This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RgNXMXSzOl4iGHl0pPgEEbe8GII.roa File: RgNXMXSzOl4iGHl0pPgEEbe8GII.roa (raw, json) Hash identifier: D4K//J/uZwUWXRLPSYCrtlN/vPjXClBKdjieGYNduEE= Subject key identifier: 46:03:57:31:74:B3:3A:5E:22:18:79:74:A4:F8:04:11:B7:BC:18:82 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BCBD2D872D1F56EAFC1CC41A0050 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RgNXMXSzOl4iGHl0pPgEEbe8GII.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50400 IP address blocks: 93.171.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bc:bd:2d:87:2d:1f:56:ea:fc:1c:c4:1a:00:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4603573174b33a5e22187974a4f80411b7bc1882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:06:59:10:2c:59:af:57:73:ab:6b:53:bf:d9: 05:7a:dd:56:29:db:72:8c:a5:bf:19:3a:1c:45:d5: 7c:86:73:18:30:51:37:6f:f0:bf:24:9e:07:0f:ed: 5a:59:98:0a:01:12:17:80:11:40:0a:a7:94:bb:45: 0e:19:b9:5a:43:c4:4a:77:54:b3:a9:4c:4e:c3:60: 7d:04:b2:5b:52:8e:c9:72:e2:4e:ff:45:8d:67:f4: 11:3a:2e:6f:9d:28:3c:3f:a7:50:ec:f4:e8:36:20: be:c5:18:9c:46:6a:00:4a:71:4b:47:7b:44:9f:b8: 82:b9:73:cd:e9:5e:7a:34:45:12:c0:f3:e7:ae:25: f5:e7:8a:6b:0c:a9:d4:97:33:52:66:8e:38:54:72: 81:3b:74:de:03:06:8f:1d:46:48:d1:2a:11:ec:4f: ed:cc:2f:65:a7:8f:cd:ff:4b:5a:9c:23:e5:e3:01: e1:2c:37:a0:d7:fe:56:5e:d6:82:14:f2:25:5c:67: e6:61:53:a2:aa:0b:56:ec:ac:75:d8:7f:3a:42:d5: 38:7b:90:6b:75:e0:a9:c0:87:4e:0f:85:59:f4:36: fe:bc:32:83:04:5c:34:f4:35:96:0b:e6:4a:9a:5a: 44:27:5d:30:cc:21:11:a0:68:b1:13:b2:41:56:26: 6e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:03:57:31:74:B3:3A:5E:22:18:79:74:A4:F8:04:11:B7:BC:18:82 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RgNXMXSzOl4iGHl0pPgEEbe8GII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.239.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:01:53:4a:53:fb:19:22:8e:e3:11:bf:ae:e7:9e:ea:ba:56: d3:ff:9b:1e:17:3b:dd:7e:6c:6c:78:7f:fb:5d:0d:b0:6c:f7: 8a:ee:7d:11:1b:c6:ae:73:5d:27:f0:00:5b:e1:96:89:b8:f3: 31:29:48:2e:fd:ed:17:fd:12:45:bc:ff:82:fe:12:c1:ae:d3: 4d:5f:d5:29:1a:c5:84:f6:6d:86:fb:19:04:0f:9f:37:ba:d1: 9a:8e:38:d4:4b:a1:43:34:1a:95:11:18:d0:96:fb:72:bf:4b: 15:c7:ca:c8:09:84:d0:fb:64:02:52:89:90:cf:76:64:27:e5: 8a:88:cf:55:f5:34:ad:ac:0e:d4:14:99:98:c6:bc:cf:64:a0: a9:25:55:57:8b:7e:e6:82:bd:96:1e:c1:74:33:f3:08:7a:f1: e1:7d:5e:1f:25:ed:8c:06:3a:d8:ff:5a:f5:a8:c8:57:d3:5c: 2b:e6:c1:c0:62:8c:16:fd:5d:f4:a9:9d:54:8a:05:f6:0f:9f: f2:6f:b6:88:fe:50:1c:a3:5c:11:0c:8e:2c:60:b1:7e:d8:c6: 0a:da:2b:7f:d7:57:19:e7:dd:e8:0c:9b:b2:ff:a6:0e:ed:cb: 54:8b:41:26:0f:c4:58:79:48:7b:88:90:e9:8e:21:a7:38:04: cb:65:bf:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hLy9LYctH1bq/BzEGgBQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjAzNTczMTc0YjMzYTVlMjIxODc5NzRhNGY4MDQxMWI3YmMxODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAZZECxZr1dzq2tTv9kFet1WKdty jKW/GTocRdV8hnMYMFE3b/C/JJ4HD+1aWZgKARIXgBFACqeUu0UOGblaQ8RKd1Sz qUxOw2B9BLJbUo7JcuJO/0WNZ/QROi5vnSg8P6dQ7PToNiC+xRicRmoASnFLR3tE n7iCuXPN6V56NEUSwPPnriX154prDKnUlzNSZo44VHKBO3TeAwaPHUZI0SoR7E/t zC9lp4/N/0tanCPl4wHhLDeg1/5WXtaCFPIlXGfmYVOiqgtW7Kx12H86QtU4e5Br deCpwIdOD4VZ9Db+vDKDBFw09DWWC+ZKmlpEJ10wzCERoGixE7JBViZuAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEYDVzF0szpeIhh5dKT4BBG3vBiCMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUmdOWE1YU3pPbDRpR0hsMHBQZ0VFYmU4R0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavvMA0G CSqGSIb3DQEBCwUAA4IBAQBLAVNKU/sZIo7jEb+u557qulbT/5seFzvdfmxseH/7 XQ2wbPeK7n0RG8auc10n8ABb4ZaJuPMxKUgu/e0X/RJFvP+C/hLBrtNNX9UpGsWE 9m2G+xkED583utGajjjUS6FDNBqVERjQlvtyv0sVx8rICYTQ+2QCUomQz3ZkJ+WK iM9V9TStrA7UFJmYxrzPZKCpJVVXi37mgr2WHsF0M/MIevHhfV4fJe2MBjrY/1r1 qMhX01wr5sHAYowW/V30qZ1UigX2D5/yb7aI/lAco1wRDI4sYLF+2MYK2it/11cZ 593oDJuy/6YO7ctUi0EmD8RYeUh7iJDpjiGnOATLZb+G -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:31 2026 by rpki-client