This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iF6f0KBxUEcqIpG0QqbvUA8HgrM.roa File: iF6f0KBxUEcqIpG0QqbvUA8HgrM.roa (raw, json) Hash identifier: gUGbxdnof6qVlUM+2I7D/iDE9akL74Ui8V6JLkBp+/g= Subject key identifier: 88:5E:9F:D0:A0:71:50:47:2A:22:91:B4:42:A6:EF:50:0F:07:82:B3 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144D739446B83112DAA3DFB57CA147 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iF6f0KBxUEcqIpG0QqbvUA8HgrM.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 193.233.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4d:73:94:46:b8:31:12:da:a3:df:b5:7c:a1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=885e9fd0a07150472a2291b442a6ef500f0782b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:e5:21:c3:38:17:bd:1d:15:45:f9:f3:4d: 38:4c:40:43:ce:de:cd:d6:3c:98:53:ab:bb:1c:94: 32:4c:26:09:90:58:67:69:bc:90:eb:81:b8:e6:0a: 8c:32:e0:94:9d:b5:20:d4:3d:4e:50:8a:23:7d:0e: 16:eb:88:6c:56:dc:a1:c4:a0:15:d4:fc:9f:12:a7: d0:19:3a:3a:47:7d:ad:d2:d9:d1:53:61:c1:bc:09: eb:21:0d:e8:5b:be:44:81:4f:77:e4:71:6d:4c:22: d6:b6:d3:99:c6:d1:4b:50:d0:a1:25:b0:1d:2b:38: d8:ec:4e:d9:e7:a0:bc:52:d4:78:ed:7d:97:57:23: ca:12:56:0e:fe:b3:51:e0:2b:17:a1:1c:3c:5f:9d: ba:99:a2:49:8c:61:ab:e5:50:06:15:3e:ed:51:a6: 43:bf:21:a4:15:1e:01:cc:c8:85:4c:cf:59:1b:ea: 88:64:32:38:b5:49:33:51:5f:36:b6:7b:02:2b:9b: 2e:64:bc:f2:4b:cd:5b:27:b5:c7:40:ad:cc:e9:09: b2:fd:40:72:f4:a7:47:4d:f0:16:9f:91:7e:13:15: bc:a9:7f:d2:44:1c:51:df:b8:21:29:cc:ed:06:ba: 86:26:a3:b9:a7:b5:ac:b5:50:c2:af:71:fc:06:53: 8a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5E:9F:D0:A0:71:50:47:2A:22:91:B4:42:A6:EF:50:0F:07:82:B3 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iF6f0KBxUEcqIpG0QqbvUA8HgrM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.23.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:c5:fa:24:2f:f8:bf:c0:c6:48:08:9c:ee:6b:33:3c:e4:e3: 9b:f1:ad:d3:b3:66:cd:06:38:68:73:77:19:c8:2d:a9:c5:c8: bc:93:70:85:1b:2b:e0:3c:f9:1e:55:d9:8c:8f:23:1c:86:bd: 0d:62:bb:0c:a5:71:7c:09:2e:a2:99:33:cd:42:60:51:dd:bb: c7:88:20:3b:82:22:33:bb:cb:76:27:61:14:9f:59:51:ab:61: e9:dd:db:48:d6:ac:23:4a:12:87:c4:fc:de:5b:2a:b9:a2:3b: 93:49:88:5b:71:4a:ca:1a:08:d9:a8:5c:25:49:6b:e9:6d:98: dd:4b:e3:07:87:ae:fb:28:7f:20:72:2d:ba:10:67:a6:b7:b9: ab:7f:cc:b4:e1:2e:aa:b1:6b:92:72:c1:d1:36:06:1b:a9:9c: 33:6e:b5:d9:f9:43:7a:eb:56:20:bd:0e:cc:1d:b6:0e:cd:6e: 13:cf:2e:57:ea:81:15:f9:b3:dd:a2:58:ba:69:d6:14:05:66: 17:ad:3c:ac:19:1c:39:6c:70:2f:47:ac:57:cb:69:4d:2b:eb: 6a:1b:61:a2:7f:0f:6d:d0:59:53:64:3d:a4:78:25:1c:af:cf: 91:0c:86:16:d0:d0:98:36:1f:01:c7:61:4e:e7:ff:04:5a:17: 34:41:20:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FE1zlEa4MRLao9+1fKFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODVlOWZkMGEwNzE1MDQ3MmEyMjkxYjQ0MmE2ZWY1MDBmMDc4MmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjflIcM4F70dFUX58004TEBDzt7N 1jyYU6u7HJQyTCYJkFhnabyQ64G45gqMMuCUnbUg1D1OUIojfQ4W64hsVtyhxKAV 1PyfEqfQGTo6R32t0tnRU2HBvAnrIQ3oW75EgU935HFtTCLWttOZxtFLUNChJbAd KzjY7E7Z56C8UtR47X2XVyPKElYO/rNR4CsXoRw8X526maJJjGGr5VAGFT7tUaZD vyGkFR4BzMiFTM9ZG+qIZDI4tUkzUV82tnsCK5suZLzyS81bJ7XHQK3M6Qmy/UBy 9KdHTfAWn5F+ExW8qX/SRBxR37ghKcztBrqGJqO5p7WstVDCr3H8BlOKbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhen9CgcVBHKiKRtEKm71APB4KzMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvaUY2ZjBLQnhVRWNxSXBHMFFxYnZVQThIZ3JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekXMA0G CSqGSIb3DQEBCwUAA4IBAQA6xfokL/i/wMZICJzuazM85OOb8a3Ts2bNBjhoc3cZ yC2pxci8k3CFGyvgPPkeVdmMjyMchr0NYrsMpXF8CS6imTPNQmBR3bvHiCA7giIz u8t2J2EUn1lRq2Hp3dtI1qwjShKHxPzeWyq5ojuTSYhbcUrKGgjZqFwlSWvpbZjd S+MHh677KH8gci26EGemt7mrf8y04S6qsWuScsHRNgYbqZwzbrXZ+UN661YgvQ7M HbYOzW4Tzy5X6oEV+bPdoli6adYUBWYXrTysGRw5bHAvR6xXy2lNK+tqG2Gifw9t 0FlTZD2keCUcr8+RDIYW0NCYNh8Bx2FO5/8EWhc0QSBw -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:27 2026 by rpki-client