This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cWUSJzLkd1CyuT2E5_ZxxOynpys.roa File: cWUSJzLkd1CyuT2E5_ZxxOynpys.roa (raw, json) Hash identifier: vGxYEBU1gW/2jZLWO/R5aQZnOKG8cwrA3vBJMYMMieU= Subject key identifier: 71:65:12:27:32:E4:77:50:B2:B9:3D:84:E7:F6:71:C4:EC:A7:A7:2B Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CF5119BBD8C2A4F00A319E1CDF1D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cWUSJzLkd1CyuT2E5_ZxxOynpys.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59577 IP address blocks: 92.253.212.0/22 maxlen: 24 92.253.236.0/22 maxlen: 24 146.120.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cf:51:19:bb:d8:c2:a4:f0:0a:31:9e:1c:df:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7165122732e47750b2b93d84e7f671c4eca7a72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:97:b3:1d:f2:bc:88:01:81:d2:6f:37:2c: 05:28:02:f7:69:fa:4e:d9:5c:f3:5f:6b:e9:79:d3: 42:4b:63:79:e8:02:2b:f8:e2:54:33:11:ec:c9:c2: 67:1b:02:34:53:67:13:e2:df:da:95:e1:82:fc:fd: 34:41:5c:ef:93:05:49:17:62:47:5f:b5:09:69:45: 61:65:7b:c8:1e:26:ce:a3:28:e3:14:5f:75:32:c4: 38:bd:b7:f8:95:77:f0:5d:93:d1:e8:18:0e:1b:1a: 48:6d:de:e3:ab:e1:34:09:ca:8a:d0:0d:b7:75:a9: 0f:4f:7c:3a:6e:b4:1b:0f:cf:98:91:34:2b:2d:59: 03:f2:0d:23:3d:02:37:f6:38:ca:c2:60:ee:71:66: dd:07:14:40:07:2e:ff:84:34:40:b3:4b:8e:b8:a9: c0:c4:e2:7e:60:04:14:9f:66:66:4b:fd:55:38:d0: db:ee:1c:12:2b:c0:42:3a:7c:49:eb:63:e8:b6:74: 59:61:b5:61:77:ad:55:76:d6:bd:48:b2:8f:61:40: 47:48:df:9c:c7:e8:26:83:64:8a:4d:66:49:a5:52: 70:06:ff:6b:c3:de:ad:97:ef:f2:25:f3:bb:56:dc: 64:d9:e1:a5:b0:53:43:b6:5f:8b:e4:bf:fd:da:68: 04:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:65:12:27:32:E4:77:50:B2:B9:3D:84:E7:F6:71:C4:EC:A7:A7:2B X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cWUSJzLkd1CyuT2E5_ZxxOynpys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.253.212.0/22 92.253.236.0/22 146.120.188.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:58:6b:68:b1:1e:75:10:11:b2:c4:bf:69:1e:64:e5:5b:f3: d0:82:ec:9a:93:27:dd:95:1d:e2:51:8c:e2:fb:a1:f0:56:7e: ab:0c:5f:af:91:ef:ff:92:46:fb:67:e3:d6:35:aa:fe:0d:54: c9:52:35:39:92:a6:ce:8f:08:b1:53:97:29:20:98:d2:7d:21: f6:14:82:06:aa:c7:6c:62:34:29:97:59:ea:93:c9:d6:4a:8d: b1:62:42:8f:2a:d4:e5:79:f6:1d:97:9f:ac:c6:a1:72:75:e3: 39:fd:29:a7:48:b7:12:40:2c:c1:a3:2b:21:aa:db:1b:b9:a7: 25:73:28:9f:37:d5:90:dd:e7:10:03:61:ea:27:fa:fe:4d:a3: b4:e0:fe:48:8a:a0:9d:00:57:b3:9c:32:28:9f:b4:fd:2e:f0: b6:1b:72:ab:d9:2c:f1:1e:e8:42:6c:71:fb:cf:f8:09:5e:a1: b9:36:d5:36:f4:9a:fc:74:2f:68:18:49:af:55:a9:96:7c:33: e2:1f:cf:ca:03:6a:0c:ea:82:c0:cd:f4:60:39:e0:06:02:ed: bb:c8:7b:54:ef:08:7f:6e:06:63:a8:bc:64:87:95:da:41:4a: 50:76:24:9c:70:23:dc:00:30:c0:6a:0b:e7:2b:c3:01:91:33: 8c:35:09:83 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hM9RGbvYwqTwCjGeHN8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTY1MTIyNzMyZTQ3NzUwYjJiOTNkODRlN2Y2NzFjNGVjYTdhNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBuXsx3yvIgBgdJvNywFKAL3afpO 2VzzX2vpedNCS2N56AIr+OJUMxHsycJnGwI0U2cT4t/aleGC/P00QVzvkwVJF2JH X7UJaUVhZXvIHibOoyjjFF91MsQ4vbf4lXfwXZPR6BgOGxpIbd7jq+E0CcqK0A23 dakPT3w6brQbD8+YkTQrLVkD8g0jPQI39jjKwmDucWbdBxRABy7/hDRAs0uOuKnA xOJ+YAQUn2ZmS/1VONDb7hwSK8BCOnxJ62PotnRZYbVhd61Vdta9SLKPYUBHSN+c x+gmg2SKTWZJpVJwBv9rw96tl+/yJfO7Vtxk2eGlsFNDtl+L5L/92mgEuQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHFlEicy5HdQsrk9hOf2ccTsp6crMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvY1dVU0p6TGtkMUN5dVQyRTVfWnh4T3lucHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXP3UAwQC XP3sAwQCkni8MA0GCSqGSIb3DQEBCwUAA4IBAQB8WGtosR51EBGyxL9pHmTlW/PQ guyakyfdlR3iUYzi+6HwVn6rDF+vke//kkb7Z+PWNar+DVTJUjU5kqbOjwixU5cp IJjSfSH2FIIGqsdsYjQpl1nqk8nWSo2xYkKPKtTlefYdl5+sxqFydeM5/SmnSLcS QCzBoyshqtsbuaclcyifN9WQ3ecQA2HqJ/r+TaO04P5IiqCdAFeznDIon7T9LvC2 G3Kr2SzxHuhCbHH7z/gJXqG5NtU29Jr8dC9oGEmvVamWfDPiH8/KA2oM6oLAzfRg OeAGAu27yHtU7wh/bgZjqLxkh5XaQUpQdiSccCPcADDAagvnK8MBkTOMNQmD -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:55 2026 by rpki-client