This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IGv1I9ilzA23rO_8LwyWJ5arvcw.roa File: IGv1I9ilzA23rO_8LwyWJ5arvcw.roa (raw, json) Hash identifier: LYU1EXzDJ85IgXucHJb0CVa20dIlq6V4x/p20FTrJy0= Subject key identifier: 20:6B:F5:23:D8:A5:CC:0D:B7:AC:EF:FC:2F:0C:96:27:96:AB:BD:CC Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F65E6343D5D057CB14BC47138817 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IGv1I9ilzA23rO_8LwyWJ5arvcw.roa Signing time: Fri 02 Jan 2026 16:22:58 +0000 ROA not before: Fri 02 Jan 2026 16:22:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204416 IP address blocks: 92.38.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f6:5e:63:43:d5:d0:57:cb:14:bc:47:13:88:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=206bf523d8a5cc0db7aceffc2f0c962796abbdcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:5b:a2:a2:71:58:6c:b8:76:d0:df:f6:ab: 48:7b:65:fd:0c:50:27:7a:13:8f:9b:c4:2a:bc:82: b4:57:86:0e:54:e8:1d:6b:bc:3a:a1:b8:15:ef:f0: 76:34:81:0a:30:9c:46:7d:13:c8:61:29:db:27:b0: a3:9b:d7:c8:bb:df:a2:26:0e:72:ad:d1:fd:f7:a9: 4d:1c:00:2b:23:af:ce:a4:eb:88:64:b8:06:74:23: 17:82:af:9d:e8:54:f8:e6:02:b0:1c:bc:6e:30:bc: d5:9d:8f:7e:30:50:d2:b6:f7:ea:84:c7:49:d9:7a: bc:04:d6:fa:2c:4d:da:b2:05:90:8d:87:2b:95:0b: 58:69:a3:9a:e8:b2:3c:12:b7:85:57:dc:12:f9:22: 71:39:7c:49:2e:b1:62:a9:be:bc:91:86:36:dc:83: f6:a8:be:e1:b9:5e:a9:48:79:d2:c4:72:a1:d1:c7: 43:5b:cd:51:07:24:b9:e9:83:1c:3e:64:65:08:11: 0b:c6:68:38:84:ac:fb:fc:6f:9c:b1:f9:4a:ed:b8: 81:ed:5e:87:b5:08:06:d5:d5:e3:e9:b3:de:61:e7: 2d:ef:be:17:3e:59:9c:0d:27:9e:23:11:e0:33:7c: 8d:a6:9c:85:35:b0:c0:cd:c5:45:e1:ec:8a:33:0c: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6B:F5:23:D8:A5:CC:0D:B7:AC:EF:FC:2F:0C:96:27:96:AB:BD:CC X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/IGv1I9ilzA23rO_8LwyWJ5arvcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.35.0/24 Signature Algorithm: sha256WithRSAEncryption a5:51:3f:5c:82:1f:c5:63:2f:50:1d:77:d6:df:8d:0d:4d:5a: 58:0f:52:b8:9a:df:5a:65:1c:0a:31:72:dd:b6:19:33:4d:e5: 7c:2c:13:fb:dc:3a:88:06:19:d2:aa:f9:40:88:d3:b0:b9:fb: db:6e:43:3b:6d:2b:58:fb:c5:57:7c:f0:7c:f4:57:4b:9f:a2: 9d:e2:37:5d:55:b3:92:c8:90:db:40:38:78:30:c9:fa:09:19: 4a:93:43:f2:e8:cf:e7:39:72:f3:61:65:52:0a:57:20:02:58: 54:86:27:56:0f:8d:17:d2:60:4a:aa:fd:f8:11:1f:ea:d8:33: 30:93:09:a4:69:da:9d:32:a4:9f:cc:dc:ac:66:a7:7b:74:e4: 1a:c8:14:b4:49:51:59:81:95:a0:dc:a6:1f:51:5b:38:40:0a: f6:52:8a:30:2f:29:58:53:a1:5c:bd:0e:da:5a:da:9a:63:9d: 1f:b1:1e:ee:db:de:73:21:ea:62:bd:3c:b9:ec:fb:49:81:28: a4:56:72:9d:87:36:5e:99:4d:26:01:23:e2:7c:95:66:fa:ed: 50:47:02:d1:3b:8a:3a:9b:e9:bf:5e:c1:85:29:6f:1b:fa:1d: a0:11:02:88:af:be:0d:78:73:79:1a:67:b9:c6:0b:5e:8d:a2: e6:f0:48:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPZeY0PV0FfLFLxHE4gXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDZiZjUyM2Q4YTVjYzBkYjdhY2VmZmMyZjBjOTYyNzk2YWJiZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9dboqJxWGy4dtDf9qtIe2X9DFAn ehOPm8QqvIK0V4YOVOgda7w6obgV7/B2NIEKMJxGfRPIYSnbJ7Cjm9fIu9+iJg5y rdH996lNHAArI6/OpOuIZLgGdCMXgq+d6FT45gKwHLxuMLzVnY9+MFDStvfqhMdJ 2Xq8BNb6LE3asgWQjYcrlQtYaaOa6LI8EreFV9wS+SJxOXxJLrFiqb68kYY23IP2 qL7huV6pSHnSxHKh0cdDW81RByS56YMcPmRlCBELxmg4hKz7/G+csflK7biB7V6H tQgG1dXj6bPeYect774XPlmcDSeeIxHgM3yNppyFNbDAzcVF4eyKMwwnQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBr9SPYpcwNt6zv/C8MlieWq73MMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvSUd2MUk5aWx6QTIzck9fOEx3eVdKNWFydmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCYjMA0G CSqGSIb3DQEBCwUAA4IBAQClUT9cgh/FYy9QHXfW340NTVpYD1K4mt9aZRwKMXLd thkzTeV8LBP73DqIBhnSqvlAiNOwufvbbkM7bStY+8VXfPB89FdLn6Kd4jddVbOS yJDbQDh4MMn6CRlKk0Py6M/nOXLzYWVSClcgAlhUhidWD40X0mBKqv34ER/q2DMw kwmkadqdMqSfzNysZqd7dOQayBS0SVFZgZWg3KYfUVs4QAr2UoowLylYU6FcvQ7a WtqaY50fsR7u295zIepivTy57PtJgSikVnKdhzZemU0mASPifJVm+u1QRwLRO4o6 m+m/XsGFKW8b+h2gEQKIr74NeHN5Gme5xgtejaLm8EhV -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:37 2026 by rpki-client