This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/olGNlTMF4bsT7C59cGHQsGkfxHs.roa File: olGNlTMF4bsT7C59cGHQsGkfxHs.roa (raw, json) Hash identifier: xg7yfNtnpKx6s4830kfM0d48ihTsdNvirdJLDEchbjY= Subject key identifier: A2:51:8D:95:33:05:E1:BB:13:EC:2E:7D:70:61:D0:B0:69:1F:C4:7B Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84D7DA20E08BB8B70C1B0693AFA2F0 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/olGNlTMF4bsT7C59cGHQsGkfxHs.roa Signing time: Fri 02 Jan 2026 16:22:51 +0000 ROA not before: Fri 02 Jan 2026 16:22:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60573 IP address blocks: 93.170.2.0/24 maxlen: 24 95.46.77.0/24 maxlen: 24 146.120.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d7:da:20:e0:8b:b8:b7:0c:1b:06:93:af:a2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a2518d953305e1bb13ec2e7d7061d0b0691fc47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:a1:26:d1:91:0c:34:44:2c:93:5c:76:e5: 6e:5a:70:3c:5f:7c:d7:28:35:28:35:29:ca:09:1f: bd:82:0c:fb:64:ed:89:6f:f6:8a:fe:a1:8b:e0:2e: 7b:c0:b3:e9:10:9c:7b:dc:50:d7:97:a9:d3:6d:50: 65:87:52:45:8d:39:f3:db:d8:6c:d6:46:a1:aa:b7: 06:bb:3f:2e:df:94:f6:7a:22:4e:11:3e:67:fe:74: 99:22:26:4d:c7:ae:3f:53:aa:8e:32:83:73:33:b4: 1a:37:5c:7d:2a:df:0a:f8:3c:f9:a0:2e:71:b4:e4: fd:ba:d7:89:ac:a1:f1:ed:dc:ce:a8:3f:30:fb:74: c2:69:5b:3c:5f:43:24:f8:c6:bf:b3:be:ad:06:b1: d8:0e:9e:5f:71:3c:2e:5a:9b:a5:1a:f0:df:ec:ac: 50:03:67:f2:6f:25:30:69:ae:e2:f9:4e:5a:e0:25: cf:82:c1:cc:15:d3:f6:97:33:a3:d8:03:c6:bb:66: 01:d5:01:59:2f:f4:f9:35:a0:f5:56:9c:b0:41:16: 08:4d:2a:28:bd:d8:bc:42:cb:0d:36:0b:c4:4f:a9: e3:eb:f9:22:64:37:d1:82:61:45:0c:7d:9e:2a:06: ee:77:c4:75:7a:68:de:17:24:18:1d:4c:fc:9f:e6: 76:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:51:8D:95:33:05:E1:BB:13:EC:2E:7D:70:61:D0:B0:69:1F:C4:7B X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/olGNlTMF4bsT7C59cGHQsGkfxHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.2.0/24 95.46.77.0/24 146.120.172.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:ef:1f:03:69:06:5c:b0:d5:40:f6:50:7b:fb:9c:12:61:94: 5d:1a:13:d4:09:4c:14:53:55:d2:69:38:98:ce:89:2c:61:73: d3:65:90:98:be:88:20:eb:36:4e:ac:c3:39:48:9c:06:1b:c0: f8:ad:25:40:73:40:fd:13:9c:d0:c3:f3:0f:38:5f:ac:0c:e0: ca:17:85:66:54:9d:69:35:9f:bd:9f:87:7e:c1:69:34:d9:86: 70:f4:6e:fe:74:88:cc:86:aa:c3:85:23:30:5b:6d:f6:de:f2: 0e:ce:8a:6f:1c:4b:2c:e6:8a:73:33:2c:11:d3:11:e4:f6:c3: 98:9e:58:0e:79:38:3c:8f:29:fc:8a:2d:e2:a0:c7:f3:a3:99: be:db:f0:48:b0:77:99:19:a8:b0:a9:1c:ee:ec:09:ef:97:7d: 1e:c0:44:84:b6:66:3a:aa:1d:82:05:41:6a:f8:2b:18:1c:03: 8d:97:91:32:9d:a6:a6:ea:16:af:6c:7b:29:47:ba:02:c3:67: ae:f4:1b:13:f3:b2:e9:ef:50:44:f1:a9:57:0e:22:87:5b:fd: 52:04:30:87:38:39:05:a4:a2:a0:80:77:dc:7b:79:e5:7a:c4: 28:c3:0d:d1:52:ac:34:0e:ab:7d:7f:fa:43:3e:4d:c6:16:8a: 04:ae:e8:ca -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hNfaIOCLuLcMGwaTr6LwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjUxOGQ5NTMzMDVlMWJiMTNlYzJlN2Q3MDYxZDBiMDY5MWZjNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCKhJtGRDDRELJNcduVuWnA8X3zX KDUoNSnKCR+9ggz7ZO2Jb/aK/qGL4C57wLPpEJx73FDXl6nTbVBlh1JFjTnz29hs 1kahqrcGuz8u35T2eiJOET5n/nSZIiZNx64/U6qOMoNzM7QaN1x9Kt8K+Dz5oC5x tOT9uteJrKHx7dzOqD8w+3TCaVs8X0Mk+Ma/s76tBrHYDp5fcTwuWpulGvDf7KxQ A2fybyUwaa7i+U5a4CXPgsHMFdP2lzOj2APGu2YB1QFZL/T5NaD1VpywQRYITSoo vdi8QssNNgvET6nj6/kiZDfRgmFFDH2eKgbud8R1emjeFyQYHUz8n+Z22QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKJRjZUzBeG7E+wufXBh0LBpH8R7MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvb2xHTmxUTUY0YnNUN0M1OWNHSFFzR2tmeEhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXaoCAwQA Xy5NAwQBknisMA0GCSqGSIb3DQEBCwUAA4IBAQCd7x8DaQZcsNVA9lB7+5wSYZRd GhPUCUwUU1XSaTiYzoksYXPTZZCYvogg6zZOrMM5SJwGG8D4rSVAc0D9E5zQw/MP OF+sDODKF4VmVJ1pNZ+9n4d+wWk02YZw9G7+dIjMhqrDhSMwW2323vIOzopvHEss 5opzMywR0xHk9sOYnlgOeTg8jyn8ii3ioMfzo5m+2/BIsHeZGaiwqRzu7Anvl30e wESEtmY6qh2CBUFq+CsYHAONl5Eynaam6havbHspR7oCw2eu9BsT87Lp71BE8alX DiKHW/1SBDCHODkFpKKggHfce3nlesQoww3RUqw0Dqt9f/pDPk3GFooErujK -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:47 2026 by rpki-client