This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S41tiJwCzrOr9lPXrnlem2vfIgo.roa File: S41tiJwCzrOr9lPXrnlem2vfIgo.roa (raw, json) Hash identifier: YscIu/2I/vwxaetVPfWY4nvG+tT3eUa7MRUP5/yo/uo= Subject key identifier: 4B:8D:6D:88:9C:02:CE:B3:AB:F6:53:D7:AE:79:5E:9B:6B:DF:22:0A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8509EE0F204B3572B7D8C7D83723B9 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S41tiJwCzrOr9lPXrnlem2vfIgo.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209926 IP address blocks: 92.38.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:09:ee:0f:20:4b:35:72:b7:d8:c7:d8:37:23:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b8d6d889c02ceb3abf653d7ae795e9b6bdf220a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:10:14:75:7e:b9:d0:f4:45:f5:6f:1a:31:19: 8c:d6:ee:21:ad:fd:f9:4d:4e:2c:1b:b3:07:44:f8: cc:90:8d:68:6e:3c:55:4e:20:1f:7c:67:6d:5d:38: 84:49:6e:2d:6d:1d:8c:2d:4b:94:4d:78:33:d7:c0: 2c:66:fc:8a:8c:d8:f5:47:a2:4b:10:55:2d:e6:1e: 26:79:09:cf:ae:1c:51:2f:8d:98:39:61:73:d2:9d: 59:e7:f1:a8:ac:ae:f1:77:4d:08:50:37:e7:eb:4a: 84:35:e6:53:d3:e6:de:8e:27:6f:07:78:a0:1e:21: 10:7d:e9:23:ca:4f:c3:45:d8:48:38:7c:8d:80:06: 0d:be:9f:39:be:da:a0:34:1f:6e:51:c2:21:4b:f6: 05:fc:70:3f:34:45:5f:cd:c0:2f:82:46:5d:85:46: 99:35:79:df:8b:d9:a3:8d:09:dd:ae:fd:d5:75:80: 41:52:24:13:c6:f2:9e:5e:61:97:58:84:df:e7:9a: 71:d3:91:3d:a7:b2:f1:04:c2:01:5c:ee:24:14:97: 9b:06:f7:ea:5f:57:18:29:a6:40:71:1b:97:d1:0d: aa:a1:ce:19:00:5e:f8:6e:eb:4c:2e:6a:98:d2:bd: 96:ef:08:fd:67:b6:2e:c6:22:5c:43:f7:e4:eb:78: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:6D:88:9C:02:CE:B3:AB:F6:53:D7:AE:79:5E:9B:6B:DF:22:0A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/S41tiJwCzrOr9lPXrnlem2vfIgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.4.0/24 Signature Algorithm: sha256WithRSAEncryption 27:af:e1:f4:ae:f1:8b:67:be:0b:2d:d7:81:80:99:a6:52:7e: b4:47:64:ea:fb:55:74:ac:20:61:01:3b:c1:13:c9:31:2c:a4: 66:80:ad:b5:7e:09:2a:e5:bc:dd:1c:b1:d1:50:0e:71:63:63: ce:34:1b:b8:06:4f:84:4a:d7:96:56:09:d9:65:e4:1d:00:2e: 1a:04:c8:54:0e:e4:db:73:66:3b:67:fa:83:e7:90:2f:24:45: 73:26:92:aa:74:5f:4b:45:7f:a5:e9:fb:d5:68:c4:f4:41:44: 82:f6:2b:64:c6:b3:ae:07:e9:08:9f:97:25:5b:f2:5d:83:dd: c4:ef:be:11:87:b1:58:fb:b7:57:40:e8:6c:56:f3:5e:78:88: 99:d2:e4:eb:97:e4:b3:5a:f5:8d:4f:93:7c:00:ae:4c:63:1a: ae:b4:9f:2d:13:b4:50:f7:26:00:0d:43:a2:a4:48:ff:fb:91: a8:f3:21:19:a6:9a:02:1b:f4:0b:c3:62:e4:c2:69:03:c9:76: 04:56:33:8a:82:58:33:02:02:b6:64:7c:98:cd:18:f7:40:4a: e4:a4:8b:6c:34:fe:58:78:e7:d3:fe:05:56:f0:09:69:56:fe: 18:a4:42:0a:d1:0d:c0:2f:7e:df:02:c2:4e:26:31:e4:48:ce: b5:14:44:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQnuDyBLNXK32MfYNyO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjhkNmQ4ODljMDJjZWIzYWJmNjUzZDdhZTc5NWU5YjZiZGYyMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hAUdX650PRF9W8aMRmM1u4hrf35 TU4sG7MHRPjMkI1objxVTiAffGdtXTiESW4tbR2MLUuUTXgz18AsZvyKjNj1R6JL EFUt5h4meQnPrhxRL42YOWFz0p1Z5/GorK7xd00IUDfn60qENeZT0+bejidvB3ig HiEQfekjyk/DRdhIOHyNgAYNvp85vtqgNB9uUcIhS/YF/HA/NEVfzcAvgkZdhUaZ NXnfi9mjjQndrv3VdYBBUiQTxvKeXmGXWITf55px05E9p7LxBMIBXO4kFJebBvfq X1cYKaZAcRuX0Q2qoc4ZAF74butMLmqY0r2W7wj9Z7YuxiJcQ/fk63j8zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEuNbYicAs6zq/ZT1655Xptr3yIKMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUzQxdGlKd0N6ck9yOWxQWHJubGVtMnZmSWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCYEMA0G CSqGSIb3DQEBCwUAA4IBAQAnr+H0rvGLZ74LLdeBgJmmUn60R2Tq+1V0rCBhATvB E8kxLKRmgK21fgkq5bzdHLHRUA5xY2PONBu4Bk+ESteWVgnZZeQdAC4aBMhUDuTb c2Y7Z/qD55AvJEVzJpKqdF9LRX+l6fvVaMT0QUSC9itkxrOuB+kIn5clW/Jdg93E 774Rh7FY+7dXQOhsVvNeeIiZ0uTrl+SzWvWNT5N8AK5MYxqutJ8tE7RQ9yYADUOi pEj/+5Go8yEZppoCG/QLw2LkwmkDyXYEVjOKglgzAgK2ZHyYzRj3QErkpItsNP5Y eOfT/gVW8AlpVv4YpEIK0Q3AL37fAsJOJjHkSM61FETu -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:46 2026 by rpki-client