This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-PE3TrzpVyXmtD6L7dL0V8Eykzo.roa File: 1-PE3TrzpVyXmtD6L7dL0V8Eykzo.roa (raw, json) Hash identifier: 1MZGTCNuYpVv0pZX8mE+iGDNA8SdMiHHUoyg1NjW4Sc= Subject key identifier: F8:F1:37:4E:BC:E9:57:25:E6:B4:3E:8B:ED:D2:F4:57:C1:32:93:3A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F849CDC0EC78BC1CAB4F2E79ACC4286 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-PE3TrzpVyXmtD6L7dL0V8Eykzo.roa Signing time: Fri 02 Jan 2026 16:22:35 +0000 ROA not before: Fri 02 Jan 2026 16:22:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41773 IP address blocks: 93.170.26.0/24 maxlen: 24 95.47.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9c:dc:0e:c7:8b:c1:ca:b4:f2:e7:9a:cc:42:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8f1374ebce95725e6b43e8bedd2f457c132933a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:a3:62:e0:ea:93:87:06:2f:1b:1c:67:02: df:c4:88:98:fe:e9:b9:15:8b:0d:88:8d:7d:b7:46: 60:87:cf:a2:97:99:3a:69:22:63:1a:b2:c6:69:55: 1f:76:b7:29:6d:c8:a7:3c:7e:92:11:60:15:6a:ad: 60:53:bd:4f:09:c9:7d:34:c8:06:b4:5b:c9:0d:54: 84:26:9b:41:ce:0b:a7:60:8d:bf:05:68:cb:bb:7f: a5:54:04:16:2e:4f:ad:b2:2b:3f:6f:9c:4d:b7:16: da:83:b9:c2:8b:48:14:a2:ac:f9:8a:97:56:73:59: 83:a2:aa:96:d3:22:5c:f0:d0:f8:98:5f:48:13:2e: cb:e1:fa:c8:5e:60:24:45:28:05:dd:61:2d:a8:4d: 99:e7:2d:51:90:7c:06:48:b3:73:75:49:e3:0f:17: cd:1a:c1:da:72:1b:71:29:80:92:4a:71:6d:54:4f: 2a:bd:93:a2:1d:bd:b3:e7:9a:82:d3:00:d9:e5:b7: e5:89:2f:22:c6:e9:c6:05:01:d2:c4:7b:b2:cb:67: e3:c7:03:c0:36:26:b7:a6:68:81:c0:cd:fd:90:39: 52:48:9e:84:cc:b2:c3:6d:40:10:e8:10:b9:69:77: f7:4c:c1:9c:b5:b1:1c:5c:1b:94:18:35:74:37:23: 9e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F1:37:4E:BC:E9:57:25:E6:B4:3E:8B:ED:D2:F4:57:C1:32:93:3A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-PE3TrzpVyXmtD6L7dL0V8Eykzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.26.0/24 95.47.250.0/23 Signature Algorithm: sha256WithRSAEncryption 13:f3:f3:8b:66:25:e4:95:23:bb:2c:e2:92:1b:89:3a:60:90: cf:ca:80:de:06:0f:92:f5:b2:cd:fc:ed:96:ae:03:a8:0a:57: f7:99:82:9d:99:0a:f0:0a:64:09:b2:e4:fe:2a:1f:2c:cd:03: 36:23:a5:f7:98:71:62:3b:f3:af:bc:37:e9:1c:65:0d:00:58: 4a:dd:44:83:33:68:70:35:0a:d2:40:2f:2a:6a:45:b3:03:a0: c0:d9:88:5d:40:86:95:8d:a4:6e:d1:b5:c7:d0:8d:bd:b0:a0: 49:12:e4:2d:6d:6f:de:4c:c5:1c:04:fb:b3:ee:69:79:dd:e3: 83:ec:33:c2:12:c7:66:51:30:a8:af:c0:6f:53:62:44:20:a7: 09:c8:62:4b:a9:32:c3:0d:31:af:19:bd:62:c5:b6:79:5c:84: 1a:91:1f:f3:0e:11:7e:49:42:81:f6:d1:e8:d7:57:28:c4:65: 27:13:86:32:7f:4f:8c:c1:e1:e1:31:b3:d7:29:8c:46:2c:3b: 47:db:50:0c:25:a9:6f:ed:36:f1:26:4f:fb:28:47:15:61:9d: f6:06:6b:f2:6e:6f:70:52:9c:ad:44:14:5f:70:a6:79:b1:10: 4d:84:42:75:59:39:63:d5:f3:36:9f:58:ca:4e:c5:96:41:5c: 29:ba:b2:e7 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/hJzcDseLwcq08ueazEKGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGYxMzc0ZWJjZTk1NzI1ZTZiNDNlOGJlZGQyZjQ1N2MxMzI5MzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2jYuDqk4cGLxscZwLfxIiY/um5 FYsNiI19t0Zgh8+il5k6aSJjGrLGaVUfdrcpbcinPH6SEWAVaq1gU71PCcl9NMgG tFvJDVSEJptBzgunYI2/BWjLu3+lVAQWLk+tsis/b5xNtxbag7nCi0gUoqz5ipdW c1mDoqqW0yJc8ND4mF9IEy7L4frIXmAkRSgF3WEtqE2Z5y1RkHwGSLNzdUnjDxfN GsHachtxKYCSSnFtVE8qvZOiHb2z55qC0wDZ5bfliS8ixunGBQHSxHuyy2fjxwPA Nia3pmiBwM39kDlSSJ6EzLLDbUAQ6BC5aXf3TMGctbEcXBuUGDV0NyOewwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPjxN0686Vcl5rQ+i+3S9FfBMpM6MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMS1QRTNUcnpwVnlYbXRENkw3ZEwwVjhFeWt6by5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF2qGgME AV8v+jANBgkqhkiG9w0BAQsFAAOCAQEAE/Pzi2Yl5JUjuyzikhuJOmCQz8qA3gYP kvWyzfztlq4DqApX95mCnZkK8ApkCbLk/iofLM0DNiOl95hxYjvzr7w36RxlDQBY St1EgzNocDUK0kAvKmpFswOgwNmIXUCGlY2kbtG1x9CNvbCgSRLkLW1v3kzFHAT7 s+5ped3jg+wzwhLHZlEwqK/Ab1NiRCCnCchiS6kyww0xrxm9YsW2eVyEGpEf8w4R fklCgfbR6NdXKMRlJxOGMn9PjMHh4TGz1ymMRiw7R9tQDCWpb+028SZP+yhHFWGd 9gZr8m5vcFKcrUQUX3CmebEQTYRCdVk5Y9XzNp9Yyk7FlkFcKbqy5w== -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:59 2026 by rpki-client