This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aF0IyC4OMeNqMyHWQFbXBMK1J00.roa File: aF0IyC4OMeNqMyHWQFbXBMK1J00.roa (raw, json) Hash identifier: BtLY8egjOy95DIdivecRnuvRLJRLuHzMUebMtCO2ZdY= Subject key identifier: 68:5D:08:C8:2E:0E:31:E3:6A:33:21:D6:40:56:D7:04:C2:B5:27:4D Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84EE6AFF3B9F7FCAEF53BA9F917302 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aF0IyC4OMeNqMyHWQFbXBMK1J00.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201041 IP address blocks: 93.171.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ee:6a:ff:3b:9f:7f:ca:ef:53:ba:9f:91:73:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=685d08c82e0e31e36a3321d64056d704c2b5274d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:37:42:3d:cc:b5:58:fe:2c:bc:6d:eb:35:af: 53:9f:97:03:bb:bc:39:f8:1e:99:1a:48:f2:b3:54: 3f:39:38:3c:e0:c1:19:ac:3b:c7:d0:fd:27:0a:36: 80:c5:b5:a5:50:a2:75:1b:1e:75:b4:5c:03:97:bd: 25:ac:94:73:40:0e:30:a2:00:64:a0:cf:17:27:a4: f1:be:88:ba:d8:d5:29:95:f5:6c:ed:e5:fa:79:86: 57:2a:9a:1c:36:21:83:8b:8e:31:9c:6d:a2:12:5e: d2:a6:c7:0a:bb:a8:ce:28:19:90:1e:b3:f7:63:40: 49:73:b7:f9:85:31:8a:b2:68:95:1c:44:b5:d5:43: 26:3f:64:af:2b:d1:a7:31:bc:61:c8:de:70:96:6b: 4b:2c:e1:80:53:1b:da:f7:c1:ae:83:cb:e3:c1:6b: 4d:de:ed:6d:18:9a:e6:f0:33:60:f9:6a:e5:46:84: 1d:5c:80:9f:4e:41:1d:19:fb:1f:e9:22:78:47:87: d1:92:4e:f4:f3:48:99:13:43:45:8b:ef:b4:d5:bd: dd:c7:e9:2e:98:ad:f9:3f:ed:b0:72:e6:03:16:0f: cb:dd:3c:80:fd:ba:cd:a2:0a:af:4c:2a:9a:e2:d7: 41:84:53:33:b3:39:fe:45:5c:f0:6e:ea:88:c6:17: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:5D:08:C8:2E:0E:31:E3:6A:33:21:D6:40:56:D7:04:C2:B5:27:4D X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aF0IyC4OMeNqMyHWQFbXBMK1J00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.163.0/24 Signature Algorithm: sha256WithRSAEncryption 52:b4:bf:c8:e9:97:88:5b:c4:2f:43:8e:b6:81:46:9a:75:28: 50:46:50:db:f5:9c:2c:ed:50:9d:ad:5d:ed:8f:4e:8a:5e:c3: df:46:ce:d5:71:53:39:14:77:bf:95:20:f2:e6:c1:5d:fb:98: 2a:1d:42:ea:e7:af:ff:ff:1c:39:09:8e:44:5d:e8:b8:31:ca: 71:bf:67:cb:35:83:73:4e:a9:d6:75:1a:df:ac:87:d8:7f:cd: 61:fc:b6:3f:48:d9:c3:2f:fb:ce:c4:f0:ea:70:89:92:ff:a7: 69:ac:54:4f:50:8c:12:46:18:40:07:57:28:a4:9a:50:83:e0: c7:af:38:52:86:dc:b2:d4:df:e1:17:ed:b2:79:e0:ca:90:56: 46:fb:5e:06:d0:24:d3:ca:67:cc:00:37:d7:0c:d3:c5:1c:15: 14:c8:25:4a:81:1c:e7:b4:a5:5f:43:68:87:f1:03:6c:d7:c4: 0a:3a:f7:46:11:bf:e8:b8:8e:0d:9a:72:a9:39:46:15:58:68: c6:a4:99:52:f6:49:12:05:b3:13:20:0c:af:01:04:ac:6d:02: ce:7e:d6:af:e0:0d:f2:ed:17:6e:23:30:6e:f9:94:85:40:b0: 71:4e:89:42:cb:c4:d7:d2:32:ec:36:ce:6e:db:91:79:fe:3b: a0:55:62:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hO5q/zuff8rvU7qfkXMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODVkMDhjODJlMGUzMWUzNmEzMzIxZDY0MDU2ZDcwNGMyYjUyNzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzdCPcy1WP4svG3rNa9Tn5cDu7w5 +B6ZGkjys1Q/OTg84MEZrDvH0P0nCjaAxbWlUKJ1Gx51tFwDl70lrJRzQA4wogBk oM8XJ6Txvoi62NUplfVs7eX6eYZXKpocNiGDi44xnG2iEl7SpscKu6jOKBmQHrP3 Y0BJc7f5hTGKsmiVHES11UMmP2SvK9GnMbxhyN5wlmtLLOGAUxva98Gug8vjwWtN 3u1tGJrm8DNg+WrlRoQdXICfTkEdGfsf6SJ4R4fRkk7080iZE0NFi++01b3dx+ku mK35P+2wcuYDFg/L3TyA/brNogqvTCqa4tdBhFMzszn+RVzwbuqIxhcIyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGhdCMguDjHjajMh1kBW1wTCtSdNMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvYUYwSXlDNE9NZU5xTXlIV1FGYlhCTUsxSjAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaujMA0G CSqGSIb3DQEBCwUAA4IBAQBStL/I6ZeIW8QvQ462gUaadShQRlDb9Zws7VCdrV3t j06KXsPfRs7VcVM5FHe/lSDy5sFd+5gqHULq56///xw5CY5EXei4Mcpxv2fLNYNz TqnWdRrfrIfYf81h/LY/SNnDL/vOxPDqcImS/6dprFRPUIwSRhhAB1copJpQg+DH rzhShtyy1N/hF+2yeeDKkFZG+14G0CTTymfMADfXDNPFHBUUyCVKgRzntKVfQ2iH 8QNs18QKOvdGEb/ouI4NmnKpOUYVWGjGpJlS9kkSBbMTIAyvAQSsbQLOftav4A3y 7RduIzBu+ZSFQLBxTolCy8TX0jLsNs5u25F5/jugVWLk -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:39 2026 by rpki-client