This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UncCvJ1kqdPCTs8JJmLkFU19964.roa File: UncCvJ1kqdPCTs8JJmLkFU19964.roa (raw, json) Hash identifier: VxAD4QkUkAngQG3d1DHI+hQlLVNLvcKLdePyDmhAdTI= Subject key identifier: 52:77:02:BC:9D:64:A9:D3:C2:4E:CF:09:26:62:E4:15:4D:7D:F7:AE Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84DA2005D4B1253212603173255AF3 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UncCvJ1kqdPCTs8JJmLkFU19964.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60777 IP address blocks: 93.170.0.0/24 maxlen: 24 93.170.25.0/24 maxlen: 24 95.46.108.0/24 maxlen: 24 95.46.124.0/24 maxlen: 24 95.47.136.0/24 maxlen: 24 2a02:128:4200::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:da:20:05:d4:b1:25:32:12:60:31:73:25:5a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527702bc9d64a9d3c24ecf092662e4154d7df7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:47:cb:ce:cd:c3:4c:34:8d:c8:ed:b6:53:a6: d0:e3:9a:f0:1c:c5:b6:78:df:e1:30:d3:f8:96:e0: b0:5c:5e:7a:d5:75:57:23:94:24:07:67:6a:58:ba: 9e:68:48:01:04:be:d1:71:aa:aa:2e:61:b4:1e:cf: 29:81:14:4a:92:83:92:38:24:a7:25:8f:b9:6e:1f: 3a:ed:c6:a5:e2:a9:4e:86:e6:75:c4:5d:8a:78:d2: ad:4b:38:dc:a0:3b:84:4d:04:f1:51:42:81:2f:07: 1b:8f:ed:d2:09:c5:79:7d:df:2e:cf:6d:6f:50:79: 72:81:01:74:93:24:c5:e4:87:d0:f3:9a:aa:0a:a5: 78:ec:47:cc:b3:18:cc:a3:eb:df:5b:29:7f:63:72: a9:17:6b:19:f4:22:98:4f:58:f5:b0:52:ef:79:fa: 67:c0:e6:80:be:ba:81:f4:89:92:ce:d3:4a:d0:31: ed:6d:80:e4:5e:53:3f:c9:a8:17:48:dd:a9:07:32: f4:5c:e3:a5:23:89:6b:84:31:7a:dd:c9:6c:1d:6b: e0:3f:2f:b0:9e:81:60:90:0b:de:86:8c:76:cd:d6: dd:99:5c:6e:11:be:24:49:27:a3:da:d8:e5:3c:57: 6c:13:f9:35:fb:9e:33:a0:a8:d9:a4:af:51:2e:24: 9e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:77:02:BC:9D:64:A9:D3:C2:4E:CF:09:26:62:E4:15:4D:7D:F7:AE X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/UncCvJ1kqdPCTs8JJmLkFU19964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.0.0/24 93.170.25.0/24 95.46.108.0/24 95.46.124.0/24 95.47.136.0/24 IPv6: 2a02:128:4200::/44 Signature Algorithm: sha256WithRSAEncryption 10:4c:c9:f9:54:5a:a8:b9:63:b1:65:ef:0d:5e:a9:99:2c:18: ce:4a:1d:28:6b:90:7a:7c:c6:3b:9f:91:4b:ac:b2:16:bc:82: 20:21:2e:dc:8e:05:9f:77:7c:1b:d5:ee:56:48:9f:49:fe:96: d8:bc:45:81:c0:d2:59:91:24:96:95:41:ee:5e:e0:67:f4:76: d1:84:ec:95:0d:7a:f4:10:a0:d2:ed:4e:a6:89:ce:5d:ad:e5: 31:83:6b:3b:c9:9e:e5:05:a0:ea:e1:23:ae:c3:c1:d4:a9:d7: fb:e1:2b:16:73:54:28:6a:2a:1e:11:9d:af:6b:28:88:e1:69: 2c:6d:0c:19:20:54:6e:e4:da:0b:81:d8:6a:ab:0d:8e:2d:90: bb:ab:43:4a:4f:25:a5:b9:ee:e8:58:28:ea:41:dd:c8:6e:e4: 49:34:3b:50:36:65:db:44:da:d0:7f:ff:ec:5b:e3:be:7c:83: ad:3b:e2:cb:44:e5:fa:77:d9:53:f7:48:55:45:63:33:68:84: 45:36:a3:2a:7e:59:ea:4a:ff:8c:fe:13:27:82:17:e4:62:26: a6:43:fb:eb:f5:31:4a:29:36:1d:37:18:05:ae:5f:36:54:40: fc:76:b9:0f:0f:56:e8:57:1f:e0:3f:8f:17:2f:19:78:ec:76: 32:88:9d:3c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/hNogBdSxJTISYDFzJVrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Mjc3MDJiYzlkNjRhOWQzYzI0ZWNmMDkyNjYyZTQxNTRkN2RmN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEfLzs3DTDSNyO22U6bQ45rwHMW2 eN/hMNP4luCwXF561XVXI5QkB2dqWLqeaEgBBL7RcaqqLmG0Hs8pgRRKkoOSOCSn JY+5bh867cal4qlOhuZ1xF2KeNKtSzjcoDuETQTxUUKBLwcbj+3SCcV5fd8uz21v UHlygQF0kyTF5IfQ85qqCqV47EfMsxjMo+vfWyl/Y3KpF2sZ9CKYT1j1sFLvefpn wOaAvrqB9ImSztNK0DHtbYDkXlM/yagXSN2pBzL0XOOlI4lrhDF63clsHWvgPy+w noFgkAvehox2zdbdmVxuEb4kSSej2tjlPFdsE/k1+54zoKjZpK9RLiSeawIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFJ3ArydZKnTwk7PCSZi5BVNffeuMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVW5jQ3ZKMWtxZFBDVHM4SkptTGtGVTE5OTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQAXaoAAwQA XaoZAwQAXy5sAwQAXy58AwQAXy+IMA8EAgACMAkDBwQqAgEoQgAwDQYJKoZIhvcN AQELBQADggEBABBMyflUWqi5Y7Fl7w1eqZksGM5KHShrkHp8xjufkUussha8giAh LtyOBZ93fBvV7lZIn0n+lti8RYHA0lmRJJaVQe5e4Gf0dtGE7JUNevQQoNLtTqaJ zl2t5TGDazvJnuUFoOrhI67DwdSp1/vhKxZzVChqKh4Rna9rKIjhaSxtDBkgVG7k 2guB2GqrDY4tkLurQ0pPJaW57uhYKOpB3chu5Ek0O1A2ZdtE2tB//+xb4758g607 4stE5fp32VP3SFVFYzNohEU2oyp+WepK/4z+EyeCF+RiJqZD++v1MUopNh03GAWu XzZUQPx2uQ8PVuhXH+A/jxcvGXjsdjKInTw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:22 2026 by rpki-client