This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3oIv_VZf5DZDtH_nFqelqPW9-50.roa File: 3oIv_VZf5DZDtH_nFqelqPW9-50.roa (raw, json) Hash identifier: s4zFbdOXZ7x8O7BZmnWHJQj4x7IzQfzz+XbxIISzAvg= Subject key identifier: DE:82:2F:FD:56:5F:E4:36:43:B4:7F:E7:16:A7:A5:A8:F5:BD:FB:9D Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D16299ECE0CB822A9EF77500E46A Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3oIv_VZf5DZDtH_nFqelqPW9-50.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59762 IP address blocks: 93.170.97.0/24 maxlen: 24 93.170.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d1:62:99:ec:e0:cb:82:2a:9e:f7:75:00:e4:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de822ffd565fe43643b47fe716a7a5a8f5bdfb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:72:b6:f3:1c:7c:1c:15:86:90:dc:11:52: 65:75:9d:f0:73:55:2b:3b:4e:86:73:07:14:ee:ca: 15:f4:14:b7:e3:d5:6f:5d:78:24:53:b4:fa:14:4b: 26:ab:a1:c7:94:17:a5:97:5c:dc:42:9f:cf:4f:a4: 4a:ab:e8:05:89:ca:6d:9f:37:50:0b:0a:2c:35:7b: eb:d0:3f:de:6c:c5:7b:76:34:2d:01:cc:b8:82:dd: b6:df:1e:a1:c9:07:84:29:69:67:25:d2:30:64:45: e2:8f:8b:96:2c:89:84:5d:00:a8:23:f9:4a:44:1a: 50:6f:e2:16:03:82:ea:bd:cf:e6:67:42:01:bc:5b: 48:d6:c1:b8:60:5f:b5:fd:c2:31:8b:be:cf:6d:f9: ce:68:77:9e:29:b8:17:ca:d3:ed:39:5a:af:f1:63: 03:eb:3d:1a:3c:2d:03:54:7d:7f:88:ff:eb:52:9b: 02:95:ef:09:93:51:18:21:e0:90:c9:43:da:93:6b: c4:cb:01:cf:10:1e:d5:df:0a:38:a2:d1:59:61:99: 37:5a:0b:8b:9b:7b:80:63:05:0d:f5:f0:2e:1e:f8: 49:80:34:00:1a:7f:e7:5c:44:c6:6b:14:35:34:9f: f8:f8:fd:e9:77:c7:99:e0:36:58:8e:3e:6a:14:1b: 8e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:82:2F:FD:56:5F:E4:36:43:B4:7F:E7:16:A7:A5:A8:F5:BD:FB:9D X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3oIv_VZf5DZDtH_nFqelqPW9-50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.97.0/24 93.170.253.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:16:ae:ef:5c:f7:ba:a2:38:99:d7:67:18:8d:45:9c:25:47: db:f9:96:70:57:d5:03:5e:8c:39:cc:f5:dc:e7:85:ce:0c:a6: 03:aa:5c:5c:66:4e:41:09:9c:61:6b:e3:59:fe:ce:61:06:3f: 88:52:9a:3b:38:a0:56:d7:5e:70:14:f9:ff:a2:34:13:3d:46: fc:1a:02:fa:5f:e2:78:ad:26:57:a9:88:c2:4d:dc:fe:2d:3f: f3:26:69:56:ce:b8:89:e1:69:7f:17:69:76:bb:65:24:17:8c: 9e:7a:88:2d:41:95:4b:a1:f0:28:16:49:9e:62:a6:e9:2b:61: ab:ad:02:59:7f:ab:20:07:82:6f:6e:6e:4d:11:ae:03:54:1c: 52:e0:21:f6:26:1d:46:dc:14:ac:96:85:07:74:90:6b:2d:ab: a2:23:b2:80:93:48:0f:48:5a:0f:da:b5:75:96:c4:f2:10:e8: b5:87:93:42:20:f2:ab:c8:10:6f:7a:3c:ee:f0:4a:ec:56:47: 65:36:0d:31:b0:4d:0a:61:e4:77:54:fc:14:c1:60:e5:e4:69: 60:0e:3d:4a:76:1b:36:3b:b2:4e:55:f6:1e:42:c3:0e:b7:48: 34:3e:f0:7c:82:d2:50:14:2c:61:e9:72:49:e6:65:e0:54:32: 7f:ee:a9:4c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hNFimezgy4Iqnvd1AORqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTgyMmZmZDU2NWZlNDM2NDNiNDdmZTcxNmE3YTVhOGY1YmRmYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZytvMcfBwVhpDcEVJldZ3wc1Ur O06GcwcU7soV9BS349VvXXgkU7T6FEsmq6HHlBell1zcQp/PT6RKq+gFicptnzdQ CwosNXvr0D/ebMV7djQtAcy4gt223x6hyQeEKWlnJdIwZEXij4uWLImEXQCoI/lK RBpQb+IWA4Lqvc/mZ0IBvFtI1sG4YF+1/cIxi77PbfnOaHeeKbgXytPtOVqv8WMD 6z0aPC0DVH1/iP/rUpsCle8Jk1EYIeCQyUPak2vEywHPEB7V3wo4otFZYZk3WguL m3uAYwUN9fAuHvhJgDQAGn/nXETGaxQ1NJ/4+P3pd8eZ4DZYjj5qFBuOtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN6CL/1WX+Q2Q7R/5xanpaj1vfudMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvM29Jdl9WWmY1RFpEdEhfbkZxZWxxUFc5LTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXaphAwQA Xar9MA0GCSqGSIb3DQEBCwUAA4IBAQBuFq7vXPe6ojiZ12cYjUWcJUfb+ZZwV9UD Xow5zPXc54XODKYDqlxcZk5BCZxha+NZ/s5hBj+IUpo7OKBW115wFPn/ojQTPUb8 GgL6X+J4rSZXqYjCTdz+LT/zJmlWzriJ4Wl/F2l2u2UkF4yeeogtQZVLofAoFkme YqbpK2GrrQJZf6sgB4Jvbm5NEa4DVBxS4CH2Jh1G3BSsloUHdJBrLauiI7KAk0gP SFoP2rV1lsTyEOi1h5NCIPKryBBvejzu8ErsVkdlNg0xsE0KYeR3VPwUwWDl5Glg Dj1Kdhs2O7JOVfYeQsMOt0g0PvB8gtJQFCxh6XJJ5mXgVDJ/7qlM -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:19 2026 by rpki-client