This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/u5lI7eHi_sOtkEnXgVWCekcVjRk.roa File: u5lI7eHi_sOtkEnXgVWCekcVjRk.roa (raw, json) Hash identifier: JrYK/9EmPUfIPblMKkAe/9Yc2KjQZf0fbFHGydB2270= Subject key identifier: BB:99:48:ED:E1:E2:FE:C3:AD:90:49:D7:81:55:82:7A:47:15:8D:19 Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14513F2A9D0DA9560DBCB029FCE133 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/u5lI7eHi_sOtkEnXgVWCekcVjRk.roa Signing time: Fri 02 Jan 2026 14:19:56 +0000 ROA not before: Fri 02 Jan 2026 14:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59651 IP address blocks: 193.233.88.0/24 maxlen: 24 193.233.89.0/24 maxlen: 24 193.233.90.0/24 maxlen: 24 193.233.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:51:3f:2a:9d:0d:a9:56:0d:bc:b0:29:fc:e1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb9948ede1e2fec3ad9049d78155827a47158d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:b2:1e:28:4c:e3:1a:ec:02:fd:fb:57:03: ef:9c:1f:80:ff:25:c3:61:16:60:d0:bf:e4:2c:3f: d4:5e:97:ee:8f:01:5b:af:ea:61:db:f0:5f:b4:1d: f6:10:b9:c6:94:e4:1d:cd:f0:a0:f3:b3:bd:fd:ec: cc:23:80:19:ce:3a:07:86:14:dd:c5:3c:4e:54:ca: 7b:12:95:b0:ad:d2:e9:80:d6:d7:3a:78:ee:01:aa: 88:22:f2:bc:38:0a:2b:a4:48:49:50:7d:af:fd:3a: c5:48:5a:23:83:5c:29:a4:86:b5:7e:34:bf:e6:5d: cc:0a:1f:d4:0e:c0:fa:74:05:81:e0:69:8e:1e:ed: ab:62:fb:5f:e0:d8:47:b3:4e:4e:18:19:5f:0a:c5: 96:a4:b0:09:56:84:00:ac:41:c8:4b:e4:a3:f9:85: a5:6a:5c:0d:3f:f4:9b:cd:fe:a5:b7:71:18:2c:86: 83:ec:3c:5b:6f:ad:cc:af:ba:fa:23:ca:03:2c:1e: cd:05:87:dc:df:2e:bd:89:8e:6f:3b:77:b3:5b:2f: 79:e8:6c:91:d5:e0:d3:b1:1a:4c:a7:c1:ed:cd:bb: ec:23:62:78:f0:9f:ee:81:ae:38:42:23:a0:69:af: f3:d7:d7:14:15:2a:28:1a:bd:26:e6:7e:8f:76:64: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:99:48:ED:E1:E2:FE:C3:AD:90:49:D7:81:55:82:7A:47:15:8D:19 X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/u5lI7eHi_sOtkEnXgVWCekcVjRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.88.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:a3:a8:5b:e1:9e:8d:a0:ce:48:e1:93:fa:70:ed:25:80:b4: 45:32:79:2b:21:8b:51:af:eb:2b:05:7f:d5:cb:b1:69:73:1e: e1:e2:5c:f2:4a:6c:98:ea:a2:46:bc:a1:1a:d0:3f:6a:0f:4b: 99:1e:61:fb:e9:e7:6e:2d:2f:b9:2e:6d:88:7f:dd:f6:3c:be: 53:4f:a9:c4:f0:44:8c:f4:a0:4e:16:e0:ac:b3:db:99:87:27: 29:42:d8:e9:c4:9e:6c:6c:7d:79:78:ec:7b:3f:9e:12:22:8d: c6:2e:dc:f6:83:cb:7f:52:3e:b0:03:2f:5d:09:11:8d:09:c3: 04:6e:6d:9f:7a:24:19:3b:c6:1d:d4:dd:4b:bb:bb:fd:28:23: 25:14:00:b9:a7:b7:3e:d3:0e:40:c0:ab:5b:a6:29:a9:a7:78: 16:29:5f:f4:b5:a7:0b:9b:b0:a9:69:4b:9c:71:a5:31:a1:d7: f8:ce:2d:df:b5:ff:1e:bd:bf:2f:0e:df:6b:52:85:7f:60:5c: 56:ee:46:32:0d:77:eb:b7:81:c1:1b:50:4f:9f:0d:59:76:48: 0b:1e:b5:95:30:05:77:61:65:ec:5d:05:62:2d:ce:71:45:d0: 2d:57:47:7e:b9:a2:f7:2c:83:9a:85:48:0e:54:b0:b6:e8:99: 1e:52:f6:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FFE/Kp0NqVYNvLAp/OEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjk5NDhlZGUxZTJmZWMzYWQ5MDQ5ZDc4MTU1ODI3YTQ3MTU4ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2uyHihM4xrsAv37VwPvnB+A/yXD YRZg0L/kLD/UXpfujwFbr+ph2/BftB32ELnGlOQdzfCg87O9/ezMI4AZzjoHhhTd xTxOVMp7EpWwrdLpgNbXOnjuAaqIIvK8OAorpEhJUH2v/TrFSFojg1wppIa1fjS/ 5l3MCh/UDsD6dAWB4GmOHu2rYvtf4NhHs05OGBlfCsWWpLAJVoQArEHIS+Sj+YWl alwNP/Sbzf6lt3EYLIaD7Dxbb63Mr7r6I8oDLB7NBYfc3y69iY5vO3ezWy956GyR 1eDTsRpMp8HtzbvsI2J48J/uga44QiOgaa/z19cUFSooGr0m5n6PdmTZDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuZSO3h4v7DrZBJ14FVgnpHFY0ZMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvdTVsSTdlSGlfc090a0VuWGdWV0Nla2NWalJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwelYMA0G CSqGSIb3DQEBCwUAA4IBAQB6o6hb4Z6NoM5I4ZP6cO0lgLRFMnkrIYtRr+srBX/V y7Fpcx7h4lzySmyY6qJGvKEa0D9qD0uZHmH76eduLS+5Lm2If932PL5TT6nE8ESM 9KBOFuCss9uZhycpQtjpxJ5sbH15eOx7P54SIo3GLtz2g8t/Uj6wAy9dCRGNCcME bm2feiQZO8Yd1N1Lu7v9KCMlFAC5p7c+0w5AwKtbpimpp3gWKV/0tacLm7CpaUuc caUxodf4zi3ftf8evb8vDt9rUoV/YFxW7kYyDXfrt4HBG1BPnw1ZdkgLHrWVMAV3 YWXsXQViLc5xRdAtV0d+uaL3LIOahUgOVLC26JkeUvbN -----END CERTIFICATE-----Generated at Tue Jan 20 00:41:08 2026 by rpki-client