This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hMzCewudLssk-ntZ2aju057639U.roa File: hMzCewudLssk-ntZ2aju057639U.roa (raw, json) Hash identifier: Jq3E208HjeRKkqi8mMH9FrpTNc3r1AcqrZ0gVYOtLH4= Subject key identifier: 84:CC:C2:7B:0B:9D:2E:CB:24:FA:7B:59:D9:A8:EE:D3:9E:FA:DF:D5 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84EC488B84A8E26968EAE85633A91D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hMzCewudLssk-ntZ2aju057639U.roa Signing time: Fri 02 Jan 2026 16:22:56 +0000 ROA not before: Fri 02 Jan 2026 16:22:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198056 IP address blocks: 93.170.106.0/23 maxlen: 24 93.171.132.0/23 maxlen: 24 95.46.110.0/23 maxlen: 24 95.46.192.0/22 maxlen: 24 146.120.111.0/24 maxlen: 24 146.158.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ec:48:8b:84:a8:e2:69:68:ea:e8:56:33:a9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84ccc27b0b9d2ecb24fa7b59d9a8eed39efadfd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:ec:88:17:52:26:df:7a:7b:33:3f:ed:55: 2e:49:32:a9:6f:84:63:df:9d:b4:d6:59:6f:0d:e9: 69:94:2f:a2:84:26:1c:06:a0:d8:bd:c6:2b:5e:ab: 60:44:de:86:fa:29:50:e2:7e:9d:09:e2:1c:5d:9f: 9a:d7:be:c1:9c:60:94:f0:cb:d1:22:1e:c6:90:4e: 6b:cd:2c:d8:62:e5:8f:45:2b:b4:fe:b8:4f:76:09: 12:e5:bf:7e:30:53:19:13:5e:7f:13:56:3c:7c:80: 71:6e:2f:c1:78:d9:ce:8b:fd:82:4f:d3:7c:79:99: b5:cd:0e:48:3d:54:1e:0a:c5:f2:ae:4d:74:7c:82: 82:3a:6e:b2:36:57:3f:0c:6e:04:4e:2a:6c:3e:4e: 39:86:cb:10:67:f9:16:0d:20:c0:07:dc:44:1a:cd: bb:33:b1:56:9f:c2:42:2c:91:0b:f2:4f:03:41:7e: ac:57:35:43:01:3b:bd:5d:03:36:2f:b9:5d:42:e3: 4b:f8:20:62:11:ed:f4:a5:26:69:0b:62:c0:d6:98: ee:74:7c:80:34:01:5f:4a:63:6f:44:44:71:99:3c: 33:c0:21:9b:5a:bf:7f:8a:da:57:0f:bd:f2:92:63: 60:9f:50:5c:f4:95:e0:d7:65:bc:1c:08:50:c3:cf: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:CC:C2:7B:0B:9D:2E:CB:24:FA:7B:59:D9:A8:EE:D3:9E:FA:DF:D5 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/hMzCewudLssk-ntZ2aju057639U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.106.0/23 93.171.132.0/23 95.46.110.0/23 95.46.192.0/22 146.120.111.0/24 146.158.56.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:67:19:45:2f:57:0a:2b:a2:e7:1c:1e:ad:0a:9d:ca:eb:67: 9b:45:26:ee:20:e3:69:90:a1:6b:cc:fb:06:a1:72:2c:8b:85: 92:17:be:84:17:e2:ec:b7:b6:00:76:1a:99:d3:ec:28:99:4b: 3a:ea:c8:40:54:f8:10:b4:8d:39:81:92:98:33:cd:77:ab:bc: e1:10:3e:1f:61:dd:d1:ae:98:19:19:f9:52:34:27:33:f0:87: a6:7a:22:86:5d:d3:3c:e4:49:13:15:dd:71:8d:e0:2b:07:05: f4:ea:f7:58:5b:56:49:38:06:cf:10:12:8a:87:c8:84:dd:ad: 66:42:8b:c4:23:1f:72:71:87:69:88:8b:c4:bd:c0:7c:85:08: 6b:fc:be:50:c7:6f:40:c3:05:a2:f6:bb:e6:9c:13:1c:d9:8d: 15:bc:95:fd:6d:38:a5:fb:35:86:69:16:2d:67:ef:5d:9c:72: eb:b7:24:f3:dd:6a:39:92:21:cf:86:27:fd:39:a2:0a:2f:67: 03:a1:a2:3d:31:e6:0d:cc:cb:25:e5:67:03:c5:e0:b3:2d:b0: 25:6f:8e:df:3d:1d:59:0c:6a:4a:66:e2:58:24:8c:64:40:58: 3d:e0:57:55:6a:dc:35:b0:86:70:4e:28:5c:e0:c9:58:3e:3a: 65:cc:f1:68 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hOxIi4So4mlo6uhWM6kdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGNjYzI3YjBiOWQyZWNiMjRmYTdiNTlkOWE4ZWVkMzllZmFkZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvvsiBdSJt96ezM/7VUuSTKpb4Rj 35201llvDelplC+ihCYcBqDYvcYrXqtgRN6G+ilQ4n6dCeIcXZ+a177BnGCU8MvR Ih7GkE5rzSzYYuWPRSu0/rhPdgkS5b9+MFMZE15/E1Y8fIBxbi/BeNnOi/2CT9N8 eZm1zQ5IPVQeCsXyrk10fIKCOm6yNlc/DG4ETipsPk45hssQZ/kWDSDAB9xEGs27 M7FWn8JCLJEL8k8DQX6sVzVDATu9XQM2L7ldQuNL+CBiEe30pSZpC2LA1pjudHyA NAFfSmNvRERxmTwzwCGbWr9/itpXD73ykmNgn1Bc9JXg12W8HAhQw89ARwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFITMwnsLnS7LJPp7Wdmo7tOe+t/VMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvaE16Q2V3dWRMc3NrLW50WjJhanUwNTc2MzlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBXapqAwQB XauEAwQBXy5uAwQCXy7AAwQAknhvAwQBkp44MA0GCSqGSIb3DQEBCwUAA4IBAQAc ZxlFL1cKK6LnHB6tCp3K62ebRSbuIONpkKFrzPsGoXIsi4WSF76EF+Lst7YAdhqZ 0+womUs66shAVPgQtI05gZKYM813q7zhED4fYd3RrpgZGflSNCcz8IemeiKGXdM8 5EkTFd1xjeArBwX06vdYW1ZJOAbPEBKKh8iE3a1mQovEIx9ycYdpiIvEvcB8hQhr /L5Qx29AwwWi9rvmnBMc2Y0VvJX9bTil+zWGaRYtZ+9dnHLrtyTz3Wo5kiHPhif9 OaIKL2cDoaI9MeYNzMsl5WcDxeCzLbAlb47fPR1ZDGpKZuJYJIxkQFg94FdVatw1 sIZwTihc4MlYPjplzPFo -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:03 2026 by rpki-client