This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa
File: Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa (raw, json)
Hash identifier: GCY1RMvi5PaGu7yTVasageEwbVV95j95abN+dLC7tuc=
Subject key identifier: 42:0D:3B:3D:3D:C9:DE:B8:18:47:31:63:36:0B:35:F9:33:B3:8C:1F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019B7F84BA1E79EF0EE2831ABF9490D166D0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa
Signing time: Fri 02 Jan 2026 16:22:43 +0000
ROA not before: Fri 02 Jan 2026 16:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49682
IP address blocks: 93.170.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:ba:1e:79:ef:0e:e2:83:1a:bf:94:90:d1:66:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 16:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=420d3b3d3dc9deb818473163360b35f933b38c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:18:8c:d9:38:2b:88:06:ac:0a:89:43:94:
bf:4f:09:24:ea:be:1b:a7:52:8e:9e:81:a3:eb:50:
07:6b:6c:0d:0e:c1:6c:de:6d:ad:0f:33:cf:42:01:
39:46:72:11:69:ad:10:e9:92:da:b6:f3:72:aa:55:
0b:19:95:28:6c:c9:aa:75:33:88:12:ba:2d:a3:ab:
82:83:1b:1f:2e:6d:fd:5b:82:57:ff:f0:34:07:97:
bc:71:50:f9:de:df:fd:70:59:68:e1:33:bb:f2:44:
c9:57:d0:57:51:56:5f:05:85:b5:a9:12:0e:64:8e:
ae:a5:16:bd:56:0e:f7:23:9d:47:84:54:78:8a:4e:
ee:4e:0a:5f:b5:ce:ad:68:04:a2:5f:95:d0:05:67:
a9:bc:62:91:14:9b:cd:a4:f9:37:ac:09:81:7b:11:
80:2d:c0:c8:ec:83:97:0c:53:11:5f:0d:f4:82:34:
31:9d:9e:48:e7:33:d7:48:36:d8:b5:e5:63:78:ee:
4d:dd:c6:28:49:9a:27:be:f6:e0:e3:fd:cc:73:32:
af:0e:81:b2:b6:d3:3e:ee:f1:d1:0d:bf:ee:ff:9c:
4c:93:2c:98:e5:ce:4b:bd:95:ef:a0:e2:94:42:57:
31:1f:d5:85:5e:56:be:a2:5b:79:f7:57:17:78:15:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0D:3B:3D:3D:C9:DE:B8:18:47:31:63:36:0B:35:F9:33:B3:8C:1F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qg07PT3J3rgYRzFjNgs1-TOzjB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.34.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:51:68:ef:48:e1:27:05:01:8e:7c:e4:d5:3b:01:52:95:0a:
07:60:b4:e8:c6:d3:2d:72:04:25:45:b4:15:70:94:4e:fe:68:
ef:6c:83:11:c4:81:af:50:f2:bf:52:c6:8f:b3:53:fa:07:2a:
f2:63:4b:a1:82:ee:35:5a:28:eb:3a:59:3f:05:cb:e1:41:5b:
99:69:46:78:68:bd:8e:b4:f2:5c:dc:0e:c2:84:01:06:df:4c:
ab:3e:f1:9d:c6:00:a5:d5:32:43:84:49:c0:e0:9b:22:1c:41:
64:7a:9a:7d:3e:8f:05:0d:83:56:98:36:fd:00:05:dd:86:05:
9f:83:84:44:de:bc:de:2b:d8:53:da:ef:12:67:06:ef:f7:85:
fc:16:d0:f7:83:b4:78:01:83:27:1a:a8:6e:c1:31:15:8d:36:
21:e8:65:f5:36:cf:59:5b:83:4e:b8:1b:33:cd:c6:04:8d:60:
48:30:81:46:8c:61:48:6a:c4:d5:54:d4:87:b2:b2:08:2f:22:
8d:7c:1e:40:15:e3:fe:0c:cf:95:c3:8c:8d:9d:9d:b2:29:e7:
e5:3f:45:d5:11:49:e3:32:b7:9c:d8:45:a7:61:d4:02:6b:fa:
fb:0d:7d:22:16:78:51:09:4b:3c:81:3c:38:6e:b7:6d:e4:7a:
c5:76:bb:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/hLoeee8O4oMav5SQ0WbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjBkM2IzZDNkYzlkZWI4MTg0NzMxNjMzNjBiMzVmOTMzYjM4YzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuoYjNk4K4gGrAqJQ5S/Twkk6r4b
p1KOnoGj61AHa2wNDsFs3m2tDzPPQgE5RnIRaa0Q6ZLatvNyqlULGZUobMmqdTOI
Eroto6uCgxsfLm39W4JX//A0B5e8cVD53t/9cFlo4TO78kTJV9BXUVZfBYW1qRIO
ZI6upRa9Vg73I51HhFR4ik7uTgpftc6taASiX5XQBWepvGKRFJvNpPk3rAmBexGA
LcDI7IOXDFMRXw30gjQxnZ5I5zPXSDbYteVjeO5N3cYoSZonvvbg4/3MczKvDoGy
ttM+7vHRDb/u/5xMkyyY5c5LvZXvoOKUQlcxH9WFXla+olt591cXeBUiIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEINOz09yd64GEcxYzYLNfkzs4wfMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvUWcwN1BUM0ozcmdZUnpGak5nczEtVE96akI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaoiMA0G
CSqGSIb3DQEBCwUAA4IBAQCsUWjvSOEnBQGOfOTVOwFSlQoHYLToxtMtcgQlRbQV
cJRO/mjvbIMRxIGvUPK/UsaPs1P6ByryY0uhgu41WijrOlk/BcvhQVuZaUZ4aL2O
tPJc3A7ChAEG30yrPvGdxgCl1TJDhEnA4JsiHEFkepp9Po8FDYNWmDb9AAXdhgWf
g4RE3rzeK9hT2u8SZwbv94X8FtD3g7R4AYMnGqhuwTEVjTYh6GX1Ns9ZW4NOuBsz
zcYEjWBIMIFGjGFIasTVVNSHsrIILyKNfB5AFeP+DM+Vw4yNnZ2yKeflP0XVEUnj
Mrec2EWnYdQCa/r7DX0iFnhRCUs8gTw4brdt5HrFdrvT
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:27:38 2026 by rpki-client