This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k8hWrTSOSjufEHCmp8wA7LqZra0.roa File: k8hWrTSOSjufEHCmp8wA7LqZra0.roa (raw, json) Hash identifier: ZJG5KkOT5krTiM+zgSP8NmKKU2Z9PHR2Y7BGeEy4iXk= Subject key identifier: 93:C8:56:AD:34:8E:4A:3B:9F:10:70:A6:A7:CC:00:EC:BA:99:AD:AD Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851F437C993F67E4E3EFBAA8526F3D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k8hWrTSOSjufEHCmp8wA7LqZra0.roa Signing time: Fri 02 Jan 2026 16:23:09 +0000 ROA not before: Fri 02 Jan 2026 16:23:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215572 IP address blocks: 95.46.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1f:43:7c:99:3f:67:e4:e3:ef:ba:a8:52:6f:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93c856ad348e4a3b9f1070a6a7cc00ecba99adad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a5:61:5d:09:73:b8:37:1a:d8:4a:9d:08:d7: bd:16:77:6e:0e:da:13:a6:ae:c2:08:8c:26:7c:5e: 89:c5:ee:25:ac:18:98:1d:b6:2e:cb:fc:44:e0:3f: 49:8f:72:46:87:1d:70:86:ab:15:e3:f1:06:f9:b8: bc:b3:97:5b:0d:cc:84:66:41:05:c9:dc:56:90:65: 45:97:3c:1a:22:19:0d:0e:7d:e0:65:d2:a7:93:a1: 24:65:14:07:60:03:75:59:7f:6f:3a:49:08:a6:b9: ca:9d:91:06:2f:2d:d8:ac:3d:1c:cf:eb:4c:d8:e5: 79:e4:a7:5f:d6:95:4f:d9:c9:4e:8b:77:b2:bd:dc: 96:ec:f1:c2:8b:8a:64:f3:a3:bf:35:fc:0f:84:45: bc:e2:c2:ca:1f:86:f7:f7:5d:83:1b:27:08:4b:06: 5d:f5:ed:d5:ce:d6:ad:3a:cc:99:e5:b1:a5:df:e8: ff:ba:9e:0c:de:fb:48:12:81:29:a0:74:1c:d3:32: 43:a5:36:13:97:bf:c6:20:6c:89:c7:d1:7c:ba:e5: f2:1e:fa:06:d2:2d:40:94:7f:34:98:d0:c4:11:6b: 49:7b:af:f3:55:ee:7a:bc:4d:9f:cf:54:f2:43:bb: ef:3f:7e:00:c8:80:d3:a9:b2:10:74:3d:d9:31:e1: 4a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C8:56:AD:34:8E:4A:3B:9F:10:70:A6:A7:CC:00:EC:BA:99:AD:AD X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k8hWrTSOSjufEHCmp8wA7LqZra0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.158.0/24 Signature Algorithm: sha256WithRSAEncryption 04:d6:5b:6b:9e:f8:62:09:d7:d4:00:1c:38:37:d6:c4:19:7e: 68:f1:48:41:1a:48:23:2c:3d:bd:fe:d2:f5:29:78:88:81:18: 98:33:41:aa:5a:39:18:76:fa:8a:5d:2b:23:52:d7:fa:ca:b2: a3:d3:04:35:c2:d5:0b:64:7a:3c:8e:85:9e:8c:07:9b:f5:cc: b5:6f:86:a6:9a:76:12:2c:55:00:7a:56:2a:a9:30:68:02:af: 2b:2f:d2:14:2c:dc:c0:55:c1:db:7b:56:44:50:71:93:fa:8f: 7c:18:f5:de:fa:35:3a:02:64:cf:82:52:c4:8e:38:68:4a:9a: bc:fa:79:fa:cd:56:6b:70:a6:61:de:20:80:17:f7:34:68:78: 39:5c:f2:16:6c:a7:e4:35:ff:36:eb:9f:9e:e6:76:6c:80:0e: 52:bc:e3:1b:b0:69:84:48:21:85:c2:77:bb:a0:52:5f:3f:8a: 94:11:87:11:78:e1:b5:d3:43:5a:1c:16:31:9b:76:93:4d:ae: 36:20:ae:51:a0:16:c3:d1:27:8a:36:d9:c9:b7:46:0c:ef:9a: 41:26:ed:06:5a:8b:24:28:10:71:16:74:fc:af:7d:0b:68:83: 7a:7d:24:b5:64:a0:4d:26:ea:24:a1:71:f3:09:d1:0c:68:e2: e0:b5:0e:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hR9DfJk/Z+Tj77qoUm89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2M4NTZhZDM0OGU0YTNiOWYxMDcwYTZhN2NjMDBlY2JhOTlhZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaVhXQlzuDca2EqdCNe9FnduDtoT pq7CCIwmfF6Jxe4lrBiYHbYuy/xE4D9Jj3JGhx1whqsV4/EG+bi8s5dbDcyEZkEF ydxWkGVFlzwaIhkNDn3gZdKnk6EkZRQHYAN1WX9vOkkIprnKnZEGLy3YrD0cz+tM 2OV55Kdf1pVP2clOi3eyvdyW7PHCi4pk86O/NfwPhEW84sLKH4b3912DGycISwZd 9e3VztatOsyZ5bGl3+j/up4M3vtIEoEpoHQc0zJDpTYTl7/GIGyJx9F8uuXyHvoG 0i1AlH80mNDEEWtJe6/zVe56vE2fz1TyQ7vvP34AyIDTqbIQdD3ZMeFK2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJPIVq00jko7nxBwpqfMAOy6ma2tMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvazhoV3JUU09TanVmRUhDbXA4d0E3THFacmEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy6eMA0G CSqGSIb3DQEBCwUAA4IBAQAE1ltrnvhiCdfUABw4N9bEGX5o8UhBGkgjLD29/tL1 KXiIgRiYM0GqWjkYdvqKXSsjUtf6yrKj0wQ1wtULZHo8joWejAeb9cy1b4ammnYS LFUAelYqqTBoAq8rL9IULNzAVcHbe1ZEUHGT+o98GPXe+jU6AmTPglLEjjhoSpq8 +nn6zVZrcKZh3iCAF/c0aHg5XPIWbKfkNf8265+e5nZsgA5SvOMbsGmESCGFwne7 oFJfP4qUEYcReOG100NaHBYxm3aTTa42IK5RoBbD0SeKNtnJt0YM75pBJu0GWosk KBBxFnT8r30LaIN6fSS1ZKBNJuokoXHzCdEMaOLgtQ71 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:16 2026 by rpki-client