This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZgEnrarJY6e8n-H53p7IRIn3Eds.roa File: ZgEnrarJY6e8n-H53p7IRIn3Eds.roa (raw, json) Hash identifier: +wuXFkx60l6tGY2J0IPN/3++HBMhNkWbhaN0YDjtxfk= Subject key identifier: 66:01:27:AD:AA:C9:63:A7:BC:9F:E1:F9:DE:9E:C8:44:89:F7:11:DB Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F848DEEE79C59F4AF328F17DD683C99 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZgEnrarJY6e8n-H53p7IRIn3Eds.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8870 IP address blocks: 93.171.240.0/22 maxlen: 24 93.171.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8d:ee:e7:9c:59:f4:af:32:8f:17:dd:68:3c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=660127adaac963a7bc9fe1f9de9ec84489f711db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:cb:ff:6d:43:c2:da:f3:ea:ae:88:1a:66: e0:14:95:e3:75:fa:42:04:f8:5d:a3:91:30:35:de: 81:ef:1d:b1:ae:f9:cb:d9:7f:8d:9b:29:18:eb:a6: 3d:8b:16:af:4c:8f:1a:6a:2b:53:62:35:a7:78:7b: d5:bd:e4:73:c2:48:b2:66:88:15:02:e7:7e:b2:09: 26:f9:36:cc:fa:7e:10:df:df:4e:c1:15:65:d5:b9: 0c:b8:73:8d:e3:59:1c:cb:8a:0e:a5:0b:41:88:a1: 0a:06:b4:9a:b6:90:70:6f:26:37:57:b1:c1:a0:75: 42:52:76:ba:f3:58:a5:fd:b1:fb:83:a2:83:0c:b3: f9:4d:1e:55:3c:73:ea:e0:05:7d:09:0b:ac:fc:d6: 71:cd:94:af:2e:6f:bd:26:f3:c2:8b:fc:8b:6d:6c: 3f:c4:25:1d:0e:9b:b3:80:09:45:d3:a3:17:04:d4: 8f:da:c1:42:b2:8c:c2:b0:0a:05:e1:7e:8e:e5:97: 18:c5:d5:1d:2a:cc:36:45:f4:27:ed:69:a4:7e:28: c7:bd:06:61:7b:bf:aa:9a:5c:5c:0d:4e:c9:61:fb: 18:e3:c3:9d:59:95:54:af:32:ec:70:86:ce:18:67: e0:4f:6d:5b:c2:22:4d:c0:a3:4b:3e:10:05:ca:a1: c5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:01:27:AD:AA:C9:63:A7:BC:9F:E1:F9:DE:9E:C8:44:89:F7:11:DB X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ZgEnrarJY6e8n-H53p7IRIn3Eds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.240.0/22 93.171.246.0/23 Signature Algorithm: sha256WithRSAEncryption a5:d6:66:b5:51:3c:8e:c4:1e:93:cc:6a:df:16:00:8f:af:0f: f6:ec:dd:c7:7e:2c:c1:0c:00:b6:35:88:28:22:e1:0f:96:b7: 44:19:74:31:95:21:2e:59:e4:38:21:fb:cc:c6:4f:65:2b:a1: c7:23:53:3a:3c:df:8c:b5:7c:c8:3f:6a:dd:a9:fc:02:db:3e: 26:3a:39:db:c4:2e:82:f3:a2:83:f2:b4:cb:ab:14:37:4d:10: 29:58:69:cb:60:70:fc:b8:af:ec:9e:3b:31:d6:eb:fc:24:14: 29:95:29:0e:9f:50:54:b2:cd:81:f0:cb:37:bc:80:ee:88:12: 86:96:58:19:0b:aa:89:7d:67:3c:6d:81:88:8c:2a:c2:36:cd: 01:ec:0a:2f:0a:c3:0b:78:e5:fd:55:59:71:4c:f0:13:0d:6f: 21:58:5e:ef:d7:80:7e:6c:8b:1d:ef:d2:5a:cc:e1:14:b3:da: 81:9b:26:e7:d0:ff:fe:8d:34:47:54:dc:02:7b:ce:79:1e:de: 6f:0a:cb:e7:bf:f5:e2:da:71:56:fa:29:77:a2:29:99:bd:1f: e6:5a:ce:f4:d2:64:c4:82:b2:7b:12:21:10:a5:e6:01:05:eb: 6b:16:35:7f:d2:84:e5:f0:f2:d9:4a:4b:c7:20:5c:d6:da:a6: 6d:1f:e8:cf -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hI3u55xZ9K8yjxfdaDyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjAxMjdhZGFhYzk2M2E3YmM5ZmUxZjlkZTllYzg0NDg5ZjcxMWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjnL/21Dwtrz6q6IGmbgFJXjdfpC BPhdo5EwNd6B7x2xrvnL2X+NmykY66Y9ixavTI8aaitTYjWneHvVveRzwkiyZogV Aud+sgkm+TbM+n4Q399OwRVl1bkMuHON41kcy4oOpQtBiKEKBrSatpBwbyY3V7HB oHVCUna681il/bH7g6KDDLP5TR5VPHPq4AV9CQus/NZxzZSvLm+9JvPCi/yLbWw/ xCUdDpuzgAlF06MXBNSP2sFCsozCsAoF4X6O5ZcYxdUdKsw2RfQn7WmkfijHvQZh e7+qmlxcDU7JYfsY48OdWZVUrzLscIbOGGfgT21bwiJNwKNLPhAFyqHFDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGYBJ62qyWOnvJ/h+d6eyESJ9xHbMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvWmdFbnJhckpZNmU4bi1INTNwN0lSSW4zRWRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXavwAwQB Xav2MA0GCSqGSIb3DQEBCwUAA4IBAQCl1ma1UTyOxB6TzGrfFgCPrw/27N3HfizB DAC2NYgoIuEPlrdEGXQxlSEuWeQ4IfvMxk9lK6HHI1M6PN+MtXzIP2rdqfwC2z4m OjnbxC6C86KD8rTLqxQ3TRApWGnLYHD8uK/snjsx1uv8JBQplSkOn1BUss2B8Ms3 vIDuiBKGllgZC6qJfWc8bYGIjCrCNs0B7AovCsMLeOX9VVlxTPATDW8hWF7v14B+ bIsd79JazOEUs9qBmybn0P/+jTRHVNwCe855Ht5vCsvnv/Xi2nFW+il3oimZvR/m Ws700mTEgrJ7EiEQpeYBBetrFjV/0oTl8PLZSkvHIFzW2qZtH+jP -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:45 2026 by rpki-client