This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/V9D4X2NykVHS4Y7LK4XVku5a03I.roa File: V9D4X2NykVHS4Y7LK4XVku5a03I.roa (raw, json) Hash identifier: oSXfeT7wIi+ZmyobRma5tWu7kunDvPbocNTMf03kYbM= Subject key identifier: 57:D0:F8:5F:63:72:91:51:D2:E1:8E:CB:2B:85:D5:92:EE:5A:D3:72 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BF9C51F88B7CA49971A386E6C53C Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/V9D4X2NykVHS4Y7LK4XVku5a03I.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51121 IP address blocks: 93.170.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:bf:9c:51:f8:8b:7c:a4:99:71:a3:86:e6:c5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57d0f85f63729151d2e18ecb2b85d592ee5ad372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:f7:6f:a8:f4:43:d9:2a:59:6c:9a:7d:f5: 4b:dc:04:a2:7d:b7:fc:e8:ef:b3:6d:fb:9c:5d:72: f5:72:13:95:da:ce:a8:09:ad:fd:ce:5a:95:6b:69: e8:b3:5d:6e:ff:5d:25:ca:f1:84:3b:0c:f0:b2:3e: 2b:aa:b2:96:da:0e:5c:21:61:4a:11:5a:04:80:ff: d9:fe:d6:76:99:ef:c8:c9:32:e8:ec:e7:87:16:0d: 30:bf:69:fc:18:0c:65:d5:6b:c6:37:b2:98:f5:84: d3:79:ad:de:d9:ab:e3:a1:7f:50:ff:5b:56:d0:f3: 8c:01:98:5d:be:e9:9b:c9:15:91:df:3f:7a:49:05: 19:2b:1a:2d:7a:50:df:4c:15:c5:8d:7f:85:22:58: a6:3e:52:fc:f3:22:ad:99:9b:a3:75:35:1d:e2:4e: 34:00:f4:44:d3:14:1a:4e:79:c8:84:92:e7:b2:43: 9f:b6:09:5d:85:8f:41:c4:eb:04:35:28:5f:d3:a7: 36:7b:ef:24:73:64:09:e6:ad:0d:c7:58:7f:81:ec: 7c:29:f2:b9:d1:79:25:ef:6c:27:f8:a7:86:14:2a: 7a:3e:b0:50:4d:f9:24:56:bb:e1:4a:7f:f9:1a:3c: c9:73:49:66:8b:76:f4:6b:cd:51:e0:a8:35:f2:6d: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D0:F8:5F:63:72:91:51:D2:E1:8E:CB:2B:85:D5:92:EE:5A:D3:72 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/V9D4X2NykVHS4Y7LK4XVku5a03I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.144.0/20 Signature Algorithm: sha256WithRSAEncryption 52:fd:f0:cb:96:e8:2a:c0:4c:0a:9e:53:2c:fd:3e:e7:28:39: 41:15:60:a8:af:48:f1:fd:2e:f2:07:90:6e:62:ef:10:9f:c2: 06:68:71:89:c5:0a:de:88:48:79:05:b7:0f:33:d0:d2:3a:eb: 38:c6:75:36:ad:12:7d:93:35:6e:dd:a5:be:81:86:84:76:7e: 59:db:b3:30:79:20:c0:75:fd:66:d7:be:97:a5:d3:40:9d:ad: 43:89:74:00:71:fb:70:5f:00:e9:dd:53:82:18:77:46:03:da: 9c:27:6a:d6:97:9f:7a:54:d8:4d:d1:2f:ad:c0:19:69:50:7b: 0d:92:8e:f2:05:71:fb:30:c7:18:88:ec:7e:b3:7b:0e:ba:37: 35:d6:94:71:b0:a7:b2:f4:21:b7:b8:d8:db:82:e6:34:b5:c9: c0:5c:9f:61:7b:a5:30:6b:e6:13:8c:ae:52:b4:32:c5:5e:33: 88:e1:ff:34:31:a0:fc:7e:a6:97:54:a1:90:9e:b4:c5:49:5c: bd:48:2e:3e:36:a6:41:85:c6:5d:b2:22:75:3e:9b:ca:b5:07: b2:f3:e5:25:75:d3:cb:f2:92:f8:20:9b:5c:3b:cf:61:3b:89: fc:95:66:41:ba:6e:44:eb:40:11:83:5d:61:7f:38:1b:9c:86: ee:de:db:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hL+cUfiLfKSZcaOG5sU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2QwZjg1ZjYzNzI5MTUxZDJlMThlY2IyYjg1ZDU5MmVlNWFkMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV33b6j0Q9kqWWyaffVL3ASifbf8 6O+zbfucXXL1chOV2s6oCa39zlqVa2nos11u/10lyvGEOwzwsj4rqrKW2g5cIWFK EVoEgP/Z/tZ2me/IyTLo7OeHFg0wv2n8GAxl1WvGN7KY9YTTea3e2avjoX9Q/1tW 0POMAZhdvumbyRWR3z96SQUZKxotelDfTBXFjX+FIlimPlL88yKtmZujdTUd4k40 APRE0xQaTnnIhJLnskOftgldhY9BxOsENShf06c2e+8kc2QJ5q0Nx1h/gex8KfK5 0Xkl72wn+KeGFCp6PrBQTfkkVrvhSn/5GjzJc0lmi3b0a81R4Kg18m1++QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFfQ+F9jcpFR0uGOyyuF1ZLuWtNyMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvVjlENFgyTnlrVkhTNFk3TEs0WFZrdTVhMDNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXaqQMA0G CSqGSIb3DQEBCwUAA4IBAQBS/fDLlugqwEwKnlMs/T7nKDlBFWCor0jx/S7yB5Bu Yu8Qn8IGaHGJxQreiEh5BbcPM9DSOus4xnU2rRJ9kzVu3aW+gYaEdn5Z27MweSDA df1m176XpdNAna1DiXQAcftwXwDp3VOCGHdGA9qcJ2rWl596VNhN0S+twBlpUHsN ko7yBXH7MMcYiOx+s3sOujc11pRxsKey9CG3uNjbguY0tcnAXJ9he6Uwa+YTjK5S tDLFXjOI4f80MaD8fqaXVKGQnrTFSVy9SC4+NqZBhcZdsiJ1PpvKtQey8+UlddPL 8pL4IJtcO89hO4n8lWZBum5E60ARg11hfzgbnIbu3tvK -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:06 2026 by rpki-client