This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nOuxDWMuaYuNUYFlq2nDB5FVfsc.roa File: nOuxDWMuaYuNUYFlq2nDB5FVfsc.roa (raw, json) Hash identifier: 9CHURWoJOoJnM1zHhQfiFkLTj8wcrwRhnnZorfTI+xs= Subject key identifier: 9C:EB:B1:0D:63:2E:69:8B:8D:51:81:65:AB:69:C3:07:91:55:7E:C7 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14510C7BA7996560CB95F3241E7C9C Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nOuxDWMuaYuNUYFlq2nDB5FVfsc.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59584 IP address blocks: 193.233.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:51:0c:7b:a7:99:65:60:cb:95:f3:24:1e:7c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cebb10d632e698b8d518165ab69c30791557ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:14:b5:71:fc:6f:89:1e:0b:f4:7a:d5:b0: c4:85:f9:39:dc:7e:17:3f:09:27:13:49:25:3f:47: e1:28:39:56:97:b6:9e:d7:25:44:89:47:92:70:e3: ad:a4:d5:e5:e5:93:76:68:8d:ab:e9:57:c4:86:33: a8:32:e4:cd:9e:c7:a1:e7:7c:f0:48:24:29:79:95: 51:9c:07:42:c3:a7:66:fb:d3:98:5a:1c:51:a7:c2: 34:bc:9b:ff:24:de:39:f9:5d:2a:2d:bb:f7:4e:8e: 67:27:c6:cd:85:df:4f:03:03:b0:95:04:2e:27:36: fa:b7:95:17:67:75:b1:e1:c0:6a:e9:a1:b5:39:f7: 35:13:f9:47:19:0f:e4:c6:d5:22:3a:1d:92:6a:2a: ab:82:02:75:10:c0:8e:65:7a:ef:55:0c:28:c3:1b: c0:be:c8:00:88:3e:9e:f1:3c:b3:a0:99:67:5e:ac: 20:4c:2b:aa:67:8b:12:82:98:47:3b:38:85:4c:90: 95:f2:4c:8b:85:c0:dc:62:fa:27:66:f0:49:e9:28: 0b:5c:f8:e3:00:6a:da:88:a1:29:74:84:31:b0:0c: f9:85:df:2b:3f:c6:70:92:b6:1c:99:46:f8:cf:28: 3e:a2:8b:96:cb:0d:d9:a1:9f:09:b9:21:9c:0d:5d: c0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:EB:B1:0D:63:2E:69:8B:8D:51:81:65:AB:69:C3:07:91:55:7E:C7 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/nOuxDWMuaYuNUYFlq2nDB5FVfsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.106.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:5c:70:62:85:09:d8:5d:c1:2b:3f:73:4f:1d:33:e9:71:09: b1:ce:c4:a1:ba:f2:6d:c2:9a:84:7c:de:2f:5b:0a:d6:0a:e9: 5e:3b:12:50:50:ec:e9:05:15:a1:5e:64:aa:b2:40:1a:ed:dc: df:ea:10:62:1d:86:5e:5d:83:62:fe:b5:45:5d:8b:1a:8c:24: 92:74:d3:82:57:16:8a:64:95:8b:af:56:17:39:80:ae:38:71: a8:de:55:bb:a6:9f:4d:c3:3d:62:b2:cb:7f:8d:f2:b4:4f:d2: 2f:1d:cd:87:7e:d8:64:b1:e4:7c:ed:e5:f6:b9:b5:23:d6:81: dc:72:97:e6:a5:4b:9e:62:a2:33:9c:73:2c:6f:99:7f:77:45: 77:89:05:4e:70:34:95:7d:be:0e:73:02:a2:76:22:83:55:26: 2d:4a:bf:ab:2c:f9:b6:f1:0c:bb:57:07:1a:dd:7f:e0:73:d5: 2b:d0:eb:3f:63:af:d4:ea:80:24:54:fc:31:ea:39:f4:66:c3: b0:5a:e1:3c:3c:26:c7:be:3e:20:08:a7:cd:2a:37:6a:64:76: 53:14:96:e8:db:36:50:f3:f1:ab:94:5f:2f:27:78:c0:d7:76: b3:28:5f:7c:df:3c:14:6e:73:44:4f:bc:44:66:92:71:f9:2b: de:02:8b:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFEMe6eZZWDLlfMkHnycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2ViYjEwZDYzMmU2OThiOGQ1MTgxNjVhYjY5YzMwNzkxNTU3ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOwUtXH8b4keC/R61bDEhfk53H4X PwknE0klP0fhKDlWl7ae1yVEiUeScOOtpNXl5ZN2aI2r6VfEhjOoMuTNnseh53zw SCQpeZVRnAdCw6dm+9OYWhxRp8I0vJv/JN45+V0qLbv3To5nJ8bNhd9PAwOwlQQu Jzb6t5UXZ3Wx4cBq6aG1Ofc1E/lHGQ/kxtUiOh2SaiqrggJ1EMCOZXrvVQwowxvA vsgAiD6e8TyzoJlnXqwgTCuqZ4sSgphHOziFTJCV8kyLhcDcYvonZvBJ6SgLXPjj AGraiKEpdIQxsAz5hd8rP8ZwkrYcmUb4zyg+oouWyw3ZoZ8JuSGcDV3AWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzrsQ1jLmmLjVGBZatpwweRVX7HMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvbk91eERXTXVhWXVOVVlGbHEybkRCNUZWZnNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwelqMA0G CSqGSIb3DQEBCwUAA4IBAQBtXHBihQnYXcErP3NPHTPpcQmxzsShuvJtwpqEfN4v WwrWCuleOxJQUOzpBRWhXmSqskAa7dzf6hBiHYZeXYNi/rVFXYsajCSSdNOCVxaK ZJWLr1YXOYCuOHGo3lW7pp9Nwz1isst/jfK0T9IvHc2HfthkseR87eX2ubUj1oHc cpfmpUueYqIznHMsb5l/d0V3iQVOcDSVfb4OcwKidiKDVSYtSr+rLPm28Qy7Vwca 3X/gc9Ur0Os/Y6/U6oAkVPwx6jn0ZsOwWuE8PCbHvj4gCKfNKjdqZHZTFJbo2zZQ 8/GrlF8vJ3jA13azKF983zwUbnNET7xEZpJx+SveAouI -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:51 2026 by rpki-client