This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d1R72UJAglDttLFT84ta4K4zbGM.roa File: d1R72UJAglDttLFT84ta4K4zbGM.roa (raw, json) Hash identifier: DcqMY+NBnpEVdCGk7wcoHcGwHlOgXn1Hi8LmS1U3jbU= Subject key identifier: 77:54:7B:D9:42:40:82:50:ED:B4:B1:53:F3:8B:5A:E0:AE:33:6C:63 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019BC6E2A2D2886B559251A1FE641BA567AB Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d1R72UJAglDttLFT84ta4K4zbGM.roa Signing time: Fri 16 Jan 2026 12:58:20 +0000 ROA not before: Fri 16 Jan 2026 12:58:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31133 IP address blocks: 92.38.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:e2:a2:d2:88:6b:55:92:51:a1:fe:64:1b:a5:67:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 16 12:58:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=77547bd942408250edb4b153f38b5ae0ae336c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fa:16:b3:4e:f4:f6:a2:e4:80:50:46:b8:51: d5:fa:27:16:d5:da:52:c4:a8:34:c3:b6:90:bd:36: 0a:7d:29:27:b2:27:4a:f1:fc:56:ce:6e:29:85:96: a2:d7:06:f7:41:ef:7b:35:70:bd:27:bb:c6:22:99: 70:31:65:89:8a:e8:91:69:bc:28:41:3b:9b:89:c1: ca:47:9c:63:a5:aa:35:ff:bd:11:99:b0:e9:2b:f0: a7:ff:55:65:c6:85:18:2f:93:77:57:14:a3:67:44: 63:a6:93:85:2d:40:e2:7b:d2:31:ef:d2:2e:d4:51: 25:e0:a8:4d:9f:c3:ab:a4:52:45:ba:11:62:77:b1: 97:4d:c6:4d:3e:0b:4e:d0:dd:61:e1:04:54:14:60: 58:c0:6a:43:56:ca:52:be:6f:6e:46:06:54:67:bc: 47:f2:8c:15:32:94:b8:fb:37:09:f0:84:1b:69:8d: 4a:cb:7a:84:48:f3:80:48:24:01:02:c9:40:71:12: 3b:9b:a3:e8:bf:94:ea:36:4b:85:86:4e:89:9e:61: d2:a7:22:5a:22:ea:0a:70:15:15:17:b5:1d:ea:3e: 6e:b8:d3:fe:10:54:39:ff:2c:09:27:16:7c:b1:e1: 03:8b:b2:d5:64:d7:3f:0f:1e:3c:76:37:2d:ad:e0: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:54:7B:D9:42:40:82:50:ED:B4:B1:53:F3:8B:5A:E0:AE:33:6C:63 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d1R72UJAglDttLFT84ta4K4zbGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.42.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:84:e4:da:a6:37:15:67:e4:df:0f:40:13:8d:0b:18:64:57: 33:76:91:c4:33:cb:38:ab:9a:8a:35:fe:58:73:25:53:0b:d4: 38:ca:db:27:5d:25:64:d6:45:f9:d1:4e:3e:ec:52:fa:ec:dd: 32:3a:9c:9d:c6:12:0a:6c:28:3c:04:62:b5:45:a9:cb:ae:d1: b8:c4:ca:5b:c1:58:c5:5a:55:36:f5:c6:a9:69:90:d7:1b:ba: 71:5d:1c:42:cb:38:3f:db:ef:f1:bb:4b:4c:c9:85:d3:da:16: 2d:cb:9f:6d:f9:ef:a2:78:83:86:ce:71:33:29:4e:a5:ff:16: af:77:79:25:75:71:18:2c:2b:8e:51:b6:46:92:7a:5a:0b:91: 2e:fd:1c:81:15:f8:01:10:cb:fa:6c:39:59:cb:7b:7c:33:2a: 3e:f4:98:7b:5c:d7:14:23:f6:04:1b:1d:2e:8c:bc:b2:3b:1f: c2:5b:e9:60:9a:89:6a:d7:97:47:d4:9a:c0:a2:75:0c:79:16: 93:7d:7e:dc:f1:38:36:76:d9:9c:c0:f7:62:03:f8:be:76:98: 71:0c:c2:53:2b:a1:30:bc:6a:ef:fe:f1:f6:a1:4f:24:53:a9: 5e:91:b8:36:aa:18:4a:a0:f6:6a:60:cf:40:ce:c2:e4:fc:bd: e5:68:9f:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvG4qLSiGtVklGh/mQbpWerMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTE2MTI1ODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzU0N2JkOTQyNDA4MjUwZWRiNGIxNTNmMzhiNWFlMGFlMzM2YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/oWs0709qLkgFBGuFHV+icW1dpS xKg0w7aQvTYKfSknsidK8fxWzm4phZai1wb3Qe97NXC9J7vGIplwMWWJiuiRabwo QTubicHKR5xjpao1/70RmbDpK/Cn/1VlxoUYL5N3VxSjZ0RjppOFLUDie9Ix79Iu 1FEl4KhNn8OrpFJFuhFid7GXTcZNPgtO0N1h4QRUFGBYwGpDVspSvm9uRgZUZ7xH 8owVMpS4+zcJ8IQbaY1Ky3qESPOASCQBAslAcRI7m6Pov5TqNkuFhk6JnmHSpyJa IuoKcBUVF7Ud6j5uuNP+EFQ5/ywJJxZ8seEDi7LVZNc/Dx48djctreACNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHdUe9lCQIJQ7bSxU/OLWuCuM2xjMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZDFSNzJVSkFnbER0dExGVDg0dGE0SzR6YkdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXCYqMA0G CSqGSIb3DQEBCwUAA4IBAQAKhOTapjcVZ+TfD0ATjQsYZFczdpHEM8s4q5qKNf5Y cyVTC9Q4ytsnXSVk1kX50U4+7FL67N0yOpydxhIKbCg8BGK1RanLrtG4xMpbwVjF WlU29capaZDXG7pxXRxCyzg/2+/xu0tMyYXT2hYty59t+e+ieIOGznEzKU6l/xav d3kldXEYLCuOUbZGknpaC5Eu/RyBFfgBEMv6bDlZy3t8Myo+9Jh7XNcUI/YEGx0u jLyyOx/CW+lgmolq15dH1JrAonUMeRaTfX7c8Tg2dtmcwPdiA/i+dphxDMJTK6Ew vGrv/vH2oU8kU6lekbg2qhhKoPZqYM9AzsLk/L3laJ+z -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:37 2026 by rpki-client