This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5iazD72HBGtTOCbCytpBxL4i9t8.roa
File: 5iazD72HBGtTOCbCytpBxL4i9t8.roa (raw, json)
Hash identifier: 6Qqcab1irTaj2TPPimLCL7CkI+0KOmaRkmaRl03BpQQ=
Subject key identifier: E6:26:B3:0F:BD:87:04:6B:53:38:26:C2:CA:DA:41:C4:BE:22:F6:DF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F84FD4133FCDAA869BFDBCCE7556BF5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5iazD72HBGtTOCbCytpBxL4i9t8.roa
Signing time: Fri 02 Jan 2026 16:23:00 +0000
ROA not before: Fri 02 Jan 2026 16:23:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207154
IP address blocks: 92.253.192.0/22 maxlen: 24
93.170.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:fd:41:33:fc:da:a8:69:bf:db:cc:e7:55:6b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:23:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e626b30fbd87046b533826c2cada41c4be22f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:46:b1:9b:b3:39:cc:f7:39:14:bf:ed:7d:96:
c4:c2:d0:ca:7c:56:4b:80:cf:9b:bc:d0:61:c9:96:
7e:36:28:21:f6:59:c7:45:d2:c2:48:42:24:cf:19:
37:e7:49:f0:4a:80:81:51:f1:e6:b1:24:7b:73:53:
04:0f:17:c8:40:97:ab:bd:22:02:62:f2:5a:28:b5:
5d:9a:26:62:9e:8d:ee:b1:9b:b4:63:68:9d:ad:09:
e7:fc:cd:b3:21:e1:8b:7b:a2:94:7f:9f:11:43:3d:
ed:f0:7b:23:a9:98:c1:fd:b8:a5:a1:b1:ef:ff:b9:
9f:66:dd:c1:fa:cf:24:71:b6:a4:a8:d4:5c:09:33:
5d:2f:98:56:32:1f:55:e8:56:a0:94:da:c7:99:af:
f7:39:89:b5:cf:9b:fe:12:75:a9:a8:17:18:8e:56:
36:04:bf:cb:db:79:ce:b6:1c:d5:30:81:00:0c:09:
ea:a3:eb:4b:5f:d1:51:26:ea:16:ab:0f:35:84:0b:
72:d4:26:84:33:8c:9b:e7:2a:9f:f5:8b:00:98:c8:
7f:0c:3b:04:b1:80:cf:6f:25:1c:1e:74:64:ef:30:
f0:08:d9:57:f7:6a:bf:9a:72:aa:f2:85:ae:89:61:
cb:26:55:d6:b5:68:42:bb:4b:12:d8:83:1e:25:91:
57:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:B3:0F:BD:87:04:6B:53:38:26:C2:CA:DA:41:C4:BE:22:F6:DF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5iazD72HBGtTOCbCytpBxL4i9t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.253.192.0/22
93.170.220.0/22
Signature Algorithm: sha256WithRSAEncryption
24:c3:6f:31:93:f4:fe:62:0c:39:ec:4b:15:97:81:ec:ea:0e:
71:b9:50:31:f8:24:4b:07:84:67:93:a5:ed:85:44:76:10:4b:
60:b7:1d:20:f1:25:22:f0:03:85:70:ae:c1:28:1e:5f:61:53:
26:6b:56:ab:d5:84:90:d9:61:dc:49:aa:6d:62:e7:e5:42:f9:
6a:fd:0f:e1:da:42:5e:90:06:ba:f5:65:a5:6b:eb:08:24:1a:
7c:eb:9e:43:e7:42:99:3d:17:ec:01:cc:8d:11:7a:ca:c4:7d:
d4:b6:9b:fd:b9:a0:69:20:98:33:9b:46:3f:24:80:67:27:da:
45:e3:ee:91:a5:70:82:f8:a9:26:79:6a:0d:14:d2:c8:f4:54:
b9:bd:eb:5e:2f:a5:b9:12:56:44:b6:68:7b:71:da:58:09:fc:
02:84:63:b5:d2:84:0c:09:92:ee:da:f5:97:cb:96:9a:aa:94:
7e:b2:d0:20:d3:60:50:f2:6e:57:67:84:11:bd:bd:ce:f9:ef:
8e:a3:59:ff:67:3e:2b:9f:33:25:08:36:ab:26:e7:b2:48:b9:
6f:c8:78:4b:55:fe:c0:56:f1:af:b4:5e:31:49:39:dd:c2:1b:
c8:1d:a9:c2:1f:9e:c8:2a:df:01:b9:d0:02:db:26:a3:75:94:
27:83:0d:c9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt/hP1BM/zaqGm/28znVWv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjI2YjMwZmJkODcwNDZiNTMzODI2YzJjYWRhNDFjNGJlMjJmNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Eaxm7M5zPc5FL/tfZbEwtDKfFZL
gM+bvNBhyZZ+Nigh9lnHRdLCSEIkzxk350nwSoCBUfHmsSR7c1MEDxfIQJervSIC
YvJaKLVdmiZino3usZu0Y2idrQnn/M2zIeGLe6KUf58RQz3t8HsjqZjB/bilobHv
/7mfZt3B+s8kcbakqNRcCTNdL5hWMh9V6FaglNrHma/3OYm1z5v+EnWpqBcYjlY2
BL/L23nOthzVMIEADAnqo+tLX9FRJuoWqw81hAty1CaEM4yb5yqf9YsAmMh/DDsE
sYDPbyUcHnRk7zDwCNlX92q/mnKq8oWuiWHLJlXWtWhCu0sS2IMeJZFXwwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOYmsw+9hwRrUzgmwsraQcS+IvbfMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvNWlhekQ3MkhCR3RUT0NiQ3l0cEJ4TDRpOXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXP3AAwQC
XarcMA0GCSqGSIb3DQEBCwUAA4IBAQAkw28xk/T+Ygw57EsVl4Hs6g5xuVAx+CRL
B4Rnk6XthUR2EEtgtx0g8SUi8AOFcK7BKB5fYVMma1ar1YSQ2WHcSaptYuflQvlq
/Q/h2kJekAa69WWla+sIJBp8655D50KZPRfsAcyNEXrKxH3Utpv9uaBpIJgzm0Y/
JIBnJ9pF4+6RpXCC+KkmeWoNFNLI9FS5veteL6W5ElZEtmh7cdpYCfwChGO10oQM
CZLu2vWXy5aaqpR+stAg02BQ8m5XZ4QRvb3O+e+Oo1n/Zz4rnzMlCDarJueySLlv
yHhLVf7AVvGvtF4xSTndwhvIHanCH57IKt8BudAC2yajdZQngw3J
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:16:13 2026 by rpki-client