This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qnTl6eXkvS2aiwa6RKeAsH9K01s.roa File: qnTl6eXkvS2aiwa6RKeAsH9K01s.roa (raw, json) Hash identifier: /0eXh9hsGSMjh9wGxzZg+EnGUKhyqqIrK9iw0uLCU4w= Subject key identifier: AA:74:E5:E9:E5:E4:BD:2D:9A:8B:06:BA:44:A7:80:B0:7F:4A:D3:5B Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F848FBE87AB5C288C5F8FD896354829 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qnTl6eXkvS2aiwa6RKeAsH9K01s.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16066 IP address blocks: 93.170.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:8f:be:87:ab:5c:28:8c:5f:8f:d8:96:35:48:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa74e5e9e5e4bd2d9a8b06ba44a780b07f4ad35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:35:ba:24:7d:09:76:19:51:99:8b:72:e9: f9:18:4c:d0:40:cb:99:5d:e3:1e:64:65:8e:2f:70: eb:f3:a4:21:40:ec:9e:7e:69:16:19:66:e4:83:7c: 77:83:3a:08:c8:8d:62:78:39:aa:23:f6:8d:fc:5c: 32:9b:10:2e:7b:c5:85:50:f2:62:65:11:ed:9e:d1: e6:10:76:1f:a6:00:4d:e2:f7:ff:ca:d6:be:4e:ad: 34:bd:5e:31:d0:56:c4:e0:3f:8e:5d:e7:ea:ce:19: f4:6c:45:3b:10:44:2a:4d:92:f4:e4:88:84:d9:b7: 40:ba:75:c8:a5:47:a6:58:b1:34:d6:d6:61:a9:44: b4:74:fc:e5:3b:3f:7f:2b:8e:90:96:48:69:cc:ec: e7:55:29:5d:cf:07:be:80:73:fc:23:3b:56:39:28: 3a:a6:1e:3f:1f:d9:4b:4e:e2:e8:0a:b0:7f:83:c0: 1e:06:53:06:2b:db:da:49:3a:62:53:67:26:18:53: 01:de:55:36:c6:55:b6:b2:c6:03:3a:ca:e8:84:0a: 84:79:ba:0d:01:5f:84:d4:4e:d2:d2:5f:e0:96:02: 4a:0a:a4:f1:8e:56:38:d9:4d:29:b1:eb:e8:0b:ef: 51:b9:d6:ca:fd:45:03:56:b0:8e:6d:01:db:e1:01: 33:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:74:E5:E9:E5:E4:BD:2D:9A:8B:06:BA:44:A7:80:B0:7F:4A:D3:5B X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qnTl6eXkvS2aiwa6RKeAsH9K01s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.81.0/24 Signature Algorithm: sha256WithRSAEncryption 59:94:2f:ba:90:3d:1d:1e:bc:01:e8:b1:ec:8e:9d:3c:5a:4e: 52:1c:bf:94:5f:1e:09:bb:90:45:ff:67:ec:f2:0b:e4:b4:69: 9e:f1:4d:84:08:e0:ca:4c:7c:a8:09:b5:98:69:0d:ef:0c:6a: df:95:fd:f7:e5:0c:65:cc:01:c9:40:a7:5f:24:a9:0d:b6:80: 81:7a:d4:04:7c:fa:74:2f:34:cf:a0:5f:2e:8d:24:28:12:62: c3:b0:87:a8:ab:4f:ce:c9:91:32:9f:e7:e7:d9:23:70:5a:49: aa:f2:78:51:2f:ac:51:bf:cb:d9:e7:33:b9:ed:55:ff:87:5f: da:3c:11:62:00:30:cc:07:49:9a:13:4c:e2:06:2d:10:3f:43: 4d:f5:9d:df:a0:bc:96:67:b3:ac:38:1d:f3:53:99:21:47:1f: 61:67:c9:15:a5:11:54:81:80:9e:37:1b:5c:f6:a0:77:33:32: 97:1c:43:7d:3c:db:d8:ac:2f:f7:53:d0:b3:c2:6f:00:34:10: ab:06:dd:1a:c8:8a:91:5d:54:bc:c5:1b:9b:dc:44:f2:29:40: 01:53:e3:4c:51:ef:fe:c8:5c:0c:5a:a4:fb:6b:8f:16:c9:21: 68:0d:1e:05:04:fe:f9:2e:13:c1:e4:d1:a9:00:07:8d:76:b0: 26:f3:a4:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hI++h6tcKIxfj9iWNUgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTc0ZTVlOWU1ZTRiZDJkOWE4YjA2YmE0NGE3ODBiMDdmNGFkMzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbQ1uiR9CXYZUZmLcun5GEzQQMuZ XeMeZGWOL3Dr86QhQOyefmkWGWbkg3x3gzoIyI1ieDmqI/aN/FwymxAue8WFUPJi ZRHtntHmEHYfpgBN4vf/yta+Tq00vV4x0FbE4D+OXefqzhn0bEU7EEQqTZL05IiE 2bdAunXIpUemWLE01tZhqUS0dPzlOz9/K46QlkhpzOznVSldzwe+gHP8IztWOSg6 ph4/H9lLTuLoCrB/g8AeBlMGK9vaSTpiU2cmGFMB3lU2xlW2ssYDOsrohAqEeboN AV+E1E7S0l/glgJKCqTxjlY42U0psevoC+9RudbK/UUDVrCObQHb4QEzvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKp05enl5L0tmosGukSngLB/StNbMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvcW5UbDZlWGt2UzJhaXdhNlJLZUFzSDlLMDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXapRMA0G CSqGSIb3DQEBCwUAA4IBAQBZlC+6kD0dHrwB6LHsjp08Wk5SHL+UXx4Ju5BF/2fs 8gvktGme8U2ECODKTHyoCbWYaQ3vDGrflf335QxlzAHJQKdfJKkNtoCBetQEfPp0 LzTPoF8ujSQoEmLDsIeoq0/OyZEyn+fn2SNwWkmq8nhRL6xRv8vZ5zO57VX/h1/a PBFiADDMB0maE0ziBi0QP0NN9Z3foLyWZ7OsOB3zU5khRx9hZ8kVpRFUgYCeNxtc 9qB3MzKXHEN9PNvYrC/3U9Czwm8ANBCrBt0ayIqRXVS8xRub3ETyKUABU+NMUe/+ yFwMWqT7a48WySFoDR4FBP75LhPB5NGpAAeNdrAm86Ts -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:39 2026 by rpki-client