This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fdj7P8dfiHb6VmInw5pUrGcvY4M.roa File: Fdj7P8dfiHb6VmInw5pUrGcvY4M.roa (raw, json) Hash identifier: nxb7D7BwW8YHSHnz93cEIeK/zX2pOZRwhU2XQVCTS6o= Subject key identifier: 15:D8:FB:3F:C7:5F:88:76:FA:56:62:27:C3:9A:54:AC:67:2F:63:83 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84EBCC5F88D241BED40A64EECA3D68 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fdj7P8dfiHb6VmInw5pUrGcvY4M.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197971 IP address blocks: 92.38.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:eb:cc:5f:88:d2:41:be:d4:0a:64:ee:ca:3d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15d8fb3fc75f8876fa566227c39a54ac672f6383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:11:b4:c4:ee:0a:88:95:57:f0:ac:20:59: 39:8d:1d:2d:aa:ad:aa:8b:59:bd:58:a3:43:6b:f4: b9:3b:64:ae:ac:7f:d7:1d:20:61:5e:bf:b9:c3:44: 28:e3:fa:5e:76:30:18:da:b4:75:cd:70:7f:60:ef: 9b:c4:9b:25:cb:6e:30:74:c3:1f:35:ae:7c:cc:fc: 56:3b:b8:70:37:74:d8:7f:a4:ae:0e:05:bd:83:95: 7c:04:7b:2e:d8:c0:66:3d:d1:c0:cc:e6:f2:5c:12: 9b:8b:88:95:c4:27:95:35:ca:7f:3c:cf:98:e2:14: 87:7d:65:5d:c0:61:39:6d:69:ef:2f:de:af:64:46: ab:6c:52:7f:59:43:91:17:e6:37:60:4e:db:f3:c5: 0f:a8:1f:85:ee:6d:70:97:ee:a4:cb:aa:75:3f:83: 54:b1:ee:f3:00:43:c9:d0:d3:c3:d9:18:1d:69:36: 9f:1b:fc:ed:19:2f:6d:64:46:30:f8:dd:32:58:af: a3:7a:03:10:5c:fc:c2:86:b1:90:36:eb:58:6c:8a: 99:8e:57:21:83:f3:a5:9e:ca:99:be:c3:69:d5:60: c2:c3:d1:f2:c7:d6:9a:c4:f4:c6:f6:ea:e2:e6:c0: c9:9e:0e:94:ef:a2:a3:80:12:ed:54:8b:e6:94:7b: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D8:FB:3F:C7:5F:88:76:FA:56:62:27:C3:9A:54:AC:67:2F:63:83 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fdj7P8dfiHb6VmInw5pUrGcvY4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.86.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:69:d6:25:95:f5:52:00:ff:36:00:a9:af:9a:44:9a:ff:e4: 51:9c:5a:05:49:c1:63:7a:aa:7f:d2:c4:e3:bc:55:1e:ec:e8: 01:8a:71:a1:89:2d:6d:ff:e7:3e:bf:fe:b7:1e:02:47:07:d2: 3c:94:0f:88:78:4c:b0:b8:bc:8f:c4:93:23:ba:41:0a:59:92: 66:ee:d3:a8:d5:71:bd:dd:7a:46:5a:ab:e4:ed:9e:a0:24:7c: 15:11:18:78:11:6e:d6:b9:5d:9c:2f:55:53:cb:05:5a:2c:43: 9f:3c:69:7b:0c:c2:5f:16:f2:3b:6d:b7:60:e3:b9:50:43:76: a6:9a:73:2b:79:ea:83:6c:a1:f4:43:0a:ce:b3:d3:5f:af:4c: a7:97:55:f4:a7:26:a6:53:62:1b:3d:53:39:6e:7f:a9:8a:b8: a3:4c:5c:10:00:98:bf:3b:90:6e:ee:bb:62:ea:3b:6c:a5:fa: e9:6e:ba:54:a1:ee:6d:71:0a:2f:d8:59:cc:23:76:dc:0c:e0: 77:85:ce:46:d0:eb:fb:9a:06:32:b6:11:df:80:4b:c6:44:dd: 1f:01:c8:7d:e2:e1:b6:af:9d:51:5f:a4:57:0c:91:28:7c:2d: 4d:fd:fa:93:b6:78:b4:c9:89:1a:8e:f5:34:18:b9:e4:21:8b: 35:cb:83:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hOvMX4jSQb7UCmTuyj1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWQ4ZmIzZmM3NWY4ODc2ZmE1NjYyMjdjMzlhNTRhYzY3MmY2MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSMRtMTuCoiVV/CsIFk5jR0tqq2q i1m9WKNDa/S5O2SurH/XHSBhXr+5w0Qo4/pedjAY2rR1zXB/YO+bxJsly24wdMMf Na58zPxWO7hwN3TYf6SuDgW9g5V8BHsu2MBmPdHAzObyXBKbi4iVxCeVNcp/PM+Y 4hSHfWVdwGE5bWnvL96vZEarbFJ/WUORF+Y3YE7b88UPqB+F7m1wl+6ky6p1P4NU se7zAEPJ0NPD2RgdaTafG/ztGS9tZEYw+N0yWK+jegMQXPzChrGQNutYbIqZjlch g/OlnsqZvsNp1WDCw9Hyx9aaxPTG9uri5sDJng6U76KjgBLtVIvmlHsvqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBXY+z/HX4h2+lZiJ8OaVKxnL2ODMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvRmRqN1A4ZGZpSGI2Vm1Jbnc1cFVyR2N2WTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXCZWMA0G CSqGSIb3DQEBCwUAA4IBAQAdadYllfVSAP82AKmvmkSa/+RRnFoFScFjeqp/0sTj vFUe7OgBinGhiS1t/+c+v/63HgJHB9I8lA+IeEywuLyPxJMjukEKWZJm7tOo1XG9 3XpGWqvk7Z6gJHwVERh4EW7WuV2cL1VTywVaLEOfPGl7DMJfFvI7bbdg47lQQ3am mnMreeqDbKH0QwrOs9Nfr0ynl1X0pyamU2IbPVM5bn+pirijTFwQAJi/O5Bu7rti 6jtspfrpbrpUoe5tcQov2FnMI3bcDOB3hc5G0Ov7mgYythHfgEvGRN0fAch94uG2 r51RX6RXDJEofC1N/fqTtni0yYkajvU0GLnkIYs1y4MN -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:04 2026 by rpki-client