This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aDQQYDOiXIYLv4rALjsHkRzWSBM.roa File: aDQQYDOiXIYLv4rALjsHkRzWSBM.roa (raw, json) Hash identifier: Te3rqc8SzBaCfHBY4dWrqRteDjG0lFld7llk+3/n5eY= Subject key identifier: 68:34:10:60:33:A2:5C:86:0B:BF:8A:C0:2E:3B:07:91:1C:D6:48:13 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019A77D411260E7EC4EAA6887EADA2E12A92 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aDQQYDOiXIYLv4rALjsHkRzWSBM.roa Signing time: Wed 12 Nov 2025 11:29:37 +0000 ROA not before: Wed 12 Nov 2025 11:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61312 IP address blocks: 93.170.55.0/24 maxlen: 24 93.170.175.0/24 maxlen: 24 93.171.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:d4:11:26:0e:7e:c4:ea:a6:88:7e:ad:a2:e1:2a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 12 11:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6834106033a25c860bbf8ac02e3b07911cd64813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:07:dd:4a:5c:f2:a4:31:b1:34:f4:43:95: 77:b4:41:7f:df:05:75:6b:fd:5f:d6:22:90:a7:77: 94:4a:56:37:5c:38:3d:d8:aa:1c:db:da:dd:33:e3: 2e:90:ab:50:ad:d8:6b:e2:76:c6:53:b2:c3:ea:c2: e6:dc:cd:a5:49:1f:b4:21:6e:0a:68:62:18:6c:b0: 41:d5:22:92:cf:ef:25:7d:c8:74:8a:b7:3f:75:56: b9:7b:92:bf:de:7a:97:cc:6a:78:47:2a:95:37:72: da:b9:8a:bb:a3:ef:aa:47:5f:81:39:bc:fb:19:31: 19:49:4e:e8:65:82:f9:7b:e1:54:96:02:73:eb:00: ac:25:d0:46:fe:83:43:27:ff:64:8c:04:0a:90:78: e5:c4:cd:38:1a:c9:b0:e5:08:e6:94:5e:de:d6:3b: ae:57:d7:98:e9:80:77:1c:ac:5c:a8:c1:fd:d3:a0: df:04:f2:a3:0c:8c:e0:fe:7e:83:6d:49:e7:a7:e3: 33:29:2e:cb:ec:07:39:88:3b:d6:ba:a4:93:1f:82: 82:51:45:66:4e:75:68:26:58:7f:a7:17:78:45:a6: d6:93:1e:c2:0b:e5:f7:5f:e1:aa:ec:23:d7:bb:ae: bb:2b:84:f1:e3:fe:b8:fc:02:5c:27:f9:91:51:c4: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:34:10:60:33:A2:5C:86:0B:BF:8A:C0:2E:3B:07:91:1C:D6:48:13 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aDQQYDOiXIYLv4rALjsHkRzWSBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.55.0/24 93.170.175.0/24 93.171.152.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e8:7b:36:a0:44:b4:10:65:38:55:43:13:69:a3:0f:5c:09: 9d:1e:86:8e:ac:ad:4a:a1:f2:85:25:c2:c3:a1:bc:10:b1:d8: 17:49:f0:c4:df:25:54:6d:b5:02:51:3a:14:a7:67:62:b9:91: 7b:6c:10:25:c6:c5:03:e9:2d:ea:5b:dd:28:0f:d7:fa:9b:4c: 6c:f6:dd:12:17:59:2f:92:60:a2:c1:4d:ca:8f:a2:d3:47:3e: 46:4f:32:61:bf:a1:82:74:31:3c:88:db:da:f5:06:41:a1:31: 9f:3a:7e:59:fb:56:14:84:fc:c2:7d:e6:b2:b0:01:5d:a7:2a: 1c:74:94:f9:18:fc:f9:4e:88:cc:35:a7:25:42:e7:14:df:5a: 38:48:a3:55:79:4c:06:c9:ea:87:4b:3f:b7:7b:f3:6e:60:3e: 2e:1d:01:90:24:d1:05:a3:a4:f5:48:e0:7b:88:0c:50:07:c1: 1a:6e:47:75:84:42:ae:73:dc:14:84:ed:36:c8:3e:02:51:04: f9:06:87:16:73:6d:a3:33:d8:65:d1:74:5b:e7:8a:09:63:4f: 72:20:49:db:d1:7e:52:22:58:42:e7:be:6e:99:28:30:68:62: 7b:7c:fd:cf:17:ed:51:ec:36:86:8c:b2:25:a9:cc:d4:b6:bb: 6c:c2:70:70 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp31BEmDn7E6qaIfq2i4SqSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTEyMTEyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODM0MTA2MDMzYTI1Yzg2MGJiZjhhYzAyZTNiMDc5MTFjZDY0ODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIMH3Upc8qQxsTT0Q5V3tEF/3wV1 a/1f1iKQp3eUSlY3XDg92Koc29rdM+MukKtQrdhr4nbGU7LD6sLm3M2lSR+0IW4K aGIYbLBB1SKSz+8lfch0irc/dVa5e5K/3nqXzGp4RyqVN3LauYq7o++qR1+BObz7 GTEZSU7oZYL5e+FUlgJz6wCsJdBG/oNDJ/9kjAQKkHjlxM04Gsmw5QjmlF7e1juu V9eY6YB3HKxcqMH906DfBPKjDIzg/n6DbUnnp+MzKS7L7Ac5iDvWuqSTH4KCUUVm TnVoJlh/pxd4RabWkx7CC+X3X+Gq7CPXu667K4Tx4/64/AJcJ/mRUcQHMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGg0EGAzolyGC7+KwC47B5Ec1kgTMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYURRUVlET2lYSVlMdjRyQUxqc0hrUnpXU0JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXao3AwQA XaqvAwQAXauYMA0GCSqGSIb3DQEBCwUAA4IBAQAt6Hs2oES0EGU4VUMTaaMPXAmd HoaOrK1KofKFJcLDobwQsdgXSfDE3yVUbbUCUToUp2diuZF7bBAlxsUD6S3qW90o D9f6m0xs9t0SF1kvkmCiwU3Kj6LTRz5GTzJhv6GCdDE8iNva9QZBoTGfOn5Z+1YU hPzCfeaysAFdpyocdJT5GPz5TojMNaclQucU31o4SKNVeUwGyeqHSz+3e/NuYD4u HQGQJNEFo6T1SOB7iAxQB8Eabkd1hEKuc9wUhO02yD4CUQT5BocWc22jM9hl0XRb 54oJY09yIEnb0X5SIlhC575umSgwaGJ7fP3PF+1R7DaGjLIlqczUtrtswnBw -----END CERTIFICATE-----Generated at Sat Dec 6 12:53:55 2025 by rpki-client