This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jROHK-sXua4khq8nBB5fd9DpD7o.roa File: jROHK-sXua4khq8nBB5fd9DpD7o.roa (raw, json) Hash identifier: oXBYDx0P25duOyfrVFvpvWUDJAZpwYJZ4a9X6jaQNZk= Subject key identifier: 8D:13:87:2B:EB:17:B9:AE:24:86:AF:27:04:1E:5F:77:D0:E9:0F:BA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A2EDAB30D918368EA033B0F966D8 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jROHK-sXua4khq8nBB5fd9DpD7o.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42772 IP address blocks: 92.38.64.0/20 maxlen: 24 93.170.184.0/23 maxlen: 24 93.171.112.0/20 maxlen: 24 95.46.16.0/20 maxlen: 24 95.46.46.0/24 maxlen: 24 95.46.200.0/21 maxlen: 24 95.46.208.0/24 maxlen: 24 146.120.32.0/21 maxlen: 24 146.120.128.0/20 maxlen: 24 146.120.144.0/21 maxlen: 24 151.249.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a2:ed:ab:30:d9:18:36:8e:a0:33:b0:f9:66:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d13872beb17b9ae2486af27041e5f77d0e90fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:1a:3e:e5:8a:2a:a2:db:dc:2b:57:ba:76: e2:20:49:e3:31:15:e2:db:c3:a7:ef:1a:2f:10:85: c9:2b:47:c2:4a:46:51:f9:52:b0:5a:1a:3f:bf:7f: 0c:21:47:0e:95:46:f9:05:f5:22:81:00:b1:c9:21: 28:d5:a9:a4:ad:ec:8d:2a:68:1e:71:cd:08:d7:c3: 6f:0d:e7:4a:31:e9:72:47:2a:6d:aa:74:bd:c3:ee: 0c:6c:ba:d5:53:13:e7:22:d6:cb:d3:b4:86:0d:a1: fb:5e:4b:2a:ed:d1:1a:41:27:d5:94:35:e4:eb:85: f8:9b:8e:e1:bf:14:f3:75:45:33:7c:bf:bc:5a:08: 3a:45:69:73:1f:06:39:97:d1:f4:7f:6b:42:fb:ae: 59:58:88:18:bc:7c:a6:ec:20:4e:66:51:3f:99:54: a7:a0:77:61:43:40:1d:fa:47:39:8c:32:30:30:f1: de:fc:55:05:e1:66:e6:1c:31:1d:bb:7f:43:22:e6: 81:07:42:d4:26:cd:8d:d3:56:f0:90:e6:8d:55:b2: 25:6d:21:b4:a3:7e:ee:97:5c:d3:45:6e:4e:24:39: e8:21:05:41:29:48:3e:73:ae:48:a9:d8:38:41:2d: db:05:fb:63:1f:7a:8e:af:60:ef:a6:61:86:ab:8a: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:13:87:2B:EB:17:B9:AE:24:86:AF:27:04:1E:5F:77:D0:E9:0F:BA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jROHK-sXua4khq8nBB5fd9DpD7o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.64.0/20 93.170.184.0/23 93.171.112.0/20 95.46.16.0/20 95.46.46.0/24 95.46.200.0-95.46.208.255 146.120.32.0/21 146.120.128.0-146.120.151.255 151.249.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7d:af:08:39:cb:66:74:2e:ff:61:fd:40:26:14:24:91:bf:69: 84:e0:88:d9:22:4b:a7:7d:7b:c5:37:01:56:e5:2a:8a:81:b2: 32:d0:94:28:1b:61:37:dc:e2:c6:81:07:01:48:07:c8:e3:d4: 27:fe:ee:ea:89:17:c1:83:86:5f:1b:52:4d:48:2a:fd:f0:ed: 93:ea:a2:a2:3f:9d:18:33:23:03:49:d5:70:1b:ca:23:9b:a1: 05:27:c7:57:96:9e:20:43:b8:f8:f7:a9:8a:f6:ff:74:51:0b: 3b:3d:16:ba:2f:c0:57:ba:d5:5d:1c:01:73:d8:57:07:af:74: 88:75:61:03:9b:3a:d3:34:e3:c5:64:1a:4a:35:8d:4b:5c:b8: f3:8e:13:cb:80:6e:af:04:70:70:42:bb:cc:61:6b:f5:32:b0: e2:55:6d:99:0d:76:94:b2:38:a5:72:4c:c3:07:9c:24:b5:af: 3d:0e:5b:23:69:e4:55:a6:78:1d:a8:f9:0b:6b:6e:8a:db:ba: 00:07:45:4b:83:3c:57:51:db:3e:a4:07:1f:46:12:69:90:75: a7:f5:bb:e1:7c:4d:fb:6b:7b:8d:a2:ad:36:69:56:df:a8:af: ca:f1:61:87:40:53:dd:08:bc:22:fd:f8:1f:1b:4e:ad:e6:7c: f7:65:d5:f3 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt/hKLtqzDZGDaOoDOw+WbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDEzODcyYmViMTdiOWFlMjQ4NmFmMjcwNDFlNWY3N2QwZTkwZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLMaPuWKKqLb3CtXunbiIEnjMRXi 28On7xovEIXJK0fCSkZR+VKwWho/v38MIUcOlUb5BfUigQCxySEo1amkreyNKmge cc0I18NvDedKMelyRyptqnS9w+4MbLrVUxPnItbL07SGDaH7Xksq7dEaQSfVlDXk 64X4m47hvxTzdUUzfL+8Wgg6RWlzHwY5l9H0f2tC+65ZWIgYvHym7CBOZlE/mVSn oHdhQ0Ad+kc5jDIwMPHe/FUF4WbmHDEdu39DIuaBB0LUJs2N01bwkOaNVbIlbSG0 o37ul1zTRW5OJDnoIQVBKUg+c65Iqdg4QS3bBftjH3qOr2DvpmGGq4pj9wIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFI0ThyvrF7muJIavJwQeX3fQ6Q+6MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvalJPSEstc1h1YTRraHE4bkJCNWZkOURwRDdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjBMBAIAATBGAwQEXCZAAwQB Xaq4AwQEXatwAwQEXy4QAwQAXy4uMAwDBANfLsgDBABfLtADBAOSeCAwDAMEB5J4 gAMEA5J4kAMEB5f5gDANBgkqhkiG9w0BAQsFAAOCAQEAfa8IOctmdC7/Yf1AJhQk kb9phOCI2SJLp317xTcBVuUqioGyMtCUKBthN9zixoEHAUgHyOPUJ/7u6okXwYOG XxtSTUgq/fDtk+qioj+dGDMjA0nVcBvKI5uhBSfHV5aeIEO4+Pepivb/dFELOz0W ui/AV7rVXRwBc9hXB690iHVhA5s60zTjxWQaSjWNS1y4844Ty4BurwRwcEK7zGFr 9TKw4lVtmQ12lLI4pXJMwwecJLWvPQ5bI2nkVaZ4Haj5C2tuitu6AAdFS4M8V1Hb PqQHH0YSaZB1p/W74XxN+2t7jaKtNmlW36ivyvFhh0BT3Qi8Iv34HxtOreZ892XV 8w== -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:35 2026 by rpki-client