This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QuIckcwAJdWwGQnhGUV5RsOzCco.roa File: QuIckcwAJdWwGQnhGUV5RsOzCco.roa (raw, json) Hash identifier: bLyUZAMDkQcDxtylzlBFbFv7dNQXfiMjb+5glnS9Mmw= Subject key identifier: 42:E2:1C:91:CC:00:25:D5:B0:19:09:E1:19:45:79:46:C3:B3:09:CA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F952C29839DB1149F85E99731C94 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QuIckcwAJdWwGQnhGUV5RsOzCco.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204671 IP address blocks: 95.47.173.0/24 maxlen: 24 95.47.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f9:52:c2:98:39:db:11:49:f8:5e:99:73:1c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42e21c91cc0025d5b01909e119457946c3b309ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:fe:db:21:04:86:25:56:3e:28:db:33:28: 44:78:f2:18:7c:8b:ec:da:8b:b5:c6:d8:ab:d6:c2: f7:e0:f7:d5:09:de:67:68:29:6f:7a:6b:4d:1d:46: 81:9f:96:83:d5:85:97:58:45:69:78:cc:8e:77:90: 03:f1:75:82:8d:67:75:73:58:21:11:e1:1c:da:ba: fe:5d:9d:45:03:89:f7:93:38:85:64:b8:60:82:08: 52:80:54:df:96:ec:03:cb:70:6b:33:29:ad:ce:b3: 93:25:b0:5c:01:5c:11:07:c4:7f:d6:ff:ef:71:8f: e3:66:3a:b8:a9:ff:bd:9a:ae:af:15:f8:3a:b9:ca: a0:08:35:4c:c3:29:31:95:25:88:33:3a:3b:b5:ec: 92:61:de:1b:eb:8a:a1:9e:93:82:24:9f:52:b9:7f: 1d:00:51:54:16:07:ae:e2:db:47:1f:a3:f5:62:04: 21:f5:ab:fb:13:2b:24:3f:84:4a:3d:8f:d5:02:75: 4f:5d:37:fc:dc:2f:60:3b:06:31:e5:fc:aa:15:74: 41:68:ce:d9:bb:ad:ee:06:76:0a:21:f5:d0:9f:d2: 05:e2:d2:c2:5c:8c:3c:30:42:46:0d:86:6a:7b:be: 50:7c:82:60:94:10:4a:08:a9:4b:a2:f4:65:36:cc: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E2:1C:91:CC:00:25:D5:B0:19:09:E1:19:45:79:46:C3:B3:09:CA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QuIckcwAJdWwGQnhGUV5RsOzCco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.173.0/24 95.47.236.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:3f:02:18:78:a3:a1:df:09:94:f6:fa:8b:62:fe:54:a6:36: be:e8:df:73:a9:cc:03:07:1f:af:7e:2b:f4:02:ca:ad:15:33: a5:77:3b:48:b2:b1:ec:89:51:05:21:37:94:9f:24:8d:95:36: 9b:f8:e3:80:29:f3:60:59:4d:6a:e6:19:4b:40:eb:d1:c7:4c: 5b:80:24:1a:1d:c7:43:9a:79:5d:7a:bb:0e:8f:1d:67:15:d4: 8f:30:ae:3a:fe:56:6a:28:74:87:ec:5b:e3:fc:dc:7f:b3:82: ae:1f:4c:09:1c:69:d6:50:3f:b4:b7:1d:f5:c6:3c:13:bb:b2: e9:57:ff:9e:22:dd:64:80:4c:00:6e:29:f2:82:4c:e1:68:d7: 15:76:84:70:da:9b:09:e5:dc:0e:5c:bc:15:8a:df:f1:64:31: c6:02:eb:a7:65:1b:2d:91:6e:75:19:1c:14:b3:e3:3f:76:cc: ef:78:52:c6:e0:79:00:87:3b:18:7a:af:f1:63:a1:d1:ff:ca: f5:a5:57:5a:4b:ca:75:dd:b0:05:bd:bc:9f:90:70:29:45:8b: 83:05:fd:39:3b:3e:80:d4:53:ef:3f:f3:9c:e0:b1:a8:26:08: 9e:a6:65:ed:32:e4:de:2c:e3:0c:2a:4b:dc:a6:8b:77:a2:fe: 53:18:3e:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hPlSwpg52xFJ+F6ZcxyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmUyMWM5MWNjMDAyNWQ1YjAxOTA5ZTExOTQ1Nzk0NmMzYjMwOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunr+2yEEhiVWPijbMyhEePIYfIvs 2ou1xtir1sL34PfVCd5naClvemtNHUaBn5aD1YWXWEVpeMyOd5AD8XWCjWd1c1gh EeEc2rr+XZ1FA4n3kziFZLhggghSgFTfluwDy3BrMymtzrOTJbBcAVwRB8R/1v/v cY/jZjq4qf+9mq6vFfg6ucqgCDVMwykxlSWIMzo7teySYd4b64qhnpOCJJ9SuX8d AFFUFgeu4ttHH6P1YgQh9av7EyskP4RKPY/VAnVPXTf83C9gOwYx5fyqFXRBaM7Z u63uBnYKIfXQn9IF4tLCXIw8MEJGDYZqe75QfIJglBBKCKlLovRlNswGDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFELiHJHMACXVsBkJ4RlFeUbDswnKMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUXVJY2tjd0FKZFd3R1FuaEdVVjVSc096Q2NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXy+tAwQA Xy/sMA0GCSqGSIb3DQEBCwUAA4IBAQCbPwIYeKOh3wmU9vqLYv5Upja+6N9zqcwD Bx+vfiv0AsqtFTOldztIsrHsiVEFITeUnySNlTab+OOAKfNgWU1q5hlLQOvRx0xb gCQaHcdDmnldersOjx1nFdSPMK46/lZqKHSH7Fvj/Nx/s4KuH0wJHGnWUD+0tx31 xjwTu7LpV/+eIt1kgEwAbinygkzhaNcVdoRw2psJ5dwOXLwVit/xZDHGAuunZRst kW51GRwUs+M/dszveFLG4HkAhzsYeq/xY6HR/8r1pVdaS8p13bAFvbyfkHApRYuD Bf05Oz6A1FPvP/Oc4LGoJgiepmXtMuTeLOMMKkvcpot3ov5TGD5g -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:49 2026 by rpki-client