This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xlIXbu1n4UmiPc2rdJ1uCXACWMo.roa File: xlIXbu1n4UmiPc2rdJ1uCXACWMo.roa (raw, json) Hash identifier: Kr216Q3V9v7yEaQjl7omDVyf5AjEQg5yuMKP8AArq7M= Subject key identifier: C6:52:17:6E:ED:67:E1:49:A2:3D:CD:AB:74:9D:6E:09:70:02:58:CA Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84A1B002CBC84EF144DB0E091C3825 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xlIXbu1n4UmiPc2rdJ1uCXACWMo.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42704 IP address blocks: 93.170.174.0/24 maxlen: 24 93.171.142.0/24 maxlen: 24 93.171.177.0/24 maxlen: 24 93.171.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a1:b0:02:cb:c8:4e:f1:44:db:0e:09:1c:38:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c652176eed67e149a23dcdab749d6e09700258ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:43:7d:99:ad:d6:37:2e:70:e6:65:c2:e7:23: 9b:d6:4e:31:2f:1a:30:68:0e:a9:85:11:35:d2:18: 93:93:c7:cd:ac:73:d1:3c:66:50:4b:63:db:23:dc: 3f:43:60:7f:62:1d:99:40:d7:1a:d9:d3:d7:af:8c: 24:2f:13:dd:50:b4:67:ea:43:68:66:d6:e7:84:8e: 49:0a:2c:2a:76:05:82:5a:48:8c:57:73:c6:f7:a0: d7:be:e3:46:b9:1b:a6:eb:3b:30:f4:0e:23:64:24: e5:db:a3:de:4c:8a:cf:21:df:29:f4:e5:43:08:61: 90:0e:42:f7:53:81:23:e4:02:29:70:6d:5e:58:97: 48:09:a1:5e:df:1e:0f:7f:3e:ec:67:3d:c7:91:99: b3:05:9f:03:15:68:9c:6d:15:29:a5:66:ac:6a:18: 7f:72:15:8a:7a:4d:ed:17:97:de:19:e9:56:4e:32: 69:c2:e3:e7:ee:95:ae:63:e4:ae:cf:4d:f1:c8:32: 30:eb:74:e1:94:26:83:77:6a:22:42:df:87:b8:b7: 2a:16:81:1f:02:32:62:17:45:23:cc:ee:4b:4f:8e: fd:51:45:6b:aa:26:a6:1e:20:1f:c4:e4:7a:f6:88: ab:e2:7c:ce:c9:da:8e:93:6a:1c:5a:43:97:72:01: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:52:17:6E:ED:67:E1:49:A2:3D:CD:AB:74:9D:6E:09:70:02:58:CA X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/xlIXbu1n4UmiPc2rdJ1uCXACWMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.174.0/24 93.171.142.0/24 93.171.177.0/24 93.171.205.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:d2:a2:c7:3e:bf:c5:2d:2f:36:fa:ba:4d:f3:16:89:ae:e5: 2b:cd:01:e8:5b:1b:59:86:4d:69:0b:08:55:5f:2c:6c:7e:0c: a0:31:5f:bd:4f:ee:17:ab:f7:7e:38:50:26:11:69:3a:be:78: 79:45:c5:bc:2f:e0:8c:23:0e:d2:dc:c5:ba:49:f2:c6:61:d7: 6e:39:32:72:f8:fe:49:5b:45:f6:b4:29:79:6b:ff:26:96:59: 3d:3e:ab:d7:36:92:98:bf:df:32:f8:ef:cd:7a:4b:b6:f1:e8: cd:42:70:de:59:a2:4a:10:0e:02:cc:18:ff:3a:ab:64:89:a8: b7:93:e5:fd:a3:06:3a:26:5d:e4:29:23:7f:be:c4:c3:9d:10: 0b:ab:11:18:79:81:b2:d6:36:5e:73:e1:80:8c:9d:4c:ab:f7: 43:70:e8:20:f0:77:0f:44:b7:e7:ca:6e:70:fc:49:5c:af:3d: 9f:d2:84:c2:70:75:18:15:56:10:ed:39:15:84:be:c0:04:c7: 46:ff:46:46:db:8e:82:a6:44:e3:67:c0:c0:16:5a:7f:22:55: 54:74:d8:7a:97:ec:37:3c:a4:b1:27:eb:08:11:bf:fb:3c:f0: 6a:11:1d:a9:8a:3a:17:0d:df:d6:3e:25:77:30:5b:24:cb:c7: ba:65:a4:fd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hKGwAsvITvFE2w4JHDglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjUyMTc2ZWVkNjdlMTQ5YTIzZGNkYWI3NDlkNmUwOTcwMDI1OGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEN9ma3WNy5w5mXC5yOb1k4xLxow aA6phRE10hiTk8fNrHPRPGZQS2PbI9w/Q2B/Yh2ZQNca2dPXr4wkLxPdULRn6kNo ZtbnhI5JCiwqdgWCWkiMV3PG96DXvuNGuRum6zsw9A4jZCTl26PeTIrPId8p9OVD CGGQDkL3U4Ej5AIpcG1eWJdICaFe3x4Pfz7sZz3HkZmzBZ8DFWicbRUppWasahh/ chWKek3tF5feGelWTjJpwuPn7pWuY+Suz03xyDIw63ThlCaDd2oiQt+HuLcqFoEf AjJiF0UjzO5LT479UUVrqiamHiAfxOR69oir4nzOydqOk2ocWkOXcgEU3wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMZSF27tZ+FJoj3Nq3SdbglwAljKMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveGxJWGJ1MW40VW1pUGMycmRKMXVDWEFDV01vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXaquAwQA XauOAwQAXauxAwQAXavNMA0GCSqGSIb3DQEBCwUAA4IBAQAv0qLHPr/FLS82+rpN 8xaJruUrzQHoWxtZhk1pCwhVXyxsfgygMV+9T+4Xq/d+OFAmEWk6vnh5RcW8L+CM Iw7S3MW6SfLGYdduOTJy+P5JW0X2tCl5a/8mllk9PqvXNpKYv98y+O/Neku28ejN QnDeWaJKEA4CzBj/Oqtkiai3k+X9owY6Jl3kKSN/vsTDnRALqxEYeYGy1jZec+GA jJ1Mq/dDcOgg8HcPRLfnym5w/Elcrz2f0oTCcHUYFVYQ7TkVhL7ABMdG/0ZG246C pkTjZ8DAFlp/IlVUdNh6l+w3PKSxJ+sIEb/7PPBqER2pijoXDd/WPiV3MFsky8e6 ZaT9 -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:38 2026 by rpki-client