This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O_q8eI0Q5sYzOAWKHcJa9GwUAfc.roa File: O_q8eI0Q5sYzOAWKHcJa9GwUAfc.roa (raw, json) Hash identifier: 3S/y6KP/ywGVDO31XkvY9TuZyg5t3bMPhNc2jaaQgds= Subject key identifier: 3B:FA:BC:78:8D:10:E6:C6:33:38:05:8A:1D:C2:5A:F4:6C:14:01:F7 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FCA1A9B4177C57B5AC9536BE5E44 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O_q8eI0Q5sYzOAWKHcJa9GwUAfc.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205264 IP address blocks: 93.170.74.0/24 maxlen: 24 93.170.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fc:a1:a9:b4:17:7c:57:b5:ac:95:36:be:5e:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3bfabc788d10e6c63338058a1dc25af46c1401f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:20:eb:da:a5:89:88:46:c0:7f:dd:f0:88: dc:59:23:7d:d2:1a:df:10:17:67:de:f3:c8:78:26: f2:ee:73:64:0e:15:9f:50:e4:77:29:b8:ee:7b:a4: 28:3f:c0:89:bc:9f:d6:ee:b5:07:48:e3:41:2c:64: ef:e9:4c:da:a7:8f:92:40:0d:c5:ea:6a:17:34:30: eb:6c:d3:ba:72:06:16:64:6b:04:ac:d0:68:f7:27: 2e:36:d9:43:38:f0:1c:8c:cf:4d:54:3e:de:2f:ee: f1:ab:0c:1f:7a:0e:ab:7b:c1:ca:df:03:46:64:bc: 56:01:42:7c:1e:47:5f:47:f3:32:e0:36:43:f0:0c: de:3a:c3:b9:ba:b6:ce:f1:30:a1:17:64:58:74:5e: 75:2c:e9:75:28:27:16:ec:3a:60:b6:6f:5c:83:4c: 42:28:f2:cd:35:c7:a4:9e:c2:79:cc:8e:ad:a9:87: 48:d0:c1:4a:34:23:1f:26:53:6c:19:52:a6:cb:48: 61:00:f3:0c:da:9c:6d:fe:23:39:6f:28:ab:c2:0a: ef:d2:ba:44:10:e0:6a:4b:92:78:34:db:cf:4f:4f: 75:9a:25:37:5a:28:0e:6f:f6:ac:33:90:0e:cb:b5: f5:59:97:fd:2c:5b:40:67:a7:13:36:ea:94:80:b8: 34:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:FA:BC:78:8D:10:E6:C6:33:38:05:8A:1D:C2:5A:F4:6C:14:01:F7 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O_q8eI0Q5sYzOAWKHcJa9GwUAfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.74.0/23 Signature Algorithm: sha256WithRSAEncryption 16:01:ae:53:d1:1e:e4:8c:c2:4d:0f:3c:35:a1:6c:3c:8e:3e: 7f:ac:96:4e:8e:3a:41:65:ff:c9:ad:52:ef:8a:d2:b8:2b:31: cb:a5:22:a5:64:0e:22:1c:73:a0:73:6b:46:38:7f:46:41:70: da:be:87:e9:2a:d0:31:2c:85:f5:db:9f:61:95:91:85:78:f1: 1a:cd:98:b3:fa:0b:b0:6b:25:c9:51:c8:e3:94:b2:c2:ce:8d: 77:3f:33:19:b8:e5:aa:de:9f:d9:c5:50:d4:f1:6b:90:35:b9: b6:b2:73:56:c8:a7:19:65:e0:47:b8:36:15:e9:b1:89:1d:49: db:0b:b4:47:ec:af:90:29:2a:75:01:b4:a0:bb:07:0f:e5:1b: d7:a5:69:62:07:57:a2:46:13:64:18:2b:eb:12:89:73:42:c7: a5:47:ad:14:31:0f:82:d9:45:bc:43:91:a0:b7:8f:fe:62:a9: 85:e5:2c:5f:be:71:de:50:76:1f:5e:ec:ed:f1:30:27:f6:ad: 20:c0:aa:41:39:bd:7b:f3:6d:4f:2c:ab:89:88:fc:f8:db:04: 93:e5:a4:93:77:48:da:cd:07:f9:98:6c:9a:1b:dd:5a:65:4e: 05:96:8c:56:78:e3:2a:d7:d4:9b:cc:b4:cc:0b:2c:2e:c2:c0: 6b:4c:b8:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPyhqbQXfFe1rJU2vl5EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmZhYmM3ODhkMTBlNmM2MzMzODA1OGExZGMyNWFmNDZjMTQwMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP8g69qliYhGwH/d8IjcWSN90hrf EBdn3vPIeCby7nNkDhWfUOR3Kbjue6QoP8CJvJ/W7rUHSONBLGTv6Uzap4+SQA3F 6moXNDDrbNO6cgYWZGsErNBo9ycuNtlDOPAcjM9NVD7eL+7xqwwfeg6re8HK3wNG ZLxWAUJ8HkdfR/My4DZD8AzeOsO5urbO8TChF2RYdF51LOl1KCcW7Dpgtm9cg0xC KPLNNceknsJ5zI6tqYdI0MFKNCMfJlNsGVKmy0hhAPMM2pxt/iM5byirwgrv0rpE EOBqS5J4NNvPT091miU3WigOb/asM5AOy7X1WZf9LFtAZ6cTNuqUgLg0KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDv6vHiNEObGMzgFih3CWvRsFAH3MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvT19xOGVJMFE1c1l6T0FXS0hjSmE5R3dVQWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXapKMA0G CSqGSIb3DQEBCwUAA4IBAQAWAa5T0R7kjMJNDzw1oWw8jj5/rJZOjjpBZf/JrVLv itK4KzHLpSKlZA4iHHOgc2tGOH9GQXDavofpKtAxLIX1259hlZGFePEazZiz+guw ayXJUcjjlLLCzo13PzMZuOWq3p/ZxVDU8WuQNbm2snNWyKcZZeBHuDYV6bGJHUnb C7RH7K+QKSp1AbSguwcP5RvXpWliB1eiRhNkGCvrEolzQselR60UMQ+C2UW8Q5Gg t4/+YqmF5SxfvnHeUHYfXuzt8TAn9q0gwKpBOb17821PLKuJiPz42wST5aSTd0ja zQf5mGyaG91aZU4FloxWeOMq19SbzLTMCywuwsBrTLgL -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:52 2026 by rpki-client