This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/o9hS2A7pGEJtYqbLvQpJcQpGSO4.roa File: o9hS2A7pGEJtYqbLvQpJcQpGSO4.roa (raw, json) Hash identifier: SZoK6467DXs+xcX9/hYwpZSz2AyZyPeKoYEk8pMjDYo= Subject key identifier: A3:D8:52:D8:0E:E9:18:42:6D:62:A6:CB:BD:0A:49:71:0A:46:48:EE Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D62CAFFBA534042A199A4C02F694 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/o9hS2A7pGEJtYqbLvQpJcQpGSO4.roa Signing time: Fri 02 Jan 2026 16:22:50 +0000 ROA not before: Fri 02 Jan 2026 16:22:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60286 IP address blocks: 95.47.188.0/24 maxlen: 24 146.120.92.0/23 maxlen: 24 146.120.92.0/24 maxlen: 24 146.120.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d6:2c:af:fb:a5:34:04:2a:19:9a:4c:02:f6:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3d852d80ee918426d62a6cbbd0a49710a4648ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:d8:31:3b:a8:d7:41:d2:28:a3:86:1d:da: a9:b9:33:5d:c9:ed:1d:a5:a5:fc:30:58:2a:12:21: 3a:96:2b:54:c2:cd:9a:8e:cf:41:ed:f9:4f:9d:8d: 10:34:91:94:43:b4:4a:9b:40:75:b3:d4:b1:d1:5a: 48:56:7e:9b:27:5d:21:18:99:a7:93:43:ff:c2:67: 7d:38:37:8c:ec:df:9d:78:9e:25:e2:e1:06:a0:5f: 5c:42:63:03:ef:b0:dd:9f:a2:e6:9b:36:f2:d0:57: be:91:d1:fa:33:d4:38:17:fd:0e:d8:42:46:c6:2e: 85:28:bc:3d:bb:5b:9d:04:b0:0a:a4:c1:ee:92:29: 11:d3:f1:20:23:27:d4:29:ac:56:c2:f1:81:10:3b: 48:f0:63:78:78:66:dc:6f:f9:b8:40:be:3d:2d:38: 37:e9:40:0a:c0:45:db:ee:9b:b7:b5:a0:58:f8:03: aa:f8:74:75:da:e5:5b:77:10:0c:83:a2:8a:5b:b4: 36:50:7d:eb:ad:93:a0:93:56:c9:7c:af:bc:02:a5: fd:43:48:6b:b4:18:e5:88:4a:46:8d:9c:94:e7:8c: 8d:39:6f:00:2b:52:ea:49:bc:a8:3e:21:06:50:7b: af:e9:b2:39:54:53:1e:7d:9e:06:2c:5b:81:e5:6b: e2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D8:52:D8:0E:E9:18:42:6D:62:A6:CB:BD:0A:49:71:0A:46:48:EE X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/o9hS2A7pGEJtYqbLvQpJcQpGSO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.188.0/24 146.120.92.0/23 Signature Algorithm: sha256WithRSAEncryption 44:e9:e2:f1:4f:d8:58:78:1d:e3:b5:2d:10:25:8c:91:0f:f9: cc:7a:df:d5:bd:4c:14:a3:11:86:25:65:83:e7:8b:21:35:b6: b4:0a:83:b5:74:d5:bc:a2:ed:a6:18:2e:f1:37:e1:2f:e6:87: d5:b9:89:c1:c4:cc:6b:3d:d2:92:ab:5c:01:6b:0d:9d:0f:1a: ac:30:4e:50:fc:a7:a5:f6:34:42:32:0c:9c:d1:75:05:de:dc: 70:89:70:5f:57:34:36:75:0e:cc:c0:19:bd:79:4c:a9:d0:63: a5:98:dc:ac:8f:65:95:92:42:04:18:93:66:ce:53:c9:f6:5c: c8:bd:5b:96:49:b6:45:75:82:1c:2a:11:a6:84:0c:38:78:19: e4:3e:cc:9f:db:30:86:05:fd:d8:63:ad:10:05:ba:d0:d1:af: 1d:bd:fd:ba:4a:8a:b9:f5:07:7d:f2:00:39:99:09:4d:0c:8f: 0d:21:a3:ee:3b:14:27:ea:70:c6:8c:9e:9a:cb:fa:22:28:35: 81:6a:b2:86:67:84:ef:5a:8d:e1:dc:3d:bb:9e:4b:8e:30:3a: 90:fe:6d:82:35:6a:fe:c1:2a:79:1b:2e:cb:3a:80:a3:c3:4b: d8:fa:76:1d:86:56:ab:55:b6:15:01:0c:40:20:f7:bf:e2:a3: b9:a6:32:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hNYsr/ulNAQqGZpMAvaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2Q4NTJkODBlZTkxODQyNmQ2MmE2Y2JiZDBhNDk3MTBhNDY0OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4zYMTuo10HSKKOGHdqpuTNdye0d paX8MFgqEiE6litUws2ajs9B7flPnY0QNJGUQ7RKm0B1s9Sx0VpIVn6bJ10hGJmn k0P/wmd9ODeM7N+deJ4l4uEGoF9cQmMD77Ddn6Lmmzby0Fe+kdH6M9Q4F/0O2EJG xi6FKLw9u1udBLAKpMHukikR0/EgIyfUKaxWwvGBEDtI8GN4eGbcb/m4QL49LTg3 6UAKwEXb7pu3taBY+AOq+HR12uVbdxAMg6KKW7Q2UH3rrZOgk1bJfK+8AqX9Q0hr tBjliEpGjZyU54yNOW8AK1LqSbyoPiEGUHuv6bI5VFMefZ4GLFuB5WviYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKPYUtgO6RhCbWKmy70KSXEKRkjuMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvbzloUzJBN3BHRUp0WXFiTHZRcEpjUXBHU080LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXy+8AwQB knhcMA0GCSqGSIb3DQEBCwUAA4IBAQBE6eLxT9hYeB3jtS0QJYyRD/nMet/VvUwU oxGGJWWD54shNba0CoO1dNW8ou2mGC7xN+Ev5ofVuYnBxMxrPdKSq1wBaw2dDxqs ME5Q/Kel9jRCMgyc0XUF3txwiXBfVzQ2dQ7MwBm9eUyp0GOlmNysj2WVkkIEGJNm zlPJ9lzIvVuWSbZFdYIcKhGmhAw4eBnkPsyf2zCGBf3YY60QBbrQ0a8dvf26Soq5 9Qd98gA5mQlNDI8NIaPuOxQn6nDGjJ6ay/oiKDWBarKGZ4TvWo3h3D27nkuOMDqQ /m2CNWr+wSp5Gy7LOoCjw0vY+nYdhlarVbYVAQxAIPe/4qO5pjLd -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:39 2026 by rpki-client