This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/toLw4WLypAiTnY9oBgR_ZHdyOvI.roa File: toLw4WLypAiTnY9oBgR_ZHdyOvI.roa (raw, json) Hash identifier: jMgtmsinX8ex+JZFCWDqgTi/ND7PnOVDGmbSWH0KOp0= Subject key identifier: B6:82:F0:E1:62:F2:A4:08:93:9D:8F:68:06:04:7F:64:77:72:3A:F2 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F1457679E40E082124CA1A7D8F0E70E Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/toLw4WLypAiTnY9oBgR_ZHdyOvI.roa Signing time: Fri 02 Jan 2026 14:19:58 +0000 ROA not before: Fri 02 Jan 2026 14:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201842 IP address blocks: 147.45.206.0/24 maxlen: 24 193.233.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:57:67:9e:40:e0:82:12:4c:a1:a7:d8:f0:e7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b682f0e162f2a408939d8f6806047f6477723af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a3:1a:2b:ce:5a:d2:9e:67:10:d5:6a:ef:88: 29:58:cc:34:c8:f6:bf:25:ed:98:7d:57:6a:6f:f2: db:7f:ec:db:ab:e1:f8:a4:49:25:3b:78:39:d8:e3: 90:0e:a1:7e:dd:a8:73:0e:5a:f5:25:15:6f:0d:ae: 15:4a:de:4c:23:61:1a:b6:66:d8:a3:65:0f:a4:97: b9:89:6d:43:f8:91:5e:fc:25:09:88:ee:c2:bf:3e: c2:76:e3:09:0a:ae:e6:5b:9b:bc:be:25:0e:d5:fa: 13:56:4d:c3:68:25:54:e8:dc:37:03:a8:f7:96:1a: fd:d9:73:3a:ee:59:66:ab:88:13:3f:04:32:13:58: 79:ee:26:42:73:2e:de:88:f2:ae:b1:78:12:bc:aa: bb:a2:4e:74:03:05:b8:f6:56:50:08:46:6c:b2:bf: f4:bb:1b:20:5c:4b:2b:b5:5a:8e:de:84:ad:4a:8a: b1:80:f3:a7:76:bc:c0:77:76:fd:dd:bb:b9:4b:3b: d2:12:69:56:f5:0b:b5:73:78:46:41:e0:e4:a5:cb: a5:8a:25:e9:41:5d:40:12:0a:66:af:c6:1e:55:46: ea:86:63:de:53:06:51:4d:60:65:0c:d5:f3:83:05: ff:5f:7b:99:3b:81:6c:db:8d:9b:bf:7e:fa:6d:7c: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:82:F0:E1:62:F2:A4:08:93:9D:8F:68:06:04:7F:64:77:72:3A:F2 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/toLw4WLypAiTnY9oBgR_ZHdyOvI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.206.0/24 193.233.79.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f7:3f:e4:27:e6:5b:43:f8:9d:a8:b4:3a:0d:17:bd:83:3c: c2:99:94:a0:34:ea:e6:9e:6d:fe:5f:c2:56:10:22:44:23:c7: 12:ae:69:e3:3c:ba:1b:d6:2f:4f:64:fa:05:38:e1:af:cd:8e: 51:1b:85:1a:3d:ab:e8:e3:f7:8f:81:f7:a0:c4:f2:ea:5e:df: 42:f2:70:97:29:23:53:42:6c:87:c2:c8:3b:c7:55:34:fd:ed: 2b:d5:00:d2:4e:3f:00:99:96:84:0e:f9:80:a2:8f:b2:40:fd: 4e:6f:2b:c4:af:0a:87:bc:76:97:a2:8d:db:a1:c9:c8:e1:a2: 00:ad:97:44:b4:c7:c3:e1:87:11:65:ac:2c:31:df:b1:b5:ed: 4f:c9:bb:c4:a6:dd:84:47:52:c9:98:8c:0c:6c:b2:36:ec:a1: a7:16:26:0d:da:e5:ef:ff:6d:95:b4:73:cc:49:65:b9:1f:ba: 74:9a:3c:0f:d5:3e:f3:da:ba:5f:67:93:81:1b:d8:1d:45:b7: 78:74:60:87:5c:1f:37:ac:34:09:a7:33:7f:e6:5d:dd:a1:f4: 25:41:92:dd:83:5d:d8:c9:cd:89:3d:c1:fd:4f:be:5b:38:73: d3:d5:ae:ab:86:80:23:9a:c6:21:a7:b4:fe:56:b6:50:07:72: 0f:9b:5b:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FFdnnkDgghJMoafY8OcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjgyZjBlMTYyZjJhNDA4OTM5ZDhmNjgwNjA0N2Y2NDc3NzIzYWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaMaK85a0p5nENVq74gpWMw0yPa/ Je2YfVdqb/Lbf+zbq+H4pEklO3g52OOQDqF+3ahzDlr1JRVvDa4VSt5MI2EatmbY o2UPpJe5iW1D+JFe/CUJiO7Cvz7CduMJCq7mW5u8viUO1foTVk3DaCVU6Nw3A6j3 lhr92XM67llmq4gTPwQyE1h57iZCcy7eiPKusXgSvKq7ok50AwW49lZQCEZssr/0 uxsgXEsrtVqO3oStSoqxgPOndrzAd3b93bu5SzvSEmlW9Qu1c3hGQeDkpculiiXp QV1AEgpmr8YeVUbqhmPeUwZRTWBlDNXzgwX/X3uZO4Fs242bv376bXwJyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLaC8OFi8qQIk52PaAYEf2R3cjryMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvdG9MdzRXTHlwQWlUblk5b0JnUl9aSGR5T3ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAky3OAwQA welPMA0GCSqGSIb3DQEBCwUAA4IBAQAl9z/kJ+ZbQ/idqLQ6DRe9gzzCmZSgNOrm nm3+X8JWECJEI8cSrmnjPLob1i9PZPoFOOGvzY5RG4UaPavo4/ePgfegxPLqXt9C 8nCXKSNTQmyHwsg7x1U0/e0r1QDSTj8AmZaEDvmAoo+yQP1ObyvErwqHvHaXoo3b ocnI4aIArZdEtMfD4YcRZawsMd+xte1PybvEpt2ER1LJmIwMbLI27KGnFiYN2uXv /22VtHPMSWW5H7p0mjwP1T7z2rpfZ5OBG9gdRbd4dGCHXB83rDQJpzN/5l3dofQl QZLdg13Yyc2JPcH9T75bOHPT1a6rhoAjmsYhp7T+VrZQB3IPm1tJ -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:42 2026 by rpki-client