This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jeI_eQ1c3wWY8Ou5A717pSNp8Ek.roa File: jeI_eQ1c3wWY8Ou5A717pSNp8Ek.roa (raw, json) Hash identifier: pHCAKcvQlmo89noMYKncH4l5ywAExRkhCRF/JbwbjlU= Subject key identifier: 8D:E2:3F:79:0D:5C:DF:05:98:F0:EB:B9:03:BD:7B:A5:23:69:F0:49 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019A82188B0FB39742ADCEE7710851EDDC29 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jeI_eQ1c3wWY8Ou5A717pSNp8Ek.roa Signing time: Fri 14 Nov 2025 11:20:37 +0000 ROA not before: Fri 14 Nov 2025 11:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204929 IP address blocks: 93.170.160.0/22 maxlen: 24 95.47.200.0/23 maxlen: 24 95.47.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:18:8b:0f:b3:97:42:ad:ce:e7:71:08:51:ed:dc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Nov 14 11:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8de23f790d5cdf0598f0ebb903bd7ba52369f049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:88:9a:03:50:99:9e:3f:47:5e:ce:e7:e1: c0:d3:95:fa:07:2e:ba:b3:fd:ee:97:46:76:f9:84: 67:a7:fb:94:41:45:eb:56:b1:41:35:09:e1:84:b0: 42:37:74:62:06:9b:e9:5d:63:f4:db:c0:7a:df:3e: e3:58:cd:00:99:1d:79:8c:c9:d4:a5:eb:e5:5a:79: bc:69:72:16:bf:e2:4f:0d:3d:ab:6f:5c:05:54:25: 96:10:73:19:98:2a:e9:b6:75:bf:44:be:75:d0:61: 92:47:1d:f4:12:d9:15:1a:1a:90:8f:2b:37:ed:91: 1d:ab:44:de:f0:38:45:10:14:a2:4a:8f:0c:e5:b5: 55:6a:f7:04:ce:38:f5:23:9a:7c:34:fc:9e:57:e6: c4:46:8f:5b:d4:3f:01:e7:e9:aa:27:89:b5:f2:c1: cc:44:31:56:8f:94:10:c4:f3:34:18:d9:0d:5e:e6: ca:78:fa:60:47:22:89:1d:1c:dc:7b:61:38:c4:d7: bf:59:40:76:e1:db:44:4f:c1:64:28:f0:2f:c8:89: db:f1:d3:63:3f:b6:2c:5a:20:6e:63:eb:db:f0:15: a2:93:00:39:2b:af:e1:c8:b4:46:2e:33:d4:f1:5f: 64:9f:13:99:6e:fb:5c:6f:59:63:2e:d5:d0:f7:53: 98:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E2:3F:79:0D:5C:DF:05:98:F0:EB:B9:03:BD:7B:A5:23:69:F0:49 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jeI_eQ1c3wWY8Ou5A717pSNp8Ek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.160.0/22 95.47.200.0/23 95.47.248.0/23 Signature Algorithm: sha256WithRSAEncryption 27:2b:94:fb:eb:b0:1f:ff:b3:86:c0:75:b9:30:f5:b7:d8:d8: d5:bb:12:f2:78:f4:fe:ae:60:f7:27:16:20:6d:b1:f0:85:43: 17:07:21:cd:08:cc:4d:03:91:ca:00:3d:03:6a:a7:41:a4:96: da:6c:bb:66:c4:de:86:31:9b:21:f4:87:05:65:5c:38:63:0b: dc:40:16:69:00:a8:51:73:4b:56:5e:4e:34:e2:03:e3:cd:b9: 5c:46:3f:66:7c:f3:a6:0d:5f:3f:4a:a2:e6:eb:c8:5c:88:a4: cf:4b:e9:c0:b2:da:d2:ff:c8:1b:1c:df:48:bd:f1:60:e7:f3: 1a:c9:4c:ad:e2:54:17:20:dd:73:cb:81:25:eb:93:d5:45:69: ef:6d:47:32:58:82:69:0a:a7:81:73:d5:ee:f2:ab:27:6d:f9: bb:ed:8c:8d:a1:2e:37:c2:5e:e3:df:7a:9e:f0:c3:81:37:55: 3b:6f:22:a9:e7:d6:de:1b:e3:46:29:ec:f5:1f:2b:75:f1:e3: 1e:3b:25:b9:2c:64:de:b2:59:f4:ea:fd:74:07:9a:1c:96:14: 45:e7:48:a4:a0:c7:73:95:25:74:f7:f0:bb:aa:a0:7a:7f:65: 90:ef:4f:6c:79:ac:0e:d0:a3:ad:97:54:d0:20:c6:60:73:22: fc:1e:f9:c1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqCGIsPs5dCrc7ncQhR7dwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjUxMTE0MTEyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGUyM2Y3OTBkNWNkZjA1OThmMGViYjkwM2JkN2JhNTIzNjlmMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobGImgNQmZ4/R17O5+HA05X6By66 s/3ul0Z2+YRnp/uUQUXrVrFBNQnhhLBCN3RiBpvpXWP028B63z7jWM0AmR15jMnU pevlWnm8aXIWv+JPDT2rb1wFVCWWEHMZmCrptnW/RL510GGSRx30EtkVGhqQjys3 7ZEdq0Te8DhFEBSiSo8M5bVVavcEzjj1I5p8NPyeV+bERo9b1D8B5+mqJ4m18sHM RDFWj5QQxPM0GNkNXubKePpgRyKJHRzce2E4xNe/WUB24dtET8FkKPAvyInb8dNj P7YsWiBuY+vb8BWikwA5K6/hyLRGLjPU8V9knxOZbvtcb1ljLtXQ91OYcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI3iP3kNXN8FmPDruQO9e6UjafBJMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvamVJX2VRMWMzd1dZOE91NUE3MTdwU05wOEVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCXaqgAwQB Xy/IAwQBXy/4MA0GCSqGSIb3DQEBCwUAA4IBAQAnK5T767Af/7OGwHW5MPW32NjV uxLyePT+rmD3JxYgbbHwhUMXByHNCMxNA5HKAD0DaqdBpJbabLtmxN6GMZsh9IcF ZVw4YwvcQBZpAKhRc0tWXk404gPjzblcRj9mfPOmDV8/SqLm68hciKTPS+nAstrS /8gbHN9IvfFg5/MayUyt4lQXIN1zy4El65PVRWnvbUcyWIJpCqeBc9Xu8qsnbfm7 7YyNoS43wl7j33qe8MOBN1U7byKp59beG+NGKez1Hyt18eMeOyW5LGTesln06v10 B5oclhRF50ikoMdzlSV09/C7qqB6f2WQ709seawO0KOtl1TQIMZgcyL8HvnB -----END CERTIFICATE-----Generated at Sat Dec 6 17:15:00 2025 by rpki-client