This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ox_bKwCBrSUJhLHO_iVfSzcAZFU.roa File: ox_bKwCBrSUJhLHO_iVfSzcAZFU.roa (raw, json) Hash identifier: qAdtVajpqCKdY/cTJtBqW/8tQWS/fT7zyMSO4MaZDqI= Subject key identifier: A3:1F:DB:2B:00:81:AD:25:09:84:B1:CE:FE:25:5F:4B:37:00:64:55 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F146DCA5EA6AE5DE098132DA5BFE538 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ox_bKwCBrSUJhLHO_iVfSzcAZFU.roa Signing time: Fri 02 Jan 2026 14:20:03 +0000 ROA not before: Fri 02 Jan 2026 14:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216068 IP address blocks: 147.45.176.0/24 maxlen: 24 147.45.188.0/24 maxlen: 24 193.233.80.0/24 maxlen: 24 193.233.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:6d:ca:5e:a6:ae:5d:e0:98:13:2d:a5:bf:e5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31fdb2b0081ad250984b1cefe255f4b37006455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:94:bb:ba:48:fc:89:42:5a:4e:19:66:9d: d2:4c:c3:06:fe:41:b8:7b:52:05:0b:08:68:35:20: 99:33:d3:61:dc:94:6b:48:90:4c:6d:33:7a:69:81: ca:97:2a:3e:75:50:bf:29:1d:99:bd:cb:5c:16:54: c0:ca:e7:cf:6a:af:f5:5a:0b:31:2b:84:5f:e8:78: 66:06:8e:79:7f:61:66:93:f8:d9:4f:ae:9e:37:a5: 82:61:ef:18:5a:bf:ad:8e:6c:c2:3b:21:54:b2:b2: 34:03:bc:73:84:11:1f:af:45:f9:1c:a3:fd:6d:e2: a9:dd:92:fa:58:6e:32:49:12:96:1b:09:84:8c:b0: 8d:f1:ab:3b:16:ce:10:21:81:d7:0b:0b:7a:53:4f: 90:f6:77:d5:ce:4d:c2:56:27:08:c3:f3:7e:f7:43: cf:a6:3b:f7:c6:0d:ef:b6:07:39:ff:d6:63:40:f2: 4b:ed:c4:3d:8d:c8:b8:6d:06:2d:5d:89:a8:1b:ab: 23:6d:ce:6d:fc:e2:ae:37:1c:a4:83:54:7d:b5:49: 63:ab:c4:71:4e:5d:2a:7a:a2:46:93:13:42:2c:fd: 4d:c7:e0:7b:f4:dc:1a:90:5f:83:00:4a:e6:70:61: 5c:b4:f6:ad:03:7b:ef:3c:0b:d5:ef:a7:5e:67:11: df:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:DB:2B:00:81:AD:25:09:84:B1:CE:FE:25:5F:4B:37:00:64:55 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ox_bKwCBrSUJhLHO_iVfSzcAZFU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.176.0/24 147.45.188.0/24 193.233.80.0/24 193.233.165.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:36:99:5c:02:7b:8e:23:27:07:a3:18:97:0f:7e:0f:95:2d: 47:9b:69:0b:77:d5:bb:85:a3:1b:d9:10:fe:ff:d6:38:c0:96: ab:69:b8:ad:e7:e1:b8:91:e3:fa:0f:4c:72:a2:79:2b:1e:ec: 1c:4e:70:7e:0d:e2:3b:8b:7f:16:08:a5:80:20:0f:ee:f7:4b: e5:58:b6:af:8b:89:cd:bd:50:dd:b3:bd:11:7a:97:48:26:78: 50:3a:62:ee:cf:38:90:3f:74:0f:db:91:f6:d3:50:17:a4:03: 34:64:ca:a8:eb:13:c1:79:20:3d:ea:69:f9:d0:ed:27:c3:db: 39:64:3b:3f:6a:2b:14:fd:71:50:5d:71:4d:7b:ca:67:3c:85: 30:a5:ca:df:25:01:da:8c:59:6d:af:aa:ef:bf:59:6c:5e:ef: b3:ba:77:0d:9f:39:d7:a6:74:8a:6b:e8:89:1a:15:a8:8d:4c: 81:a5:66:0d:37:a4:f3:96:96:c7:7c:ef:f5:e9:74:e2:75:f1: f2:56:d7:a1:48:d0:0e:63:78:fc:db:89:2c:83:1c:d4:61:c1: cc:52:78:24:6b:b1:b2:60:b0:42:26:94:dd:93:eb:ae:8b:1a: 4d:43:e8:95:bf:b7:dc:6a:be:d3:80:a9:69:fe:a1:ee:f1:c1: 86:da:be:26 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FG3KXqauXeCYEy2lv+U4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzFmZGIyYjAwODFhZDI1MDk4NGIxY2VmZTI1NWY0YjM3MDA2NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sOUu7pI/IlCWk4ZZp3STMMG/kG4 e1IFCwhoNSCZM9Nh3JRrSJBMbTN6aYHKlyo+dVC/KR2ZvctcFlTAyufPaq/1Wgsx K4Rf6HhmBo55f2Fmk/jZT66eN6WCYe8YWr+tjmzCOyFUsrI0A7xzhBEfr0X5HKP9 beKp3ZL6WG4ySRKWGwmEjLCN8as7Fs4QIYHXCwt6U0+Q9nfVzk3CVicIw/N+90PP pjv3xg3vtgc5/9ZjQPJL7cQ9jci4bQYtXYmoG6sjbc5t/OKuNxykg1R9tUljq8Rx Tl0qeqJGkxNCLP1Nx+B79NwakF+DAErmcGFctPatA3vvPAvV76deZxHfMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKMf2ysAga0lCYSxzv4lX0s3AGRVMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvb3hfYkt3Q0JyU1VKaExIT19pVmZTemNBWkZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAky2wAwQA ky28AwQAwelQAwQAwemlMA0GCSqGSIb3DQEBCwUAA4IBAQA7NplcAnuOIycHoxiX D34PlS1Hm2kLd9W7haMb2RD+/9Y4wJarabit5+G4keP6D0xyonkrHuwcTnB+DeI7 i38WCKWAIA/u90vlWLavi4nNvVDds70RepdIJnhQOmLuzziQP3QP25H201AXpAM0 ZMqo6xPBeSA96mn50O0nw9s5ZDs/aisU/XFQXXFNe8pnPIUwpcrfJQHajFltr6rv v1lsXu+zuncNnznXpnSKa+iJGhWojUyBpWYNN6TzlpbHfO/16XTidfHyVtehSNAO Y3j824ksgxzUYcHMUngka7GyYLBCJpTdk+uuixpNQ+iVv7fcar7TgKlp/qHu8cGG 2r4m -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:41 2026 by rpki-client