This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ioebsiWj3nggLCD2Uw7YDRHO_Ps.roa File: ioebsiWj3nggLCD2Uw7YDRHO_Ps.roa (raw, json) Hash identifier: y+2kHdPBSWLKfdS3NRBsD4hzYmHJtjMOYdLETKS+w6Q= Subject key identifier: 8A:87:9B:B2:25:A3:DE:78:20:2C:20:F6:53:0E:D8:0D:11:CE:FC:FB Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E74B9D8935716A05EFE0AB0A9DB8B Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ioebsiWj3nggLCD2Uw7YDRHO_Ps.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 193.93.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:74:b9:d8:93:57:16:a0:5e:fe:0a:b0:a9:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a879bb225a3de78202c20f6530ed80d11cefcfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:da:be:57:df:0c:a4:a0:1d:e6:13:ca:1b: 4c:a2:e3:e6:84:97:1b:af:44:2f:e9:75:d5:34:ed: b4:23:01:55:d6:b3:f2:b5:35:73:46:61:6b:ce:2a: 6c:e6:34:c8:be:18:0d:b2:30:4c:ad:98:bb:55:f6: 95:fd:2d:29:5d:c6:3b:d1:90:bd:ff:b8:0b:b5:71: b1:92:7e:a5:e0:6d:39:b9:42:4f:b1:f4:72:e1:46: 54:a7:19:08:09:8c:18:af:b8:e6:99:f7:a2:83:75: d4:47:32:bc:75:ba:8e:91:1a:10:2b:3d:6c:2c:16: 84:d6:e2:2c:14:10:d0:65:30:62:99:44:ef:62:b5: 50:27:ad:e2:36:70:31:a9:82:d6:fa:64:87:d7:b6: c6:1a:be:88:be:cf:40:6d:31:8f:8a:f0:8d:02:1e: d3:dd:60:86:4d:85:44:3f:a1:b9:72:f9:13:d5:41: ca:55:e6:af:1a:54:20:d3:35:07:b4:9f:ef:35:24: db:90:20:f5:b9:3c:8b:ef:d9:a2:50:dc:cf:6c:2a: ce:87:3b:8a:97:8a:f3:1c:42:39:0c:6f:d0:35:50: 3b:49:a0:cd:b3:9b:e4:84:17:f0:53:c1:35:1e:f1: 1c:65:fd:79:3d:ea:8d:9c:df:7b:35:4f:7a:31:19: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:87:9B:B2:25:A3:DE:78:20:2C:20:F6:53:0E:D8:0D:11:CE:FC:FB X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ioebsiWj3nggLCD2Uw7YDRHO_Ps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.52.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:33:ae:39:24:41:f1:8a:e2:f7:83:4f:0c:e4:06:1e:dd:53: 7a:02:21:31:bc:e3:c2:6b:ca:2a:8f:c6:10:3a:ab:2c:e8:7f: be:6d:8d:81:a6:ef:85:e2:67:21:e3:6a:1b:9c:cc:05:e9:3c: 51:c9:a2:8f:8f:5d:26:d1:34:cf:8a:59:d3:38:2c:5f:4b:13: d0:aa:51:fe:74:ba:f2:b3:6f:d6:9c:ef:ff:75:eb:37:3f:40: 6a:63:32:d2:6f:a9:ff:a3:38:47:d0:cf:76:0d:a7:88:fd:b7: 79:3b:58:5a:90:7b:3c:43:e6:d3:91:76:e3:bd:1e:bd:3a:fb: 39:0f:5d:44:c3:af:85:e9:73:91:1d:58:72:32:84:d4:28:9f: 79:15:5b:83:e3:fc:c9:39:f6:12:7a:14:a0:70:ac:db:44:c2: 05:c2:27:39:63:e8:ac:c6:af:59:0d:e0:48:bd:49:8f:c8:9b: 65:a5:94:96:33:7d:d5:39:ea:3b:fa:70:5b:d9:66:d0:2a:55: 7e:b6:9c:51:79:27:de:84:48:a2:a7:64:60:e4:ab:d7:53:8e: b7:68:fb:0e:ab:75:7f:c1:28:6b:e6:71:5c:9a:ca:bf:31:fb: 3e:65:74:ac:ae:11:c2:8d:56:a7:e9:ae:ed:54:45:94:d2:9c: 56:b6:ba:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnS52JNXFqBe/gqwqduLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTg3OWJiMjI1YTNkZTc4MjAyYzIwZjY1MzBlZDgwZDExY2VmY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxDavlffDKSgHeYTyhtMouPmhJcb r0Qv6XXVNO20IwFV1rPytTVzRmFrzips5jTIvhgNsjBMrZi7VfaV/S0pXcY70ZC9 /7gLtXGxkn6l4G05uUJPsfRy4UZUpxkICYwYr7jmmfeig3XURzK8dbqOkRoQKz1s LBaE1uIsFBDQZTBimUTvYrVQJ63iNnAxqYLW+mSH17bGGr6Ivs9AbTGPivCNAh7T 3WCGTYVEP6G5cvkT1UHKVeavGlQg0zUHtJ/vNSTbkCD1uTyL79miUNzPbCrOhzuK l4rzHEI5DG/QNVA7SaDNs5vkhBfwU8E1HvEcZf15PeqNnN97NU96MRlFPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqHm7Ilo954ICwg9lMO2A0Rzvz7MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvaW9lYnNpV2ozbmdnTENEMlV3N1lEUkhPX1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwV00MA0G CSqGSIb3DQEBCwUAA4IBAQBLM645JEHxiuL3g08M5AYe3VN6AiExvOPCa8oqj8YQ Oqss6H++bY2Bpu+F4mch42obnMwF6TxRyaKPj10m0TTPilnTOCxfSxPQqlH+dLry s2/WnO//des3P0BqYzLSb6n/ozhH0M92DaeI/bd5O1hakHs8Q+bTkXbjvR69Ovs5 D11Ew6+F6XORHVhyMoTUKJ95FVuD4/zJOfYSehSgcKzbRMIFwic5Y+isxq9ZDeBI vUmPyJtlpZSWM33VOeo7+nBb2WbQKlV+tpxReSfehEiip2Rg5KvXU463aPsOq3V/ wShr5nFcmsq/Mfs+ZXSsrhHCjVan6a7tVEWU0pxWtrq8 -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:16 2026 by rpki-client