This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YEuyhtkhd33iZyCAc7l7nJrLC1U.roa File: YEuyhtkhd33iZyCAc7l7nJrLC1U.roa (raw, json) Hash identifier: +SCAcNVc4QXH1GfH6lxQdx+ePAja/xYK9ZELqcKIHDQ= Subject key identifier: 60:4B:B2:86:D9:21:77:7D:E2:67:20:80:73:B9:7B:9C:9A:CB:0B:55 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F145BE8429E0BCEC93BE2313D26F8EA Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YEuyhtkhd33iZyCAc7l7nJrLC1U.roa Signing time: Fri 02 Jan 2026 14:19:59 +0000 ROA not before: Fri 02 Jan 2026 14:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204898 IP address blocks: 193.233.5.0/24 maxlen: 24 193.233.7.0/24 maxlen: 24 193.233.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5b:e8:42:9e:0b:ce:c9:3b:e2:31:3d:26:f8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=604bb286d921777de267208073b97b9c9acb0b55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:17:49:28:f5:5a:7b:c0:53:9b:e7:12:3a: 96:df:55:87:03:a8:64:e4:f8:52:82:b3:5b:90:de: e9:70:30:ea:dc:9c:53:d3:d1:99:2b:d3:bf:d1:4c: 38:1a:a8:68:78:5d:ec:7c:f3:8c:2a:28:5b:29:1b: 1b:ad:a3:9b:eb:f2:82:84:aa:62:ff:65:05:4b:a2: 45:46:2e:c7:fc:c0:ad:4a:ac:4f:8d:34:38:67:66: 3b:53:02:20:9b:40:28:a7:27:91:fa:7f:bd:60:a8: 30:ce:1f:62:23:8e:84:f8:f0:7d:78:e6:a5:d5:88: 39:9e:bc:0c:8c:48:a5:ae:01:05:87:44:6c:0a:77: 68:53:68:6c:d5:ed:9e:98:5a:1a:e3:bf:0f:7f:54: 40:a0:3e:0c:6e:2d:5d:4e:80:f7:5e:fc:f1:3b:2e: 63:66:9b:f4:ed:d3:cb:8a:da:08:af:98:90:ff:b9: cf:78:6b:57:58:08:fe:d5:ee:d3:f8:ad:e5:0d:0c: c4:a8:42:c1:6a:16:e5:ad:71:78:62:56:1e:48:cb: 42:52:12:68:e7:fd:ed:a3:a1:c2:02:0f:7c:c1:18: ba:11:5b:a6:a7:6b:b3:cd:6b:dd:14:02:11:9a:b6: 64:4f:c3:9f:90:2e:ff:e6:25:32:2f:91:9b:61:ff: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:B2:86:D9:21:77:7D:E2:67:20:80:73:B9:7B:9C:9A:CB:0B:55 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YEuyhtkhd33iZyCAc7l7nJrLC1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.5.0/24 193.233.7.0/24 193.233.151.0/24 Signature Algorithm: sha256WithRSAEncryption 46:cb:b2:90:f7:f8:18:31:bd:f5:7c:f6:51:33:01:50:e7:28: 96:fb:78:56:ae:5e:f3:15:78:db:85:de:24:c0:31:d9:97:e3: 1b:3a:92:42:ca:42:c2:00:d8:c5:3d:bd:4c:be:f3:05:01:fb: 54:a7:28:8a:53:3e:b0:9a:66:62:b6:e0:b1:16:fd:1f:5d:90: 40:c0:20:8c:a0:c2:95:3a:bc:c3:e0:cf:19:7f:0f:16:f0:d6: 8c:f8:4b:50:4b:de:f7:71:9a:25:95:c4:50:29:c3:13:5a:d1: d4:66:c9:12:4b:97:14:46:2b:3a:4f:01:a9:78:76:7e:60:c3: 07:4d:1c:4d:35:db:27:7c:59:88:df:6a:29:84:a5:90:79:46: 14:f5:46:e4:d8:de:df:3d:d0:c3:30:f0:c6:e4:09:8f:26:e6: 4c:2e:51:4a:de:e0:18:39:15:24:0b:47:c0:14:8c:98:c8:70: d6:e6:42:5c:8f:df:34:ec:02:3a:e9:bd:12:06:35:f6:26:0d: 25:ae:b7:a9:df:c3:3f:57:24:7b:70:73:35:fa:df:34:05:30: c0:34:7e:5a:1e:f1:32:70:8e:eb:83:47:39:aa:91:c7:a3:7a: 48:3a:e0:e7:9f:f8:91:89:2d:c8:d0:ad:3c:5b:c1:c1:08:9f: 9d:5c:79:8d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FFvoQp4Lzsk74jE9JvjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDRiYjI4NmQ5MjE3NzdkZTI2NzIwODA3M2I5N2I5YzlhY2IwYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5gXSSj1WnvAU5vnEjqW31WHA6hk 5PhSgrNbkN7pcDDq3JxT09GZK9O/0Uw4GqhoeF3sfPOMKihbKRsbraOb6/KChKpi /2UFS6JFRi7H/MCtSqxPjTQ4Z2Y7UwIgm0AopyeR+n+9YKgwzh9iI46E+PB9eOal 1Yg5nrwMjEilrgEFh0RsCndoU2hs1e2emFoa478Pf1RAoD4Mbi1dToD3XvzxOy5j Zpv07dPLitoIr5iQ/7nPeGtXWAj+1e7T+K3lDQzEqELBahblrXF4YlYeSMtCUhJo 5/3to6HCAg98wRi6EVump2uzzWvdFAIRmrZkT8OfkC7/5iUyL5GbYf88CQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGBLsobZIXd94mcggHO5e5yaywtVMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvWUV1eWh0a2hkMzNpWnlDQWM3bDduSnJMQzFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwekFAwQA wekHAwQAwemXMA0GCSqGSIb3DQEBCwUAA4IBAQBGy7KQ9/gYMb31fPZRMwFQ5yiW +3hWrl7zFXjbhd4kwDHZl+MbOpJCykLCANjFPb1MvvMFAftUpyiKUz6wmmZituCx Fv0fXZBAwCCMoMKVOrzD4M8Zfw8W8NaM+EtQS973cZollcRQKcMTWtHUZskSS5cU Ris6TwGpeHZ+YMMHTRxNNdsnfFmI32ophKWQeUYU9Ubk2N7fPdDDMPDG5AmPJuZM LlFK3uAYORUkC0fAFIyYyHDW5kJcj9807AI66b0SBjX2Jg0lrrep38M/VyR7cHM1 +t80BTDANH5aHvEycI7rg0c5qpHHo3pIOuDnn/iRiS3I0K08W8HBCJ+dXHmN -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:50 2026 by rpki-client