This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/aejvzJHjDPEAuRusGPQjhUaZgFU.roa File: aejvzJHjDPEAuRusGPQjhUaZgFU.roa (raw, json) Hash identifier: 7jJq6yfx9V/6evb/RMNC72LvkuBhpQF3z/WrjW0JM/E= Subject key identifier: 69:E8:EF:CC:91:E3:0C:F1:00:B9:1B:AC:18:F4:23:85:46:99:80:55 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144EE579170A8AFD8A9ECDA9552814 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/aejvzJHjDPEAuRusGPQjhUaZgFU.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56690 IP address blocks: 193.233.12.0/23 maxlen: 23 193.233.24.0/23 maxlen: 23 193.233.26.0/23 maxlen: 23 193.233.28.0/23 maxlen: 23 193.233.54.0/23 maxlen: 23 193.233.73.0/24 maxlen: 24 193.233.92.0/22 maxlen: 22 193.233.150.0/24 maxlen: 24 193.233.166.0/23 maxlen: 23 193.233.168.0/23 maxlen: 23 193.233.176.0/20 maxlen: 20 193.233.212.0/22 maxlen: 22 193.233.224.0/22 maxlen: 22 193.233.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4e:e5:79:17:0a:8a:fd:8a:9e:cd:a9:55:28:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e8efcc91e30cf100b91bac18f4238546998055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:d5:fb:f2:23:3a:85:53:04:51:ef:19:00: d5:93:c0:d7:4f:9f:d4:28:45:f0:82:e7:16:9e:fc: 38:42:f1:f3:d5:e4:44:69:59:67:61:f3:e9:35:d7: 4d:71:89:75:0a:67:0e:d7:de:e9:8e:b9:15:cb:9b: f4:66:a7:d6:86:be:bd:87:f7:44:ee:04:19:c5:27: c7:d4:2a:8b:f1:7e:22:1c:40:89:60:0a:14:a3:2c: 14:b6:a5:77:03:97:c5:a5:fe:2f:14:10:1e:13:93: 76:89:b5:26:4c:86:a6:54:56:b5:ea:df:c1:34:ce: 94:eb:47:96:70:45:59:d6:f5:6c:db:c5:89:f2:27: a7:d3:66:2d:ee:c7:e5:e2:f0:6c:3d:ac:c5:d4:a2: ea:64:f4:a8:d1:ee:8a:b9:6e:6b:b0:b5:98:6b:d8: c5:67:c2:80:42:f0:e3:32:18:40:a6:bd:79:24:ea: 83:2f:30:95:84:f9:f6:4e:dd:c4:b0:37:b4:fa:8f: 8c:82:11:52:fb:b3:74:30:84:62:14:b4:b3:9f:5c: 5b:bd:eb:6f:cb:3e:f8:00:8a:4f:5f:6f:3b:3d:71: 37:f1:06:f3:91:ac:70:8a:17:0e:55:66:3d:11:10: 38:cc:e9:87:cc:1a:cd:22:c2:10:b3:7d:b5:34:d8: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E8:EF:CC:91:E3:0C:F1:00:B9:1B:AC:18:F4:23:85:46:99:80:55 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/aejvzJHjDPEAuRusGPQjhUaZgFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.12.0/23 193.233.24.0-193.233.29.255 193.233.54.0/23 193.233.73.0/24 193.233.92.0/22 193.233.150.0/24 193.233.166.0-193.233.169.255 193.233.176.0/20 193.233.212.0/22 193.233.224.0/22 193.233.240.0/22 Signature Algorithm: sha256WithRSAEncryption 91:bc:72:ac:1c:48:ca:e7:bd:89:0c:b2:7e:35:5e:b7:25:73: 1f:bd:42:4c:d0:0c:8e:9e:56:09:71:86:d1:70:c3:9c:59:50: 99:9c:5c:f5:b1:51:3a:9a:65:56:a5:d0:17:dd:b0:f2:c8:54: 76:cc:91:3b:83:60:ca:43:73:a0:19:62:2b:f1:e9:36:d8:81: 43:a1:3d:eb:74:f0:29:08:33:f4:d2:4c:f5:e2:b7:67:88:7f: 7d:be:43:04:ca:75:9e:5a:0d:1c:98:7a:20:b6:62:b7:22:98: f1:02:a2:dc:e2:7d:bf:6e:1a:d9:df:26:05:ac:75:d4:cb:1e: d5:1e:3c:d2:39:e2:56:b4:d8:76:00:0e:fa:64:47:a3:c6:28: 56:24:ab:99:21:cb:15:dc:5c:73:94:8c:29:41:45:68:5d:99: 2a:8f:f2:58:ec:77:e7:5f:5d:dd:17:94:0a:54:2a:4f:da:70: bc:3f:c6:2c:68:5c:63:02:28:e9:a3:b3:4e:81:83:f7:fe:82: 6c:87:97:b0:ed:71:ac:27:19:ea:15:8d:c4:37:b6:ea:3f:74: 44:3d:6e:96:87:45:29:c7:a2:a8:77:ad:43:38:84:45:74:c2: 8b:3a:57:99:5d:2b:85:cd:e1:3d:3f:73:a3:94:68:e2:bb:f2: a8:d8:5f:a3 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt/FE7leRcKiv2Kns2pVSgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWU4ZWZjYzkxZTMwY2YxMDBiOTFiYWMxOGY0MjM4NTQ2OTk4MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVXV+/IjOoVTBFHvGQDVk8DXT5/U KEXwgucWnvw4QvHz1eREaVlnYfPpNddNcYl1CmcO197pjrkVy5v0ZqfWhr69h/dE 7gQZxSfH1CqL8X4iHECJYAoUoywUtqV3A5fFpf4vFBAeE5N2ibUmTIamVFa16t/B NM6U60eWcEVZ1vVs28WJ8ien02Yt7sfl4vBsPazF1KLqZPSo0e6KuW5rsLWYa9jF Z8KAQvDjMhhApr15JOqDLzCVhPn2Tt3EsDe0+o+MghFS+7N0MIRiFLSzn1xbvetv yz74AIpPX287PXE38QbzkaxwihcOVWY9ERA4zOmHzBrNIsIQs321NNiKGwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFGno78yR4wzxALkbrBj0I4VGmYBVMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvYWVqdnpKSGpEUEVBdVJ1c0dQUWpoVWFaZ0ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQBwekMMAwD BAPB6RgDBAHB6RwDBAHB6TYDBADB6UkDBALB6VwDBADB6ZYwDAMEAcHppgMEAcHp qAMEBMHpsAMEAsHp1AMEAsHp4AMEAsHp8DANBgkqhkiG9w0BAQsFAAOCAQEAkbxy rBxIyue9iQyyfjVetyVzH71CTNAMjp5WCXGG0XDDnFlQmZxc9bFROpplVqXQF92w 8shUdsyRO4NgykNzoBliK/HpNtiBQ6E963TwKQgz9NJM9eK3Z4h/fb5DBMp1nloN HJh6ILZityKY8QKi3OJ9v24a2d8mBax11Mse1R480jniVrTYdgAO+mRHo8YoViSr mSHLFdxcc5SMKUFFaF2ZKo/yWOx3519d3ReUClQqT9pwvD/GLGhcYwIo6aOzToGD 9/6CbIeXsO1xrCcZ6hWNxDe26j90RD1ulodFKceiqHetQziERXTCizpXmV0rhc3h PT9zo5Ro4rvyqNhfow== -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:50 2026 by rpki-client