This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cLNmgXh_YhG6W8gHtZWWK7JjSbc.roa File: cLNmgXh_YhG6W8gHtZWWK7JjSbc.roa (raw, json) Hash identifier: i+5mk6LgFrNKDWqaDWUOGDQFu9VBJJg3eJU2y+egglE= Subject key identifier: 70:B3:66:81:78:7F:62:11:BA:5B:C8:07:B5:95:96:2B:B2:63:49:B7 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14581EA0D0842F2AD92D8A342384CB Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cLNmgXh_YhG6W8gHtZWWK7JjSbc.roa Signing time: Fri 02 Jan 2026 14:19:58 +0000 ROA not before: Fri 02 Jan 2026 14:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202423 IP address blocks: 193.233.31.0/24 maxlen: 24 193.233.72.0/24 maxlen: 24 193.233.149.0/24 maxlen: 24 193.233.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:58:1e:a0:d0:84:2f:2a:d9:2d:8a:34:23:84:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70b36681787f6211ba5bc807b595962bb26349b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:a4:0f:70:4d:17:b0:6b:0c:f1:96:94:64: d6:fa:3a:13:89:13:0a:88:8d:0c:e8:87:a8:50:ca: b3:28:68:db:2d:cf:93:e7:8b:eb:c1:49:05:25:4a: e3:be:e0:21:54:35:21:0d:36:75:fb:9e:d7:b3:19: c8:74:bb:f3:2b:a3:01:ab:9a:11:f1:9e:a5:04:55: 84:54:53:17:d7:63:a7:a3:a9:8c:d3:31:a7:f1:ba: 9d:09:26:52:85:20:35:fa:5a:96:94:dd:7e:8d:8a: 61:b4:d3:e6:a8:4c:4f:3d:72:a0:75:01:04:51:c5: fd:e9:e3:04:ac:c5:17:1b:67:94:09:f9:65:f4:dd: 81:6b:fa:73:d3:78:ca:5d:f1:90:b3:c4:c3:58:85: c0:3b:95:0b:cb:42:0f:4d:81:9e:9c:1a:4f:43:5e: 9b:20:57:78:8c:12:2c:66:b8:db:4f:26:e7:39:1d: 74:96:5c:aa:34:7a:a9:c9:49:0e:20:89:9d:ed:be: 19:bb:ec:a5:39:9c:56:07:ed:57:74:75:5a:7a:84: e6:8c:1f:13:c4:61:5f:f2:9b:c5:94:4f:41:08:52: 37:56:b3:74:b4:27:12:d8:02:d6:ac:e7:8d:76:54: 86:10:cf:7d:49:fe:0a:15:59:95:81:26:71:45:13: 65:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B3:66:81:78:7F:62:11:BA:5B:C8:07:B5:95:96:2B:B2:63:49:B7 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cLNmgXh_YhG6W8gHtZWWK7JjSbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.31.0/24 193.233.72.0/24 193.233.149.0/24 193.233.174.0/24 Signature Algorithm: sha256WithRSAEncryption 16:37:4a:4b:83:37:41:63:c8:1a:50:6d:6e:71:e9:03:b2:e6: e0:2c:fd:43:b8:b9:e7:90:d8:e8:e3:4c:9a:ec:3a:15:c1:c6: ee:79:ec:7f:66:c7:43:7d:fd:c5:c3:1b:68:07:97:0d:65:34: 67:d6:90:08:33:4b:13:ff:95:c4:81:e3:21:d2:13:4b:f4:0d: 1f:41:58:9d:3e:56:ca:f7:20:b7:8c:14:8f:67:7c:6a:84:32: c0:2b:45:80:2f:48:80:79:a4:6b:17:f8:42:d1:55:62:0f:dc: 65:ff:94:ce:a3:5e:cb:32:bc:67:10:e4:3a:4a:5a:21:ca:d2: fa:38:fa:3e:09:d4:c0:c4:5f:a5:ac:f4:1b:0f:f4:bd:62:8c: c6:99:73:e3:98:da:1b:2c:b4:36:0e:92:f4:24:ae:4b:7e:52: bc:91:fd:74:96:af:84:ea:f9:a4:28:5f:27:4e:9a:aa:18:c4: 27:74:d5:89:c0:30:62:ac:05:08:b0:d0:a6:22:26:db:b4:e4: f6:91:b7:0a:45:9e:3b:e2:44:9b:d9:8d:6f:00:67:bb:4d:de: 60:5f:7f:e4:b2:d5:76:2a:9e:82:d4:5e:ab:81:06:68:ff:29: 10:2b:74:76:c3:b3:66:a4:82:68:df:af:2c:cc:9a:c7:b4:94: 67:c4:3a:83 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FFgeoNCELyrZLYo0I4TLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGIzNjY4MTc4N2Y2MjExYmE1YmM4MDdiNTk1OTYyYmIyNjM0OWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2akD3BNF7BrDPGWlGTW+joTiRMK iI0M6IeoUMqzKGjbLc+T54vrwUkFJUrjvuAhVDUhDTZ1+57XsxnIdLvzK6MBq5oR 8Z6lBFWEVFMX12Ono6mM0zGn8bqdCSZShSA1+lqWlN1+jYphtNPmqExPPXKgdQEE UcX96eMErMUXG2eUCfll9N2Ba/pz03jKXfGQs8TDWIXAO5ULy0IPTYGenBpPQ16b IFd4jBIsZrjbTybnOR10llyqNHqpyUkOIImd7b4Zu+ylOZxWB+1XdHVaeoTmjB8T xGFf8pvFlE9BCFI3VrN0tCcS2ALWrOeNdlSGEM99Sf4KFVmVgSZxRRNlwwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHCzZoF4f2IRulvIB7WVliuyY0m3MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvY0xObWdYaF9ZaEc2VzhnSHRaV1dLN0pqU2JjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwekfAwQA welIAwQAwemVAwQAwemuMA0GCSqGSIb3DQEBCwUAA4IBAQAWN0pLgzdBY8gaUG1u cekDsubgLP1DuLnnkNjo40ya7DoVwcbueex/ZsdDff3FwxtoB5cNZTRn1pAIM0sT /5XEgeMh0hNL9A0fQVidPlbK9yC3jBSPZ3xqhDLAK0WAL0iAeaRrF/hC0VViD9xl /5TOo17LMrxnEOQ6SlohytL6OPo+CdTAxF+lrPQbD/S9YozGmXPjmNobLLQ2DpL0 JK5LflK8kf10lq+E6vmkKF8nTpqqGMQndNWJwDBirAUIsNCmIibbtOT2kbcKRZ47 4kSb2Y1vAGe7Td5gX3/kstV2Kp6C1F6rgQZo/ykQK3R2w7NmpIJo368szJrHtJRn xDqD -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:47 2026 by rpki-client