This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bVexMfcdi1DsU13qULkuWSPHnaI.roa File: bVexMfcdi1DsU13qULkuWSPHnaI.roa (raw, json) Hash identifier: xPQhrNeUYDwXH82JlSUmBxmGD4mbJnF3nZGeT4FD4Uw= Subject key identifier: 6D:57:B1:31:F7:1D:8B:50:EC:53:5D:EA:50:B9:2E:59:23:C7:9D:A2 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14602CDD5A7EC24F5328C727542B41 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bVexMfcdi1DsU13qULkuWSPHnaI.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 147.45.48.0/24 maxlen: 24 147.45.118.0/24 maxlen: 24 147.45.119.0/24 maxlen: 24 147.45.211.0/24 maxlen: 24 193.233.18.0/24 maxlen: 24 193.233.48.0/24 maxlen: 24 193.233.49.0/24 maxlen: 24 193.233.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:60:2c:dd:5a:7e:c2:4f:53:28:c7:27:54:2b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d57b131f71d8b50ec535dea50b92e5923c79da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:15:b6:04:c1:f7:df:74:22:cc:6e:ca:f8:a0: 0a:28:c0:9d:53:a9:84:a4:16:6b:77:73:87:3c:b6: d7:ca:77:25:06:11:a4:2f:d3:3d:81:ce:29:cf:61: 67:6c:db:4f:d0:9e:1a:61:99:4b:d4:11:10:df:05: 0c:d2:44:2e:14:58:c4:dd:de:61:2e:24:a6:ad:ce: e6:d9:f0:ed:d6:f4:b7:5f:e3:43:82:a8:59:08:67: ea:2c:93:10:a0:b6:97:59:05:7c:22:42:f2:a9:71: 9b:a6:62:14:0b:e5:98:69:76:09:c7:a2:38:86:a0: 76:ce:8f:ae:0e:bb:14:aa:61:4c:e9:a6:a3:ec:d5: c6:2b:bc:a5:64:5e:e5:0b:53:11:55:cc:92:f6:b1: 80:52:37:a8:f7:34:41:3d:20:fc:6c:9b:e6:b4:98: 5a:99:dc:e0:1b:a6:6c:d3:0c:a9:27:b9:cd:98:69: 92:a6:f4:1d:91:44:8d:3c:25:f6:68:70:4d:da:17: 08:9d:20:09:47:13:7e:2d:9b:d2:01:24:eb:be:6e: 63:e2:48:aa:d2:15:4d:6f:d9:92:75:21:6f:e9:17: 77:6b:b9:8b:01:38:06:e9:0d:7e:7f:ec:b1:0c:fa: 70:73:46:e8:7b:fb:be:54:c9:d8:5a:77:4e:fa:db: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:57:B1:31:F7:1D:8B:50:EC:53:5D:EA:50:B9:2E:59:23:C7:9D:A2 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bVexMfcdi1DsU13qULkuWSPHnaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.48.0/24 147.45.118.0/23 147.45.211.0/24 193.233.18.0/24 193.233.48.0/23 193.233.84.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:e5:c2:f7:a7:68:ef:fb:f2:74:d8:82:cf:b6:63:41:b5:31: 77:0d:9d:fa:c1:ce:d1:4f:de:d1:1c:e9:6e:3b:f3:79:01:5d: a6:99:86:ee:b2:23:ca:7f:22:d6:4e:cf:b8:03:aa:a5:88:32: 88:ef:6a:4e:96:a5:7c:4f:bb:a7:90:d2:a2:33:b6:2d:e2:ea: a8:49:06:90:9f:a1:4d:1a:4e:0b:61:77:dd:59:4d:af:e8:52: 55:3f:49:79:36:aa:24:3f:c8:2c:06:a4:20:b5:fc:05:e3:e3: c6:68:63:fa:f5:a8:b5:64:1c:fc:bb:01:f2:97:13:30:00:67: 47:18:2d:c3:6d:f5:2b:43:95:2a:b2:11:d5:d2:e1:98:f4:30: 9c:4a:0d:83:68:23:7b:61:4e:10:a8:7f:5d:7e:c3:c2:8e:c6: 96:02:7b:35:8f:7e:54:60:ec:c5:10:21:2d:6c:9a:44:0b:19: 95:15:c0:fe:86:c3:6d:92:61:2a:98:23:63:23:f0:14:1b:bd: c1:f2:84:a3:f4:d5:c5:41:84:5c:60:4b:e2:1a:45:5c:1d:5c: 8b:40:c1:f8:9e:0e:71:3a:d1:f5:ab:be:aa:f3:77:9d:38:73: 42:29:f3:a2:48:80:b9:00:34:e5:2a:67:ef:de:c7:29:e7:50: 01:00:1e:24 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FGAs3Vp+wk9TKMcnVCtBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDU3YjEzMWY3MWQ4YjUwZWM1MzVkZWE1MGI5MmU1OTIzYzc5ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBW2BMH333QizG7K+KAKKMCdU6mE pBZrd3OHPLbXynclBhGkL9M9gc4pz2FnbNtP0J4aYZlL1BEQ3wUM0kQuFFjE3d5h LiSmrc7m2fDt1vS3X+NDgqhZCGfqLJMQoLaXWQV8IkLyqXGbpmIUC+WYaXYJx6I4 hqB2zo+uDrsUqmFM6aaj7NXGK7ylZF7lC1MRVcyS9rGAUjeo9zRBPSD8bJvmtJha mdzgG6Zs0wypJ7nNmGmSpvQdkUSNPCX2aHBN2hcInSAJRxN+LZvSASTrvm5j4kiq 0hVNb9mSdSFv6Rd3a7mLATgG6Q1+f+yxDPpwc0boe/u+VMnYWndO+tsbWwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFG1XsTH3HYtQ7FNd6lC5Llkjx52iMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvYlZleE1mY2RpMURzVTEzcVVMa3VXU1BIbmFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAky0wAwQB ky12AwQAky3TAwQAwekSAwQBwekwAwQAwelUMA0GCSqGSIb3DQEBCwUAA4IBAQAs 5cL3p2jv+/J02ILPtmNBtTF3DZ36wc7RT97RHOluO/N5AV2mmYbusiPKfyLWTs+4 A6qliDKI72pOlqV8T7unkNKiM7Yt4uqoSQaQn6FNGk4LYXfdWU2v6FJVP0l5Nqok P8gsBqQgtfwF4+PGaGP69ai1ZBz8uwHylxMwAGdHGC3DbfUrQ5UqshHV0uGY9DCc Sg2DaCN7YU4QqH9dfsPCjsaWAns1j35UYOzFECEtbJpECxmVFcD+hsNtkmEqmCNj I/AUG73B8oSj9NXFQYRcYEviGkVcHVyLQMH4ng5xOtH1q76q83edOHNCKfOiSIC5 ADTlKmfv3scp51ABAB4k -----END CERTIFICATE-----Generated at Sat Jan 10 03:14:56 2026 by rpki-client