/SAxfKBNRu614YSjeTsarf8MjgVhqyDRYF8eWXD03VFHs+eQ36M 39EtTTo9k33oipH1/h1DKQBIla+EymzdMRsazMS0n0znlN22qZprVXpYVGDQffC7 JZEmEJl2jKwdVevo5vYek2EjUIg3oxQbEx33q4pZfwpMWYNxVYPNva26Lg6v277K mojFkGpYek3lmsny29Tn8/DkVKFIOw1hJ/MLTmmYFZoVGfuTWqdAyLcDiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFq5jJeYD2l4g8bl1cVrW84P5ufpMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvV3JtTWw1Z1BhWGlEeHVYVnhXdGJ6Z19tNS1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwemHMA0G CSqGSIb3DQEBCwUAA4IBAQBsLOKdFWyTb+0gnT2rndyRMOp1HsX7gvuKlnKThuF7 OBwJtIGfqnAOUAXNlxhT87SDlyQNYSj4UWdAx0OMhcuQnkB/a1wWHSj3Hdq28W2E Is7QKkMzOfD8E+B0v1Iqf5Tdrunf9jaigZQ19jRjZIugmRbcoMrPWdroreGlCmZU YJO7ppOworHOTsvN/YdqlP8uW2VjHrXAXhFNQEBrVQNo30q4yskAe4ete6SgiN8W A0O82qiJUoBN7enTOcU/xnnMDVqVFBPFfBeagWmuJm0i7OzE/YQRdCjr8BeBSzPp jmxyP+PtYeFQv0J+Ctpnf+gsvodrJT3EKVkZQZsY8v2E -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:41 2026 by rpki-client