This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-d_Ik3GTCbacS2DhbLFkIzA2VKA.roa File: 1-d_Ik3GTCbacS2DhbLFkIzA2VKA.roa (raw, json) Hash identifier: XCloCg93Yjxz1KCZ1b1EuouvKqvNLMuOTWAvhG5D78w= Subject key identifier: F9:DF:C8:93:71:93:09:B6:9C:4B:60:E1:6C:B1:64:23:30:36:54:A0 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C6A35D343A273969D7E5F6033890 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-d_Ik3GTCbacS2DhbLFkIzA2VKA.roa Signing time: Fri 02 Jan 2026 16:22:46 +0000 ROA not before: Fri 02 Jan 2026 16:22:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56465 IP address blocks: 95.47.116.0/24 maxlen: 24 95.47.117.0/24 maxlen: 24 146.120.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c6:a3:5d:34:3a:27:39:69:d7:e5:f6:03:38:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9dfc893719309b69c4b60e16cb16423303654a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3c:77:3e:b3:c5:8b:ca:0e:fb:e4:96:bf:e9: 5f:b0:65:dd:5e:42:b4:6e:16:1a:75:b4:ce:31:2a: 57:6e:a5:95:05:88:7d:9c:43:21:c5:6b:e3:d7:14: 43:67:6d:3e:dd:69:98:33:80:80:a1:d5:e9:82:b9: ae:00:db:63:91:fc:04:22:78:f5:6b:4a:7b:d9:22: 4b:94:b3:18:4e:c9:90:49:f2:d7:9f:d8:df:8a:3f: 1d:bb:89:d1:58:c1:fc:4e:75:aa:b6:a7:ac:6a:6a: f7:af:21:22:61:e6:0b:01:2c:9b:b0:ed:a4:cc:df: 12:ac:cc:0a:7c:93:a2:e1:69:5a:3b:7f:c3:ae:e7: 56:a0:20:89:80:de:62:73:22:fd:c5:df:8d:a5:bf: cb:29:1f:a0:7b:eb:b0:d0:31:62:58:49:96:12:ee: e1:4c:70:16:23:92:38:52:6b:5f:bf:bb:51:59:89: d3:bd:42:44:7f:42:bd:56:b1:72:7f:68:41:67:cc: b7:9d:6a:c9:35:18:0a:54:5d:3a:ba:be:a1:49:ec: 09:44:3f:f3:00:96:ec:50:94:95:69:a1:09:3b:49: 87:cc:c8:14:ac:38:4c:40:1b:81:12:41:30:78:20: 75:33:d7:39:c7:b8:9c:47:e2:1c:fe:31:76:c7:e4: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DF:C8:93:71:93:09:B6:9C:4B:60:E1:6C:B1:64:23:30:36:54:A0 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-d_Ik3GTCbacS2DhbLFkIzA2VKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.116.0/23 146.120.95.0/24 Signature Algorithm: sha256WithRSAEncryption b1:53:e6:1b:0c:e9:4e:5b:f9:eb:85:24:a5:21:67:78:61:54: 27:8d:c1:05:51:37:df:97:51:e4:bb:53:2a:95:ab:71:ef:27: 55:5f:93:f0:b2:70:f0:ba:08:45:72:c3:17:c0:23:bd:32:d0: 3b:50:93:93:22:b3:bb:43:58:37:9e:83:4e:81:ff:41:d2:d8: 18:3e:a3:a8:ec:60:dc:22:51:cd:0c:a3:31:fd:61:ce:66:ef: e8:ef:c5:5b:2b:77:53:99:16:93:cd:6c:6d:59:21:32:2e:58: c0:e6:24:86:f6:d1:b3:14:1c:a4:7c:ad:04:cb:b7:e3:56:1b: ac:ca:41:d8:06:97:3e:14:ec:25:68:f6:36:3e:ae:b4:f7:f4: 70:58:83:bb:ae:7d:76:34:f6:48:4c:ce:67:e1:85:55:d1:e4: de:62:fc:7b:4e:a7:91:0c:3a:98:ce:69:73:70:14:16:ce:2f: bf:59:8b:9d:ff:bd:40:39:d0:d8:20:2b:6b:f1:86:da:06:10: c7:c9:c8:66:75:4d:79:93:d4:9b:29:e7:55:c2:b9:5d:b6:52: 49:97:78:2f:34:51:3b:5f:91:71:a7:e4:a1:de:a8:05:ec:cf: 93:2c:9a:1e:1c:f7:54:fd:15:e5:8f:6a:65:13:b7:69:05:2a: 3f:75:14:48 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/hMajXTQ6Jzlp1+X2AziQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWRmYzg5MzcxOTMwOWI2OWM0YjYwZTE2Y2IxNjQyMzMwMzY1NGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDx3PrPFi8oO++SWv+lfsGXdXkK0 bhYadbTOMSpXbqWVBYh9nEMhxWvj1xRDZ20+3WmYM4CAodXpgrmuANtjkfwEInj1 a0p72SJLlLMYTsmQSfLXn9jfij8du4nRWMH8TnWqtqesamr3ryEiYeYLASybsO2k zN8SrMwKfJOi4WlaO3/DrudWoCCJgN5icyL9xd+Npb/LKR+ge+uw0DFiWEmWEu7h THAWI5I4Umtfv7tRWYnTvUJEf0K9VrFyf2hBZ8y3nWrJNRgKVF06ur6hSewJRD/z AJbsUJSVaaEJO0mHzMgUrDhMQBuBEkEweCB1M9c5x7icR+Ic/jF2x+Qt+wIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPnfyJNxkwm2nEtg4WyxZCMwNlSgMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMS1kX0lrM0dUQ2JhY1MyRGhiTEZrSXpBMlZLQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJl ZC8xL2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAV8vdAME AJJ4XzANBgkqhkiG9w0BAQsFAAOCAQEAsVPmGwzpTlv564UkpSFneGFUJ43BBVE3 35dR5LtTKpWrce8nVV+T8LJw8LoIRXLDF8AjvTLQO1CTkyKzu0NYN56DToH/QdLY GD6jqOxg3CJRzQyjMf1hzmbv6O/FWyt3U5kWk81sbVkhMi5YwOYkhvbRsxQcpHyt BMu341YbrMpB2AaXPhTsJWj2Nj6utPf0cFiDu659djT2SEzOZ+GFVdHk3mL8e06n kQw6mM5pc3AUFs4vv1mLnf+9QDnQ2CAra/GG2gYQx8nIZnVNeZPUmynnVcK5XbZS SZd4LzRRO1+Rcafkod6oBezPkyyaHhz3VP0V5Y9qZRO3aQUqP3UUSA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:13 2026 by rpki-client