This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/b13brgiMIG3Cfow-FclBZChE14g.roa File: b13brgiMIG3Cfow-FclBZChE14g.roa (raw, json) Hash identifier: /0YB2zcvIJMFR2/G2g9dfLjOMMfxoMmGIG9tgGctPzk= Subject key identifier: 6F:5D:DB:AE:08:8C:20:6D:C2:7E:8C:3E:15:C9:41:64:28:44:D7:88 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146863B657ADC3FC43022757D34000 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/b13brgiMIG3Cfow-FclBZChE14g.roa Signing time: Fri 02 Jan 2026 14:20:02 +0000 ROA not before: Fri 02 Jan 2026 14:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212165 IP address blocks: 193.233.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:68:63:b6:57:ad:c3:fc:43:02:27:57:d3:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5ddbae088c206dc27e8c3e15c941642844d788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:f6:92:59:d0:6c:8e:63:25:39:9d:f0:0a: 55:c9:00:a8:ee:60:da:a7:72:93:d9:38:f6:83:9e: 22:89:8a:22:33:30:ed:4f:83:c6:d5:cb:98:40:1a: 56:11:cd:13:78:d5:b0:0b:fe:be:de:a3:55:3c:9c: 46:3c:6e:8f:d5:45:25:8d:a3:ca:a9:96:74:64:5f: 10:8f:4c:bc:d5:f4:5d:0c:85:ea:47:76:32:6b:b5: 69:4a:8f:fd:08:a7:81:63:88:17:1a:49:60:97:54: 40:a4:1e:1d:35:e2:e5:c6:cd:9e:8f:5b:6e:f4:3b: 2f:0d:21:50:bc:65:ad:7e:ac:45:f9:32:d2:3a:9d: ce:bb:72:e9:fa:b9:b1:37:ee:38:8e:3a:06:21:5b: 9d:ba:15:10:55:7a:54:fe:df:65:49:37:61:c7:bd: 2a:4e:c4:c9:23:c5:3d:b6:66:fc:9d:c7:af:a7:9f: 02:ca:fd:88:20:be:ba:2d:ce:7a:61:2d:22:88:cd: 19:d3:5e:36:bc:7f:1e:af:16:55:ed:9a:9d:58:3e: 1a:40:c6:86:bf:fd:68:f2:7e:c1:99:b8:5b:3f:d0: c4:2c:12:d3:fb:d3:d4:98:91:7b:9b:ba:36:ba:0d: ad:6b:d8:c8:c7:ac:65:7a:00:a6:9c:c2:c5:c9:3f: a8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5D:DB:AE:08:8C:20:6D:C2:7E:8C:3E:15:C9:41:64:28:44:D7:88 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/b13brgiMIG3Cfow-FclBZChE14g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.20.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:2e:6f:de:09:e6:bd:6f:a2:04:a8:cd:2e:85:16:9f:42:af: a3:07:76:e1:81:02:71:00:50:30:89:ab:f2:37:78:57:61:f3: 7e:e5:35:00:62:15:97:64:68:41:af:e2:47:ac:ed:c6:36:21: 14:c1:ee:86:10:22:90:de:12:f0:9e:46:32:8e:a8:82:fe:1d: 63:9d:4d:49:c2:25:7f:ad:02:6a:f6:ab:34:e2:c8:61:3b:5a: 59:ec:cd:18:7a:be:30:6d:64:af:20:a2:09:12:34:34:a2:dd: 62:25:0e:ec:3d:77:f1:fb:fa:a1:2c:e5:c0:23:56:b1:9f:11: 91:bc:ed:53:ec:09:e9:45:8e:90:c0:f8:bc:d6:34:ee:7d:96: 24:ce:ee:f8:7b:4e:aa:58:b4:f1:4a:91:9c:80:96:eb:fc:6f: 42:4b:29:59:6a:f7:38:88:69:1f:82:ab:96:e7:9d:25:8a:92: b9:4a:99:4a:68:1d:dd:d7:57:ff:bd:b6:a5:17:d7:c0:69:0d: e2:e8:a8:a2:37:47:db:26:76:01:dc:cb:99:36:04:8a:50:60: e8:a4:85:40:5d:ba:39:6d:ce:18:8a:7b:0c:b6:a0:1b:56:98: 19:89:7c:f2:41:d0:ef:7f:00:bd:a7:87:bd:26:09:f4:3c:78: 89:28:fe:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGhjtletw/xDAidX00AAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjVkZGJhZTA4OGMyMDZkYzI3ZThjM2UxNWM5NDE2NDI4NDRkNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTD2klnQbI5jJTmd8ApVyQCo7mDa p3KT2Tj2g54iiYoiMzDtT4PG1cuYQBpWEc0TeNWwC/6+3qNVPJxGPG6P1UUljaPK qZZ0ZF8Qj0y81fRdDIXqR3Yya7VpSo/9CKeBY4gXGklgl1RApB4dNeLlxs2ej1tu 9DsvDSFQvGWtfqxF+TLSOp3Ou3Lp+rmxN+44jjoGIVuduhUQVXpU/t9lSTdhx70q TsTJI8U9tmb8ncevp58Cyv2IIL66Lc56YS0iiM0Z0142vH8erxZV7ZqdWD4aQMaG v/1o8n7BmbhbP9DELBLT+9PUmJF7m7o2ug2ta9jIx6xlegCmnMLFyT+o3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9d264IjCBtwn6MPhXJQWQoRNeIMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvYjEzYnJnaU1JRzNDZm93LUZjbEJaQ2hFMTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekUMA0G CSqGSIb3DQEBCwUAA4IBAQAsLm/eCea9b6IEqM0uhRafQq+jB3bhgQJxAFAwiavy N3hXYfN+5TUAYhWXZGhBr+JHrO3GNiEUwe6GECKQ3hLwnkYyjqiC/h1jnU1JwiV/ rQJq9qs04shhO1pZ7M0Yer4wbWSvIKIJEjQ0ot1iJQ7sPXfx+/qhLOXAI1axnxGR vO1T7AnpRY6QwPi81jTufZYkzu74e06qWLTxSpGcgJbr/G9CSylZavc4iGkfgquW 550lipK5SplKaB3d11f/vbalF9fAaQ3i6KiiN0fbJnYB3MuZNgSKUGDopIVAXbo5 bc4YinsMtqAbVpgZiXzyQdDvfwC9p4e9Jgn0PHiJKP4S -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:53 2026 by rpki-client