This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3X1X37hqPojaQjLWGKl1RkYjwa4.roa File: 3X1X37hqPojaQjLWGKl1RkYjwa4.roa (raw, json) Hash identifier: IKey1Gyhq4QJfNmdDhzuRmbeszgpo9zIZ+QWR207/ak= Subject key identifier: DD:7D:57:DF:B8:6A:3E:88:DA:42:32:D6:18:A9:75:46:46:23:C1:AE Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E6BD3A0E26AF7D74C064D00D11D9 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3X1X37hqPojaQjLWGKl1RkYjwa4.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62327 IP address blocks: 93.170.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e6:bd:3a:0e:26:af:7d:74:c0:64:d0:0d:11:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd7d57dfb86a3e88da4232d618a975464623c1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:19:15:1e:40:3b:3c:4f:f5:58:2a:3a:46: 17:cd:f4:99:53:f0:86:69:54:ed:81:ea:d3:3b:60: b0:cd:a1:47:1e:fa:72:b6:8f:a9:b0:87:01:19:d2: 49:ab:54:cc:31:7b:e8:8c:84:e3:34:8c:62:d2:fa: 01:ed:37:12:44:64:8f:69:72:0b:c9:8e:22:e1:fb: bb:30:c2:d5:71:1a:03:a8:3a:85:8f:3a:7d:de:27: fb:76:2f:81:a4:6e:b8:7d:e3:de:5c:33:49:7e:d4: 13:9a:1b:b6:1d:fc:c3:e0:94:94:a0:7d:c3:6d:41: 28:d1:20:5e:be:fa:f0:0b:1c:0a:60:b1:4c:36:43: d2:5c:7d:6f:18:49:22:21:a0:86:6e:23:a1:56:fc: 65:8d:38:9e:4e:84:59:e2:c8:25:fa:21:6c:7a:9b: 01:87:ae:50:41:27:b9:be:18:4f:5a:cc:80:4e:35: 2f:0d:11:03:77:6d:f8:35:64:b3:f6:a9:58:7d:8a: b2:d2:b0:52:c4:50:71:6f:e0:0c:2b:48:15:82:db: 23:d8:1d:10:c0:d8:f5:7f:91:6c:7c:75:39:df:e0: 90:0f:ab:45:c7:91:f5:e6:a1:30:ee:29:75:dd:96: fd:73:ae:49:82:c9:41:69:6c:c8:a3:bd:b8:ed:20: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7D:57:DF:B8:6A:3E:88:DA:42:32:D6:18:A9:75:46:46:23:C1:AE X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3X1X37hqPojaQjLWGKl1RkYjwa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.188.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:30:ed:e2:fc:8e:91:e5:bf:a8:08:ed:10:d0:6d:dc:f1:64: 77:46:83:67:98:43:8a:6c:d5:0c:cf:89:e0:16:f3:66:c2:09: e7:f1:16:b7:81:b5:43:e5:96:da:e0:50:16:7c:1f:a4:52:1c: 2f:ad:c3:60:f3:ee:78:0b:a8:42:cb:d9:ad:16:2c:8f:50:ce: 7d:e0:f2:60:fb:f4:92:5a:39:35:ba:90:55:99:5f:77:ca:f6: bc:31:78:e5:17:5a:ca:7b:52:9b:2f:53:50:05:5b:7d:a4:56: 6b:7e:22:b4:3d:c0:14:90:19:41:d9:4a:02:7f:83:81:f8:be: cf:99:22:42:e8:ce:70:c5:68:b1:f3:6f:a9:42:4a:63:6c:05: dd:1c:75:d1:8f:00:34:8a:e4:7f:6c:e1:a0:11:be:5f:e3:0b: bb:0c:56:2b:4e:61:cf:db:66:d4:c8:51:45:02:14:42:d5:30: e2:05:53:f1:4a:f9:65:34:6f:d8:e9:e5:30:b7:b0:19:e0:80: 85:be:78:f9:b1:f4:b4:80:42:ea:ce:04:9b:ee:47:a6:7f:a3: 25:6c:10:1e:e9:02:56:a0:03:05:cf:fb:1d:72:74:63:1d:a5: 3e:e9:34:e3:87:62:d6:0a:60:23:35:9a:07:06:84:5e:85:03: 0e:bc:4a:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOa9Og4mr310wGTQDRHZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdkNTdkZmI4NmEzZTg4ZGE0MjMyZDYxOGE5NzU0NjQ2MjNjMWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn64ZFR5AOzxP9VgqOkYXzfSZU/CG aVTtgerTO2CwzaFHHvpyto+psIcBGdJJq1TMMXvojITjNIxi0voB7TcSRGSPaXIL yY4i4fu7MMLVcRoDqDqFjzp93if7di+BpG64fePeXDNJftQTmhu2HfzD4JSUoH3D bUEo0SBevvrwCxwKYLFMNkPSXH1vGEkiIaCGbiOhVvxljTieToRZ4sgl+iFsepsB h65QQSe5vhhPWsyATjUvDREDd234NWSz9qlYfYqy0rBSxFBxb+AMK0gVgtsj2B0Q wNj1f5FsfHU53+CQD6tFx5H15qEw7il13Zb9c65JgslBaWzIo7247SC33wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN19V9+4aj6I2kIy1hipdUZGI8GuMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvM1gxWDM3aHFQb2phUWpMV0dLbDFSa1lqd2E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXaq8MA0G CSqGSIb3DQEBCwUAA4IBAQCMMO3i/I6R5b+oCO0Q0G3c8WR3RoNnmEOKbNUMz4ng FvNmwgnn8Ra3gbVD5Zba4FAWfB+kUhwvrcNg8+54C6hCy9mtFiyPUM594PJg+/SS Wjk1upBVmV93yva8MXjlF1rKe1KbL1NQBVt9pFZrfiK0PcAUkBlB2UoCf4OB+L7P mSJC6M5wxWix82+pQkpjbAXdHHXRjwA0iuR/bOGgEb5f4wu7DFYrTmHP22bUyFFF AhRC1TDiBVPxSvllNG/Y6eUwt7AZ4ICFvnj5sfS0gELqzgSb7kemf6MlbBAe6QJW oAMFz/sdcnRjHaU+6TTjh2LWCmAjNZoHBoRehQMOvErG -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:41 2026 by rpki-client