This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fnpKAfmzOdYriXhb72WUzOh13LA.roa File: fnpKAfmzOdYriXhb72WUzOh13LA.roa (raw, json) Hash identifier: lJnfxXOfVcYilVzZHC7RfcJuWZvIkP4f6Rwb/4vs9ug= Subject key identifier: 7E:7A:4A:01:F9:B3:39:D6:2B:89:78:5B:EF:65:94:CC:E8:75:DC:B0 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CDF29BBB1E28C7298ACF397CB13F Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fnpKAfmzOdYriXhb72WUzOh13LA.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59430 IP address blocks: 93.170.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cd:f2:9b:bb:1e:28:c7:29:8a:cf:39:7c:b1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e7a4a01f9b339d62b89785bef6594cce875dcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:98:f5:9e:eb:df:b2:d5:61:98:df:b6:af:c6: 7a:15:9b:cb:24:36:7f:57:cd:c0:48:2e:aa:9e:7c: b6:8b:3c:ae:da:52:32:d3:89:36:8f:ce:79:3b:40: ea:6f:0b:e3:e0:ac:b4:27:06:0f:41:ff:fa:99:ff: 09:ee:ff:df:d2:75:42:e2:dd:ad:61:9f:34:2d:3d: b8:a7:df:9d:25:1e:d8:a0:ac:43:93:55:8f:43:78: 94:3f:23:9f:90:cc:a5:9a:40:a9:b3:d7:54:89:6b: f4:7c:ef:71:d5:41:0f:e6:12:82:ee:bb:40:5e:1a: 7b:5c:1a:c9:84:3d:64:60:7f:95:0b:a3:72:66:3e: c3:cb:5a:4a:fe:2c:5a:fe:e2:f7:34:7a:f5:96:9f: 54:a9:42:f2:43:20:04:d4:e3:41:42:8e:92:b8:55: 2a:d5:f1:5d:06:ec:72:76:3c:09:cc:08:45:fd:bd: f2:b4:93:9b:ff:70:13:95:13:22:82:1e:40:32:80: 63:37:80:5d:4f:6a:1a:2d:2c:5a:61:fa:db:12:24: 6b:70:e5:03:44:45:26:e9:0c:cb:3c:3e:b0:5e:80: 9d:ee:b5:84:91:5d:8d:8c:16:88:f8:c3:68:82:00: ea:a2:49:41:30:2d:4a:ef:81:9b:64:f3:19:ed:a4: 84:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7A:4A:01:F9:B3:39:D6:2B:89:78:5B:EF:65:94:CC:E8:75:DC:B0 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fnpKAfmzOdYriXhb72WUzOh13LA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.8.0/24 Signature Algorithm: sha256WithRSAEncryption 56:c2:00:42:8a:34:98:9c:47:c6:10:18:dc:4c:74:b6:14:fa: a2:73:e3:ca:4f:d1:59:fd:53:23:cb:ea:97:51:fc:fc:52:54: b2:97:da:8d:68:31:01:4f:20:72:19:56:2d:7f:94:0d:28:d3: 9f:a8:a0:c2:8e:b5:3c:9f:c6:1a:fd:62:21:6d:77:70:60:05: 8a:29:18:1d:bc:c2:c3:f7:1f:bb:5e:19:84:bf:5e:5a:0e:15: 35:a4:59:4f:06:e8:bf:07:dd:16:02:5d:27:ee:d9:60:04:cc: 00:39:01:5e:b4:66:94:6b:c8:be:48:e2:6d:a5:c9:16:ef:d6: 26:10:f9:29:71:94:bc:40:21:61:e0:2b:35:1f:a9:f1:20:14: 14:49:40:0b:09:0b:cd:7d:a9:71:a0:7c:41:05:ad:47:98:a9: 09:d2:32:61:4c:fe:d8:3d:fe:d4:3e:fa:11:a2:08:95:f5:d9: 46:3d:a0:25:79:cf:5b:f9:da:be:79:29:a5:c0:72:cd:44:1a: f7:18:4f:9e:70:2e:22:a8:dd:2a:34:0c:70:62:9a:16:d9:9b: 59:30:87:1d:2e:77:8b:ea:ea:46:2e:7c:c7:ec:0e:e7:dc:9e: d9:d6:e7:6d:66:57:88:da:0c:36:78:bd:20:29:80:8a:41:9a: 51:e5:53:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hM3ym7seKMcpis85fLE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTdhNGEwMWY5YjMzOWQ2MmI4OTc4NWJlZjY1OTRjY2U4NzVkY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Jj1nuvfstVhmN+2r8Z6FZvLJDZ/ V83ASC6qnny2izyu2lIy04k2j855O0Dqbwvj4Ky0JwYPQf/6mf8J7v/f0nVC4t2t YZ80LT24p9+dJR7YoKxDk1WPQ3iUPyOfkMylmkCps9dUiWv0fO9x1UEP5hKC7rtA Xhp7XBrJhD1kYH+VC6NyZj7Dy1pK/ixa/uL3NHr1lp9UqULyQyAE1ONBQo6SuFUq 1fFdBuxydjwJzAhF/b3ytJOb/3ATlRMigh5AMoBjN4BdT2oaLSxaYfrbEiRrcOUD REUm6QzLPD6wXoCd7rWEkV2NjBaI+MNoggDqoklBMC1K74GbZPMZ7aSERQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH56SgH5sznWK4l4W+9llMzoddywMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZm5wS0FmbXpPZFlyaVhoYjcyV1V6T2gxM0xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaoIMA0G CSqGSIb3DQEBCwUAA4IBAQBWwgBCijSYnEfGEBjcTHS2FPqic+PKT9FZ/VMjy+qX Ufz8UlSyl9qNaDEBTyByGVYtf5QNKNOfqKDCjrU8n8Ya/WIhbXdwYAWKKRgdvMLD 9x+7XhmEv15aDhU1pFlPBui/B90WAl0n7tlgBMwAOQFetGaUa8i+SOJtpckW79Ym EPkpcZS8QCFh4Cs1H6nxIBQUSUALCQvNfalxoHxBBa1HmKkJ0jJhTP7YPf7UPvoR ogiV9dlGPaAlec9b+dq+eSmlwHLNRBr3GE+ecC4iqN0qNAxwYpoW2ZtZMIcdLneL 6upGLnzH7A7n3J7Z1udtZleI2gw2eL0gKYCKQZpR5VPW -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:40 2026 by rpki-client