This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lUXkuHFDJDZoD1oxSEfpHCRSTik.roa File: lUXkuHFDJDZoD1oxSEfpHCRSTik.roa (raw, json) Hash identifier: 90odBlfllUgnXEJQewg5FwN2gCIW3e1yA6Lmg8LKPrs= Subject key identifier: 95:45:E4:B8:71:43:24:36:68:0F:5A:31:48:47:E9:1C:24:52:4E:29 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F145F9AA61EBC4BC0259ECBEE165CD5 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lUXkuHFDJDZoD1oxSEfpHCRSTik.roa Signing time: Fri 02 Jan 2026 14:20:00 +0000 ROA not before: Fri 02 Jan 2026 14:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207447 IP address blocks: 193.233.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:5f:9a:a6:1e:bc:4b:c0:25:9e:cb:ee:16:5c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9545e4b871432436680f5a314847e91c24524e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:0a:aa:92:98:c4:9c:cd:77:f4:4b:f8:91: 90:e7:2d:56:84:42:e2:57:ca:eb:91:33:6b:d6:e3: 34:be:84:6f:47:aa:e1:db:2c:36:7b:60:14:bb:d6: 1c:06:97:fc:40:1a:3b:fe:bc:2e:f7:a1:13:81:1d: 9c:d0:25:16:57:0d:58:e1:6e:46:03:f9:fe:9e:17: 4b:dd:59:11:5d:25:aa:05:cb:a5:0f:e1:6f:a3:81: 99:83:05:75:64:00:10:4d:85:3e:b0:52:df:3e:2e: 5e:9b:1a:3a:ed:64:5d:61:24:8b:27:6f:d0:f3:30: 6d:00:bd:12:a7:7d:2d:1a:f9:bc:f5:7d:28:eb:aa: f1:e8:68:be:b1:75:54:1a:74:a0:2e:49:21:cb:0f: 40:28:a9:d3:9c:b5:4c:de:e2:de:67:1f:82:70:c3: 93:eb:a0:ef:22:19:60:a1:9c:78:d8:99:9d:ec:50: ae:8c:1b:bf:a3:80:c4:e5:cd:7a:0c:eb:89:9d:b2: 65:63:f4:8f:dd:c7:8c:6b:43:6e:21:94:f5:99:df: fe:a9:13:6e:8a:78:7b:56:70:dd:e5:53:15:30:ea: 07:25:95:98:95:7d:76:82:f7:ba:de:c3:32:e1:63: bd:fc:8e:05:c0:0a:ae:a1:9f:d6:ab:88:a7:d2:33: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:45:E4:B8:71:43:24:36:68:0F:5A:31:48:47:E9:1C:24:52:4E:29 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/lUXkuHFDJDZoD1oxSEfpHCRSTik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.52.0/23 Signature Algorithm: sha256WithRSAEncryption 61:09:2b:9f:8d:09:ea:7a:f5:c3:05:db:22:bb:71:c7:ae:95: 6c:c0:df:20:6d:91:9b:ba:ed:ed:20:da:77:5d:60:4d:1a:f3: 70:7c:c3:96:bc:4c:23:a7:2f:6e:51:96:33:70:01:b9:c7:5a: ff:c5:ea:e0:c9:da:c2:15:49:d4:e9:bb:2a:d9:78:fa:a2:e5: 26:a8:0b:22:33:e7:38:2e:18:55:aa:05:d5:75:2a:16:38:f0: 4a:be:0e:55:ba:c4:7d:38:d2:b3:af:27:90:c0:b6:c8:e3:32: 8b:ac:07:33:d5:52:1f:cb:d9:1b:6c:06:98:0d:74:86:f8:b9: a4:f5:4f:20:ca:a0:df:24:92:57:45:25:78:dd:93:33:17:e6: 26:e0:fa:63:8c:a7:72:17:ed:6f:aa:8a:03:0d:81:b4:0a:9e: 8b:e8:35:5b:cf:f1:c9:9b:fb:6d:1e:74:e4:27:32:22:a6:cc: 88:85:07:10:04:ec:0a:3e:d7:2a:92:06:dc:7d:4e:f8:0a:0d: 27:53:00:f5:42:8d:27:42:35:0d:c9:ae:5b:30:3d:cc:3f:d5: 5f:4d:32:c4:d3:b2:73:34:43:8d:49:f5:50:39:d8:c0:69:5d: ee:df:a9:99:88:f9:f8:3d:02:68:69:1b:68:12:5b:2e:a2:34: 1c:b6:c5:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FF+aph68S8AlnsvuFlzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTQ1ZTRiODcxNDMyNDM2NjgwZjVhMzE0ODQ3ZTkxYzI0NTI0ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOgKqpKYxJzNd/RL+JGQ5y1WhELi V8rrkTNr1uM0voRvR6rh2yw2e2AUu9YcBpf8QBo7/rwu96ETgR2c0CUWVw1Y4W5G A/n+nhdL3VkRXSWqBculD+Fvo4GZgwV1ZAAQTYU+sFLfPi5emxo67WRdYSSLJ2/Q 8zBtAL0Sp30tGvm89X0o66rx6Gi+sXVUGnSgLkkhyw9AKKnTnLVM3uLeZx+CcMOT 66DvIhlgoZx42Jmd7FCujBu/o4DE5c16DOuJnbJlY/SP3ceMa0NuIZT1md/+qRNu inh7VnDd5VMVMOoHJZWYlX12gve63sMy4WO9/I4FwAquoZ/Wq4in0jPu4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVF5LhxQyQ2aA9aMUhH6RwkUk4pMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvbFVYa3VIRkRKRFpvRDFveFNFZnBIQ1JTVGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwek0MA0G CSqGSIb3DQEBCwUAA4IBAQBhCSufjQnqevXDBdsiu3HHrpVswN8gbZGbuu3tINp3 XWBNGvNwfMOWvEwjpy9uUZYzcAG5x1r/xergydrCFUnU6bsq2Xj6ouUmqAsiM+c4 LhhVqgXVdSoWOPBKvg5VusR9ONKzryeQwLbI4zKLrAcz1VIfy9kbbAaYDXSG+Lmk 9U8gyqDfJJJXRSV43ZMzF+Ym4PpjjKdyF+1vqooDDYG0Cp6L6DVbz/HJm/ttHnTk JzIipsyIhQcQBOwKPtcqkgbcfU74Cg0nUwD1Qo0nQjUNya5bMD3MP9VfTTLE07Jz NEONSfVQOdjAaV3u36mZiPn4PQJoaRtoElsuojQctsV4 -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:53 2026 by rpki-client