This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/c1g3hg-ci7cCSdaBmP45OY8R3Bk.roa File: c1g3hg-ci7cCSdaBmP45OY8R3Bk.roa (raw, json) Hash identifier: py9/vX6euvUw39zGvPY5obct/WvGiJRCQ0rNEbdcsUg= Subject key identifier: 73:58:37:86:0F:9C:8B:B7:02:49:D6:81:98:FE:39:39:8F:11:DC:19 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144F49B5FE8B70AC144D7E7F4F823D Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/c1g3hg-ci7cCSdaBmP45OY8R3Bk.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56701 IP address blocks: 193.233.120.0/24 maxlen: 24 193.233.121.0/24 maxlen: 24 193.233.122.0/24 maxlen: 24 193.233.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4f:49:b5:fe:8b:70:ac:14:4d:7e:7f:4f:82:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=735837860f9c8bb70249d68198fe39398f11dc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:a8:14:5a:3f:d5:f3:16:7d:26:af:9c:c7: 82:b1:92:54:e7:c3:2a:e1:8b:0d:92:0c:f6:22:03: 45:76:01:d5:42:e0:cc:d3:c0:84:b9:16:b3:df:1f: f1:d2:ce:0b:05:0e:3d:a5:5d:f6:57:51:ef:c4:7b: bc:ef:8e:a9:ec:3e:3d:60:91:2c:43:e4:ad:dc:62: f5:a0:48:2f:dc:d4:cb:18:10:01:f5:9e:bd:e1:55: e6:48:78:e2:de:7d:05:a3:d3:0a:7c:bc:18:b4:ad: 55:1f:65:f0:71:2f:5a:ad:b9:80:9a:9e:2e:30:b4: e1:70:2b:95:4f:78:e9:72:af:4a:14:73:3e:57:88: 2c:e5:1e:a6:5b:63:57:57:23:f6:ca:17:78:77:f8: b5:df:06:a4:e0:9e:34:e7:35:25:94:30:58:08:9a: 05:ec:25:d1:28:6d:b5:79:cf:c9:77:92:99:cd:d0: 28:e0:c9:58:7b:ce:6c:5d:a3:c6:b5:49:5d:22:78: 6d:f6:b2:f3:24:04:eb:70:ff:39:0b:52:74:49:07: f1:d9:47:b2:70:ce:ec:ae:4a:c2:35:df:82:89:04: ad:d0:a7:2e:b2:e0:1e:86:e2:c8:7a:a5:87:fc:26: 44:94:2f:93:1e:a0:c5:d7:3f:18:20:ca:57:82:a0: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:58:37:86:0F:9C:8B:B7:02:49:D6:81:98:FE:39:39:8F:11:DC:19 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/c1g3hg-ci7cCSdaBmP45OY8R3Bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.120.0/22 Signature Algorithm: sha256WithRSAEncryption 92:54:06:47:01:d7:24:e6:38:a9:b3:14:84:65:fe:53:66:0d: 7a:db:d9:1e:68:5c:a4:30:9c:2e:0a:d1:2b:d0:fa:f9:b9:82: 0b:0b:f9:2a:5b:44:00:13:de:eb:6f:7c:0f:4f:25:48:d0:8a: f4:5e:2f:8e:ea:cb:e7:16:6c:14:b4:d1:08:04:22:bc:46:d4: bc:bd:ee:cd:16:b1:7d:ae:a8:33:7b:7e:b1:d1:45:dd:bc:97: 34:65:e8:4a:9b:d4:44:b5:92:4d:99:78:a6:68:bd:82:c3:04: e8:bb:31:1c:d1:f7:3e:f0:58:32:d9:35:8e:1b:b3:13:a0:d5: 53:5b:5f:c5:b8:78:4a:da:cb:36:1f:9b:ae:01:a6:0b:ec:be: 0a:82:6b:f5:f4:e2:e8:35:a2:c4:85:5f:ec:7d:3b:1a:3d:2f: cf:f5:25:44:fe:b5:20:dc:16:45:c8:3a:8d:c4:60:3f:57:41: 90:db:65:22:be:3d:de:d4:8e:c9:2f:d5:ea:8e:98:6b:dc:ed: ad:88:72:b1:8d:cd:4a:db:f8:15:f1:b4:cc:a0:4e:68:28:83: 28:7f:2a:c3:ff:46:26:fb:50:27:c4:ab:8f:61:24:6b:08:6d: 45:06:2d:1b:81:4b:fe:8c:76:a0:42:3d:6e:0e:2d:3d:ea:8d: 4b:de:74:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FE9Jtf6LcKwUTX5/T4I9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzU4Mzc4NjBmOWM4YmI3MDI0OWQ2ODE5OGZlMzkzOThmMTFkYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW+oFFo/1fMWfSavnMeCsZJU58Mq 4YsNkgz2IgNFdgHVQuDM08CEuRaz3x/x0s4LBQ49pV32V1HvxHu8746p7D49YJEs Q+St3GL1oEgv3NTLGBAB9Z694VXmSHji3n0Fo9MKfLwYtK1VH2XwcS9arbmAmp4u MLThcCuVT3jpcq9KFHM+V4gs5R6mW2NXVyP2yhd4d/i13wak4J405zUllDBYCJoF 7CXRKG21ec/Jd5KZzdAo4MlYe85sXaPGtUldInht9rLzJATrcP85C1J0SQfx2Uey cM7srkrCNd+CiQSt0KcusuAehuLIeqWH/CZElC+THqDF1z8YIMpXgqAYCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHNYN4YPnIu3AknWgZj+OTmPEdwZMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvYzFnM2hnLWNpN2NDU2RhQm1QNDVPWThSM0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwel4MA0G CSqGSIb3DQEBCwUAA4IBAQCSVAZHAdck5jipsxSEZf5TZg1629keaFykMJwuCtEr 0Pr5uYILC/kqW0QAE97rb3wPTyVI0Ir0Xi+O6svnFmwUtNEIBCK8RtS8ve7NFrF9 rqgze36x0UXdvJc0ZehKm9REtZJNmXimaL2CwwTouzEc0fc+8Fgy2TWOG7MToNVT W1/FuHhK2ss2H5uuAaYL7L4Kgmv19OLoNaLEhV/sfTsaPS/P9SVE/rUg3BZFyDqN xGA/V0GQ22Uivj3e1I7JL9Xqjphr3O2tiHKxjc1K2/gV8bTMoE5oKIMofyrD/0Ym +1AnxKuPYSRrCG1FBi0bgUv+jHagQj1uDi096o1L3nQw -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:53 2026 by rpki-client