This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gHs76ZIDfxpA_pNje7Q4YKfWd0s.roa File: gHs76ZIDfxpA_pNje7Q4YKfWd0s.roa (raw, json) Hash identifier: w01MJSIa9kVP1ST9GqGqf9u+QWeE4Bb2p+t4sY+SASc= Subject key identifier: 80:7B:3B:E9:92:03:7F:1A:40:FE:93:63:7B:B4:38:60:A7:D6:77:4B Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14441A46A51B4759C08A01AB52339F Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gHs76ZIDfxpA_pNje7Q4YKfWd0s.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25592 IP address blocks: 193.233.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:44:1a:46:a5:1b:47:59:c0:8a:01:ab:52:33:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=807b3be992037f1a40fe93637bb43860a7d6774b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:4b:2c:93:03:46:6b:3a:6d:02:14:c5:9a: f6:17:4d:bf:5c:66:23:c7:d2:ee:5b:46:38:f6:9a: 70:40:76:2a:9a:8e:6b:63:ac:25:88:00:10:b1:ef: e0:2f:c0:de:53:c9:1b:5d:0d:00:9b:e5:a1:8f:ab: 69:4d:39:94:87:87:28:a2:d3:f1:af:c3:bb:bb:e3: 83:53:2e:72:33:e1:34:b4:76:e2:7e:e9:0e:c3:94: 39:7c:6c:69:49:9f:b1:7c:03:82:a3:8e:25:8d:7d: 82:40:25:c3:65:14:71:4f:46:5a:68:c6:a8:e8:01: 63:35:ba:f6:35:cc:c4:c9:39:be:85:94:e7:90:b5: 3f:1d:b6:75:75:75:fb:fe:88:c9:11:3b:95:56:ff: 2e:38:bf:07:52:b9:e4:d0:60:8d:09:68:62:c1:8b: a6:da:52:ec:f6:ce:84:b8:a1:21:82:98:12:63:34: 9e:7d:5f:12:92:bf:5d:04:40:7f:a4:3a:7a:b4:8d: 5a:37:03:e0:75:ed:c4:17:4b:a4:49:07:27:f2:ac: 17:89:02:65:e4:8a:99:aa:ac:8b:73:33:4b:a9:a2: ba:ab:e4:0c:51:c5:50:cf:d8:e5:f0:ea:29:87:9c: e0:cd:3f:44:d0:97:2e:65:71:66:b0:77:28:99:e5: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7B:3B:E9:92:03:7F:1A:40:FE:93:63:7B:B4:38:60:A7:D6:77:4B X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gHs76ZIDfxpA_pNje7Q4YKfWd0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.50.0/23 Signature Algorithm: sha256WithRSAEncryption 45:13:76:84:31:3f:e6:f1:52:01:f7:fa:fb:39:cf:23:fc:f5: 0d:69:2c:68:16:46:d9:e3:f6:6c:b2:35:ec:07:38:74:52:dc: 50:14:64:55:58:db:bb:3f:04:fa:f2:c9:a0:1d:37:19:65:53: f1:3f:18:cf:76:2a:cc:10:68:45:4f:3e:5e:96:0f:8f:91:e7: 91:ee:40:e6:77:92:6c:32:30:33:a1:f3:a3:e0:dd:10:43:8a: 1e:ee:26:8a:80:d9:57:a7:47:5a:e8:8c:a7:76:bc:25:a4:c9: 85:f7:5e:ac:41:a9:3f:48:de:bc:85:f9:3a:6c:0b:2b:b3:11: ea:b6:31:23:ff:9d:a5:94:64:20:e4:6f:41:a6:54:26:2d:0d: 0e:da:bc:ff:ae:ac:30:04:80:be:2a:8f:3d:5d:93:29:c3:2a: 17:5e:1e:e7:38:28:05:33:f7:4b:a3:11:e2:2f:73:a1:ad:a5: 51:06:1d:b1:2f:53:f9:7d:bd:c5:55:cd:64:d6:f0:d4:f8:b3: 11:bd:95:af:64:25:79:dd:69:4f:b5:f2:b9:79:be:f5:c6:d9: bd:f0:9a:37:b0:6f:2c:a3:e2:48:dc:6c:55:4b:ad:99:11:b8: 61:04:b3:7a:36:07:b4:03:09:4d:c6:a8:7e:28:51:c9:be:27: 85:14:ca:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEQaRqUbR1nAigGrUjOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDdiM2JlOTkyMDM3ZjFhNDBmZTkzNjM3YmI0Mzg2MGE3ZDY3NzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KtLLJMDRms6bQIUxZr2F02/XGYj x9LuW0Y49ppwQHYqmo5rY6wliAAQse/gL8DeU8kbXQ0Am+Whj6tpTTmUh4cootPx r8O7u+ODUy5yM+E0tHbifukOw5Q5fGxpSZ+xfAOCo44ljX2CQCXDZRRxT0ZaaMao 6AFjNbr2NczEyTm+hZTnkLU/HbZ1dXX7/ojJETuVVv8uOL8HUrnk0GCNCWhiwYum 2lLs9s6EuKEhgpgSYzSefV8Skr9dBEB/pDp6tI1aNwPgde3EF0ukSQcn8qwXiQJl 5IqZqqyLczNLqaK6q+QMUcVQz9jl8Ooph5zgzT9E0JcuZXFmsHcomeXugQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIB7O+mSA38aQP6TY3u0OGCn1ndLMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvZ0hzNzZaSURmeHBBX3BOamU3UTRZS2ZXZDBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwekyMA0G CSqGSIb3DQEBCwUAA4IBAQBFE3aEMT/m8VIB9/r7Oc8j/PUNaSxoFkbZ4/ZssjXs Bzh0UtxQFGRVWNu7PwT68smgHTcZZVPxPxjPdirMEGhFTz5elg+PkeeR7kDmd5Js MjAzofOj4N0QQ4oe7iaKgNlXp0da6IyndrwlpMmF916sQak/SN68hfk6bAsrsxHq tjEj/52llGQg5G9BplQmLQ0O2rz/rqwwBIC+Ko89XZMpwyoXXh7nOCgFM/dLoxHi L3OhraVRBh2xL1P5fb3FVc1k1vDU+LMRvZWvZCV53WlPtfK5eb71xtm98Jo3sG8s o+JI3GxVS62ZEbhhBLN6Nge0AwlNxqh+KFHJvieFFMpE -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:48 2026 by rpki-client