This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ayvnoGHMWpMG7AjH7-9hoSar7Dk.roa File: ayvnoGHMWpMG7AjH7-9hoSar7Dk.roa (raw, json) Hash identifier: OAxXKAWEIkrisP+IN1ZWo6UlwdcdR8Pe/HXcKv+itsQ= Subject key identifier: 6B:2B:E7:A0:61:CC:5A:93:06:EC:08:C7:EF:EF:61:A1:26:AB:EC:39 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F143E5C0A2DF3225B551875B7E5B8C2 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ayvnoGHMWpMG7AjH7-9hoSar7Dk.roa Signing time: Fri 02 Jan 2026 14:19:51 +0000 ROA not before: Fri 02 Jan 2026 14:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 193.233.110.0/23 maxlen: 24 193.233.116.0/23 maxlen: 24 193.233.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:3e:5c:0a:2d:f3:22:5b:55:18:75:b7:e5:b8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b2be7a061cc5a9306ec08c7efef61a126abec39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:23:29:2f:3d:df:0a:92:9b:96:fc:52:f1: 0f:ca:23:b5:1a:8d:5f:8b:98:1a:18:e1:84:c4:75: 12:15:ab:a9:61:49:ff:69:52:e4:02:4e:2b:af:d1: cd:80:fd:12:dc:61:00:05:78:22:2e:26:25:d9:a0: 18:fe:58:59:45:da:6e:16:51:38:b9:9f:98:04:90: 7f:d3:1b:72:c9:b4:00:05:29:c5:be:40:c2:aa:81: 12:bb:f0:ab:6a:a4:87:f2:9e:40:2a:9a:b2:63:75: 77:83:58:e0:3a:27:3a:0f:c2:27:1e:5e:5b:89:36: cf:7e:47:51:95:cd:05:d4:74:2b:48:0e:7e:83:6e: ac:7a:fe:5f:25:88:32:59:aa:e4:d3:cd:e2:d5:8d: be:94:12:6a:68:14:f3:cd:0c:ac:6b:af:1a:a0:02: 92:75:34:1c:d6:9f:50:ab:70:fe:bf:30:ed:a6:3c: bc:6d:23:7b:ed:34:80:66:df:33:88:e2:1d:81:a4: 54:fc:af:4c:26:2e:00:c2:ff:ab:29:7a:bf:05:58: 5c:a1:a5:6e:be:68:71:05:9e:42:8c:99:59:8a:cb: 7a:d4:11:36:ad:07:4c:6a:7a:8d:42:56:ec:aa:3b: 53:ef:f1:57:04:11:c0:d3:e6:e0:4f:20:5d:c1:b0: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2B:E7:A0:61:CC:5A:93:06:EC:08:C7:EF:EF:61:A1:26:AB:EC:39 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ayvnoGHMWpMG7AjH7-9hoSar7Dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.110.0/23 193.233.116.0/22 Signature Algorithm: sha256WithRSAEncryption 95:e1:74:21:72:00:5e:90:51:8d:a2:ac:92:8d:67:24:be:2f: e5:17:e4:f1:94:28:0d:f3:3c:e6:4a:de:8a:c2:d7:91:2d:7a: 62:9f:e1:72:2b:fd:0b:56:99:d7:64:07:13:8a:f2:b3:2b:c1: a2:cd:c2:1d:75:e5:4f:eb:d9:b2:f2:72:12:6f:9e:77:f8:55: 1f:89:0d:a1:be:02:d0:52:90:44:c2:2b:9b:03:2e:f6:fc:67: bc:cf:40:87:ff:39:44:60:d8:06:ec:00:47:07:02:eb:07:51: dd:a8:ef:e8:16:b5:6e:f1:4f:26:6e:8b:7e:65:c0:93:72:66: aa:b3:af:0f:10:e7:34:cc:a1:60:00:ad:df:22:a0:34:fa:8c: 93:c4:24:f1:2b:91:c3:e0:86:f9:ff:de:6b:06:31:22:1b:2a: eb:6a:97:dd:b0:66:ba:ae:a4:36:62:27:28:cd:c1:2c:10:98: de:3b:02:46:7a:02:c4:3d:8e:62:40:b4:4b:b5:ea:54:45:ce: ea:5c:95:e6:4d:ac:ce:2a:a3:bb:63:21:cf:fa:96:0b:bf:cc: 50:5c:5e:29:be:20:1a:bc:cc:35:3e:4c:13:7e:f6:4c:ed:64: 59:4f:ed:68:46:4c:26:1b:4a:8a:90:c4:7c:88:88:c5:10:4a: 07:bc:56:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FD5cCi3zIltVGHW35bjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjJiZTdhMDYxY2M1YTkzMDZlYzA4YzdlZmVmNjFhMTI2YWJlYzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj4jKS893wqSm5b8UvEPyiO1Go1f i5gaGOGExHUSFaupYUn/aVLkAk4rr9HNgP0S3GEABXgiLiYl2aAY/lhZRdpuFlE4 uZ+YBJB/0xtyybQABSnFvkDCqoESu/CraqSH8p5AKpqyY3V3g1jgOic6D8InHl5b iTbPfkdRlc0F1HQrSA5+g26sev5fJYgyWark083i1Y2+lBJqaBTzzQysa68aoAKS dTQc1p9Qq3D+vzDtpjy8bSN77TSAZt8ziOIdgaRU/K9MJi4Awv+rKXq/BVhcoaVu vmhxBZ5CjJlZist61BE2rQdManqNQlbsqjtT7/FXBBHA0+bgTyBdwbBJVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGsr56BhzFqTBuwIx+/vYaEmq+w5MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvYXl2bm9HSE1XcE1HN0FqSDctOWhvU2FyN0RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBweluAwQC wel0MA0GCSqGSIb3DQEBCwUAA4IBAQCV4XQhcgBekFGNoqySjWckvi/lF+TxlCgN 8zzmSt6KwteRLXpin+FyK/0LVpnXZAcTivKzK8GizcIddeVP69my8nISb553+FUf iQ2hvgLQUpBEwiubAy72/Ge8z0CH/zlEYNgG7ABHBwLrB1HdqO/oFrVu8U8mbot+ ZcCTcmaqs68PEOc0zKFgAK3fIqA0+oyTxCTxK5HD4Ib5/95rBjEiGyrrapfdsGa6 rqQ2YicozcEsEJjeOwJGegLEPY5iQLRLtepURc7qXJXmTazOKqO7YyHP+pYLv8xQ XF4pviAavMw1PkwTfvZM7WRZT+1oRkwmG0qKkMR8iIjFEEoHvFZe -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:49 2026 by rpki-client