This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/j9i_XycLvps84rCYUEEM1wOrU60.roa File: j9i_XycLvps84rCYUEEM1wOrU60.roa (raw, json) Hash identifier: rzLd0rHXJQwMu8zeGdok8e3K+pi7YlqbcwLOf3G8IqE= Subject key identifier: 8F:D8:BF:5F:27:0B:BE:9B:3C:E2:B0:98:50:41:0C:D7:03:AB:53:AD Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019A846C8D99CD7A73892E7BE6607F6C79D9 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/j9i_XycLvps84rCYUEEM1wOrU60.roa Signing time: Fri 14 Nov 2025 22:11:37 +0000 ROA not before: Fri 14 Nov 2025 22:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209183 IP address blocks: 193.233.100.0/24 maxlen: 24 193.233.101.0/24 maxlen: 24 193.233.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:84:6c:8d:99:cd:7a:73:89:2e:7b:e6:60:7f:6c:79:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Nov 14 22:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fd8bf5f270bbe9b3ce2b09850410cd703ab53ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:0f:bd:01:5c:6f:35:13:af:c2:74:3b:03: 9e:4f:74:91:55:21:d3:a1:df:62:81:07:e5:c6:fe: 94:f5:fa:dc:45:93:ab:87:9f:35:5e:b4:6d:82:27: e0:eb:88:05:5c:1c:bb:f1:c7:8d:a9:96:e3:29:4d: e0:72:2e:77:9f:f2:3b:5b:16:07:2a:83:b6:70:ce: 6e:d8:a2:01:e8:cb:9b:19:7f:41:e1:51:2a:ca:23: 50:ac:50:62:1e:99:a3:57:4d:68:fe:ce:25:9b:03: 08:5f:6e:ec:c5:4c:33:45:76:fe:97:b6:51:07:60: 3b:5e:db:85:02:c1:49:ec:86:10:af:de:69:e2:96: 1d:7c:f2:c1:76:9f:86:43:6d:c6:0d:a4:9e:a3:0a: 47:15:81:16:c3:4d:e5:0e:4b:b7:9c:79:bb:8f:ee: 7b:5b:2e:18:ad:12:58:8c:2f:ca:60:37:06:68:88: 98:d3:e9:86:4d:fc:ab:e1:ea:70:87:bc:1f:e3:19: 7f:a5:b2:2a:fb:84:27:02:0b:bd:d2:49:fd:61:4d: 6e:48:b0:24:86:93:95:0d:5b:cd:d7:19:ae:5c:97: e7:ad:77:49:fe:b3:9c:0a:5d:d2:cc:4d:3d:0d:a8: 63:56:4b:a9:6a:c5:61:63:49:22:e8:f5:86:29:46: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:BF:5F:27:0B:BE:9B:3C:E2:B0:98:50:41:0C:D7:03:AB:53:AD X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/j9i_XycLvps84rCYUEEM1wOrU60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.100.0/23 193.233.228.0/24 Signature Algorithm: sha256WithRSAEncryption 16:d0:cf:98:1a:7b:ff:a9:21:dc:c0:38:ed:71:b9:99:d9:53: ee:5b:de:43:38:a1:e7:90:70:6c:6b:ee:80:cf:0e:56:c7:d0: 21:10:2f:3a:b1:dd:58:12:14:f5:38:44:78:b1:5d:40:ad:7d: 8b:78:64:59:fc:b8:17:db:bb:28:3e:7b:b4:eb:1e:7a:64:09: 9d:d0:a0:d8:f1:f8:9f:ce:86:7f:c3:f9:1c:dd:d9:8e:ec:35: 87:8d:c1:d9:98:02:b0:03:c3:2c:04:b4:cc:ca:c8:78:05:25: fa:0e:d9:d6:a1:90:7b:e8:03:a9:08:b1:1a:b9:f3:71:81:db: bf:1d:6a:3c:d7:8f:9a:82:a0:69:16:62:cb:dd:c6:c6:af:7f: bd:fa:e9:b3:31:85:91:1f:ae:fb:11:46:6f:3f:62:9e:b0:44: be:bf:4e:12:86:d8:24:f4:62:8c:fc:10:1c:8f:53:fe:5a:60: 46:13:ce:70:1d:5b:c7:08:b5:19:38:fb:3d:9b:60:fd:ff:dd: f8:94:31:bd:77:b8:29:b5:4a:ff:47:39:bb:06:c0:70:1f:a7: 52:d1:8c:ca:b7:37:2f:5e:c4:61:8b:5a:9c:4e:50:51:ec:35: dc:a1:76:5c:5e:66:a5:28:35:f4:3b:f8:c6:ad:0c:5a:33:cf: 39:fc:47:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqEbI2ZzXpziS575mB/bHnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjUxMTE0MjIxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmQ4YmY1ZjI3MGJiZTliM2NlMmIwOTg1MDQxMGNkNzAzYWI1M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6APvQFcbzUTr8J0OwOeT3SRVSHT od9igQflxv6U9frcRZOrh581XrRtgifg64gFXBy78ceNqZbjKU3gci53n/I7WxYH KoO2cM5u2KIB6MubGX9B4VEqyiNQrFBiHpmjV01o/s4lmwMIX27sxUwzRXb+l7ZR B2A7XtuFAsFJ7IYQr95p4pYdfPLBdp+GQ23GDaSeowpHFYEWw03lDku3nHm7j+57 Wy4YrRJYjC/KYDcGaIiY0+mGTfyr4epwh7wf4xl/pbIq+4QnAgu90kn9YU1uSLAk hpOVDVvN1xmuXJfnrXdJ/rOcCl3SzE09DahjVkupasVhY0ki6PWGKUZanwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI/Yv18nC76bPOKwmFBBDNcDq1OtMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvajlpX1h5Y0x2cHM4NHJDWVVFRU0xd09yVTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwelkAwQA wenkMA0GCSqGSIb3DQEBCwUAA4IBAQAW0M+YGnv/qSHcwDjtcbmZ2VPuW95DOKHn kHBsa+6Azw5Wx9AhEC86sd1YEhT1OER4sV1ArX2LeGRZ/LgX27soPnu06x56ZAmd 0KDY8fifzoZ/w/kc3dmO7DWHjcHZmAKwA8MsBLTMysh4BSX6DtnWoZB76AOpCLEa ufNxgdu/HWo814+agqBpFmLL3cbGr3+9+umzMYWRH677EUZvP2KesES+v04Shtgk 9GKM/BAcj1P+WmBGE85wHVvHCLUZOPs9m2D9/934lDG9d7gptUr/Rzm7BsBwH6dS 0YzKtzcvXsRhi1qcTlBR7DXcoXZcXmalKDX0O/jGrQxaM885/Ec3 -----END CERTIFICATE-----Generated at Sat Dec 6 01:49:46 2025 by rpki-client