This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DHycmUZ0DvH0cC1JqDWcz_Jrwu0.roa File: DHycmUZ0DvH0cC1JqDWcz_Jrwu0.roa (raw, json) Hash identifier: GjvlGn8DR82xT77UP89bNS/WMFMTWyIHy4tbtpewgVk= Subject key identifier: 0C:7C:9C:99:46:74:0E:F1:F4:70:2D:49:A8:35:9C:CF:F2:6B:C2:ED Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8513089FA7D7AF4023CC123ECDD8E7 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DHycmUZ0DvH0cC1JqDWcz_Jrwu0.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212303 IP address blocks: 93.170.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:13:08:9f:a7:d7:af:40:23:cc:12:3e:cd:d8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c7c9c9946740ef1f4702d49a8359ccff26bc2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:e5:fd:0b:fb:94:88:8c:ca:53:60:97:81: 46:8f:e6:56:de:c7:d1:7c:9f:7c:80:5c:ce:c9:5f: bf:89:d7:0e:63:63:5b:1f:12:32:9f:57:68:bb:f7: 8c:d5:a0:65:74:be:2a:62:00:ac:ea:46:0b:27:c2: 76:a6:65:72:12:60:89:65:ec:73:5d:c5:6f:22:9e: dd:9d:d2:70:11:ce:ab:88:9d:11:37:c0:04:8f:f3: c5:c3:04:28:9a:a1:4d:72:c1:da:64:8d:53:21:67: 32:39:c4:01:3a:b6:2b:75:17:18:ce:78:17:42:83: 8c:ee:71:42:25:cd:24:43:39:92:e2:00:0e:89:58: 97:27:7e:b3:25:e2:49:3a:f9:2c:81:26:4e:6b:a4: 6c:f9:c6:ee:73:84:e8:98:4b:03:b5:5d:57:9b:95: c4:e3:89:c7:5e:3b:1d:ee:69:cd:0e:30:4a:c0:6d: 92:12:b9:bf:60:51:c6:56:20:95:e5:6f:30:bf:d4: f8:20:3a:7a:1b:a8:8c:fc:90:90:30:23:53:f2:37: 85:e7:4c:8b:8b:ea:63:3b:40:e0:5b:0b:79:af:32: 29:1b:8c:29:5c:bb:1a:d1:1e:3c:ef:67:d3:e2:4f: d3:ed:da:74:c3:6e:e1:d5:8e:f5:6f:5c:25:f3:ee: ba:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7C:9C:99:46:74:0E:F1:F4:70:2D:49:A8:35:9C:CF:F2:6B:C2:ED X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DHycmUZ0DvH0cC1JqDWcz_Jrwu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.254.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f9:ef:3b:ca:01:4c:27:37:95:6d:b9:4d:90:95:e2:86:f2: f0:f7:9f:d3:5a:08:fe:70:db:60:50:3b:a1:24:74:11:af:7f: 98:eb:7b:9e:77:f8:3a:95:1a:32:c4:39:e1:c3:f3:26:83:e1: ae:00:18:bc:08:cd:e3:d8:09:a5:ce:05:bb:48:0e:1e:3e:2d: 53:1e:aa:c1:cd:ed:89:ce:9f:47:a9:c7:6e:7f:a0:cc:08:bf: 98:21:22:b4:f9:e4:62:62:89:8f:aa:b0:b4:b8:c0:78:48:c8: 6e:2c:5a:d3:4a:c0:91:8d:99:b5:1e:25:e2:04:04:d2:7a:d2: 9f:2b:10:31:a5:94:62:f9:82:97:21:89:f5:d9:a3:63:94:40: f9:3f:c4:c0:54:d8:c9:19:81:8e:cd:33:be:39:aa:35:07:f1: 08:25:3c:ce:66:50:4c:38:90:7c:ab:90:77:97:55:ce:b2:83: 3b:9c:d1:22:87:5a:fb:09:67:31:69:45:30:75:88:ae:78:a6: 91:82:89:51:d2:14:a0:c7:d6:3e:8f:b1:16:9c:6c:c9:fa:76: 7d:73:c1:95:52:d9:02:99:20:81:91:74:53:ef:02:0e:97:3d: 72:0d:1e:55:0b:e4:ce:a4:34:7b:4e:08:2f:e5:28:65:d9:12: 95:60:41:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRMIn6fXr0AjzBI+zdjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzdjOWM5OTQ2NzQwZWYxZjQ3MDJkNDlhODM1OWNjZmYyNmJjMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+bl/Qv7lIiMylNgl4FGj+ZW3sfR fJ98gFzOyV+/idcOY2NbHxIyn1dou/eM1aBldL4qYgCs6kYLJ8J2pmVyEmCJZexz XcVvIp7dndJwEc6riJ0RN8AEj/PFwwQomqFNcsHaZI1TIWcyOcQBOrYrdRcYzngX QoOM7nFCJc0kQzmS4gAOiViXJ36zJeJJOvksgSZOa6Rs+cbuc4TomEsDtV1Xm5XE 44nHXjsd7mnNDjBKwG2SErm/YFHGViCV5W8wv9T4IDp6G6iM/JCQMCNT8jeF50yL i+pjO0DgWwt5rzIpG4wpXLsa0R4872fT4k/T7dp0w27h1Y71b1wl8+66gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAx8nJlGdA7x9HAtSag1nM/ya8LtMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvREh5Y21VWjBEdkgwY0MxSnFEV2N6X0pyd3UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXar+MA0G CSqGSIb3DQEBCwUAA4IBAQCT+e87ygFMJzeVbblNkJXihvLw95/TWgj+cNtgUDuh JHQRr3+Y63ued/g6lRoyxDnhw/Mmg+GuABi8CM3j2AmlzgW7SA4ePi1THqrBze2J zp9Hqcduf6DMCL+YISK0+eRiYomPqrC0uMB4SMhuLFrTSsCRjZm1HiXiBATSetKf KxAxpZRi+YKXIYn12aNjlED5P8TAVNjJGYGOzTO+Oao1B/EIJTzOZlBMOJB8q5B3 l1XOsoM7nNEih1r7CWcxaUUwdYiueKaRgolR0hSgx9Y+j7EWnGzJ+nZ9c8GVUtkC mSCBkXRT7wIOlz1yDR5VC+TOpDR7Tggv5Shl2RKVYEF4 -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:53 2026 by rpki-client