This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0fjpDpV32la2p5NREuXKEHJdOLE.roa File: 0fjpDpV32la2p5NREuXKEHJdOLE.roa (raw, json) Hash identifier: 5v6pZgVAgM0wn/O64c/YsCsy2TFO4+G0EfJ4SfXUFcw= Subject key identifier: D1:F8:E9:0E:95:77:DA:56:B6:A7:93:51:12:E5:CA:10:72:5D:38:B1 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8503F6874E20039BC80E1A9FFE24E3 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0fjpDpV32la2p5NREuXKEHJdOLE.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208876 IP address blocks: 93.171.4.0/24 maxlen: 24 95.46.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:03:f6:87:4e:20:03:9b:c8:0e:1a:9f:fe:24:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f8e90e9577da56b6a7935112e5ca10725d38b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bd:56:46:ce:4e:57:9d:11:d5:14:3f:fa:55: 3c:53:74:bf:0b:3b:75:b4:fa:fc:89:65:f2:d9:99: f2:35:62:cc:b7:68:b8:43:29:b4:a5:50:39:32:a5: 6c:4d:73:68:65:d0:36:9d:18:f4:d8:43:42:8a:09: 0f:52:98:4a:5a:2c:3f:90:6d:6b:0a:6b:8e:2b:af: 1d:22:d0:04:cd:eb:30:61:45:34:75:33:ef:7f:39: d8:05:44:e2:65:01:4f:16:ec:73:73:78:7f:47:c9: 23:63:ce:41:92:2c:8e:e6:85:7f:9b:e7:98:b7:6d: 09:40:70:5b:e9:2f:63:bb:67:bb:e4:dd:bb:75:7e: 9e:25:f0:8e:57:eb:8c:5d:b3:28:f8:74:c8:cf:31: fe:74:c7:a3:8c:a8:f7:70:8f:0e:a1:c8:71:f8:82: d8:93:6d:b0:41:e5:5e:70:77:6f:44:0b:ea:a9:98: ec:e7:a0:3c:b4:7d:c4:fb:84:7a:75:90:7e:93:55: 08:56:6a:41:e7:2f:95:4e:9d:1d:3e:63:f1:89:df: 1c:02:c3:2e:6a:25:06:67:39:5c:91:ac:6d:5d:96: 06:6a:fc:bb:31:6e:95:16:8c:0e:1a:27:78:13:19: bc:46:33:53:66:cc:00:72:61:a9:b0:99:48:17:83: 58:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F8:E9:0E:95:77:DA:56:B6:A7:93:51:12:E5:CA:10:72:5D:38:B1 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0fjpDpV32la2p5NREuXKEHJdOLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.4.0/24 95.46.8.0/24 Signature Algorithm: sha256WithRSAEncryption 53:f4:0c:1d:69:03:c1:53:9f:fc:f8:73:26:be:4f:d3:58:c1: c5:21:da:4f:74:6b:97:b7:53:d7:89:ca:32:33:b2:62:de:af: 41:e9:05:56:ac:12:38:8d:8d:57:55:8f:31:1e:5a:eb:8c:81: 26:e1:de:f3:05:eb:75:82:5a:45:c8:d8:f2:76:d0:04:93:b6: 50:3f:3f:4c:40:16:49:76:5b:44:5f:41:ab:8c:41:06:0c:10: 77:ed:45:81:af:b4:06:d3:4f:07:f7:40:7e:59:d8:f3:35:2f: 0b:89:fd:59:32:96:9c:ed:7c:c6:f5:7f:a5:04:42:a5:cf:7f: e5:bc:69:04:c6:52:74:58:96:ee:02:70:d5:47:d0:ac:19:d8: aa:18:0c:ae:c2:9e:be:92:a4:b1:38:5f:80:0b:3f:0e:4a:d6: 23:31:9a:68:6c:85:44:d3:98:ae:e7:53:d9:d5:02:8c:7b:e4: 98:48:bc:e2:80:ff:21:0e:c1:3f:b3:0a:65:c9:78:4c:82:2b: be:7f:01:8e:7f:91:66:67:ec:10:80:66:96:45:55:07:cc:8a: c6:c0:98:c7:cf:88:a9:b1:88:3c:a1:3d:b4:16:bb:ab:a7:74: b4:4c:25:ff:1f:6d:e5:3a:e2:51:ff:30:b1:0a:20:8c:33:0b: 32:a3:31:00 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hQP2h04gA5vIDhqf/iTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWY4ZTkwZTk1NzdkYTU2YjZhNzkzNTExMmU1Y2ExMDcyNWQzOGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL1WRs5OV50R1RQ/+lU8U3S/Czt1 tPr8iWXy2ZnyNWLMt2i4Qym0pVA5MqVsTXNoZdA2nRj02ENCigkPUphKWiw/kG1r CmuOK68dItAEzeswYUU0dTPvfznYBUTiZQFPFuxzc3h/R8kjY85BkiyO5oV/m+eY t20JQHBb6S9ju2e75N27dX6eJfCOV+uMXbMo+HTIzzH+dMejjKj3cI8Oochx+ILY k22wQeVecHdvRAvqqZjs56A8tH3E+4R6dZB+k1UIVmpB5y+VTp0dPmPxid8cAsMu aiUGZzlckaxtXZYGavy7MW6VFowOGid4Exm8RjNTZswAcmGpsJlIF4NY6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNH46Q6Vd9pWtqeTURLlyhByXTixMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMGZqcERwVjMybGEycDVOUkV1WEtFSEpkT0xFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXasEAwQA Xy4IMA0GCSqGSIb3DQEBCwUAA4IBAQBT9AwdaQPBU5/8+HMmvk/TWMHFIdpPdGuX t1PXicoyM7Ji3q9B6QVWrBI4jY1XVY8xHlrrjIEm4d7zBet1glpFyNjydtAEk7ZQ Pz9MQBZJdltEX0GrjEEGDBB37UWBr7QG008H90B+WdjzNS8Lif1ZMpac7XzG9X+l BEKlz3/lvGkExlJ0WJbuAnDVR9CsGdiqGAyuwp6+kqSxOF+ACz8OStYjMZpobIVE 05iu51PZ1QKMe+SYSLzigP8hDsE/swplyXhMgiu+fwGOf5FmZ+wQgGaWRVUHzIrG wJjHz4ipsYg8oT20Frurp3S0TCX/H23lOuJR/zCxCiCMMwsyozEA -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:46 2026 by rpki-client