This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-LbxCPesk7m7UsMQlKz4YgKfKPQ.roa File: 1-LbxCPesk7m7UsMQlKz4YgKfKPQ.roa (raw, json) Hash identifier: FdD3VGSLPpXjnK/gPL5QSm6ed4/Gil5pcixJXstiyfg= Subject key identifier: F8:B6:F1:08:F7:AC:93:B9:BB:52:C3:10:94:AC:F8:62:02:9F:28:F4 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E24F8616BF98FD9DABBF171115A7 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-LbxCPesk7m7UsMQlKz4YgKfKPQ.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61406 IP address blocks: 93.171.100.0/22 maxlen: 24 95.47.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e2:4f:86:16:bf:98:fd:9d:ab:bf:17:11:15:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b6f108f7ac93b9bb52c31094acf862029f28f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:28:5f:51:a8:75:ab:ae:fd:8c:62:25:ef:63: 32:51:61:0a:cb:a2:d7:06:e8:c5:c9:97:2d:29:b9: ad:f9:e9:a0:24:29:f2:12:3c:c4:a2:66:4d:23:bb: 54:6f:6b:35:88:8c:5d:02:28:62:e8:bd:f6:fc:f2: 7f:3b:1c:d6:29:e2:ff:31:fc:a5:78:35:a3:f8:9e: 4c:b1:ef:2c:b1:b5:61:e5:da:0a:9d:65:74:78:34: 35:b3:4b:46:3b:b6:fb:ee:0c:04:d4:14:68:23:52: cc:90:06:b4:40:00:ca:41:31:fa:30:bb:13:16:87: 2b:17:1f:ff:b9:f5:b1:09:69:75:42:04:b9:90:0b: f9:1b:89:5a:0c:30:3a:03:18:8b:96:e1:8e:6b:f7: 5c:ad:89:4b:f6:05:52:fd:91:9a:80:5b:05:a1:37: c1:b5:51:00:c0:23:37:57:19:ad:77:bf:38:b9:8d: fd:c0:db:e3:4a:13:3f:44:e9:e1:26:d7:3a:11:05: 39:2f:25:d9:32:5f:9e:8c:42:f7:63:0d:6a:25:af: 50:0c:a8:fb:68:ef:30:7a:1b:64:da:63:34:f7:4d: 50:aa:ba:21:9c:cd:0f:4c:06:bb:8e:54:1d:6f:bd: c6:f1:1a:7e:48:96:1d:1b:06:1d:b5:c0:b1:f3:cc: 2c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:F1:08:F7:AC:93:B9:BB:52:C3:10:94:AC:F8:62:02:9F:28:F4 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-LbxCPesk7m7UsMQlKz4YgKfKPQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.100.0/22 95.47.170.0/23 Signature Algorithm: sha256WithRSAEncryption 94:10:f8:9d:da:ee:30:9a:0e:35:0b:b0:48:cb:52:d8:52:ac: 59:93:94:51:07:dc:f7:28:6f:87:d0:1f:f8:50:d5:43:8f:c0: d8:6c:b0:b1:eb:bd:90:30:69:a1:17:13:7d:af:19:07:10:5d: e7:cb:73:ec:cc:14:8e:f8:12:6e:b7:d5:62:40:c7:95:3d:3e: 25:7a:4f:4e:2b:c0:a6:c7:a9:6e:ae:d9:a2:9c:25:db:92:24: 91:a4:47:c5:e3:14:6e:a7:67:b4:9e:ec:75:24:a0:af:8f:6a: 54:8a:50:f2:41:6f:2f:f6:7a:63:43:e6:1a:fc:b7:52:8b:b0: 50:8e:3e:cd:6c:a1:f5:12:cd:25:f3:7c:4b:3a:dc:10:28:c9: 38:76:4c:71:69:60:4e:b7:c1:4b:69:62:5b:2b:5a:9d:1a:9e: a1:6a:0e:45:b6:3b:61:8b:9c:2f:aa:c6:15:85:01:96:47:08: 5a:c8:6a:63:76:97:d5:b5:5d:45:54:b3:82:3c:6e:76:cb:cc: 0a:0f:ee:73:47:70:17:66:22:e8:9d:af:66:23:1f:2c:11:d0: 78:17:59:1c:d6:59:e8:28:1f:d2:cb:9a:be:7f:d0:2c:55:94: 69:62:ed:c4:54:1b:47:7c:2f:19:bb:37:fb:d8:ce:6f:5e:0b: 36:4b:55:75 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/hOJPhha/mP2dq78XERWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI2ZjEwOGY3YWM5M2I5YmI1MmMzMTA5NGFjZjg2MjAyOWYyOGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ChfUah1q679jGIl72MyUWEKy6LX BujFyZctKbmt+emgJCnyEjzEomZNI7tUb2s1iIxdAihi6L32/PJ/OxzWKeL/Mfyl eDWj+J5Mse8ssbVh5doKnWV0eDQ1s0tGO7b77gwE1BRoI1LMkAa0QADKQTH6MLsT FocrFx//ufWxCWl1QgS5kAv5G4laDDA6AxiLluGOa/dcrYlL9gVS/ZGagFsFoTfB tVEAwCM3Vxmtd784uY39wNvjShM/ROnhJtc6EQU5LyXZMl+ejEL3Yw1qJa9QDKj7 aO8wehtk2mM0901QqrohnM0PTAa7jlQdb73G8Rp+SJYdGwYdtcCx88ws6QIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPi28Qj3rJO5u1LDEJSs+GICnyj0MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMS1MYnhDUGVzazdtN1VzTVFsS3o0WWdLZktQUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAl2rZAME AV8vqjANBgkqhkiG9w0BAQsFAAOCAQEAlBD4ndruMJoONQuwSMtS2FKsWZOUUQfc 9yhvh9Af+FDVQ4/A2Gywseu9kDBpoRcTfa8ZBxBd58tz7MwUjvgSbrfVYkDHlT0+ JXpPTivApsepbq7Zopwl25IkkaRHxeMUbqdntJ7sdSSgr49qVIpQ8kFvL/Z6Y0Pm Gvy3UouwUI4+zWyh9RLNJfN8SzrcECjJOHZMcWlgTrfBS2liWytanRqeoWoORbY7 YYucL6rGFYUBlkcIWshqY3aX1bVdRVSzgjxudsvMCg/uc0dwF2Yi6J2vZiMfLBHQ eBdZHNZZ6Cgf0suavn/QLFWUaWLtxFQbR3wvGbs3+9jOb14LNktVdQ== -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:31 2026 by rpki-client