This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uyMTmWR7Aow1ztClmGc3PZzIRE8.roa File: uyMTmWR7Aow1ztClmGc3PZzIRE8.roa (raw, json) Hash identifier: qXgN9FpXEv02at2LRgXroqPILHZbBRODk+nKonhzyDs= Subject key identifier: BB:23:13:99:64:7B:02:8C:35:CE:D0:A5:98:67:37:3D:9C:C8:44:4F Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CB1B9C50EEDBC68FFC2282AF8374 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uyMTmWR7Aow1ztClmGc3PZzIRE8.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57888 IP address blocks: 93.170.56.0/21 maxlen: 24 146.120.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:cb:1b:9c:50:ee:db:c6:8f:fc:22:82:af:83:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb231399647b028c35ced0a59867373d9cc8444f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:76:77:27:d8:3b:9f:27:57:fd:d5:aa:ef: 15:37:59:b8:a8:1b:f1:6d:e7:6a:70:ea:db:1d:e0: bf:08:e8:22:c6:66:56:56:1e:85:5b:6a:f0:78:d6: 98:51:c5:a7:6b:d4:da:f5:f9:e3:a7:eb:f6:f3:a6: 25:ba:cc:71:a5:eb:ef:c1:28:91:31:3a:15:9d:2a: a0:f2:96:bb:0e:1a:33:8c:3f:0d:71:e4:39:6d:06: 9e:e0:ec:98:ef:b2:19:15:96:45:6b:ac:7b:4b:64: fa:20:b1:42:d3:f2:8e:43:22:2b:86:a2:9e:8c:cc: 7a:51:6d:1e:59:5c:b3:08:8b:3a:65:97:81:dc:e2: 05:53:09:75:5c:36:55:7f:54:7c:4d:8e:9c:ea:69: fa:a4:27:24:fc:5b:80:80:75:20:a4:16:85:d0:82: a9:21:a2:7a:35:7f:15:de:43:0c:7c:9c:1f:5e:bd: 37:cd:05:3e:9e:a8:4f:7e:ac:43:64:fa:20:3f:95: 4a:c4:59:3a:82:06:be:81:64:16:86:81:58:bf:6e: 01:3c:cd:ee:71:fa:3e:83:21:23:6a:89:1d:0c:ea: d8:2d:a4:ab:69:4b:b6:92:2a:84:71:54:b9:93:7b: b9:4f:0d:48:09:18:c6:af:aa:e9:81:f3:74:2f:a7: 46:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:23:13:99:64:7B:02:8C:35:CE:D0:A5:98:67:37:3D:9C:C8:44:4F X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/uyMTmWR7Aow1ztClmGc3PZzIRE8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.56.0/21 146.120.8.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:d3:d2:92:47:80:69:f8:03:ce:3d:48:11:42:98:35:db:3e: d3:fa:5d:e4:b6:5b:98:8a:bb:c6:be:5a:da:19:dc:44:1b:fa: c9:13:16:19:81:d1:ef:1a:7c:e1:eb:ac:61:a5:09:11:5e:62: 8b:f3:48:ca:48:16:4f:f1:ed:21:c0:11:63:2c:f3:b4:d0:e8: cc:a9:7d:58:da:e2:ac:18:51:61:f6:b8:52:d2:62:34:cc:44: 7d:79:90:1b:e0:34:cb:c1:99:ed:50:d8:c9:cf:40:d5:64:9e: ad:0b:44:0e:2f:2c:7f:fa:57:1b:a4:13:48:ad:de:65:3f:cd: ab:90:bf:b2:7b:f6:2a:27:67:54:24:73:17:28:1a:e8:8e:7d: c1:4f:f1:ef:22:37:94:5b:51:de:9f:47:f9:22:9b:10:b0:40: c8:22:13:9e:0b:32:95:70:b8:dc:85:1d:69:0a:ef:25:c1:57: 61:c6:af:81:e1:5c:26:2e:af:b4:e2:b7:89:f5:85:63:d1:cd: b4:9d:79:a8:34:eb:6b:e6:a0:19:4c:2b:26:15:bb:f1:58:09: 4a:10:18:06:8a:24:75:0e:81:65:a0:0d:ed:72:0b:69:6f:db: b3:db:79:c8:c6:1c:b1:9f:03:a0:fd:c4:6d:d3:d6:49:31:9a: 2c:44:96:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hMsbnFDu28aP/CKCr4N0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjIzMTM5OTY0N2IwMjhjMzVjZWQwYTU5ODY3MzczZDljYzg0NDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJl2dyfYO58nV/3Vqu8VN1m4qBvx bedqcOrbHeC/COgixmZWVh6FW2rweNaYUcWna9Ta9fnjp+v286YlusxxpevvwSiR MToVnSqg8pa7DhozjD8NceQ5bQae4OyY77IZFZZFa6x7S2T6ILFC0/KOQyIrhqKe jMx6UW0eWVyzCIs6ZZeB3OIFUwl1XDZVf1R8TY6c6mn6pCck/FuAgHUgpBaF0IKp IaJ6NX8V3kMMfJwfXr03zQU+nqhPfqxDZPogP5VKxFk6gga+gWQWhoFYv24BPM3u cfo+gyEjaokdDOrYLaSraUu2kiqEcVS5k3u5Tw1ICRjGr6rpgfN0L6dG8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLsjE5lkewKMNc7QpZhnNz2cyERPMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvdXlNVG1XUjdBb3cxenRDbG1HYzNQWnpJUkU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXao4AwQC kngIMA0GCSqGSIb3DQEBCwUAA4IBAQCf09KSR4Bp+APOPUgRQpg12z7T+l3ktluY irvGvlraGdxEG/rJExYZgdHvGnzh66xhpQkRXmKL80jKSBZP8e0hwBFjLPO00OjM qX1Y2uKsGFFh9rhS0mI0zER9eZAb4DTLwZntUNjJz0DVZJ6tC0QOLyx/+lcbpBNI rd5lP82rkL+ye/YqJ2dUJHMXKBrojn3BT/HvIjeUW1Hen0f5IpsQsEDIIhOeCzKV cLjchR1pCu8lwVdhxq+B4VwmLq+04reJ9YVj0c20nXmoNOtr5qAZTCsmFbvxWAlK EBgGiiR1DoFloA3tcgtpb9uz23nIxhyxnwOg/cRt09ZJMZosRJaK -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:18 2026 by rpki-client