This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/mc2qYL9iTF7ZlKl155kCJQk1yzE.roa File: mc2qYL9iTF7ZlKl155kCJQk1yzE.roa (raw, json) Hash identifier: +gimTzyIHCZXahiK4JGbPkoRX6yyk87Kw5vuZUk4LXg= Subject key identifier: 99:CD:AA:60:BF:62:4C:5E:D9:94:A9:75:E7:99:02:25:09:35:CB:31 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146BDC085FF49E741FB9C2E804A529 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/mc2qYL9iTF7ZlKl155kCJQk1yzE.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214374 IP address blocks: 193.233.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6b:dc:08:5f:f4:9e:74:1f:b9:c2:e8:04:a5:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99cdaa60bf624c5ed994a975e79902250935cb31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:84:dd:c3:26:2e:be:08:1a:12:3c:64:52:8c: 4f:cf:20:87:93:4f:8d:f4:08:8b:40:c3:d1:18:f6: ef:a1:03:11:83:ba:d6:81:21:61:17:1d:90:6c:b5: 2a:fd:64:a0:99:1e:c0:73:ca:56:93:8d:8b:a8:e9: d5:c2:87:66:88:27:eb:ef:aa:6a:30:6e:d7:1c:23: 1f:07:9d:2a:db:53:db:8b:ca:ca:e1:05:6e:89:6d: 23:68:12:55:b7:67:3a:e3:b4:f3:c2:dd:97:44:c4: 95:ea:91:92:9d:9f:8f:6e:6d:77:57:1a:14:7c:46: 7d:e1:48:e2:dd:81:8e:e8:26:eb:c3:77:08:89:9a: 32:da:8d:9a:dd:90:f1:46:7c:a9:fe:6c:2e:de:d0: ed:30:76:38:2c:2a:94:c3:3c:de:da:d5:de:c8:4a: 71:16:75:db:c7:32:af:2e:bd:25:2b:3a:7e:60:aa: 2f:6c:cb:d6:95:7b:42:e3:d7:cf:eb:17:50:db:d9: 63:74:c5:f7:d5:fe:a9:5d:61:08:49:47:90:f4:26: a9:cb:b1:92:95:84:9c:21:cf:1f:44:bf:01:36:cd: 55:2f:dc:49:db:31:ff:15:35:c6:a8:eb:b1:35:7f: 58:74:ef:9f:56:22:06:73:d3:c5:72:c2:38:db:8e: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CD:AA:60:BF:62:4C:5E:D9:94:A9:75:E7:99:02:25:09:35:CB:31 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/mc2qYL9iTF7ZlKl155kCJQk1yzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.140.0/22 Signature Algorithm: sha256WithRSAEncryption 67:98:d8:46:c6:17:52:81:ad:f3:16:7a:20:71:f6:23:d7:48: 9e:54:d2:32:30:87:3b:ef:e4:a0:72:c6:d4:78:45:f7:11:61: 44:32:17:23:97:6b:8e:58:0a:cc:7a:84:8f:46:9d:5c:c6:04: 6f:09:0c:82:d6:bf:0e:6d:ee:5c:c9:70:bc:9f:ab:62:a8:27: c4:fe:9a:18:02:73:d9:a8:00:fa:08:5a:bb:14:e3:ba:af:48: de:2d:92:e8:81:6c:9c:d7:90:c7:7f:1f:09:e7:3a:e7:ac:1b: 50:d3:4c:1c:55:50:ca:c7:db:c8:d2:6d:0f:ee:35:61:a0:f8: bf:ca:eb:08:00:35:dc:fb:5c:70:bc:3f:26:45:e8:a2:23:f7: 62:b8:da:7c:6a:bd:e1:fd:57:60:e7:94:3b:05:85:0b:67:c2: be:ca:cd:02:0c:7d:f2:19:28:e8:a4:d2:89:97:67:09:60:9e: f7:4a:d8:2d:5b:af:21:e7:99:45:cc:0a:02:2b:b7:b1:d0:69: 2b:02:2d:d4:01:09:e8:7c:69:9c:e0:5c:db:28:30:fe:cb:bb: 81:98:0e:d9:58:ed:f0:e2:3c:67:97:95:c2:a2:92:c3:0b:d5: 0d:0f:6c:29:78:7f:c6:99:2f:0c:26:ea:7a:1d:ed:ab:f6:1c: c4:db:b7:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGvcCF/0nnQfucLoBKUpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWNkYWE2MGJmNjI0YzVlZDk5NGE5NzVlNzk5MDIyNTA5MzVjYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04TdwyYuvggaEjxkUoxPzyCHk0+N 9AiLQMPRGPbvoQMRg7rWgSFhFx2QbLUq/WSgmR7Ac8pWk42LqOnVwodmiCfr76pq MG7XHCMfB50q21Pbi8rK4QVuiW0jaBJVt2c647Tzwt2XRMSV6pGSnZ+Pbm13VxoU fEZ94Uji3YGO6Cbrw3cIiZoy2o2a3ZDxRnyp/mwu3tDtMHY4LCqUwzze2tXeyEpx FnXbxzKvLr0lKzp+YKovbMvWlXtC49fP6xdQ29ljdMX31f6pXWEISUeQ9Capy7GS lYScIc8fRL8BNs1VL9xJ2zH/FTXGqOuxNX9YdO+fViIGc9PFcsI4245QvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnNqmC/Ykxe2ZSpdeeZAiUJNcsxMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvbWMycVlMOWlURjdabEtsMTU1a0NKUWsxeXpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwemMMA0G CSqGSIb3DQEBCwUAA4IBAQBnmNhGxhdSga3zFnogcfYj10ieVNIyMIc77+SgcsbU eEX3EWFEMhcjl2uOWArMeoSPRp1cxgRvCQyC1r8Obe5cyXC8n6tiqCfE/poYAnPZ qAD6CFq7FOO6r0jeLZLogWyc15DHfx8J5zrnrBtQ00wcVVDKx9vI0m0P7jVhoPi/ yusIADXc+1xwvD8mReiiI/diuNp8ar3h/Vdg55Q7BYULZ8K+ys0CDH3yGSjopNKJ l2cJYJ73StgtW68h55lFzAoCK7ex0GkrAi3UAQnofGmc4FzbKDD+y7uBmA7ZWO3w 4jxnl5XCopLDC9UND2wpeH/GmS8MJup6He2r9hzE27cc -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:40 2026 by rpki-client