This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9bZekM-x2JIZDtNQ_0iIZWSJcSo.roa File: 9bZekM-x2JIZDtNQ_0iIZWSJcSo.roa (raw, json) Hash identifier: 6fqFkiZ/P0taF4eQ6IQT+4DVodAVhC0XNkicfa7e3pA= Subject key identifier: F5:B6:5E:90:CF:B1:D8:92:19:0E:D3:50:FF:48:88:65:64:89:71:2A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E68108AE7045F4E51FDE0A300370 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9bZekM-x2JIZDtNQ_0iIZWSJcSo.roa Signing time: Fri 02 Jan 2026 16:22:54 +0000 ROA not before: Fri 02 Jan 2026 16:22:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62314 IP address blocks: 92.38.32.0/24 maxlen: 24 92.38.95.0/24 maxlen: 24 93.170.190.0/24 maxlen: 24 93.170.250.0/23 maxlen: 24 93.171.178.0/23 maxlen: 24 146.120.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e6:81:08:ae:70:45:f4:e5:1f:de:0a:30:03:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b65e90cfb1d892190ed350ff4888656489712a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:d3:06:6b:31:a9:61:26:51:9e:b7:7f:00: 03:8f:53:fa:fb:50:33:a2:a0:59:14:b5:e2:a3:d8: cf:1f:19:58:3e:cc:0e:9d:aa:2e:0d:4c:69:8f:71: 19:8c:0d:d7:c4:53:8b:b4:57:0c:56:e8:7f:17:d7: 13:e0:6f:5b:9d:81:51:b8:f3:55:20:20:bb:8e:e1: a0:5c:9c:d5:0f:9a:be:43:65:a7:95:db:9b:fb:59: f2:ca:da:ae:e0:ae:3e:70:77:31:5d:c0:dd:04:0b: 7c:10:a6:c7:73:4a:c2:1f:23:43:64:c4:20:aa:98: 21:1b:e2:10:ee:ea:00:d8:2c:6e:ce:a1:50:a9:8b: 49:b4:1e:a0:01:13:7b:ef:f5:5b:81:85:26:5c:a6: 28:55:e1:80:4d:07:cd:58:28:ec:bb:ed:62:70:cb: 08:c9:a0:9b:e6:1e:63:cc:cb:78:a3:15:8a:2a:62: 30:1e:41:a6:90:9c:7b:c0:fd:16:56:52:99:65:da: bc:8a:fd:52:39:6f:e7:37:f1:61:b1:95:6f:cd:92: 9f:0c:3d:5b:2a:80:c4:4c:68:49:e1:53:43:71:cf: d8:b5:85:6d:c1:22:db:fb:09:12:7e:fa:49:a4:90: 72:65:ee:77:fd:7a:b3:4e:6c:f7:04:8f:8d:c1:83: af:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B6:5E:90:CF:B1:D8:92:19:0E:D3:50:FF:48:88:65:64:89:71:2A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9bZekM-x2JIZDtNQ_0iIZWSJcSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.32.0/24 92.38.95.0/24 93.170.190.0/24 93.170.250.0/23 93.171.178.0/23 146.120.91.0/24 Signature Algorithm: sha256WithRSAEncryption 22:c6:4d:07:2c:f9:21:0d:e7:ad:19:5a:eb:39:f3:49:f2:cb: 76:65:cd:35:e0:6f:d4:fe:30:7b:4c:b9:69:2f:14:2b:3e:0c: 31:af:07:14:7f:42:2d:84:6a:a6:27:74:de:a2:cc:b9:79:fc: 12:e2:8a:82:09:3f:4d:8c:15:ff:46:7c:69:e9:ac:1a:6d:9c: d9:0b:1a:82:7b:61:a8:19:28:80:74:b0:13:d2:0e:b1:da:bb: 29:03:58:f6:7b:eb:9a:db:11:34:62:11:b7:36:5b:c6:f9:13: a3:fd:6a:19:ee:20:98:e3:c0:83:a7:aa:6e:ab:47:fc:1c:4a: cd:5d:e0:85:e0:c7:4e:b2:3d:06:77:be:9a:6a:38:ea:9c:77: c2:e4:9b:7b:62:db:b1:43:27:c7:34:42:9c:6c:1a:53:ed:81: 21:43:82:60:5d:29:5d:03:e5:94:63:40:44:cc:35:3e:06:36: 60:2f:f7:17:7d:04:fa:b4:03:35:7a:32:4f:53:86:46:b3:52: ca:d2:bf:54:7b:57:26:5d:e7:ef:5b:d8:f8:58:4c:e0:c4:a5: 80:dd:a2:41:a5:5b:86:a8:98:99:30:53:b9:18:d6:b4:70:e0: 6b:12:38:ae:50:96:24:56:cb:63:57:e2:52:5e:df:b1:b2:49: 41:f0:4b:0d -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hOaBCK5wRfTlH94KMANwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWI2NWU5MGNmYjFkODkyMTkwZWQzNTBmZjQ4ODg2NTY0ODk3MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02PTBmsxqWEmUZ63fwADj1P6+1Az oqBZFLXio9jPHxlYPswOnaouDUxpj3EZjA3XxFOLtFcMVuh/F9cT4G9bnYFRuPNV ICC7juGgXJzVD5q+Q2Wnldub+1nyytqu4K4+cHcxXcDdBAt8EKbHc0rCHyNDZMQg qpghG+IQ7uoA2CxuzqFQqYtJtB6gARN77/VbgYUmXKYoVeGATQfNWCjsu+1icMsI yaCb5h5jzMt4oxWKKmIwHkGmkJx7wP0WVlKZZdq8iv1SOW/nN/FhsZVvzZKfDD1b KoDETGhJ4VNDcc/YtYVtwSLb+wkSfvpJpJByZe53/XqzTmz3BI+NwYOvxQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPW2XpDPsdiSGQ7TUP9IiGVkiXEqMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvOWJaZWtNLXgySklaRHROUV8waUlaV1NKY1NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAXCYgAwQA XCZfAwQAXaq+AwQBXar6AwQBXauyAwQAknhbMA0GCSqGSIb3DQEBCwUAA4IBAQAi xk0HLPkhDeetGVrrOfNJ8st2Zc014G/U/jB7TLlpLxQrPgwxrwcUf0IthGqmJ3Te osy5efwS4oqCCT9NjBX/Rnxp6awabZzZCxqCe2GoGSiAdLAT0g6x2rspA1j2e+ua 2xE0YhG3NlvG+ROj/WoZ7iCY48CDp6puq0f8HErNXeCF4MdOsj0Gd76aajjqnHfC 5Jt7YtuxQyfHNEKcbBpT7YEhQ4JgXSldA+WUY0BEzDU+BjZgL/cXfQT6tAM1ejJP U4ZGs1LK0r9Ue1cmXefvW9j4WEzgxKWA3aJBpVuGqJiZMFO5GNa0cOBrEjiuUJYk VstjV+JSXt+xsklB8EsN -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:58 2026 by rpki-client