This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qoLUS7gQgSwvzrTT2K_p1GRE04A.roa File: qoLUS7gQgSwvzrTT2K_p1GRE04A.roa (raw, json) Hash identifier: N3OU3+YavbIc2PTswUxuchuLuyasGrulaVIEivqqaq4= Subject key identifier: AA:82:D4:4B:B8:10:81:2C:2F:CE:B4:D3:D8:AF:E9:D4:64:44:D3:80 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84FECAFB65A87A3871ECC01E335353 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qoLUS7gQgSwvzrTT2K_p1GRE04A.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207340 IP address blocks: 93.171.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fe:ca:fb:65:a8:7a:38:71:ec:c0:1e:33:53:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa82d44bb810812c2fceb4d3d8afe9d46444d380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:6c:f5:ab:7c:d1:cd:4c:26:6b:0f:f8:6e: 9a:41:79:a2:ba:1d:fe:55:de:f8:e1:0b:cf:fe:47: a6:e5:de:48:72:f8:58:86:8b:99:27:9f:c6:ca:e3: 48:60:9d:ac:00:cb:09:06:d4:94:25:ec:9f:cb:dc: 2e:cf:b4:59:1d:6e:16:cc:e9:d7:42:11:20:80:7f: e7:ea:e8:8b:5b:76:34:d4:99:bc:65:9d:8f:8c:a8: f0:81:34:7b:12:72:f1:3b:5e:c1:fb:77:d0:17:d4: f1:87:4d:18:f7:e3:e7:4b:22:30:8b:93:f5:a1:e9: 51:12:37:c6:53:fd:f8:11:3a:65:ea:03:ef:ce:a5: db:00:1f:2d:83:ed:2b:94:96:69:7c:6f:26:61:c5: 20:ae:81:d8:79:b0:48:3d:e1:a7:9f:7b:fb:27:40: 37:0b:59:de:7f:44:04:b9:5f:0d:2f:98:92:d5:14: 38:46:46:7e:9d:fc:31:d0:24:d0:74:d3:f2:26:d1: 14:35:24:f3:5e:fe:b1:61:86:99:3f:90:39:2e:06: c9:18:4e:dc:f2:23:bc:f6:bb:b1:3c:22:55:82:cc: 31:63:f2:6e:62:2a:95:d7:4f:53:97:29:4a:5c:d8: 8d:e6:30:f5:fc:c3:c5:cb:a5:99:4e:15:f9:31:c0: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:82:D4:4B:B8:10:81:2C:2F:CE:B4:D3:D8:AF:E9:D4:64:44:D3:80 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qoLUS7gQgSwvzrTT2K_p1GRE04A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.2.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:15:b0:34:b1:f8:04:cf:9f:48:bc:21:24:2e:81:3f:3e:5e: 4d:d2:e6:d3:ef:7c:f0:51:bd:e8:dc:51:de:54:d2:0c:1d:49: 95:5b:79:a0:60:61:f7:23:84:bc:7c:fa:34:bb:eb:26:71:eb: f5:68:d1:b4:10:5e:02:34:52:96:ce:50:b3:f2:c7:e5:f9:10: 5c:6b:29:63:b7:be:8f:9e:b9:0d:f1:7d:bd:ac:1f:51:42:26: 71:fc:31:ef:c8:77:f3:62:9c:a2:d3:e9:e8:8b:13:b0:22:04: 00:83:bf:8e:4d:ec:bd:56:13:98:9c:02:78:f1:60:cb:4d:3a: c7:ef:ef:8f:e4:52:3b:8c:a5:e2:e0:1f:e3:da:df:06:49:24: 00:ec:8e:28:49:a2:ee:e6:57:c5:21:ef:78:bc:72:24:b3:03: f1:d9:1d:64:af:d4:a2:ff:95:a3:23:29:39:ce:f4:20:1a:21: 51:91:24:0f:2c:66:04:f4:40:6c:48:c9:97:cf:dd:75:2b:4e: c2:13:bc:7f:35:6b:8c:67:88:03:42:9b:36:56:62:22:71:ca: 3a:c6:3a:2e:3e:a3:22:d5:7b:26:a3:31:9c:3b:15:ff:e6:82: 8a:05:e2:b0:90:35:b6:54:a9:fe:ae:b3:cf:98:05:68:65:cf: 52:c8:4c:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP7K+2Woejhx7MAeM1NTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTgyZDQ0YmI4MTA4MTJjMmZjZWI0ZDNkOGFmZTlkNDY0NDRkMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ps9at80c1MJmsP+G6aQXmiuh3+ Vd744QvP/kem5d5IcvhYhouZJ5/GyuNIYJ2sAMsJBtSUJeyfy9wuz7RZHW4WzOnX QhEggH/n6uiLW3Y01Jm8ZZ2PjKjwgTR7EnLxO17B+3fQF9Txh00Y9+PnSyIwi5P1 oelREjfGU/34ETpl6gPvzqXbAB8tg+0rlJZpfG8mYcUgroHYebBIPeGnn3v7J0A3 C1nef0QEuV8NL5iS1RQ4RkZ+nfwx0CTQdNPyJtEUNSTzXv6xYYaZP5A5LgbJGE7c 8iO89ruxPCJVgswxY/JuYiqV109TlylKXNiN5jD1/MPFy6WZThX5McAlqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKqC1Eu4EIEsL86009iv6dRkRNOAMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvcW9MVVM3Z1FnU3d2enJUVDJLX3AxR1JFMDRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXasCMA0G CSqGSIb3DQEBCwUAA4IBAQCaFbA0sfgEz59IvCEkLoE/Pl5N0ubT73zwUb3o3FHe VNIMHUmVW3mgYGH3I4S8fPo0u+smcev1aNG0EF4CNFKWzlCz8sfl+RBcayljt76P nrkN8X29rB9RQiZx/DHvyHfzYpyi0+noixOwIgQAg7+OTey9VhOYnAJ48WDLTTrH 7++P5FI7jKXi4B/j2t8GSSQA7I4oSaLu5lfFIe94vHIkswPx2R1kr9Si/5WjIyk5 zvQgGiFRkSQPLGYE9EBsSMmXz911K07CE7x/NWuMZ4gDQps2VmIicco6xjouPqMi 1XsmozGcOxX/5oKKBeKwkDW2VKn+rrPPmAVoZc9SyEy8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:58 2026 by rpki-client