This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jBIHjJCyMkn7DVcFwClEYe9Tdu0.roa File: jBIHjJCyMkn7DVcFwClEYe9Tdu0.roa (raw, json) Hash identifier: iB9tC9ID+sOJ0oNRpxQ6nJW+MqQlXfmQdlx9mrRbfqU= Subject key identifier: 8C:12:07:8C:90:B2:32:49:FB:0D:57:05:C0:29:44:61:EF:53:76:ED Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84BE7A4715D12412176FA14C201FE0 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jBIHjJCyMkn7DVcFwClEYe9Tdu0.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50716 IP address blocks: 93.171.72.0/22 maxlen: 24 146.158.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:be:7a:47:15:d1:24:12:17:6f:a1:4c:20:1f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c12078c90b23249fb0d5705c0294461ef5376ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:30:81:21:e8:78:31:c3:07:c3:7c:ae:db:f4: ea:44:b6:29:ea:cf:63:09:a2:53:64:07:95:39:68: 3e:72:50:af:06:77:d8:70:98:d9:9e:08:05:b8:ab: 26:6d:e8:29:a2:cc:3e:57:4b:8a:f5:fe:1d:23:cc: e1:40:7c:37:5d:fd:40:c7:4b:25:49:fe:aa:4e:d5: 2a:36:ee:b2:ec:18:90:27:68:09:d5:0e:d1:c6:fd: b4:2b:f3:57:ad:5e:a7:c6:57:80:f8:e1:d4:54:46: 14:bd:ae:1c:64:47:bf:ee:85:9c:01:05:aa:60:fc: c0:ab:1e:de:6f:18:0c:82:bd:21:b7:ce:f6:dd:6a: 3d:63:8e:23:1d:5e:e2:08:7a:d4:cc:28:dd:b7:d6: 77:9a:a2:ca:6b:af:7f:43:0e:f6:bb:ce:3a:27:04: 00:aa:07:66:58:41:7f:c9:47:1a:50:b2:9d:fe:80: 9b:c1:c4:65:76:26:0e:1b:d6:5f:28:21:d4:66:4a: 88:ce:0c:51:ab:5e:ac:ea:e8:da:c7:75:c9:be:0f: 53:05:d9:72:f3:4c:82:3f:79:d2:19:f1:03:bc:64: fa:c1:c9:76:68:68:45:2c:55:a4:cd:bb:b5:4c:8a: d7:b6:d3:1a:8a:84:2b:a1:c2:68:b5:a3:14:80:0e: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:12:07:8C:90:B2:32:49:FB:0D:57:05:C0:29:44:61:EF:53:76:ED X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jBIHjJCyMkn7DVcFwClEYe9Tdu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.72.0/22 146.158.80.0/21 Signature Algorithm: sha256WithRSAEncryption 37:58:5c:f3:e2:67:96:07:43:ae:36:d3:87:71:86:f7:b7:a6: 6a:b9:70:a2:f0:45:bb:3e:a1:4f:f8:ab:77:d8:50:fb:df:9d: c6:c8:35:a1:9c:5a:4e:dc:c0:9e:fa:71:5f:ee:63:f5:8f:af: f8:f3:a3:3b:c9:ac:6e:cd:34:73:48:48:01:7a:41:ae:da:11: 91:fc:3f:b5:8e:76:7b:31:a2:1b:26:5d:6d:a3:27:09:a7:b2: 68:85:73:d9:44:75:e0:3a:ea:06:d2:30:98:c9:72:c2:4e:72: 88:e1:49:43:b1:55:e9:a8:6e:13:36:f7:e5:ba:08:6b:54:4e: c4:41:4c:3d:8b:dc:b1:bc:52:74:f7:4b:a6:12:6c:b3:7d:c4: 5e:6a:77:2c:07:ee:14:55:8f:85:f6:07:4d:29:7e:d9:1c:14: 27:76:14:f7:5a:dc:88:a6:15:b3:22:87:ff:7a:17:b4:f5:4b: f4:40:d1:b9:de:ec:bc:86:73:1f:96:cc:18:06:a7:09:19:5a: 2b:48:ca:3e:15:2f:c4:eb:43:b5:b8:88:bd:4f:ff:09:9f:38: ef:ea:2f:da:20:73:d5:b6:33:4f:eb:8d:50:b1:28:1f:7d:a6: cf:ff:32:66:70:70:83:02:5f:20:19:4b:e3:69:e3:b2:79:b6: 49:46:42:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hL56RxXRJBIXb6FMIB/gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzEyMDc4YzkwYjIzMjQ5ZmIwZDU3MDVjMDI5NDQ2MWVmNTM3NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTCBIeh4McMHw3yu2/TqRLYp6s9j CaJTZAeVOWg+clCvBnfYcJjZnggFuKsmbegposw+V0uK9f4dI8zhQHw3Xf1Ax0sl Sf6qTtUqNu6y7BiQJ2gJ1Q7Rxv20K/NXrV6nxleA+OHUVEYUva4cZEe/7oWcAQWq YPzAqx7ebxgMgr0ht8723Wo9Y44jHV7iCHrUzCjdt9Z3mqLKa69/Qw72u846JwQA qgdmWEF/yUcaULKd/oCbwcRldiYOG9ZfKCHUZkqIzgxRq16s6ujax3XJvg9TBdly 80yCP3nSGfEDvGT6wcl2aGhFLFWkzbu1TIrXttMaioQrocJotaMUgA5UOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIwSB4yQsjJJ+w1XBcApRGHvU3btMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvakJJSGpKQ3lNa243RFZjRndDbEVZZTlUZHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXatIAwQD kp5QMA0GCSqGSIb3DQEBCwUAA4IBAQA3WFzz4meWB0OuNtOHcYb3t6ZquXCi8EW7 PqFP+Kt32FD7353GyDWhnFpO3MCe+nFf7mP1j6/486M7yaxuzTRzSEgBekGu2hGR /D+1jnZ7MaIbJl1toycJp7JohXPZRHXgOuoG0jCYyXLCTnKI4UlDsVXpqG4TNvfl ughrVE7EQUw9i9yxvFJ090umEmyzfcReancsB+4UVY+F9gdNKX7ZHBQndhT3WtyI phWzIof/ehe09Uv0QNG53uy8hnMflswYBqcJGVorSMo+FS/E60O1uIi9T/8Jnzjv 6i/aIHPVtjNP641QsSgffabP/zJmcHCDAl8gGUvjaeOyebZJRkIt -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:51 2026 by rpki-client