This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gP_2P9RMHwbgHwdQ_hrVOzfXZuo.roa File: gP_2P9RMHwbgHwdQ_hrVOzfXZuo.roa (raw, json) Hash identifier: 8VMuGJR5lbY/ZcdUSDUPfYlzo0Kv+AqksuTnH/wU7f0= Subject key identifier: 80:FF:F6:3F:D4:4C:1F:06:E0:1F:07:50:FE:1A:D5:3B:37:D7:66:EA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F848EEAD170AAB384FB7DDAFF66C971 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gP_2P9RMHwbgHwdQ_hrVOzfXZuo.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12722 IP address blocks: 93.170.76.0/24 maxlen: 24 95.47.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8e:ea:d1:70:aa:b3:84:fb:7d:da:ff:66:c9:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80fff63fd44c1f06e01f0750fe1ad53b37d766ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:be:6e:16:9e:3a:75:7e:7f:bc:be:de:2c: e4:86:c3:84:94:a0:9a:d4:a0:8e:05:77:e1:94:01: fb:3b:3a:d7:34:c1:00:9e:cd:f1:a5:0f:42:67:f8: eb:e4:ff:cf:0d:f7:7c:ee:3d:f7:49:a9:10:66:7b: fd:75:db:36:60:13:0f:21:83:d5:3b:e0:fc:30:6a: b1:a6:cb:11:f1:58:f3:44:8a:34:de:a4:f5:b3:b5: d1:39:db:35:49:09:86:ae:de:c2:74:97:71:a9:d1: c9:40:f3:58:77:46:ca:90:09:0b:de:ba:16:36:3f: 30:8e:b9:5b:fb:26:c7:80:72:af:c1:af:a2:99:a2: ef:3c:33:48:74:db:8d:58:8d:b7:c3:c2:a4:a8:dc: 58:14:c7:f6:9b:4f:4e:93:2d:27:f3:1a:08:99:83: bd:53:79:39:49:cf:34:61:69:37:74:bd:36:45:8f: df:7a:06:23:bd:dc:38:05:18:67:a5:2d:09:80:60: f6:18:33:48:21:a4:2e:5d:3d:9d:90:c8:92:8b:74: 21:f4:10:09:56:04:f6:e3:74:a6:8e:38:9e:f5:2e: c0:e8:83:b1:20:dd:7c:72:65:57:ed:cd:61:96:fc: e3:ec:7b:de:f5:12:ba:c8:1d:0b:2e:0c:ba:d0:45: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FF:F6:3F:D4:4C:1F:06:E0:1F:07:50:FE:1A:D5:3B:37:D7:66:EA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gP_2P9RMHwbgHwdQ_hrVOzfXZuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.76.0/24 95.47.161.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e9:2f:98:8a:aa:da:4c:cc:9f:92:d2:14:bd:c2:ed:fa:d4: 1f:b7:72:64:fd:53:34:b3:b6:21:22:ae:af:7a:9c:1e:96:55: 9a:b2:01:b0:13:78:69:ab:e4:87:b1:8b:d1:37:49:9a:e7:03: a9:fb:91:83:36:17:b8:40:fa:23:60:a4:6e:45:4c:f2:12:30: 6c:6d:a8:fd:8e:bc:ed:68:e5:10:31:7f:4e:b2:72:54:44:92: 5e:45:f6:d8:3f:9d:e8:c3:5d:b5:cf:03:63:48:96:6b:40:47: 5f:5e:bc:e0:02:69:29:d7:0a:7f:01:40:f1:e2:e0:8c:69:55: 58:fc:73:bb:11:30:2b:f7:f0:4e:cc:8d:01:fa:b9:e5:44:c3: 7a:27:3e:b9:8a:ae:f9:20:5a:28:e4:88:2d:a3:40:8f:96:25: f6:89:dd:5e:7b:0f:5c:b2:b5:cd:4b:a3:b6:4a:ba:9a:1e:5c: f8:c9:39:a0:59:39:51:24:d7:1c:e2:f4:88:cc:03:62:aa:af: c3:ea:e6:2c:68:4c:f0:fa:fb:52:9d:b9:be:49:ba:91:00:c3: 3a:ed:12:ff:fc:83:ea:bc:bc:38:52:f0:17:28:f9:6c:ca:ce: 4d:40:da:d5:7b:39:63:26:43:86:de:6d:91:fb:54:dc:aa:b0: 85:fa:9e:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hI7q0XCqs4T7fdr/ZslxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGZmZjYzZmQ0NGMxZjA2ZTAxZjA3NTBmZTFhZDUzYjM3ZDc2NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Iq+bhaeOnV+f7y+3izkhsOElKCa 1KCOBXfhlAH7OzrXNMEAns3xpQ9CZ/jr5P/PDfd87j33SakQZnv9dds2YBMPIYPV O+D8MGqxpssR8VjzRIo03qT1s7XROds1SQmGrt7CdJdxqdHJQPNYd0bKkAkL3roW Nj8wjrlb+ybHgHKvwa+imaLvPDNIdNuNWI23w8KkqNxYFMf2m09Oky0n8xoImYO9 U3k5Sc80YWk3dL02RY/fegYjvdw4BRhnpS0JgGD2GDNIIaQuXT2dkMiSi3Qh9BAJ VgT243Smjjie9S7A6IOxIN18cmVX7c1hlvzj7Hve9RK6yB0LLgy60EWPAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFID/9j/UTB8G4B8HUP4a1Ts312bqMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZ1BfMlA5Uk1Id2JnSHdkUV9oclZPemZYWnVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXapMAwQA Xy+hMA0GCSqGSIb3DQEBCwUAA4IBAQAm6S+YiqraTMyfktIUvcLt+tQft3Jk/VM0 s7YhIq6vepwellWasgGwE3hpq+SHsYvRN0ma5wOp+5GDNhe4QPojYKRuRUzyEjBs baj9jrztaOUQMX9OsnJURJJeRfbYP53ow121zwNjSJZrQEdfXrzgAmkp1wp/AUDx 4uCMaVVY/HO7ETAr9/BOzI0B+rnlRMN6Jz65iq75IFoo5Igto0CPliX2id1eew9c srXNS6O2SrqaHlz4yTmgWTlRJNcc4vSIzANiqq/D6uYsaEzw+vtSnbm+SbqRAMM6 7RL//IPqvLw4UvAXKPlsys5NQNrVezljJkOG3m2R+1TcqrCF+p6i -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:04 2026 by rpki-client