This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R87iYOZzpeBcIE3JVSsUat2424c.roa File: R87iYOZzpeBcIE3JVSsUat2424c.roa (raw, json) Hash identifier: Kb4EgOiQOHuKm3ML1c7z66dhT2hFjfvqN+mgQoSoce8= Subject key identifier: 47:CE:E2:60:E6:73:A5:E0:5C:20:4D:C9:55:2B:14:6A:DD:B8:DB:87 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019BB2CD92E3D110D2D09004051C4BB8DB48 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R87iYOZzpeBcIE3JVSsUat2424c.roa Signing time: Mon 12 Jan 2026 15:22:55 +0000 ROA not before: Mon 12 Jan 2026 15:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198803 IP address blocks: 92.38.28.0/22 maxlen: 24 92.253.208.0/22 maxlen: 24 2a02:128:5000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:cd:92:e3:d1:10:d2:d0:90:04:05:1c:4b:b8:db:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 12 15:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47cee260e673a5e05c204dc9552b146addb8db87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:20:15:d5:65:69:e6:ed:eb:58:d5:d5:6a:ef: 19:5a:36:ea:b8:e7:df:8b:fc:e8:bb:07:1e:97:61: 46:15:c5:86:cc:f6:90:df:ef:0d:3b:d3:ab:c5:4b: a8:be:ec:55:4f:84:63:08:a0:bc:19:d3:6d:d3:98: 16:f9:75:87:d6:84:3f:8a:ce:7d:78:22:b0:c0:6f: ae:8f:e9:c8:13:e9:c7:09:3c:68:ca:e9:67:c4:ed: e8:11:a8:a0:69:1d:f6:01:b2:fb:06:f0:2d:66:28: 2a:b9:b2:da:51:e0:b5:88:d6:0d:1c:7e:38:0b:93: 39:b8:89:20:32:ed:b2:c2:a3:e7:0e:ba:cd:1e:f6: 44:72:01:60:c6:ac:50:b0:54:06:8a:e9:7b:87:72: fe:93:04:bd:ef:48:e5:98:26:16:99:ce:f4:96:87: d0:c2:d4:8d:52:2b:06:28:93:45:ef:c7:3d:cf:b5: b8:99:11:e5:38:c7:3c:41:5e:d5:52:af:d3:89:3d: 18:c0:48:a2:57:ea:86:ba:cb:b7:ea:18:f4:50:c0: 7d:a5:8e:ef:7e:38:3b:b5:3e:1a:b3:45:da:45:10: da:52:cc:46:b5:d1:22:13:33:d3:ff:79:54:f5:49: d2:0a:41:e1:0c:f5:f5:3c:09:00:c0:e3:e6:86:78: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CE:E2:60:E6:73:A5:E0:5C:20:4D:C9:55:2B:14:6A:DD:B8:DB:87 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R87iYOZzpeBcIE3JVSsUat2424c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.28.0/22 92.253.208.0/22 IPv6: 2a02:128:5000::/44 Signature Algorithm: sha256WithRSAEncryption 06:1f:42:ca:9e:66:c3:0d:e2:f0:2c:71:9c:8a:1e:7c:8b:b1: 87:37:dd:27:ba:40:ae:33:7f:6c:82:c7:ca:51:53:b8:9b:39: 34:93:26:89:29:da:e9:8b:12:a4:36:4d:ae:43:2d:96:08:a0: ee:0c:a8:6b:e0:4c:6b:4e:dd:00:28:69:ad:7b:13:ff:20:eb: d9:6b:a4:a7:cc:3b:f1:5e:62:3b:d2:e3:ee:d6:1a:c7:fe:02: e2:4e:79:87:42:c6:ab:5e:5d:ec:95:a9:5e:01:2b:42:53:27: 63:a2:f6:41:fa:dd:eb:be:bf:9b:85:c7:94:48:94:ba:9f:21: 5e:9e:46:87:bb:c6:2d:47:25:74:52:9e:06:08:4a:a1:ec:47: 6f:f9:57:8f:af:20:2f:61:28:cc:ce:ac:d1:db:f6:45:75:ab: 34:a1:00:18:8c:99:86:5c:1a:92:75:20:97:79:90:c8:41:02: 49:32:b6:77:fb:ee:07:14:00:c0:05:67:46:e4:d8:a6:73:e0: 71:03:d6:67:40:32:96:15:3c:af:4b:f8:b8:44:71:67:4a:52: b7:7e:50:bd:79:1b:21:be:6c:91:ca:4a:af:ad:b4:bf:84:10: d7:d1:2e:b4:54:0e:74:31:89:89:28:cd:00:53:2f:2c:ba:7f: 44:36:47:b9 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZuyzZLj0RDS0JAEBRxLuNtIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTEyMTUyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2NlZTI2MGU2NzNhNWUwNWMyMDRkYzk1NTJiMTQ2YWRkYjhkYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCAV1WVp5u3rWNXVau8ZWjbquOff i/zouwcel2FGFcWGzPaQ3+8NO9OrxUuovuxVT4RjCKC8GdNt05gW+XWH1oQ/is59 eCKwwG+uj+nIE+nHCTxoyulnxO3oEaigaR32AbL7BvAtZigqubLaUeC1iNYNHH44 C5M5uIkgMu2ywqPnDrrNHvZEcgFgxqxQsFQGiul7h3L+kwS970jlmCYWmc70lofQ wtSNUisGKJNF78c9z7W4mRHlOMc8QV7VUq/TiT0YwEiiV+qGusu36hj0UMB9pY7v fjg7tT4as0XaRRDaUsxGtdEiEzPT/3lU9UnSCkHhDPX1PAkAwOPmhnjkvwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEfO4mDmc6XgXCBNyVUrFGrduNuHMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUjg3aVlPWnpwZUJjSUUzSlZTc1VhdDI0MjRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCXCYcAwQC XP3QMA8EAgACMAkDBwQqAgEoUAAwDQYJKoZIhvcNAQELBQADggEBAAYfQsqeZsMN 4vAscZyKHnyLsYc33Se6QK4zf2yCx8pRU7ibOTSTJokp2umLEqQ2Ta5DLZYIoO4M qGvgTGtO3QAoaa17E/8g69lrpKfMO/FeYjvS4+7WGsf+AuJOeYdCxqteXeyVqV4B K0JTJ2Oi9kH63eu+v5uFx5RIlLqfIV6eRoe7xi1HJXRSngYISqHsR2/5V4+vIC9h KMzOrNHb9kV1qzShABiMmYZcGpJ1IJd5kMhBAkkytnf77gcUAMAFZ0bk2KZz4HED 1mdAMpYVPK9L+LhEcWdKUrd+UL15GyG+bJHKSq+ttL+EENfRLrRUDnQxiYkozQBT Lyy6f0Q2R7k= -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:13 2026 by rpki-client