This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1u1tqQ6NXHy0BGkPMTH6FFFiwFE.roa File: 1u1tqQ6NXHy0BGkPMTH6FFFiwFE.roa (raw, json) Hash identifier: caUNBEFRO+g9L2cVAPyKctNW1Qx4UCBiDKFa40buHFs= Subject key identifier: D6:ED:6D:A9:0E:8D:5C:7C:B4:04:69:0F:31:31:FA:14:51:62:C0:51 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D4FAD8D98365754C457944ABBDC2 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1u1tqQ6NXHy0BGkPMTH6FFFiwFE.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60108 IP address blocks: 95.47.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d4:fa:d8:d9:83:65:75:4c:45:79:44:ab:bd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6ed6da90e8d5c7cb404690f3131fa145162c051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:fa:70:ad:68:37:05:b2:45:ee:3f:2d:6d: 9e:79:a0:2f:91:ff:72:89:8d:96:04:e5:9c:b2:0d: 40:f0:77:42:65:f2:ef:16:73:c5:3c:1c:b9:54:40: bd:cb:9c:bd:90:6d:77:8a:dd:1a:53:48:e6:52:cf: be:6a:6b:a5:df:74:80:d5:33:53:b6:61:be:6b:fc: e3:9d:38:d0:0c:56:02:50:ba:a7:2f:d6:6e:5e:b8: 9b:3e:c2:4c:b7:aa:ff:d5:92:a8:f1:e8:5d:4f:f3: c8:81:41:8d:7a:30:0e:87:b4:db:23:ef:32:a1:6d: 8e:16:ec:7a:f4:cc:f2:6a:9f:1e:82:57:3b:1d:c4: b9:29:75:04:d5:5c:51:38:d6:2a:36:79:56:99:59: 16:2a:65:80:aa:8b:80:ee:3a:f5:81:e7:a6:0a:72: 09:42:52:12:e9:00:e9:26:d3:79:9b:b6:6f:7a:3e: 1b:4c:a0:bf:16:5a:c0:e0:42:fb:5d:d5:b1:7c:26: 41:0b:b7:94:2f:04:1e:7b:db:90:be:b9:b8:bf:84: 4a:58:2a:fe:5d:23:39:3e:ef:0c:1d:76:d7:cf:3c: c9:5c:e1:53:03:60:93:a6:d3:b9:76:4a:f2:c8:90: 6d:95:43:52:dd:3c:9f:e6:f9:ef:44:90:b9:c9:fd: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:6D:A9:0E:8D:5C:7C:B4:04:69:0F:31:31:FA:14:51:62:C0:51 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1u1tqQ6NXHy0BGkPMTH6FFFiwFE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.140.0/24 Signature Algorithm: sha256WithRSAEncryption 08:85:32:27:85:1f:ec:d9:48:6f:99:c2:2b:c8:26:d0:eb:45: df:db:d0:ff:c9:bd:99:de:cd:c5:70:07:14:c9:0d:12:99:1a: cb:73:1f:44:9d:19:a0:3e:cc:1e:75:cd:26:2b:ca:6b:d7:bc: 70:6c:91:e5:d2:a4:2b:b1:00:0e:d9:d0:b1:8c:2d:df:76:7b: 28:0a:49:5f:14:c9:3d:fb:54:07:c7:91:0b:0e:7d:ea:e4:10: 71:b5:60:83:c8:0d:82:b3:48:a2:6a:0c:f5:d6:67:13:02:29: 3a:3a:0e:37:3c:dd:c4:40:77:61:d2:fa:de:87:53:f3:4d:de: 91:f6:72:ee:f2:10:90:36:3b:ec:a5:63:95:be:69:cd:ce:1c: f3:b9:c2:63:9d:47:a0:33:ca:81:97:f3:0a:c7:cb:b4:d1:46: 38:54:9f:64:76:d6:00:43:bd:b4:c8:40:b9:4d:f3:83:0b:df: cb:98:c3:39:c3:21:ff:07:32:e5:56:3c:92:02:8c:f4:6b:2f: 7e:43:2d:6d:13:d0:83:4e:e9:a7:78:5e:b2:cc:cf:85:0a:3c: 4f:1a:9b:ab:e7:d1:4e:b8:b3:fd:ae:4c:54:fa:af:26:c3:0b: 7e:53:f3:ff:00:a5:b9:1c:2c:5e:ec:bf:f3:dd:75:6d:28:2a: 36:6d:f1:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hNT62NmDZXVMRXlEq73CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmVkNmRhOTBlOGQ1YzdjYjQwNDY5MGYzMTMxZmExNDUxNjJjMDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAH6cK1oNwWyRe4/LW2eeaAvkf9y iY2WBOWcsg1A8HdCZfLvFnPFPBy5VEC9y5y9kG13it0aU0jmUs++amul33SA1TNT tmG+a/zjnTjQDFYCULqnL9ZuXribPsJMt6r/1ZKo8ehdT/PIgUGNejAOh7TbI+8y oW2OFux69Mzyap8eglc7HcS5KXUE1VxRONYqNnlWmVkWKmWAqouA7jr1geemCnIJ QlIS6QDpJtN5m7Zvej4bTKC/FlrA4EL7XdWxfCZBC7eULwQee9uQvrm4v4RKWCr+ XSM5Pu8MHXbXzzzJXOFTA2CTptO5dkryyJBtlUNS3Tyf5vnvRJC5yf0gewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNbtbakOjVx8tARpDzEx+hRRYsBRMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvMXUxdHFRNk5YSHkwQkdrUE1USDZGRkZpd0ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+MMA0G CSqGSIb3DQEBCwUAA4IBAQAIhTInhR/s2UhvmcIryCbQ60Xf29D/yb2Z3s3FcAcU yQ0SmRrLcx9EnRmgPswedc0mK8pr17xwbJHl0qQrsQAO2dCxjC3fdnsoCklfFMk9 +1QHx5ELDn3q5BBxtWCDyA2Cs0iiagz11mcTAik6Og43PN3EQHdh0vreh1PzTd6R 9nLu8hCQNjvspWOVvmnNzhzzucJjnUegM8qBl/MKx8u00UY4VJ9kdtYAQ720yEC5 TfODC9/LmMM5wyH/BzLlVjySAoz0ay9+Qy1tE9CDTumneF6yzM+FCjxPGpur59FO uLP9rkxU+q8mwwt+U/P/AKW5HCxe7L/z3XVtKCo2bfEC -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:57 2026 by rpki-client