This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rY1UGBitIIHgjFNcdWdupRXxagw.roa File: rY1UGBitIIHgjFNcdWdupRXxagw.roa (raw, json) Hash identifier: /srxzFM5i50Nv+4EcihigbYbjLSCE8tX2ItQnUP6Bxc= Subject key identifier: AD:8D:54:18:18:AD:20:81:E0:8C:53:5C:75:67:6E:A5:15:F1:6A:0C Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F144AF0106D1C537758D406B8DDC86F Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rY1UGBitIIHgjFNcdWdupRXxagw.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49418 IP address blocks: 193.233.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4a:f0:10:6d:1c:53:77:58:d4:06:b8:dd:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad8d541818ad2081e08c535c75676ea515f16a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ad:10:b7:f0:d6:f0:80:8d:9b:5f:2c:ba:1b: 95:be:58:99:19:e2:4a:b3:55:a5:8c:bd:91:5f:fe: 10:fc:9e:65:1c:7c:c5:d0:7f:5b:a3:f0:d2:f3:6c: 40:36:02:d5:00:8b:9e:57:f1:32:1c:4c:ea:b1:1f: b9:75:60:d5:a0:4e:cc:a4:bb:ed:fa:5a:c0:7d:e0: da:56:28:23:bc:a6:05:1e:dd:3d:80:54:8f:52:26: 09:36:da:4e:81:cd:b2:26:83:3b:7e:ed:30:8a:bd: 1d:f8:cd:ec:31:30:60:b1:ed:67:b2:d8:1c:b5:27: a1:e9:7f:1d:66:59:4a:b6:46:25:a1:4a:3e:09:0a: ac:b5:bd:78:0d:07:27:ea:a6:5d:e1:63:51:b0:ac: 14:e7:a0:06:36:f6:e1:11:50:0b:22:ec:91:0c:33: 71:1f:f6:54:cf:d0:bc:75:62:49:85:d9:65:0a:e5: f0:e6:00:25:a7:e8:41:b8:86:8b:9e:75:17:c2:9c: c5:97:e9:b1:90:99:d7:24:48:1d:5a:08:15:b7:e3: b0:f0:fd:92:65:7e:8e:c9:df:bc:60:94:d8:56:4a: e2:8c:4a:4e:71:5c:6e:fc:d1:6a:1d:fb:fb:14:20: df:ab:8d:b8:a8:3b:0c:25:ed:09:c9:3f:6e:fd:8c: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8D:54:18:18:AD:20:81:E0:8C:53:5C:75:67:6E:A5:15:F1:6A:0C X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rY1UGBitIIHgjFNcdWdupRXxagw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.86.0/24 Signature Algorithm: sha256WithRSAEncryption 96:f3:3a:18:24:9c:de:75:ad:64:5f:5f:9e:3f:c1:a9:92:aa: 84:31:e4:21:a4:ce:8c:7a:36:16:15:90:fa:52:c1:cd:91:43: a2:73:f7:1c:4c:b1:6c:00:b1:d1:ca:64:8d:26:cf:c4:b7:ab: 6a:61:4c:31:fa:71:bd:ce:5b:88:93:c9:52:3c:8c:80:c1:61: 45:90:72:ab:1a:0e:fb:ca:b6:12:3a:2f:2f:49:e0:d8:73:f6: 57:f1:9b:d7:e1:52:52:af:5e:b8:79:c0:bc:4c:50:41:e7:63: 32:f9:99:e8:58:36:a4:33:1b:13:21:0b:39:cc:e7:6d:2b:3a: 65:4c:44:ed:d2:5a:1b:71:f5:85:3e:ab:9c:3d:7d:f7:97:9c: 5e:03:2e:a9:b2:a1:b3:a4:45:73:e0:32:d7:5f:d0:a2:32:96: 05:e7:ec:65:8b:a8:f7:f8:c4:68:9a:10:98:a5:fb:fb:4f:d0: b6:6b:1f:ca:21:6e:38:9b:9a:c1:62:1f:44:cb:a6:ec:ab:13: 99:7f:85:38:46:67:81:c0:ac:7d:d2:99:a7:fd:91:22:c0:36: 97:1c:08:17:a8:c0:30:2e:29:ca:fb:f7:fb:c3:d3:c3:45:5e: d8:68:ad:f8:93:b2:a0:49:55:78:eb:ab:f7:75:96:1c:46:c2: 1c:12:f3:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FErwEG0cU3dY1Aa43chvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDhkNTQxODE4YWQyMDgxZTA4YzUzNWM3NTY3NmVhNTE1ZjE2YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a0Qt/DW8ICNm18suhuVvliZGeJK s1WljL2RX/4Q/J5lHHzF0H9bo/DS82xANgLVAIueV/EyHEzqsR+5dWDVoE7MpLvt +lrAfeDaVigjvKYFHt09gFSPUiYJNtpOgc2yJoM7fu0wir0d+M3sMTBgse1nstgc tSeh6X8dZllKtkYloUo+CQqstb14DQcn6qZd4WNRsKwU56AGNvbhEVALIuyRDDNx H/ZUz9C8dWJJhdllCuXw5gAlp+hBuIaLnnUXwpzFl+mxkJnXJEgdWggVt+Ow8P2S ZX6Oyd+8YJTYVkrijEpOcVxu/NFqHfv7FCDfq424qDsMJe0JyT9u/YxvfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK2NVBgYrSCB4IxTXHVnbqUV8WoMMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvclkxVUdCaXRJSUhnakZOY2RXZHVwUlh4YWd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwelWMA0G CSqGSIb3DQEBCwUAA4IBAQCW8zoYJJzeda1kX1+eP8GpkqqEMeQhpM6MejYWFZD6 UsHNkUOic/ccTLFsALHRymSNJs/Et6tqYUwx+nG9zluIk8lSPIyAwWFFkHKrGg77 yrYSOi8vSeDYc/ZX8ZvX4VJSr164ecC8TFBB52My+ZnoWDakMxsTIQs5zOdtKzpl TETt0lobcfWFPqucPX33l5xeAy6psqGzpEVz4DLXX9CiMpYF5+xli6j3+MRomhCY pfv7T9C2ax/KIW44m5rBYh9Ey6bsqxOZf4U4RmeBwKx90pmn/ZEiwDaXHAgXqMAw LinK+/f7w9PDRV7YaK34k7KgSVV466v3dZYcRsIcEvN0 -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:43 2026 by rpki-client