This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/s0Qv6IZ4YmeG---tsZNjIE5pnpY.roa File: s0Qv6IZ4YmeG---tsZNjIE5pnpY.roa (raw, json) Hash identifier: Xw3NVv21L3el+WU7gbzfIVjxeeOOX/3f41DKV0L1nc8= Subject key identifier: B3:44:2F:E8:86:78:62:67:86:FB:EF:AD:B1:93:63:20:4E:69:9E:96 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F849F88F7FA0FD225869D10A7218DF7 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/s0Qv6IZ4YmeG---tsZNjIE5pnpY.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42447 IP address blocks: 92.38.48.0/23 maxlen: 24 93.170.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9f:88:f7:fa:0f:d2:25:86:9d:10:a7:21:8d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3442fe88678626786fbefadb19363204e699e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:39:48:06:5a:bd:8d:01:76:b8:04:cd:e0: b4:6a:7c:bb:3e:9d:21:17:12:f9:c6:0c:af:fd:8f: 51:15:01:d4:7c:f0:41:88:f9:80:ef:03:2e:a8:f8: 02:96:85:dc:13:e8:62:d0:a4:3f:d9:e7:44:4e:9b: d3:6b:10:b9:93:34:ce:ab:61:2b:ad:92:eb:39:f1: e0:f1:3d:28:a6:5c:63:54:f8:e5:40:88:dd:b1:0e: 9e:13:71:1a:8f:51:1a:1b:81:1e:e8:a0:07:d1:0d: c4:70:57:42:65:d9:3e:f5:1e:27:bc:79:44:db:75: f0:50:9b:15:0b:38:cd:3e:2d:86:f1:dc:94:b5:5d: 51:ce:3d:f6:71:d9:83:b9:fa:84:13:7f:a7:a0:35: 0b:49:e7:a4:9d:08:0e:c5:43:0e:c9:69:14:f8:98: df:7b:d7:93:58:2e:64:d4:51:a5:6a:14:67:b4:88: 1b:cd:9e:c9:11:fd:84:9f:73:98:df:92:a9:28:bf: 85:6c:ed:3e:54:21:51:b8:0a:02:3d:69:6e:a7:71: 64:28:fc:28:7e:ae:05:4c:55:83:ea:07:81:76:93: da:4d:99:11:80:e0:dd:19:67:ab:ff:c4:36:be:1e: 5e:b1:67:66:9a:15:a6:f0:cd:7c:67:37:38:73:5e: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:44:2F:E8:86:78:62:67:86:FB:EF:AD:B1:93:63:20:4E:69:9E:96 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/s0Qv6IZ4YmeG---tsZNjIE5pnpY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.48.0/23 93.170.72.0/23 Signature Algorithm: sha256WithRSAEncryption 73:71:21:9a:f2:18:f5:07:60:b6:e0:e6:e1:20:03:fb:aa:91: 94:31:29:7a:23:d6:c5:66:0a:11:a7:8d:3e:5e:c6:55:70:75: 42:c0:e7:81:ce:9b:ce:db:8e:08:ae:5e:71:32:e0:34:b7:5a: a9:ec:fc:ba:19:af:5c:52:e1:62:b9:b8:72:a7:4c:bb:19:b6: 73:8f:42:e5:56:47:e2:2b:21:a6:bf:05:21:16:83:84:16:eb: 85:d5:c6:33:b2:47:b1:a1:3f:58:25:c4:67:5a:d1:35:05:b4: ac:52:02:13:a0:69:88:74:9c:b4:1e:56:4b:de:56:9b:50:a4: ab:68:10:fe:0f:86:f2:82:d8:02:92:01:6d:6e:87:9b:24:4e: ad:a7:ce:5d:7b:3c:3b:8b:67:45:13:5e:4b:ce:03:93:e6:bd: c7:46:de:a3:cc:84:7c:ab:ef:1b:0b:32:e5:79:6b:4d:b2:87: 35:a7:cc:14:0b:7a:3a:54:b8:93:0c:fb:e3:d9:69:40:f6:6d: 2e:76:c0:e5:f3:51:7d:da:bd:cd:cb:bb:1e:ee:c0:aa:98:00: 0c:d1:92:1b:64:13:75:e9:70:3e:ea:e9:79:e0:9f:d5:2d:7e: 68:67:ef:03:17:2b:ee:c3:69:da:74:8f:0e:a9:bc:5d:6c:2a: 17:ea:bf:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hJ+I9/oP0iWGnRCnIY33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzQ0MmZlODg2Nzg2MjY3ODZmYmVmYWRiMTkzNjMyMDRlNjk5ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswM5SAZavY0BdrgEzeC0any7Pp0h FxL5xgyv/Y9RFQHUfPBBiPmA7wMuqPgCloXcE+hi0KQ/2edETpvTaxC5kzTOq2Er rZLrOfHg8T0oplxjVPjlQIjdsQ6eE3Eaj1EaG4Ee6KAH0Q3EcFdCZdk+9R4nvHlE 23XwUJsVCzjNPi2G8dyUtV1Rzj32cdmDufqEE3+noDULSeeknQgOxUMOyWkU+Jjf e9eTWC5k1FGlahRntIgbzZ7JEf2En3OY35KpKL+FbO0+VCFRuAoCPWlup3FkKPwo fq4FTFWD6geBdpPaTZkRgODdGWer/8Q2vh5esWdmmhWm8M18Zzc4c16/qQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLNEL+iGeGJnhvvvrbGTYyBOaZ6WMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvczBRdjZJWjRZbWVHLS0tdHNaTmpJRTVwbnBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXCYwAwQB XapIMA0GCSqGSIb3DQEBCwUAA4IBAQBzcSGa8hj1B2C24ObhIAP7qpGUMSl6I9bF ZgoRp40+XsZVcHVCwOeBzpvO244Irl5xMuA0t1qp7Py6Ga9cUuFiubhyp0y7GbZz j0LlVkfiKyGmvwUhFoOEFuuF1cYzskexoT9YJcRnWtE1BbSsUgIToGmIdJy0HlZL 3labUKSraBD+D4bygtgCkgFtboebJE6tp85dezw7i2dFE15LzgOT5r3HRt6jzIR8 q+8bCzLleWtNsoc1p8wUC3o6VLiTDPvj2WlA9m0udsDl81F92r3Ny7se7sCqmAAM 0ZIbZBN16XA+6ul54J/VLX5oZ+8DFyvuw2nadI8OqbxdbCoX6r/A -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:17 2026 by rpki-client