This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RCuDwIGhMlT9_TNdVWrBmpAKPxg.roa File: RCuDwIGhMlT9_TNdVWrBmpAKPxg.roa (raw, json) Hash identifier: zH2ThqZL1XvECF0v1U6m/IHqmw310mpqnXSd9ZDjcPU= Subject key identifier: 44:2B:83:C0:81:A1:32:54:FD:FD:33:5D:55:6A:C1:9A:90:0A:3F:18 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B8A2EC33FF73D92E0C312A0D7DF4 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RCuDwIGhMlT9_TNdVWrBmpAKPxg.roa Signing time: Fri 02 Jan 2026 16:22:43 +0000 ROA not before: Fri 02 Jan 2026 16:22:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49502 IP address blocks: 93.171.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b8:a2:ec:33:ff:73:d9:2e:0c:31:2a:0d:7d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=442b83c081a13254fdfd335d556ac19a900a3f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:15:89:b3:57:66:5b:75:f1:4d:af:83:1a:dd: bd:ba:cf:41:52:a8:44:92:7d:22:ce:9f:6e:9e:6b: 66:9e:dd:f4:a9:95:76:18:58:64:e7:1e:28:df:ba: f4:e5:2b:6b:20:d7:33:7b:44:44:74:24:a8:27:ab: 7c:7e:27:b8:eb:da:b1:db:a3:46:ee:4c:c2:20:ac: 46:a0:e6:6a:25:45:e9:b8:40:2d:e7:05:03:88:73: 48:6d:c0:bd:00:99:35:cd:c8:0a:85:e5:12:cd:5b: 5b:1c:95:72:c6:1a:ef:ff:da:48:e7:47:5e:72:81: cc:99:c5:e3:a1:2e:e8:9d:0e:0a:80:a1:11:a4:28: 2c:e9:74:98:1c:7e:47:1d:68:3b:ca:f1:b5:9d:3e: 50:d7:d4:51:fb:2b:b7:50:af:a2:fb:29:57:e6:b1: 65:22:63:ed:f4:d0:32:6e:42:7c:71:4c:cf:78:1a: 1f:ff:c6:22:79:96:80:16:1f:10:53:81:f3:70:17: 22:de:64:ed:a9:5b:9b:81:0a:57:56:1d:f8:ff:ee: 9c:0e:cb:36:2e:ec:ff:70:b5:42:bc:59:e3:de:10: b8:0a:6e:0a:1e:fa:fc:ff:13:a2:5e:54:d2:9b:db: 21:97:d1:23:2d:95:b2:d5:4f:78:9e:bb:8b:e7:ec: b1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:83:C0:81:A1:32:54:FD:FD:33:5D:55:6A:C1:9A:90:0A:3F:18 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RCuDwIGhMlT9_TNdVWrBmpAKPxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.208.0/24 Signature Algorithm: sha256WithRSAEncryption 67:d2:89:98:22:8f:3e:ca:3e:ae:b5:f8:45:e4:d5:1b:17:ab: 58:c8:47:b2:5e:9f:ce:92:cf:ba:c6:94:ea:2b:02:26:df:05: 40:9a:4f:f7:0a:24:e8:23:24:ae:47:0e:e9:07:34:d9:14:45: d9:06:e8:af:2e:1a:de:6b:4b:72:5e:06:54:cb:d1:9c:89:50: 87:26:77:98:e6:35:97:aa:82:a2:c8:90:d5:2b:69:e3:53:01: 12:8c:16:ef:a6:74:e2:25:0f:e9:ff:59:94:30:54:89:d5:0b: 65:f8:60:34:81:5e:49:4e:da:4b:34:fd:3a:d2:25:96:47:dc: d9:47:ab:8e:e1:d5:66:7d:69:20:a2:75:23:9f:ba:11:15:f6: 3c:fc:1e:4e:c4:71:98:ea:42:62:d7:6b:a7:fb:3e:bc:cb:74: f8:e2:47:cb:9b:d3:2d:e8:1c:0f:bd:a6:48:04:a4:ee:33:4b: 1d:57:95:94:71:9a:2f:df:bd:1f:93:09:bf:13:a5:f1:17:a8: ba:8c:11:a1:8f:fa:38:21:f1:02:aa:f9:61:3f:78:2c:58:3d: e4:19:44:23:b4:3a:d5:b2:6c:7c:17:69:5a:a3:20:63:82:e8: e3:bd:d1:85:55:dc:db:75:d0:27:39:97:92:82:8c:67:ca:8d: 44:64:17:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLii7DP/c9kuDDEqDX30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDJiODNjMDgxYTEzMjU0ZmRmZDMzNWQ1NTZhYzE5YTkwMGEzZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hWJs1dmW3XxTa+DGt29us9BUqhE kn0izp9unmtmnt30qZV2GFhk5x4o37r05StrINcze0REdCSoJ6t8fie469qx26NG 7kzCIKxGoOZqJUXpuEAt5wUDiHNIbcC9AJk1zcgKheUSzVtbHJVyxhrv/9pI50de coHMmcXjoS7onQ4KgKERpCgs6XSYHH5HHWg7yvG1nT5Q19RR+yu3UK+i+ylX5rFl ImPt9NAybkJ8cUzPeBof/8YieZaAFh8QU4HzcBci3mTtqVubgQpXVh34/+6cDss2 Luz/cLVCvFnj3hC4Cm4KHvr8/xOiXlTSm9shl9EjLZWy1U94nruL5+yxQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQrg8CBoTJU/f0zXVVqwZqQCj8YMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUkN1RHdJR2hNbFQ5X1ROZFZXckJtcEFLUHhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavQMA0G CSqGSIb3DQEBCwUAA4IBAQBn0omYIo8+yj6utfhF5NUbF6tYyEeyXp/Oks+6xpTq KwIm3wVAmk/3CiToIySuRw7pBzTZFEXZBuivLhrea0tyXgZUy9GciVCHJneY5jWX qoKiyJDVK2njUwESjBbvpnTiJQ/p/1mUMFSJ1Qtl+GA0gV5JTtpLNP060iWWR9zZ R6uO4dVmfWkgonUjn7oRFfY8/B5OxHGY6kJi12un+z68y3T44kfLm9Mt6BwPvaZI BKTuM0sdV5WUcZov370fkwm/E6XxF6i6jBGhj/o4IfECqvlhP3gsWD3kGUQjtDrV smx8F2laoyBjgujjvdGFVdzbddAnOZeSgoxnyo1EZBfO -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:16 2026 by rpki-client