This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qS8K8xj05owKImBsu-Y-kyNcwzs.roa File: qS8K8xj05owKImBsu-Y-kyNcwzs.roa (raw, json) Hash identifier: PvBCS6YakR9dIHDVGXU7VNel5LeCg8vDKt6l6ptFM68= Subject key identifier: A9:2F:0A:F3:18:F4:E6:8C:0A:22:60:6C:BB:E6:3E:93:23:5C:C3:3B Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84F816174C29C11F7446C2F520815F Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qS8K8xj05owKImBsu-Y-kyNcwzs.roa Signing time: Fri 02 Jan 2026 16:22:59 +0000 ROA not before: Fri 02 Jan 2026 16:22:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204532 IP address blocks: 95.47.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:f8:16:17:4c:29:c1:1f:74:46:c2:f5:20:81:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a92f0af318f4e68c0a22606cbbe63e93235cc33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:8c:b3:db:b6:65:b6:e2:0d:f2:da:53:d7: 56:7f:89:26:93:7a:3a:05:a0:4a:f2:53:10:f2:f4: 2d:b8:c7:3e:37:28:ba:5c:f2:dd:4a:45:14:dd:ef: 9b:b8:2a:cb:ba:a9:d9:51:16:9a:6d:e4:db:8e:0f: cd:cc:35:a8:18:36:67:67:67:7e:6e:03:6d:87:34: 35:5d:04:ac:eb:07:8b:8a:1b:71:0b:92:92:c4:80: 7e:e4:d1:cc:6e:9e:42:8f:4d:ec:05:54:04:79:58: 48:75:67:08:fe:bb:5a:2a:d6:cf:b4:bd:f0:8b:ed: 70:4a:53:7f:18:b2:f9:8d:9b:4d:e9:28:3c:05:86: 50:b4:27:82:4f:24:45:9a:d9:e2:38:b3:72:e9:44: 11:fb:5b:c5:99:52:f1:bc:c5:8e:2f:42:12:e8:e5: 7e:bd:38:18:2d:4c:e7:1d:6d:fa:77:03:ea:eb:8d: a1:41:d8:62:12:1b:fb:fa:d3:bf:c8:33:c6:60:ef: 30:32:9b:2e:f7:c0:3c:f8:31:08:1f:f2:19:56:71: 91:7d:bf:b4:0c:4f:83:f7:f8:43:f8:ea:bd:a2:71: 33:ec:d9:b2:17:a2:e4:7e:35:fe:1d:5c:22:61:1d: 80:f1:dd:cd:68:a0:a5:16:12:5a:6c:df:51:ca:96: ab:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2F:0A:F3:18:F4:E6:8C:0A:22:60:6C:BB:E6:3E:93:23:5C:C3:3B X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qS8K8xj05owKImBsu-Y-kyNcwzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.168.0/23 Signature Algorithm: sha256WithRSAEncryption 59:e3:ac:38:20:4a:d8:56:e9:b4:4a:38:fe:9c:71:35:96:fe: 9c:c7:f0:9d:67:62:8e:37:af:b9:fb:7d:e8:bb:f4:6b:10:92: 61:c7:39:47:09:b8:cf:41:e2:ef:9f:81:78:c5:4e:0e:fe:dd: a8:a8:ca:9a:18:da:02:6b:72:7f:fb:44:65:f4:ae:a6:4e:36: 47:1c:d7:d5:bc:79:2c:20:2c:17:e6:85:f8:05:2d:5e:81:5c: fc:65:3d:81:aa:ec:88:99:30:50:0c:cc:19:d3:21:32:fd:8a: a5:89:8a:7f:04:c4:7e:2c:87:97:5a:ec:d7:19:1b:9c:c1:27: 26:ab:7b:12:69:8a:4b:7b:01:f7:ee:3a:8b:15:f2:f3:fe:80: 32:42:99:cb:54:43:01:03:17:cd:ca:81:ec:40:e1:a6:b5:9a: f8:50:2c:e2:d1:68:b1:ee:15:2d:c1:b6:89:e8:ef:72:53:5f: c2:64:8a:55:2c:fe:7c:55:ba:01:38:c4:a7:24:18:1d:a1:cb: 97:cb:f0:ce:46:60:90:fb:fb:b5:9b:de:1f:01:be:b5:39:70: 59:7a:00:0a:aa:0e:5a:52:b3:76:b0:f4:4e:cf:3b:de:8e:d4: f7:3a:d2:fe:ae:28:12:f1:77:8f:a6:e5:bf:4d:01:9b:42:64: 27:43:25:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hPgWF0wpwR90RsL1IIFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOTJmMGFmMzE4ZjRlNjhjMGEyMjYwNmNiYmU2M2U5MzIzNWNjMzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV6Ms9u2ZbbiDfLaU9dWf4kmk3o6 BaBK8lMQ8vQtuMc+Nyi6XPLdSkUU3e+buCrLuqnZURaabeTbjg/NzDWoGDZnZ2d+ bgNthzQ1XQSs6weLihtxC5KSxIB+5NHMbp5Cj03sBVQEeVhIdWcI/rtaKtbPtL3w i+1wSlN/GLL5jZtN6Sg8BYZQtCeCTyRFmtniOLNy6UQR+1vFmVLxvMWOL0IS6OV+ vTgYLUznHW36dwPq642hQdhiEhv7+tO/yDPGYO8wMpsu98A8+DEIH/IZVnGRfb+0 DE+D9/hD+Oq9onEz7NmyF6LkfjX+HVwiYR2A8d3NaKClFhJabN9RyparYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKkvCvMY9OaMCiJgbLvmPpMjXMM7MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvcVM4Szh4ajA1b3dLSW1Cc3UtWS1reU5jd3pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXy+oMA0G CSqGSIb3DQEBCwUAA4IBAQBZ46w4IErYVum0Sjj+nHE1lv6cx/CdZ2KON6+5+33o u/RrEJJhxzlHCbjPQeLvn4F4xU4O/t2oqMqaGNoCa3J/+0Rl9K6mTjZHHNfVvHks ICwX5oX4BS1egVz8ZT2BquyImTBQDMwZ0yEy/YqliYp/BMR+LIeXWuzXGRucwScm q3sSaYpLewH37jqLFfLz/oAyQpnLVEMBAxfNyoHsQOGmtZr4UCzi0Wix7hUtwbaJ 6O9yU1/CZIpVLP58VboBOMSnJBgdocuXy/DORmCQ+/u1m94fAb61OXBZegAKqg5a UrN2sPROzzvejtT3OtL+rigS8XePpuW/TQGbQmQnQyVu -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:46 2026 by rpki-client