This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g_x7hnTZpqmYgThMLnQVuhyZe5A.roa File: g_x7hnTZpqmYgThMLnQVuhyZe5A.roa (raw, json) Hash identifier: 4yDurGkFSn99FyC/LHmjgl65c7dK0h3I5otI5EHqOGo= Subject key identifier: 83:FC:7B:86:74:D9:A6:A9:98:81:38:4C:2E:74:15:BA:1C:99:7B:90 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84B57890C1BEC1C5024AA72C8DB575 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g_x7hnTZpqmYgThMLnQVuhyZe5A.roa Signing time: Fri 02 Jan 2026 16:22:42 +0000 ROA not before: Fri 02 Jan 2026 16:22:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48949 IP address blocks: 93.171.181.0/24 maxlen: 24 95.47.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:b5:78:90:c1:be:c1:c5:02:4a:a7:2c:8d:b5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=83fc7b8674d9a6a99881384c2e7415ba1c997b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:e3:c3:09:96:d0:03:60:06:c1:f6:3a:81: 28:2d:1c:7b:83:cf:a0:c4:4e:6c:95:b0:6e:94:90: 34:86:ee:1a:ba:33:cb:61:1d:a0:d5:fc:59:84:17: e4:db:17:48:a9:fb:57:18:65:e2:49:81:16:10:9a: 73:45:97:78:85:16:6a:69:70:84:5e:69:60:f4:1d: 9c:e3:50:05:d7:62:b3:9b:93:36:f4:ea:c7:44:0f: a8:33:e9:df:b6:7d:0e:bf:f5:f6:30:59:90:1a:23: fb:17:ac:71:1b:93:88:50:c3:68:cb:66:3c:6a:cb: a8:a4:00:82:91:9c:59:23:d0:6e:22:d6:fc:1c:b1: 1e:e3:bb:ed:5e:03:8d:2c:de:c4:ce:bf:82:5b:4c: 42:38:3d:b7:93:b5:e7:36:72:0e:9f:6d:76:51:28: d6:6c:e2:46:4d:0f:28:3b:15:20:4b:87:7a:c8:ee: d3:8a:4d:66:99:ee:68:cd:3f:d7:84:44:7f:ce:fd: c5:b6:b8:35:99:8b:c6:b3:3d:10:6a:eb:81:0a:c9: 9d:02:b5:98:55:0a:e0:2b:26:fd:bb:53:bf:a3:6d: e1:9e:bb:f1:8e:21:61:e8:c4:dd:fe:d7:eb:d2:44: 3b:82:73:8c:ed:04:32:18:01:07:df:bc:da:4c:99: fe:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FC:7B:86:74:D9:A6:A9:98:81:38:4C:2E:74:15:BA:1C:99:7B:90 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g_x7hnTZpqmYgThMLnQVuhyZe5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.181.0/24 95.47.176.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:46:c0:62:4f:da:02:37:71:fb:ca:c9:8e:71:5a:58:5c:56: f9:19:c7:2e:49:b2:e5:42:64:66:a1:d3:eb:78:ee:63:8b:be: f3:e2:1e:3d:0a:03:f3:48:82:41:78:af:8d:b6:d0:ea:1b:dc: 77:17:46:da:a5:23:4b:f4:8f:45:9e:28:e7:f3:34:0d:17:36: 20:8e:c5:59:37:d9:f7:13:54:4b:ac:e3:38:c3:1d:01:75:69: 7d:47:55:9c:50:16:1f:a9:99:a1:1b:b0:13:72:53:69:98:11: fa:54:a7:ed:08:8c:11:b4:7d:db:f5:48:6a:94:49:79:4d:f4: dd:20:b0:b4:e1:cd:62:9a:01:7f:fd:e7:4e:71:ef:33:25:35: 69:f4:15:7a:9c:00:20:ed:d8:fc:9d:02:ab:44:7f:5f:84:97: 1b:d8:82:fe:fc:4d:6a:cf:24:e3:0e:a7:68:e6:6a:bb:8f:ec: ea:45:e3:a7:53:ce:96:86:d8:bc:e8:d3:b3:04:09:c1:0d:59: c4:22:eb:67:13:64:2c:69:93:36:e6:2f:5b:40:7c:31:02:79: f4:07:87:66:34:90:2b:e6:51:8c:27:9e:0e:a9:c6:92:ca:2f: d5:ad:f8:55:c8:98:dc:16:2b:18:08:e1:81:f4:b9:e7:4a:77: fd:98:92:f3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hLV4kMG+wcUCSqcsjbV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4M2ZjN2I4Njc0ZDlhNmE5OTg4MTM4NGMyZTc0MTViYTFjOTk3YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrbjwwmW0ANgBsH2OoEoLRx7g8+g xE5slbBulJA0hu4aujPLYR2g1fxZhBfk2xdIqftXGGXiSYEWEJpzRZd4hRZqaXCE Xmlg9B2c41AF12Kzm5M29OrHRA+oM+nftn0Ov/X2MFmQGiP7F6xxG5OIUMNoy2Y8 asuopACCkZxZI9BuItb8HLEe47vtXgONLN7Ezr+CW0xCOD23k7XnNnIOn212USjW bOJGTQ8oOxUgS4d6yO7Tik1mme5ozT/XhER/zv3Ftrg1mYvGsz0QauuBCsmdArWY VQrgKyb9u1O/o23hnrvxjiFh6MTd/tfr0kQ7gnOM7QQyGAEH37zaTJn+nwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIP8e4Z02aapmIE4TC50FbocmXuQMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZ194N2huVFpwcW1ZZ1RoTUxuUVZ1aHlaZTVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXau1AwQA Xy+wMA0GCSqGSIb3DQEBCwUAA4IBAQAeRsBiT9oCN3H7ysmOcVpYXFb5GccuSbLl QmRmodPreO5ji77z4h49CgPzSIJBeK+NttDqG9x3F0bapSNL9I9Fnijn8zQNFzYg jsVZN9n3E1RLrOM4wx0BdWl9R1WcUBYfqZmhG7ATclNpmBH6VKftCIwRtH3b9Uhq lEl5TfTdILC04c1imgF//edOce8zJTVp9BV6nAAg7dj8nQKrRH9fhJcb2IL+/E1q zyTjDqdo5mq7j+zqReOnU86Whti86NOzBAnBDVnEIutnE2QsaZM25i9bQHwxAnn0 B4dmNJAr5lGMJ54OqcaSyi/VrfhVyJjcFisYCOGB9LnnSnf9mJLz -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:47 2026 by rpki-client