This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZNGyYaQLcB5x2a9OitLT_Ow9j70.roa File: ZNGyYaQLcB5x2a9OitLT_Ow9j70.roa (raw, json) Hash identifier: cHk1JaaMjsT63KVskZACHalIV4Trmszl7p7CJZQekB4= Subject key identifier: 64:D1:B2:61:A4:0B:70:1E:71:D9:AF:4E:8A:D2:D3:FC:EC:3D:8F:BD Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84DCB4F6971DB48EB880AAA1652B54 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZNGyYaQLcB5x2a9OitLT_Ow9j70.roa Signing time: Fri 02 Jan 2026 16:22:52 +0000 ROA not before: Fri 02 Jan 2026 16:22:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61196 IP address blocks: 93.171.215.0/24 maxlen: 24 95.46.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:dc:b4:f6:97:1d:b4:8e:b8:80:aa:a1:65:2b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=64d1b261a40b701e71d9af4e8ad2d3fcec3d8fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:6d:ed:8d:5e:48:17:4b:fe:8a:05:00:1e: 40:03:e6:28:15:7d:bc:26:c4:6a:13:c6:e4:21:f3: 78:bc:00:e8:e6:3e:6d:e7:bf:51:95:f7:e6:f7:63: d5:8b:21:c4:32:1f:8a:1d:14:63:e1:28:a8:28:ff: 4c:44:8c:fe:9d:2f:5b:9f:94:c2:a9:28:11:a1:d2: 23:34:72:ed:0a:b6:f9:0e:32:76:a9:90:be:5f:3f: 35:79:0e:e6:25:51:66:da:87:fb:88:48:91:3d:d5: ad:98:b2:8e:08:0a:6c:ca:cb:c2:58:32:57:55:6c: 20:ab:85:99:c1:f3:bd:6c:8b:e8:79:aa:da:53:5e: 97:16:89:2e:8f:80:8a:34:dc:f3:a3:4f:1a:1e:3e: 44:55:70:c6:a4:4b:f4:9c:f6:5d:37:28:9e:c1:33: d5:e7:84:61:5e:d9:18:51:34:a1:bd:d2:a6:17:7b: c9:45:b0:86:f3:89:cd:4b:92:70:be:b7:e5:55:41: c8:50:39:4e:e7:a8:89:47:5b:28:f9:65:64:60:45: 66:b3:55:df:c2:9e:f5:c2:2c:1a:1e:d6:35:9b:89: 58:d3:77:c4:3b:df:35:c0:8a:08:bd:1f:8a:8e:85: 4e:e5:39:83:c3:dd:e0:21:50:da:ce:c4:28:b9:49: d6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D1:B2:61:A4:0B:70:1E:71:D9:AF:4E:8A:D2:D3:FC:EC:3D:8F:BD X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZNGyYaQLcB5x2a9OitLT_Ow9j70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.215.0/24 95.46.44.0/23 Signature Algorithm: sha256WithRSAEncryption a0:cd:83:12:b9:34:d8:9f:a1:9a:74:b0:6f:f2:a4:98:34:13: c4:7b:75:24:72:8c:9b:83:99:fd:95:38:73:62:65:fa:02:7d: 58:ac:38:83:b5:6b:58:08:0e:d3:67:2e:16:a9:67:ec:2a:c4: ed:32:86:4e:ce:c8:da:0c:1b:19:7c:a5:40:f4:d8:3f:bb:78: 62:f0:32:f1:cc:b1:a3:60:f6:f0:e3:88:b6:a5:55:58:88:36: 36:ca:4e:a8:ab:d7:b7:ff:c0:49:6b:6d:c4:dc:f9:65:fb:95: 9f:80:b8:83:3b:94:cc:fb:78:19:2b:cc:60:70:54:14:35:ed: 45:81:cf:30:ae:25:b5:8b:d2:29:4e:4b:6f:43:81:b0:71:64: c7:cb:9b:2c:4e:cf:6a:f5:4c:46:96:a1:2f:92:16:96:97:11: d8:0c:fa:b4:96:65:5e:65:af:b6:95:59:fd:02:12:3f:17:e4: 66:be:c2:38:9e:ec:c9:85:7b:5d:0c:f0:09:df:a6:a0:56:3d: 97:c7:27:15:66:59:86:6f:08:7a:65:5c:3b:42:77:f6:7c:f6: c2:98:42:98:97:23:a3:47:ac:35:99:ff:4f:d1:8d:97:e7:54: 1b:05:74:2c:9a:10:05:ec:ec:64:fa:39:e1:63:75:60:1e:ea: f2:6d:a5:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hNy09pcdtI64gKqhZStUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NGQxYjI2MWE0MGI3MDFlNzFkOWFmNGU4YWQyZDNmY2VjM2Q4ZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjVt7Y1eSBdL/ooFAB5AA+YoFX28 JsRqE8bkIfN4vADo5j5t579Rlffm92PViyHEMh+KHRRj4SioKP9MRIz+nS9bn5TC qSgRodIjNHLtCrb5DjJ2qZC+Xz81eQ7mJVFm2of7iEiRPdWtmLKOCApsysvCWDJX VWwgq4WZwfO9bIvoearaU16XFokuj4CKNNzzo08aHj5EVXDGpEv0nPZdNyiewTPV 54RhXtkYUTShvdKmF3vJRbCG84nNS5JwvrflVUHIUDlO56iJR1so+WVkYEVms1Xf wp71wiwaHtY1m4lY03fEO981wIoIvR+KjoVO5TmDw93gIVDazsQouUnWgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGTRsmGkC3AecdmvTorS0/zsPY+9MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvWk5HeVlhUUxjQjV4MmE5T2l0TFRfT3c5ajcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXavXAwQB Xy4sMA0GCSqGSIb3DQEBCwUAA4IBAQCgzYMSuTTYn6GadLBv8qSYNBPEe3Ukcoyb g5n9lThzYmX6An1YrDiDtWtYCA7TZy4WqWfsKsTtMoZOzsjaDBsZfKVA9Ng/u3hi 8DLxzLGjYPbw44i2pVVYiDY2yk6oq9e3/8BJa23E3Pll+5WfgLiDO5TM+3gZK8xg cFQUNe1Fgc8wriW1i9IpTktvQ4GwcWTHy5ssTs9q9UxGlqEvkhaWlxHYDPq0lmVe Za+2lVn9AhI/F+RmvsI4nuzJhXtdDPAJ36agVj2XxycVZlmGbwh6ZVw7Qnf2fPbC mEKYlyOjR6w1mf9P0Y2X51QbBXQsmhAF7Oxk+jnhY3VgHurybaXi -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:24 2026 by rpki-client