This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JYAbY-qZkoARv9Ebl-8ElHCsGHU.roa File: JYAbY-qZkoARv9Ebl-8ElHCsGHU.roa (raw, json) Hash identifier: aTgDPAc0ma7zOi9FCvTpTWOHTSRjAEhASTe0ougbrT0= Subject key identifier: 25:80:1B:63:EA:99:92:80:11:BF:D1:1B:97:EF:04:94:70:AC:18:75 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84DB51C39669D126411E7660B55D62 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JYAbY-qZkoARv9Ebl-8ElHCsGHU.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61116 IP address blocks: 93.171.169.0/24 maxlen: 24 93.171.225.0/24 maxlen: 24 95.46.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:db:51:c3:96:69:d1:26:41:1e:76:60:b5:5d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25801b63ea99928011bfd11b97ef049470ac1875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0b:c8:19:55:01:d0:ec:9b:ed:20:da:3c:f6: fa:4e:ea:78:90:3f:be:06:af:5a:f3:67:7e:bc:f5: 6b:98:35:58:06:6e:f1:e3:88:e2:b0:27:ac:45:00: c8:bd:56:28:af:2f:64:a1:ba:07:6c:bb:3f:38:4c: a4:37:35:95:dd:fb:98:ab:90:b5:35:34:58:d9:6b: a6:dc:00:99:72:f5:8f:ad:e8:f2:b9:55:8a:be:79: f7:af:f2:d0:a2:33:53:f9:d5:d3:6f:c9:20:8a:76: 21:ac:c2:66:ed:f2:75:ee:af:1e:a4:19:7a:cc:0b: 2d:e0:26:31:7c:75:c6:2c:c2:a8:16:f1:53:d9:5d: b4:6b:78:83:f5:73:62:58:db:d1:13:c3:c0:e9:f5: 95:49:86:36:ad:c9:29:54:04:45:ac:16:c6:61:53: 2d:8d:7a:8b:e8:d6:e9:02:62:6b:cf:74:1d:98:b2: 9c:ea:c2:6e:8a:63:0a:a3:20:ff:25:37:f3:16:f3: c4:c3:fc:7c:45:9a:9b:8a:65:d2:47:04:18:03:69: 88:53:2e:7c:b4:39:55:ba:42:3d:27:7a:2b:61:be: 99:b0:5e:8c:88:e9:6d:1b:58:e6:1c:c6:40:b9:ce: 74:51:ba:41:52:7d:53:6d:e6:e8:a1:82:1c:2e:57: c8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:1B:63:EA:99:92:80:11:BF:D1:1B:97:EF:04:94:70:AC:18:75 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JYAbY-qZkoARv9Ebl-8ElHCsGHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.169.0/24 93.171.225.0/24 95.46.155.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c9:60:1c:82:72:7a:0d:f7:63:ad:8d:88:16:a7:91:34:05: 92:34:f8:17:9c:0d:b4:e4:dd:0c:4b:d9:e9:95:21:96:88:7d: d0:67:62:8d:37:c9:30:86:a9:cf:8b:66:66:76:c5:74:5f:f1: fa:ca:09:05:bf:15:fa:44:75:46:b4:9c:cc:f1:5d:e9:fb:69: 5e:90:83:44:5b:2e:09:e0:86:de:8c:69:24:d3:b8:5a:07:c7: 1b:1c:78:a6:25:7b:12:5d:82:de:18:c0:3d:46:ab:65:88:72: af:3e:64:98:98:45:45:d7:b3:1a:d0:98:b0:ed:d0:6d:12:48: 97:70:59:ae:3e:b7:bf:b8:50:69:4d:e2:92:c0:92:d7:6c:44: aa:11:32:28:7c:63:b4:ae:0b:af:25:af:4d:8a:2d:a1:05:55: b1:e8:40:83:27:62:29:04:08:c0:8b:e8:e9:3a:f0:4b:60:af: 48:cc:49:be:01:d1:3c:c4:51:61:69:13:a5:9c:b9:ef:20:ae: f8:72:67:c4:00:94:13:b1:1e:48:59:39:07:0c:d3:7d:f5:9b: d8:a6:7f:63:d2:13:3f:b0:27:41:19:13:07:f8:48:50:b6:d9: 57:31:8b:63:96:d3:99:b8:e3:30:9f:0c:82:13:34:2a:66:93: b0:09:5f:0d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hNtRw5Zp0SZBHnZgtV1iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTgwMWI2M2VhOTk5MjgwMTFiZmQxMWI5N2VmMDQ5NDcwYWMxODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wvIGVUB0Oyb7SDaPPb6Tup4kD++ Bq9a82d+vPVrmDVYBm7x44jisCesRQDIvVYory9koboHbLs/OEykNzWV3fuYq5C1 NTRY2Wum3ACZcvWPrejyuVWKvnn3r/LQojNT+dXTb8kginYhrMJm7fJ17q8epBl6 zAst4CYxfHXGLMKoFvFT2V20a3iD9XNiWNvRE8PA6fWVSYY2rckpVARFrBbGYVMt jXqL6NbpAmJrz3QdmLKc6sJuimMKoyD/JTfzFvPEw/x8RZqbimXSRwQYA2mIUy58 tDlVukI9J3orYb6ZsF6MiOltG1jmHMZAuc50UbpBUn1TbebooYIcLlfITwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCWAG2PqmZKAEb/RG5fvBJRwrBh1MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvSllBYlktcVprb0FSdjlFYmwtOEVsSENzR0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXaupAwQA XavhAwQAXy6bMA0GCSqGSIb3DQEBCwUAA4IBAQAyyWAcgnJ6DfdjrY2IFqeRNAWS NPgXnA205N0MS9nplSGWiH3QZ2KNN8kwhqnPi2ZmdsV0X/H6ygkFvxX6RHVGtJzM 8V3p+2lekINEWy4J4IbejGkk07haB8cbHHimJXsSXYLeGMA9RqtliHKvPmSYmEVF 17Ma0Jiw7dBtEkiXcFmuPre/uFBpTeKSwJLXbESqETIofGO0rguvJa9Nii2hBVWx 6ECDJ2IpBAjAi+jpOvBLYK9IzEm+AdE8xFFhaROlnLnvIK74cmfEAJQTsR5IWTkH DNN99ZvYpn9j0hM/sCdBGRMH+EhQttlXMYtjltOZuOMwnwyCEzQqZpOwCV8N -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:43 2026 by rpki-client