This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/fOBPe24wjmzNdZhgFDBeVKhJixs.roa File: fOBPe24wjmzNdZhgFDBeVKhJixs.roa (raw, json) Hash identifier: EWRROGFGbIQzuC+2+0KqCSLqg3leBAl7qPr2/X01VLs= Subject key identifier: 7C:E0:4F:7B:6E:30:8E:6C:CD:75:98:60:14:30:5E:54:A8:49:8B:1B Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14637E679494B339D83C343BC54226 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/fOBPe24wjmzNdZhgFDBeVKhJixs.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 193.233.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:63:7e:67:94:94:b3:39:d8:3c:34:3b:c5:42:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ce04f7b6e308e6ccd75986014305e54a8498b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:e2:5d:90:fd:6b:90:69:ba:d9:86:e5:30: f4:5c:23:61:f6:2f:8a:be:46:0d:1d:1c:9c:53:ab: 79:e1:29:e6:a7:a5:20:d0:dd:70:93:66:b1:24:f7: 75:23:8c:c1:b8:2f:4b:39:58:4a:05:f2:d0:47:49: 7d:f0:cb:16:3f:2f:6b:02:f7:5b:a1:03:c6:12:74: 4c:1f:b5:de:3e:17:54:01:c1:34:e7:e6:ac:44:38: 5f:92:e6:36:91:30:c0:49:b0:d3:8e:a1:fe:5f:83: f7:f5:d2:a0:8e:bf:c4:9a:04:44:49:31:da:c9:5f: eb:eb:23:4e:55:40:d9:8a:b3:80:e7:b7:a8:9e:e4: 7d:9f:6f:ae:01:92:b4:80:8f:34:5b:03:c2:64:36: 34:5c:cb:ea:69:07:78:e9:89:b5:c3:3c:2a:07:49: bd:14:00:5d:3c:71:b6:ab:73:39:10:49:03:dc:47: ec:91:88:ab:5c:99:ae:20:48:55:17:d3:4d:2c:cd: 20:83:63:34:31:a1:9a:22:10:5f:4b:74:58:df:10: 2c:3d:5f:70:0e:59:f7:84:3e:7f:75:b7:6f:1e:dc: 02:2d:ba:47:cc:07:3b:02:08:56:f4:31:0d:54:80: 9b:d9:00:93:d5:88:5d:da:55:b6:da:4e:be:c7:1a: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E0:4F:7B:6E:30:8E:6C:CD:75:98:60:14:30:5E:54:A8:49:8B:1B X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/fOBPe24wjmzNdZhgFDBeVKhJixs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:8b:af:5f:b5:fd:66:61:1b:c5:0f:92:4b:e9:58:58:e6:1c: 04:be:a8:87:f9:84:24:6f:17:e8:ff:9b:54:c2:6b:50:13:53: 21:16:07:5a:7a:34:6a:90:9d:fc:49:52:a8:48:ad:cf:8c:2e: dd:35:1f:e4:a7:51:f9:7c:1c:9e:28:51:82:8b:33:ba:05:ed: 10:01:52:57:22:76:5c:48:b7:3b:b6:91:b6:fd:c3:d4:70:9e: 79:ca:e1:88:3f:91:63:41:e0:2b:db:44:39:e9:6a:62:e4:3e: 46:2f:67:11:ee:eb:6b:37:06:91:82:da:6b:36:8a:0a:6f:03: 0b:34:b9:41:b3:91:61:ba:25:25:6e:52:2a:bb:35:21:9e:46: a6:33:70:c3:75:39:54:97:77:d0:8d:6e:e5:df:dd:0e:86:de: 8b:67:08:18:f6:9b:b2:d2:c3:6e:39:77:7a:67:ea:3c:e7:c2: 82:1e:a4:5d:6d:79:30:45:43:95:76:c8:4e:66:3f:76:d4:f0: bd:b7:68:86:1c:b7:b5:53:c5:1c:82:ba:41:7e:e2:1d:74:1d: 04:9e:13:85:80:3d:1b:6f:50:80:b5:d8:6a:93:d2:0b:6b:d4: 80:b7:93:13:98:74:5e:dc:bb:ca:0f:be:cc:c3:d5:17:6c:6a: ff:41:ec:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGN+Z5SUsznYPDQ7xUImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2UwNGY3YjZlMzA4ZTZjY2Q3NTk4NjAxNDMwNWU1NGE4NDk4YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMXiXZD9a5BputmG5TD0XCNh9i+K vkYNHRycU6t54Snmp6Ug0N1wk2axJPd1I4zBuC9LOVhKBfLQR0l98MsWPy9rAvdb oQPGEnRMH7XePhdUAcE05+asRDhfkuY2kTDASbDTjqH+X4P39dKgjr/EmgRESTHa yV/r6yNOVUDZirOA57eonuR9n2+uAZK0gI80WwPCZDY0XMvqaQd46Ym1wzwqB0m9 FABdPHG2q3M5EEkD3EfskYirXJmuIEhVF9NNLM0gg2M0MaGaIhBfS3RY3xAsPV9w Dln3hD5/dbdvHtwCLbpHzAc7AghW9DENVICb2QCT1Yhd2lW22k6+xxo56QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHzgT3tuMI5szXWYYBQwXlSoSYsbMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvZk9CUGUyNHdqbXpOZFpoZ0ZEQmVWS2hKaXhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwen/MA0G CSqGSIb3DQEBCwUAA4IBAQAKi69ftf1mYRvFD5JL6VhY5hwEvqiH+YQkbxfo/5tU wmtQE1MhFgdaejRqkJ38SVKoSK3PjC7dNR/kp1H5fByeKFGCizO6Be0QAVJXInZc SLc7tpG2/cPUcJ55yuGIP5FjQeAr20Q56Wpi5D5GL2cR7utrNwaRgtprNooKbwML NLlBs5FhuiUlblIquzUhnkamM3DDdTlUl3fQjW7l390Oht6LZwgY9puy0sNuOXd6 Z+o858KCHqRdbXkwRUOVdshOZj921PC9t2iGHLe1U8UcgrpBfuIddB0EnhOFgD0b b1CAtdhqk9ILa9SAt5MTmHRe3LvKD77Mw9UXbGr/QezJ -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:47 2026 by rpki-client