This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sCY7Ua8XLCq7hhdqTC7NkqE-MZs.roa File: sCY7Ua8XLCq7hhdqTC7NkqE-MZs.roa (raw, json) Hash identifier: NNrr+tSWfpq0CxdrntFaWD88NBH2SuPEVvqWQ4Zm4VQ= Subject key identifier: B0:26:3B:51:AF:17:2C:2A:BB:86:17:6A:4C:2E:CD:92:A1:3E:31:9B Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F849F334924BD11D477927669C68580 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sCY7Ua8XLCq7hhdqTC7NkqE-MZs.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42350 IP address blocks: 93.170.89.0/24 maxlen: 24 95.46.198.0/23 maxlen: 24 146.120.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9f:33:49:24:bd:11:d4:77:92:76:69:c6:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0263b51af172c2abb86176a4c2ecd92a13e319b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:d0:1a:42:3d:e9:4d:95:00:67:0a:c4:78: 92:10:b4:6d:51:dd:6b:96:6b:72:72:a2:9f:8f:be: 5a:65:67:75:9e:43:b4:c9:28:b1:70:92:71:df:27: 2d:c3:3b:e3:7a:e0:24:8b:70:6f:6b:74:94:cf:a1: 0d:d1:15:62:12:56:17:31:6b:5c:b9:47:f9:c8:1a: 04:cb:ec:d7:03:a8:f9:38:8a:2c:a6:70:fe:68:f2: da:ec:a5:aa:9d:b7:55:91:bc:7b:8c:f0:6a:66:eb: ed:51:eb:43:3b:e6:4c:92:93:55:aa:f2:ac:78:d0: b4:5b:42:c3:03:63:ab:c8:8d:d7:b4:f1:eb:03:ce: e5:2f:bb:d3:3b:a5:90:85:14:37:15:2b:a8:fe:0e: c4:e2:e3:3d:21:3c:39:ed:de:57:41:fa:3f:d6:92: 6c:8c:6e:0d:dd:67:4a:cc:92:82:92:5d:fd:da:d2: f4:3e:07:50:d5:54:de:3c:c1:cb:b5:28:ec:7a:a0: 5b:61:72:8e:d2:2a:b3:32:a9:69:fd:f6:e6:8e:c3: 55:fc:d0:da:5f:07:8a:09:ef:22:0a:bd:56:1e:9c: b0:2b:10:ec:51:61:13:9e:94:79:2b:a2:a8:13:ee: 35:8b:85:89:59:0a:3a:07:26:44:f9:73:6b:87:f1: 31:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:26:3B:51:AF:17:2C:2A:BB:86:17:6A:4C:2E:CD:92:A1:3E:31:9B X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sCY7Ua8XLCq7hhdqTC7NkqE-MZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.89.0/24 95.46.198.0/23 146.120.220.0/24 Signature Algorithm: sha256WithRSAEncryption 65:6b:12:2a:09:92:81:f8:d1:51:10:8b:bb:aa:a0:42:80:da: fb:d5:85:fd:cd:46:04:ad:20:99:ef:ae:ba:9a:02:cb:eb:3a: ae:1b:72:49:c2:9a:4e:3b:fa:2f:0f:67:2e:bd:82:bc:c7:14: c4:c5:c4:7c:86:4f:ab:36:e2:4a:19:49:f9:e6:5b:12:38:f3: 16:79:e2:bc:f7:ec:a4:c4:8a:b8:a6:84:93:14:4e:94:43:32: 22:4e:41:ad:b4:8d:09:e8:ac:db:b3:84:7d:e4:3b:96:a5:46: 5e:a2:5d:7a:2b:8c:a8:75:33:e9:f6:b5:74:6f:95:98:21:92: a8:3e:e1:9a:97:a6:5b:a7:52:5e:f8:ff:90:94:bc:42:ad:c1: 31:d9:06:d9:c7:fa:de:2d:04:43:44:d2:ae:2c:d8:1a:b2:c4: f0:81:20:19:3f:82:1c:b2:9e:4d:3c:e2:f1:af:0d:27:27:d6: bc:a6:3d:3a:7e:08:99:1f:5a:9d:c4:6b:61:aa:ee:7e:9b:10: dd:aa:2f:e0:a4:1d:b0:4e:e0:5f:4a:b0:3a:d8:86:b9:90:50: e0:85:c2:6a:70:99:da:28:cc:4e:39:4c:91:a0:45:2b:8f:fd: ff:71:63:25:b3:b2:f1:af:2a:c5:40:78:c7:f3:35:fc:f4:1b: 9e:68:79:42 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/hJ8zSSS9EdR3knZpxoWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDI2M2I1MWFmMTcyYzJhYmI4NjE3NmE0YzJlY2Q5MmExM2UzMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEvQGkI96U2VAGcKxHiSELRtUd1r lmtycqKfj75aZWd1nkO0ySixcJJx3yctwzvjeuAki3Bva3SUz6EN0RViElYXMWtc uUf5yBoEy+zXA6j5OIospnD+aPLa7KWqnbdVkbx7jPBqZuvtUetDO+ZMkpNVqvKs eNC0W0LDA2OryI3XtPHrA87lL7vTO6WQhRQ3FSuo/g7E4uM9ITw57d5XQfo/1pJs jG4N3WdKzJKCkl392tL0PgdQ1VTePMHLtSjseqBbYXKO0iqzMqlp/fbmjsNV/NDa XweKCe8iCr1WHpywKxDsUWETnpR5K6KoE+41i4WJWQo6ByZE+XNrh/ExaQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLAmO1GvFywqu4YXakwuzZKhPjGbMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvc0NZN1VhOFhMQ3E3aGhkcVRDN05rcUUtTVpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXapZAwQB Xy7GAwQAknjcMA0GCSqGSIb3DQEBCwUAA4IBAQBlaxIqCZKB+NFREIu7qqBCgNr7 1YX9zUYErSCZ7666mgLL6zquG3JJwppOO/ovD2cuvYK8xxTExcR8hk+rNuJKGUn5 5lsSOPMWeeK89+ykxIq4poSTFE6UQzIiTkGttI0J6Kzbs4R95DuWpUZeol16K4yo dTPp9rV0b5WYIZKoPuGal6Zbp1Je+P+QlLxCrcEx2QbZx/reLQRDRNKuLNgassTw gSAZP4Icsp5NPOLxrw0nJ9a8pj06fgiZH1qdxGthqu5+mxDdqi/gpB2wTuBfSrA6 2Ia5kFDghcJqcJnaKMxOOUyRoEUrj/3/cWMls7LxryrFQHjH8zX89BueaHlC -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:39 2026 by rpki-client