This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fvOZN6pShFm1auQqdzgOcDG381Y.roa File: fvOZN6pShFm1auQqdzgOcDG381Y.roa (raw, json) Hash identifier: 3a93vbAU1bxZRBJO7AA52LIjwflvsaKIsQAyNIjwiGM= Subject key identifier: 7E:F3:99:37:AA:52:84:59:B5:6A:E4:2A:77:38:0E:70:31:B7:F3:56 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F850457D933BF729F65AAC6D0C1A036 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fvOZN6pShFm1auQqdzgOcDG381Y.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208941 IP address blocks: 95.46.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:04:57:d9:33:bf:72:9f:65:aa:c6:d0:c1:a0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ef39937aa528459b56ae42a77380e7031b7f356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:7d:59:42:2c:d6:9b:2f:d6:ec:42:d5:9b: 77:48:62:73:1f:9c:5c:6e:2e:96:9f:f3:67:51:5f: cb:af:ba:20:b0:4d:92:e1:94:a5:9c:64:db:c0:c4: a4:39:50:51:ca:9d:2a:27:00:2e:ef:21:03:7e:37: 7c:fc:3f:7b:e2:80:55:88:41:d7:83:b4:0a:f7:25: 6a:0e:91:26:8f:ec:0c:6e:fe:b7:c7:08:a7:fa:44: 21:1a:4e:d3:56:0b:44:e3:2b:17:ac:f2:73:2b:38: d1:6b:fd:26:9d:7f:ba:fa:a4:bd:b4:a4:c7:bc:e7: 3d:dc:a4:3b:0c:86:e9:37:5d:4c:6d:8f:89:2a:a8: 54:4e:fd:4b:fc:79:7b:5a:33:ef:a9:86:27:4e:97: 1f:a7:8a:8a:15:7e:c2:80:58:9c:04:30:1e:7c:b0: 57:6e:7b:28:21:b8:93:9b:e8:e1:b2:e0:c9:c9:e7: f9:cc:79:d8:d7:e5:9d:01:27:fe:0c:9c:9d:a6:94: c3:d0:d8:84:2a:1d:7c:1b:9d:21:fe:df:69:74:4a: e1:1c:63:2b:64:1f:e1:9f:4b:0b:66:1e:ee:9b:be: 93:a5:da:fe:7f:9a:34:1f:75:ff:58:79:34:03:88: 35:b8:89:c3:d8:41:18:aa:32:24:e1:48:03:af:c6: df:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F3:99:37:AA:52:84:59:B5:6A:E4:2A:77:38:0E:70:31:B7:F3:56 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fvOZN6pShFm1auQqdzgOcDG381Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.73.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:f0:4a:40:4d:41:88:65:64:fe:bf:3a:48:da:90:a6:07:58: 04:4e:49:99:2c:45:2c:11:bf:2d:a8:e7:c0:89:24:86:31:a1: 70:2f:90:79:87:e9:da:12:2b:27:9d:99:35:8f:d4:ac:11:ca: c4:4f:eb:3a:5a:c7:a8:28:29:4f:7d:5d:de:d2:1a:7e:95:37: 1c:d1:55:83:a9:1a:ab:98:a5:c6:f4:47:5d:fc:d3:fb:a4:7b: a2:3b:f4:a5:73:9e:6c:fb:36:ab:aa:dc:5c:c6:d0:c7:89:5c: 29:1f:60:35:6e:04:b7:12:22:cd:61:09:f3:fc:26:da:19:55: 0a:48:0f:1d:35:f2:a7:8f:5e:15:dc:c3:6b:fb:1b:b3:54:63: b9:92:5c:b5:25:5e:7e:88:bc:95:64:d2:4d:1d:f8:c9:eb:a1: 71:4f:c0:28:04:fa:51:5b:7b:8f:89:a7:40:05:d6:32:d0:e1: ae:c5:95:ef:1d:79:9e:76:f0:b9:dd:f3:fe:06:d7:75:9f:82: 3b:0f:6c:04:d0:aa:07:92:70:ec:30:13:14:a2:fa:8c:88:fd: 9f:0c:34:d4:8e:b9:16:e2:87:f6:4d:14:49:a7:11:7a:49:61: 33:04:bb:82:29:98:a7:2b:72:5d:b5:68:06:80:56:f7:b6:c6: 55:93:2c:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQRX2TO/cp9lqsbQwaA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWYzOTkzN2FhNTI4NDU5YjU2YWU0MmE3NzM4MGU3MDMxYjdmMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8J9WUIs1psv1uxC1Zt3SGJzH5xc bi6Wn/NnUV/Lr7ogsE2S4ZSlnGTbwMSkOVBRyp0qJwAu7yEDfjd8/D974oBViEHX g7QK9yVqDpEmj+wMbv63xwin+kQhGk7TVgtE4ysXrPJzKzjRa/0mnX+6+qS9tKTH vOc93KQ7DIbpN11MbY+JKqhUTv1L/Hl7WjPvqYYnTpcfp4qKFX7CgFicBDAefLBX bnsoIbiTm+jhsuDJyef5zHnY1+WdASf+DJydppTD0NiEKh18G50h/t9pdErhHGMr ZB/hn0sLZh7um76Tpdr+f5o0H3X/WHk0A4g1uInD2EEYqjIk4UgDr8bf6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH7zmTeqUoRZtWrkKnc4DnAxt/NWMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZnZPWk42cFNoRm0xYXVRcWR6Z09jREczODFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy5JMA0G CSqGSIb3DQEBCwUAA4IBAQAd8EpATUGIZWT+vzpI2pCmB1gETkmZLEUsEb8tqOfA iSSGMaFwL5B5h+naEisnnZk1j9SsEcrET+s6WseoKClPfV3e0hp+lTcc0VWDqRqr mKXG9Edd/NP7pHuiO/Slc55s+zarqtxcxtDHiVwpH2A1bgS3EiLNYQnz/CbaGVUK SA8dNfKnj14V3MNr+xuzVGO5kly1JV5+iLyVZNJNHfjJ66FxT8AoBPpRW3uPiadA BdYy0OGuxZXvHXmedvC53fP+Btd1n4I7D2wE0KoHknDsMBMUovqMiP2fDDTUjrkW 4of2TRRJpxF6SWEzBLuCKZinK3JdtWgGgFb3tsZVkyyq -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:26 2026 by rpki-client