This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eSL8TSjpYEmLyd8zSoyl4gKC0Gc.roa File: eSL8TSjpYEmLyd8zSoyl4gKC0Gc.roa (raw, json) Hash identifier: 29JJIfPFd6ZSG1ewW/j1usoXxzpiPELjSF6jgw6rifs= Subject key identifier: 79:22:FC:4D:28:E9:60:49:8B:C9:DF:33:4A:8C:A5:E2:02:82:D0:67 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1456D9216F9B1D2CBB992B4955A03D Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eSL8TSjpYEmLyd8zSoyl4gKC0Gc.roa Signing time: Fri 02 Jan 2026 14:19:57 +0000 ROA not before: Fri 02 Jan 2026 14:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201670 IP address blocks: 193.233.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:56:d9:21:6f:9b:1d:2c:bb:99:2b:49:55:a0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7922fc4d28e960498bc9df334a8ca5e20282d067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:37:1e:a7:74:d2:96:eb:d5:d4:af:34:5b: d2:28:c9:c1:87:52:f2:18:e5:5c:7c:1e:95:a9:c3: 65:b6:d3:e0:b9:f5:c7:b7:a1:2d:b5:86:ad:db:5c: 8e:2c:b7:5d:85:f0:e8:69:57:ca:fa:ea:e6:d6:28: b6:8b:df:63:b5:24:c5:11:55:fb:de:3c:46:b3:6d: 89:f3:01:3d:5b:70:16:f8:3c:20:2b:d8:83:84:dc: 96:f2:6e:cb:b8:20:a0:ad:67:82:be:86:c9:b2:48: 94:bc:8c:16:c4:d4:f9:d1:ed:68:30:47:ea:ff:07: d0:9f:99:e9:54:37:1e:2c:5c:30:1b:05:23:48:90: 56:4c:dd:72:59:75:74:0e:dd:15:2d:2e:e1:ee:a4: 72:12:4f:52:78:43:da:2a:88:80:1d:a1:63:08:ad: 04:62:70:ba:30:86:6a:6c:99:52:e3:e6:10:e1:c8: 09:75:ba:d8:f6:74:a1:5d:14:64:70:97:55:ee:87: ed:1f:30:8b:c5:1a:c8:8b:a8:05:3b:34:4e:03:e4: 9d:25:f6:34:ed:20:35:91:94:5b:b3:0e:5c:74:f0: 70:c0:ae:ae:25:16:99:0b:e3:7b:bb:88:31:cd:cc: 5a:a7:9f:75:96:49:b1:7b:00:70:51:f8:6c:a6:25: a3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:FC:4D:28:E9:60:49:8B:C9:DF:33:4A:8C:A5:E2:02:82:D0:67 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eSL8TSjpYEmLyd8zSoyl4gKC0Gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.246.0/23 Signature Algorithm: sha256WithRSAEncryption 63:4b:d7:50:77:4b:9b:1e:eb:4a:c8:78:7c:31:41:58:1f:ba: 38:1b:8f:de:bd:d1:93:54:d7:5a:dc:c0:8d:6b:12:2f:39:0f: 7c:21:00:2a:e5:d4:99:f8:28:4a:9e:43:f5:7e:96:8e:01:bc: a5:f3:4f:26:f0:64:d7:eb:fb:ae:a2:51:08:a1:97:b8:1a:c9: 3b:0e:71:f2:b6:ff:d4:f1:93:04:14:4e:a4:5c:c4:6c:cb:7c: ac:4b:63:21:20:1b:0f:a2:c9:9c:df:fe:7f:25:8f:f2:cb:bc: 9a:32:cb:7e:df:db:19:65:a5:4a:b9:5a:d4:2a:48:ac:48:4b: 29:44:11:90:5c:00:04:7d:23:04:fd:5d:0d:ce:11:51:d7:df: 81:b0:48:68:a9:ea:7e:4f:8b:5f:83:96:e3:d2:2a:2a:12:e9: c2:f6:2b:95:1f:cb:0f:95:34:4a:79:fd:ab:2d:ea:b9:28:f5: f7:50:a3:41:a7:71:7e:e7:2c:28:73:5d:ef:22:3a:04:67:a4: 4a:ca:64:da:b7:8b:ef:7d:72:6b:ea:75:b4:d3:2d:b3:56:b4: 1f:75:33:47:e1:6c:c5:b2:30:e1:cd:21:c7:cf:ac:df:77:b4: f5:3b:63:91:08:ab:17:ef:97:fd:13:a1:1d:80:73:2d:ad:09: 29:46:0f:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFbZIW+bHSy7mStJVaA9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTIyZmM0ZDI4ZTk2MDQ5OGJjOWRmMzM0YThjYTVlMjAyODJkMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruY3Hqd00pbr1dSvNFvSKMnBh1Ly GOVcfB6VqcNlttPgufXHt6EttYat21yOLLddhfDoaVfK+urm1ii2i99jtSTFEVX7 3jxGs22J8wE9W3AW+DwgK9iDhNyW8m7LuCCgrWeCvobJskiUvIwWxNT50e1oMEfq /wfQn5npVDceLFwwGwUjSJBWTN1yWXV0Dt0VLS7h7qRyEk9SeEPaKoiAHaFjCK0E YnC6MIZqbJlS4+YQ4cgJdbrY9nShXRRkcJdV7oftHzCLxRrIi6gFOzROA+SdJfY0 7SA1kZRbsw5cdPBwwK6uJRaZC+N7u4gxzcxap591lkmxewBwUfhspiWjrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHki/E0o6WBJi8nfM0qMpeICgtBnMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvZVNMOFRTanBZRW1MeWQ4elNveWw0Z0tDMEdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwen2MA0G CSqGSIb3DQEBCwUAA4IBAQBjS9dQd0ubHutKyHh8MUFYH7o4G4/evdGTVNda3MCN axIvOQ98IQAq5dSZ+ChKnkP1fpaOAbyl808m8GTX6/uuolEIoZe4Gsk7DnHytv/U 8ZMEFE6kXMRsy3ysS2MhIBsPosmc3/5/JY/yy7yaMst+39sZZaVKuVrUKkisSEsp RBGQXAAEfSME/V0NzhFR19+BsEhoqep+T4tfg5bj0ioqEunC9iuVH8sPlTRKef2r Leq5KPX3UKNBp3F+5ywoc13vIjoEZ6RKymTat4vvfXJr6nW00y2zVrQfdTNH4WzF sjDhzSHHz6zfd7T1O2ORCKsX75f9E6EdgHMtrQkpRg+P -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:51 2026 by rpki-client