This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WJcGZgh4mGlH4ZWv7_4Qfq-RSjo.roa File: WJcGZgh4mGlH4ZWv7_4Qfq-RSjo.roa (raw, json) Hash identifier: JDSB1LG1uKVNdQuw4OKWabde83y5CUq2ORMuHfWXqgY= Subject key identifier: 58:97:06:66:08:78:98:69:47:E1:95:AF:EF:FE:10:7E:AF:91:4A:3A Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851B59ACE0F20B694FE03E81407965 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WJcGZgh4mGlH4ZWv7_4Qfq-RSjo.roa Signing time: Fri 02 Jan 2026 16:23:08 +0000 ROA not before: Fri 02 Jan 2026 16:23:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215032 IP address blocks: 93.171.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1b:59:ac:e0:f2:0b:69:4f:e0:3e:81:40:79:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589706660878986947e195afeffe107eaf914a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:80:78:73:41:6e:e0:0a:d3:df:7c:cf:b0: 47:2a:bc:bb:ef:0b:a8:94:26:2b:a4:be:41:7c:47: b2:c4:4f:e3:90:80:39:77:5e:77:3b:c3:50:99:eb: 51:51:21:d6:62:0a:56:07:d2:a6:07:29:f6:0d:6e: 9a:bb:2a:21:d3:5f:b7:04:fa:8b:c3:b8:c9:8d:ef: 9f:cd:99:a7:68:3d:33:ac:38:da:f5:5d:b8:c6:23: ac:0c:61:2a:37:29:64:b8:bc:82:51:a6:b6:dd:65: 77:b6:fa:16:de:6c:2d:33:f1:dd:a9:52:5f:e9:fc: 7d:5d:3a:ab:eb:bf:89:5a:6a:18:37:5e:5a:f4:0e: c6:8e:17:52:ea:44:43:b9:d2:56:43:0e:80:52:a9: 79:05:ca:ea:6f:ae:58:12:b5:f4:be:16:62:12:8e: 1e:f9:3b:88:7d:08:6e:89:b5:7a:f2:c2:ee:5a:8b: 30:cd:5d:53:e4:52:c1:78:97:45:04:be:89:95:c7: 03:25:b4:98:d3:95:30:de:cd:71:92:63:e6:2e:f7: a7:b5:8f:b8:d7:bd:2c:72:5a:76:b9:41:68:41:9a: e2:21:ec:e4:18:99:d8:e4:3e:aa:92:4b:4a:a9:c2: 43:5b:c5:46:2b:a6:b4:9f:58:b2:da:66:c1:4c:a7: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:97:06:66:08:78:98:69:47:E1:95:AF:EF:FE:10:7E:AF:91:4A:3A X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WJcGZgh4mGlH4ZWv7_4Qfq-RSjo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.180.0/24 Signature Algorithm: sha256WithRSAEncryption 41:d3:6a:a6:97:b8:ee:a5:57:0c:19:c1:8d:55:91:09:d0:84: b5:b1:22:02:cb:2b:52:be:84:87:66:b9:90:21:ee:8b:c4:09: 9d:cd:91:02:58:8e:c0:45:ac:14:20:e7:fe:25:e3:55:6c:8b: e1:01:ba:c9:97:2d:5a:d2:02:b1:29:90:c5:94:74:bc:35:7f: c1:6f:3f:3f:0d:1c:fb:ee:24:1f:1d:7c:0f:5c:5e:79:22:34: 18:1d:a8:1f:06:0b:79:d5:7e:d9:45:ad:71:a8:6b:63:9e:37: c4:57:8f:a3:86:41:f6:f5:e2:a4:53:41:45:cb:52:c7:10:b0: 85:80:16:c1:ea:11:b7:a5:f8:20:63:b8:68:0f:c1:eb:86:f4: b3:b5:cc:b2:71:58:b6:80:11:63:1e:1d:59:f6:3a:e1:c0:f0: 3b:00:d0:c2:b1:cb:26:bc:5a:f3:66:37:b0:e5:4d:4b:50:e4: fe:71:7a:ae:3a:e1:d5:26:64:46:84:e5:99:06:ff:4f:88:8f: bd:89:03:ae:da:48:fa:34:8a:1a:26:f2:a0:57:57:74:94:a6: dc:ee:bc:bc:8d:ec:9f:80:30:82:57:12:19:a0:97:13:f5:6a: f6:4e:09:8c:92:ba:ac:0b:5e:88:45:0b:af:e1:95:40:93:97: bc:e0:cd:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRtZrODyC2lP4D6BQHllMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODk3MDY2NjA4Nzg5ODY5NDdlMTk1YWZlZmZlMTA3ZWFmOTE0YTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4yAeHNBbuAK0998z7BHKry77wuo lCYrpL5BfEeyxE/jkIA5d153O8NQmetRUSHWYgpWB9KmByn2DW6auyoh01+3BPqL w7jJje+fzZmnaD0zrDja9V24xiOsDGEqNylkuLyCUaa23WV3tvoW3mwtM/HdqVJf 6fx9XTqr67+JWmoYN15a9A7GjhdS6kRDudJWQw6AUql5Bcrqb65YErX0vhZiEo4e +TuIfQhuibV68sLuWoswzV1T5FLBeJdFBL6JlccDJbSY05Uw3s1xkmPmLventY+4 170sclp2uUFoQZriIezkGJnY5D6qkktKqcJDW8VGK6a0n1iy2mbBTKf8rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFiXBmYIeJhpR+GVr+/+EH6vkUo6MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvV0pjR1pnaDRtR2xINFpXdjdfNFFmcS1SU2pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXau0MA0G CSqGSIb3DQEBCwUAA4IBAQBB02qml7jupVcMGcGNVZEJ0IS1sSICyytSvoSHZrmQ Ie6LxAmdzZECWI7ARawUIOf+JeNVbIvhAbrJly1a0gKxKZDFlHS8NX/Bbz8/DRz7 7iQfHXwPXF55IjQYHagfBgt51X7ZRa1xqGtjnjfEV4+jhkH29eKkU0FFy1LHELCF gBbB6hG3pfggY7hoD8HrhvSztcyycVi2gBFjHh1Z9jrhwPA7ANDCscsmvFrzZjew 5U1LUOT+cXquOuHVJmRGhOWZBv9PiI+9iQOu2kj6NIoaJvKgV1d0lKbc7ry8jeyf gDCCVxIZoJcT9Wr2TgmMkrqsC16IRQuv4ZVAk5e84M2f -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:06 2026 by rpki-client