This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ck7hdSVa8oFInekKY_AA0k81rLI.roa File: ck7hdSVa8oFInekKY_AA0k81rLI.roa (raw, json) Hash identifier: ZkDTRRw6+/KqR3ocgrBW1DOeFCjeq0ZQwsWFm3U1+mA= Subject key identifier: 72:4E:E1:75:25:5A:F2:81:48:9D:E9:0A:63:F0:00:D2:4F:35:AC:B2 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BE0265B6104F1E85935069B589DD Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ck7hdSVa8oFInekKY_AA0k81rLI.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50685 IP address blocks: 93.170.236.0/22 maxlen: 24 93.171.160.0/23 maxlen: 24 95.47.60.0/23 maxlen: 24 146.120.13.0/24 maxlen: 24 146.120.14.0/23 maxlen: 24 146.120.192.0/22 maxlen: 24 146.158.16.0/22 maxlen: 24 2a02:128:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:be:02:65:b6:10:4f:1e:85:93:50:69:b5:89:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=724ee175255af281489de90a63f000d24f35acb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0f:19:7d:6f:e6:a4:61:2d:62:98:e1:e7:15: 95:58:7f:8e:4b:4b:ad:52:88:ac:c9:11:25:e3:45: 43:e7:3a:89:8d:2f:0c:5c:26:23:0a:7d:79:62:96: ed:23:b3:e6:d2:6a:80:2f:eb:7b:ca:50:33:65:c5: d5:03:ef:3e:92:5c:ca:39:66:aa:19:c6:60:82:24: 04:af:40:71:ae:b6:f5:35:c9:44:42:1c:4e:ea:c7: 6f:e8:83:c5:86:e0:19:41:42:78:6e:91:67:95:13: 05:f5:33:f2:f5:e9:e4:ce:9b:4b:97:1e:02:15:dc: 0c:29:d7:23:21:1b:7e:63:bf:c5:ad:c4:48:98:f2: 65:d6:f1:38:1a:02:18:3d:f3:1f:51:90:98:fb:12: 4c:06:b9:30:9e:de:db:78:fa:e4:ae:cf:47:1a:85: d7:59:44:53:65:a9:4e:36:64:75:ba:8f:3e:70:8a: f9:52:3d:cf:34:bd:c7:d3:1d:7a:c7:37:3b:f8:a4: 48:1b:ab:d6:4a:68:6c:48:5f:7d:52:b2:26:45:ca: 2d:4e:e6:ee:9d:c3:fd:8b:5a:02:d4:38:df:cd:d4: a0:59:97:be:f7:ff:b2:91:e4:fd:37:f2:3a:ad:15: 54:cd:38:36:a1:a7:19:f7:19:54:5e:2a:4c:d0:6a: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4E:E1:75:25:5A:F2:81:48:9D:E9:0A:63:F0:00:D2:4F:35:AC:B2 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ck7hdSVa8oFInekKY_AA0k81rLI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.236.0/22 93.171.160.0/23 95.47.60.0/23 146.120.13.0-146.120.15.255 146.120.192.0/22 146.158.16.0/22 IPv6: 2a02:128:9::/48 Signature Algorithm: sha256WithRSAEncryption 91:06:fa:9c:de:13:bc:ba:44:51:be:b5:38:71:8c:59:c3:08: 08:86:71:26:9a:81:20:c0:59:77:a7:f3:19:e4:58:9f:04:8c: 5b:e3:e2:b1:ed:1c:15:f8:d0:e5:a5:0b:fc:df:ea:03:ae:ef: 35:c5:ae:27:9e:f1:42:be:88:2d:c8:23:8e:ba:05:bb:b5:b0: 5f:e0:e0:32:be:13:29:d6:9b:00:0f:4f:12:7d:b4:2b:3e:e3: 5b:bd:71:97:27:12:6d:6b:53:95:c1:8e:cf:43:1a:71:cb:4a: 54:0d:a3:d2:0e:df:51:37:10:ea:5f:d7:43:30:2b:85:ed:31: e5:02:b9:86:64:95:2a:1d:ab:47:ac:f1:89:64:7f:44:99:c4: 24:ee:f0:ce:7d:2f:14:34:c2:ae:03:d3:cb:fa:9d:12:20:90: 7c:ef:3a:d3:b0:2e:4a:24:4e:dd:43:28:0e:b0:27:5d:6d:66: f3:a9:6d:91:8a:27:95:c5:d6:ac:42:54:30:ca:da:15:a8:5d: ad:cb:31:66:b8:60:d9:ef:d3:a3:60:b3:8b:39:d4:cd:2c:29: 37:05:05:b9:dd:1c:f2:32:c0:50:04:90:b6:52:39:0a:c7:47: 2f:4c:b5:40:88:34:a8:2a:18:34:54:b6:62:67:ca:59:10:42: 75:c5:c5:db -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt/hL4CZbYQTx6Fk1BptYndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjRlZTE3NTI1NWFmMjgxNDg5ZGU5MGE2M2YwMDBkMjRmMzVhY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA8ZfW/mpGEtYpjh5xWVWH+OS0ut UoisyREl40VD5zqJjS8MXCYjCn15YpbtI7Pm0mqAL+t7ylAzZcXVA+8+klzKOWaq GcZggiQEr0Bxrrb1NclEQhxO6sdv6IPFhuAZQUJ4bpFnlRMF9TPy9enkzptLlx4C FdwMKdcjIRt+Y7/FrcRImPJl1vE4GgIYPfMfUZCY+xJMBrkwnt7bePrkrs9HGoXX WURTZalONmR1uo8+cIr5Uj3PNL3H0x16xzc7+KRIG6vWSmhsSF99UrImRcotTubu ncP9i1oC1DjfzdSgWZe+9/+ykeT9N/I6rRVUzTg2oacZ9xlUXipM0GrjgwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFHJO4XUlWvKBSJ3pCmPwANJPNayyMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvY2s3aGRTVmE4b0ZJbmVrS1lfQUEwazgxckxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAyBAIAATAsAwQCXarsAwQB XaugAwQBXy88MAwDBACSeA0DBASSeAADBAKSeMADBAKSnhAwDwQCAAIwCQMHACoC ASgACTANBgkqhkiG9w0BAQsFAAOCAQEAkQb6nN4TvLpEUb61OHGMWcMICIZxJpqB IMBZd6fzGeRYnwSMW+Pise0cFfjQ5aUL/N/qA67vNcWuJ57xQr6ILcgjjroFu7Ww X+DgMr4TKdabAA9PEn20Kz7jW71xlycSbWtTlcGOz0MacctKVA2j0g7fUTcQ6l/X QzArhe0x5QK5hmSVKh2rR6zxiWR/RJnEJO7wzn0vFDTCrgPTy/qdEiCQfO8607Au SiRO3UMoDrAnXW1m86ltkYonlcXWrEJUMMraFahdrcsxZrhg2e/To2CziznUzSwp NwUFud0c8jLAUASQtlI5CsdHL0y1QIg0qCoYNFS2YmfKWRBCdcXF2w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:19:05 2026 by rpki-client