This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4uYtmSSIrRQDJ-u33NsrF3j5MdU.roa File: 4uYtmSSIrRQDJ-u33NsrF3j5MdU.roa (raw, json) Hash identifier: cQ7PTtiDEkyhSfzD/wdcs/uQfm466FWEndH8ApQeseE= Subject key identifier: E2:E6:2D:99:24:88:AD:14:03:27:EB:B7:DC:DB:2B:17:78:F9:31:D5 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850EEC9571920205C58820F0AFDADF Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4uYtmSSIrRQDJ-u33NsrF3j5MdU.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211433 IP address blocks: 92.38.39.0/24 maxlen: 24 92.253.202.0/24 maxlen: 24 93.170.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:0e:ec:95:71:92:02:05:c5:88:20:f0:af:da:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2e62d992488ad140327ebb7dcdb2b1778f931d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:80:2f:46:77:1f:bf:aa:5d:43:64:d0:e4:4b: 23:4a:a9:15:4a:71:0e:d0:fd:cb:3c:a7:93:67:4b: 24:f9:38:8b:31:58:68:3d:3b:c5:27:0c:92:96:16: a8:47:b9:74:31:9d:de:16:ae:c1:8d:b4:e9:41:df: 7c:29:75:57:4a:8e:64:c4:d8:0b:2e:ee:94:39:d2: 04:a5:d0:0f:6b:bd:b6:9d:89:87:01:14:fb:44:da: 9a:8b:0b:4f:68:16:8b:1e:ae:2b:99:11:96:a6:dc: 2c:7d:94:a6:8f:60:0d:03:33:35:99:69:30:23:8c: a2:47:69:68:4e:dd:55:99:61:f9:f4:01:4c:d5:b5: af:c1:ef:51:e5:a5:6d:21:ea:79:19:fe:2b:65:43: ab:ff:4b:39:e6:2c:42:02:0e:5c:2a:9a:73:e4:da: d4:3e:10:c2:7f:d5:16:99:4a:ce:42:08:fd:92:3d: ed:44:b4:14:5f:11:d2:c9:7e:51:50:89:5f:25:c7: 05:a6:a4:b3:4f:92:c1:6a:9e:5c:9b:f7:e2:9d:08: 4e:23:50:bc:17:a7:2f:2a:ff:2c:6c:8f:48:43:1e: 83:8b:5b:8d:34:f2:52:00:53:78:f3:21:d8:a2:49: 6d:df:ae:5d:77:0c:18:ec:88:7f:2d:34:b6:dc:96: 12:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:2D:99:24:88:AD:14:03:27:EB:B7:DC:DB:2B:17:78:F9:31:D5 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/4uYtmSSIrRQDJ-u33NsrF3j5MdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.39.0/24 92.253.202.0/24 93.170.10.0/24 Signature Algorithm: sha256WithRSAEncryption 76:6c:02:26:c2:a2:0d:11:62:99:2d:7f:58:7f:31:6c:61:38: 23:74:78:fe:b1:4f:00:c0:87:a4:09:26:91:a7:04:8d:2b:0e: 36:86:d9:98:71:27:7c:c0:42:f5:3b:41:dc:84:6d:03:1f:f4: f4:e9:a0:f1:b2:9e:67:ff:33:b5:0c:a9:c3:3d:9f:08:a8:50: 7c:e4:0f:a4:23:89:64:93:84:a8:71:f8:67:d9:dd:47:a1:7f: 6f:d9:2c:68:bc:ad:bd:b3:37:4a:95:ca:ae:cb:d9:cf:b3:ec: dc:22:56:24:ad:1f:87:bc:be:f6:02:9c:c2:b1:2e:96:fd:95: 32:9a:15:ae:b7:31:20:ed:d1:a2:c3:93:f7:b4:14:6c:c6:2e: 51:ba:c7:01:df:86:40:8a:29:79:c4:23:57:33:d2:50:da:7c: c0:bf:cd:4f:1e:ee:cb:50:94:e6:5a:84:35:54:50:11:75:a2: eb:70:db:43:f3:6e:a1:dd:72:4b:0a:5d:56:ee:ce:bf:47:6a: 4a:71:c0:96:6a:e1:5f:e5:c9:6f:87:b9:18:86:11:59:21:45: ce:aa:64:0b:c2:35:11:7d:ce:76:f8:6c:a0:a3:34:3e:8d:82: 23:ba:ec:fc:dd:40:d2:76:5d:4b:45:32:41:34:59:0a:31:f5: 73:2f:a7:8d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hQ7slXGSAgXFiCDwr9rfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmU2MmQ5OTI0ODhhZDE0MDMyN2ViYjdkY2RiMmIxNzc4ZjkzMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIAvRncfv6pdQ2TQ5EsjSqkVSnEO 0P3LPKeTZ0sk+TiLMVhoPTvFJwySlhaoR7l0MZ3eFq7BjbTpQd98KXVXSo5kxNgL Lu6UOdIEpdAPa722nYmHART7RNqaiwtPaBaLHq4rmRGWptwsfZSmj2ANAzM1mWkw I4yiR2loTt1VmWH59AFM1bWvwe9R5aVtIep5Gf4rZUOr/0s55ixCAg5cKppz5NrU PhDCf9UWmUrOQgj9kj3tRLQUXxHSyX5RUIlfJccFpqSzT5LBap5cm/finQhOI1C8 F6cvKv8sbI9IQx6Di1uNNPJSAFN48yHYoklt365ddwwY7Ih/LTS23JYSBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOLmLZkkiK0UAyfrt9zbKxd4+THVMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvNHVZdG1TU0lyUlFESi11MzNOc3JGM2o1TWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXCYnAwQA XP3KAwQAXaoKMA0GCSqGSIb3DQEBCwUAA4IBAQB2bAImwqINEWKZLX9YfzFsYTgj dHj+sU8AwIekCSaRpwSNKw42htmYcSd8wEL1O0HchG0DH/T06aDxsp5n/zO1DKnD PZ8IqFB85A+kI4lkk4Socfhn2d1HoX9v2SxovK29szdKlcquy9nPs+zcIlYkrR+H vL72ApzCsS6W/ZUymhWutzEg7dGiw5P3tBRsxi5RuscB34ZAiil5xCNXM9JQ2nzA v81PHu7LUJTmWoQ1VFARdaLrcNtD826h3XJLCl1W7s6/R2pKccCWauFf5clvh7kY hhFZIUXOqmQLwjURfc52+GygozQ+jYIjuuz83UDSdl1LRTJBNFkKMfVzL6eN -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:24 2026 by rpki-client