This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8UIN13MEeOTPO7J-gWF0taIKFpU.roa File: 8UIN13MEeOTPO7J-gWF0taIKFpU.roa (raw, json) Hash identifier: rmoYmuUjE3UBLbLXtA2ZIBiIIJI1nBuTq6gCfB8ojXA= Subject key identifier: F1:42:0D:D7:73:04:78:E4:CF:3B:B2:7E:81:61:74:B5:A2:0A:16:95 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A86DC2F265B0610B89901C4404DB Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8UIN13MEeOTPO7J-gWF0taIKFpU.roa Signing time: Fri 02 Jan 2026 16:22:38 +0000 ROA not before: Fri 02 Jan 2026 16:22:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44340 IP address blocks: 146.120.174.0/23 maxlen: 24 146.120.174.0/24 maxlen: 24 146.120.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a8:6d:c2:f2:65:b0:61:0b:89:90:1c:44:04:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1420dd7730478e4cf3bb27e816174b5a20a1695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:39:ee:1a:b8:24:28:b3:e6:f4:f3:77:3d:3c: 97:e3:8e:45:a1:35:95:dc:1e:76:2e:ad:63:2f:c5: 49:4c:01:6a:60:28:17:6c:69:e3:73:00:86:43:d2: a0:e1:94:ea:c1:8e:c7:cc:cf:86:a9:79:60:9a:b0: 15:4d:8e:fe:8d:cf:23:7a:90:08:3d:4b:3f:3b:d8: c5:f6:c1:06:0b:bf:62:8d:fd:fe:c8:2c:53:4c:27: 73:42:14:b7:12:89:b2:20:a0:df:15:24:1a:11:af: aa:b9:6c:4b:4b:03:ce:29:25:52:b7:76:c6:27:10: 1b:f0:05:c4:da:74:34:df:99:eb:c6:c3:0a:20:0f: ec:ea:03:bc:c8:10:67:78:25:b1:90:fb:6e:e0:5d: b0:8a:15:2e:25:40:6d:6f:a7:e9:b2:1b:cb:02:48: 78:86:2a:fe:ca:79:e2:80:03:b1:ef:25:7b:50:7c: af:a0:da:01:bf:3c:32:eb:8c:d8:ac:10:4a:99:ff: 11:48:ac:73:b1:fe:c4:91:a7:ab:f2:fb:e4:62:98: 2d:ca:96:27:c4:0c:b9:68:ba:35:f0:19:b4:da:df: 7f:f0:0d:7f:20:6c:bc:f5:c1:0d:27:b5:55:12:44: d6:6f:e3:65:ba:54:c7:c1:36:a0:c6:52:89:c9:84: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:42:0D:D7:73:04:78:E4:CF:3B:B2:7E:81:61:74:B5:A2:0A:16:95 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8UIN13MEeOTPO7J-gWF0taIKFpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.174.0/23 Signature Algorithm: sha256WithRSAEncryption 51:68:9f:11:e3:9a:ac:ba:28:0b:ba:1d:d5:f8:a4:f8:49:23: 38:cf:0d:a5:f3:76:62:21:b4:af:01:0f:b6:c5:1c:8e:00:1b: 6d:db:0f:6a:2c:58:99:af:96:0f:10:45:c4:59:9d:07:41:e9: 96:23:0e:92:01:ce:42:be:69:63:09:e1:4e:94:d6:8a:89:2f: 32:f0:c8:01:d6:e8:30:d6:ca:cc:d3:8a:b7:93:d8:f5:bc:0c: 31:0a:3e:8a:16:58:af:ee:7e:bd:2b:d2:a2:0b:26:e1:40:55: 75:77:c1:60:d8:a9:33:66:0a:0b:c9:9d:9f:a5:bf:0a:3f:3c: e0:1f:82:e9:8c:d5:f2:f0:a3:cb:b5:f6:03:4c:f6:7e:f9:25: 96:c6:8e:15:16:c0:3e:32:a9:cb:e8:35:9f:16:1d:db:5a:d8: 7b:53:c1:75:b5:19:68:e7:4c:bb:2d:4a:d0:b3:b7:89:cc:92: 0d:0b:8b:af:74:52:bf:99:30:af:f5:55:88:57:40:99:75:db: a2:a4:15:02:b9:5a:3b:a0:8d:68:c5:c6:6a:ef:d9:51:b4:a9: 80:59:4c:41:33:e2:e2:a0:80:cc:ae:12:15:e7:da:43:ac:0f: 9d:75:27:a3:58:61:61:d9:5e:b8:f0:9f:e4:64:90:26:48:77: a2:39:c0:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hKhtwvJlsGELiZAcRATbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTQyMGRkNzczMDQ3OGU0Y2YzYmIyN2U4MTYxNzRiNWEyMGExNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTnuGrgkKLPm9PN3PTyX445FoTWV 3B52Lq1jL8VJTAFqYCgXbGnjcwCGQ9Kg4ZTqwY7HzM+GqXlgmrAVTY7+jc8jepAI PUs/O9jF9sEGC79ijf3+yCxTTCdzQhS3EomyIKDfFSQaEa+quWxLSwPOKSVSt3bG JxAb8AXE2nQ035nrxsMKIA/s6gO8yBBneCWxkPtu4F2wihUuJUBtb6fpshvLAkh4 hir+ynnigAOx7yV7UHyvoNoBvzwy64zYrBBKmf8RSKxzsf7Ekaer8vvkYpgtypYn xAy5aLo18Bm02t9/8A1/IGy89cENJ7VVEkTWb+NlulTHwTagxlKJyYQNOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFCDddzBHjkzzuyfoFhdLWiChaVMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOFVJTjEzTUVlT1RQTzdKLWdXRjB0YUlLRnBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkniuMA0G CSqGSIb3DQEBCwUAA4IBAQBRaJ8R45qsuigLuh3V+KT4SSM4zw2l83ZiIbSvAQ+2 xRyOABtt2w9qLFiZr5YPEEXEWZ0HQemWIw6SAc5CvmljCeFOlNaKiS8y8MgB1ugw 1srM04q3k9j1vAwxCj6KFliv7n69K9KiCybhQFV1d8Fg2KkzZgoLyZ2fpb8KPzzg H4LpjNXy8KPLtfYDTPZ++SWWxo4VFsA+MqnL6DWfFh3bWth7U8F1tRlo50y7LUrQ s7eJzJINC4uvdFK/mTCv9VWIV0CZdduipBUCuVo7oI1oxcZq79lRtKmAWUxBM+Li oIDMrhIV59pDrA+ddSejWGFh2V648J/kZJAmSHeiOcBB -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:55 2026 by rpki-client