This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lIZqS2O0jMD0IzOqoK9WJVtH--w.roa File: lIZqS2O0jMD0IzOqoK9WJVtH--w.roa (raw, json) Hash identifier: uzItJXElQz6m84Oafhq5JCneiYk5CToJ1HH7dPzGsHw= Subject key identifier: 94:86:6A:4B:63:B4:8C:C0:F4:23:33:AA:A0:AF:56:25:5B:47:FB:EC Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144E56BE3D5359B80CD4BE24AA26C8 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lIZqS2O0jMD0IzOqoK9WJVtH--w.roa Signing time: Fri 02 Jan 2026 14:19:55 +0000 ROA not before: Fri 02 Jan 2026 14:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56340 IP address blocks: 193.233.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4e:56:be:3d:53:59:b8:0c:d4:be:24:aa:26:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94866a4b63b48cc0f42333aaa0af56255b47fbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bf:f1:f2:26:a8:87:6c:5c:1e:f6:a5:2f:4a: 80:0f:77:0d:d9:58:07:4b:63:ec:3a:64:82:45:34: 79:66:3c:45:66:ad:02:29:67:3a:c5:9d:15:cf:20: db:a9:19:9e:ee:76:42:f3:88:ad:d0:b3:50:ed:2c: 48:c5:5a:c0:1f:8e:27:6e:13:e4:e3:87:b1:b1:07: 76:b1:33:db:ac:1f:9c:56:98:dc:1d:d3:f3:79:9e: 2c:8e:ce:1b:df:cf:6d:87:7a:9e:0d:73:1b:30:fa: d3:66:7c:6e:86:77:90:7e:1d:ce:2c:cf:4a:a2:a6: 54:e0:62:43:93:e5:89:e7:f8:a4:bf:0b:83:db:ca: 05:55:1b:ea:0f:85:e9:b1:0e:c0:f9:a0:d8:75:95: 3f:ca:97:65:c6:53:6f:e0:84:7a:2c:37:de:58:1f: 2f:fa:28:01:4d:bc:20:d2:fe:d3:af:60:37:85:aa: a7:db:4a:cc:88:5f:cf:4e:ca:55:d4:17:01:70:43: 0e:5a:62:6a:3e:4a:94:5c:a7:83:20:98:7e:1c:24: 3c:89:38:c0:4e:f3:c4:02:73:0c:a4:f9:10:37:c8: 17:f6:7e:90:bb:91:7b:57:10:25:aa:c0:f2:6d:eb: e8:b6:7b:fc:74:45:30:38:19:45:a2:39:21:b3:4f: 7f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:86:6A:4B:63:B4:8C:C0:F4:23:33:AA:A0:AF:56:25:5B:47:FB:EC X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lIZqS2O0jMD0IzOqoK9WJVtH--w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.96.0/22 Signature Algorithm: sha256WithRSAEncryption 76:fc:9b:01:de:1f:3c:43:e5:e2:49:e1:be:41:ac:a1:da:95: d2:08:d3:ab:35:50:f5:f6:d4:d5:52:20:31:73:36:2b:55:96: bd:52:7f:fc:07:e7:fe:46:b0:0b:55:74:58:ea:8c:2c:48:f6: 27:de:5c:02:1e:75:64:dc:ba:61:06:f4:86:1d:4c:38:c1:3b: 0e:ef:cf:d2:d8:82:53:d8:fd:c3:8f:18:1c:6e:8c:f7:82:8d: 0a:3d:e1:74:00:96:67:95:a0:a4:0d:c9:a2:5d:40:e5:a1:7f: bd:fc:f7:b3:83:f0:7f:ff:a9:af:2a:72:30:74:88:34:4a:2d: a5:93:4b:be:a4:41:6c:f7:3c:d0:f2:a9:d7:d4:ba:f9:5f:74: f2:73:3f:73:92:a1:d6:8f:c9:55:e5:0c:f7:cb:de:2e:eb:21: 8e:4d:1f:f1:0a:c2:dc:ac:89:2e:02:b1:7a:45:a2:28:12:ee: 1f:a4:51:f4:76:66:88:03:78:1b:bc:be:b0:e1:0e:47:2d:94: 7e:e6:6a:cf:6c:f9:95:29:71:9c:bb:5a:db:4c:0f:9f:7b:db: f6:ff:76:24:4e:ca:f6:6f:c4:78:b0:93:12:3f:62:93:de:0f: 23:8d:7b:3a:a3:08:cf:8a:fe:5e:53:d3:31:5f:db:09:68:95: ee:c2:bb:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FE5Wvj1TWbgM1L4kqibIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDg2NmE0YjYzYjQ4Y2MwZjQyMzMzYWFhMGFmNTYyNTViNDdmYmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL/x8iaoh2xcHvalL0qAD3cN2VgH S2PsOmSCRTR5ZjxFZq0CKWc6xZ0VzyDbqRme7nZC84it0LNQ7SxIxVrAH44nbhPk 44exsQd2sTPbrB+cVpjcHdPzeZ4sjs4b389th3qeDXMbMPrTZnxuhneQfh3OLM9K oqZU4GJDk+WJ5/ikvwuD28oFVRvqD4XpsQ7A+aDYdZU/ypdlxlNv4IR6LDfeWB8v +igBTbwg0v7Tr2A3haqn20rMiF/PTspV1BcBcEMOWmJqPkqUXKeDIJh+HCQ8iTjA TvPEAnMMpPkQN8gX9n6Qu5F7VxAlqsDybevotnv8dEUwOBlFojkhs09/ywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJSGaktjtIzA9CMzqqCvViVbR/vsMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvbElacVMyTzBqTUQwSXpPcW9LOVdKVnRILS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwelgMA0G CSqGSIb3DQEBCwUAA4IBAQB2/JsB3h88Q+XiSeG+Qayh2pXSCNOrNVD19tTVUiAx czYrVZa9Un/8B+f+RrALVXRY6owsSPYn3lwCHnVk3LphBvSGHUw4wTsO78/S2IJT 2P3Djxgcboz3go0KPeF0AJZnlaCkDcmiXUDloX+9/Pezg/B//6mvKnIwdIg0Si2l k0u+pEFs9zzQ8qnX1Lr5X3Tycz9zkqHWj8lV5Qz3y94u6yGOTR/xCsLcrIkuArF6 RaIoEu4fpFH0dmaIA3gbvL6w4Q5HLZR+5mrPbPmVKXGcu1rbTA+fe9v2/3YkTsr2 b8R4sJMSP2KT3g8jjXs6owjPiv5eU9MxX9sJaJXuwrsj -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:39 2026 by rpki-client