This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yzdeoFsf0ctq7gTA6rg0jC-Iln4.roa File: yzdeoFsf0ctq7gTA6rg0jC-Iln4.roa (raw, json) Hash identifier: 6jVsKo2z+r49KVBD3OA5UTIahVfHKqeveclQ3hqMUdY= Subject key identifier: CB:37:5E:A0:5B:1F:D1:CB:6A:EE:04:C0:EA:B8:34:8C:2F:88:96:7E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C8BC820F7C2493D9EBC70FFA3101 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yzdeoFsf0ctq7gTA6rg0jC-Iln4.roa Signing time: Fri 02 Jan 2026 16:22:47 +0000 ROA not before: Fri 02 Jan 2026 16:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57197 IP address blocks: 93.170.44.0/22 maxlen: 24 93.170.90.0/23 maxlen: 24 93.171.128.0/22 maxlen: 24 93.171.188.0/22 maxlen: 24 95.47.122.0/23 maxlen: 24 146.120.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c8:bc:82:0f:7c:24:93:d9:eb:c7:0f:fa:31:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb375ea05b1fd1cb6aee04c0eab8348c2f88967e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:94:b9:f1:55:9a:9c:e5:66:9b:71:85:3a: 8a:9b:4b:39:b6:32:2f:45:9d:d1:55:25:55:c4:c6: 7d:6f:03:73:d6:6e:78:31:74:94:5c:73:92:30:ff: d5:b8:ac:c7:6d:c4:2f:f7:1e:81:41:8e:0a:c6:8e: e1:cf:00:35:56:f6:5b:68:42:6c:fd:d2:76:bc:ec: 63:83:9c:56:42:29:f7:29:c2:de:93:10:78:50:d9: 37:69:b8:17:fa:7f:52:90:26:1e:03:51:48:d2:ae: fb:a3:ff:42:dd:0b:72:fe:12:77:a2:6b:99:98:f5: af:07:d4:70:53:80:1d:72:27:42:e4:ed:dd:3b:01: c8:c2:d3:6a:00:05:e9:de:42:24:dd:1c:21:86:af: 98:0c:05:23:ea:e6:70:53:1c:e4:95:50:de:ff:a3: b5:99:e7:24:d6:fd:93:a5:53:5d:94:35:9e:7d:42: 3c:85:f9:3c:1d:af:32:36:37:8f:54:33:1a:1b:c9: 5e:f3:1c:6f:f8:a2:46:3f:39:3e:53:a4:a9:76:db: 4a:43:02:fd:5b:e2:f0:ad:b8:45:71:75:04:39:f8: b6:f7:b1:da:bd:70:94:c5:2f:43:db:6f:a8:89:2e: ba:d9:d6:2b:14:3d:7d:fa:10:0d:7f:78:69:fd:63: e1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:37:5E:A0:5B:1F:D1:CB:6A:EE:04:C0:EA:B8:34:8C:2F:88:96:7E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/yzdeoFsf0ctq7gTA6rg0jC-Iln4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.170.44.0/22 93.170.90.0/23 93.171.128.0/22 93.171.188.0/22 95.47.122.0/23 146.120.244.0/24 Signature Algorithm: sha256WithRSAEncryption 69:57:56:7a:24:77:d7:8d:f6:ed:34:03:c8:3c:78:d0:8c:ce: 33:69:55:f0:2c:20:bf:d8:84:39:c3:8d:da:ec:40:3b:8b:9f: 0f:61:78:43:0d:d5:b9:2a:4b:39:6f:69:60:7a:a9:2a:ce:a2: ea:70:88:e4:76:ee:9f:68:90:08:4c:80:3f:57:c4:7a:fe:a3: 3d:6f:19:5b:b1:4d:7a:d5:8f:c1:a5:2d:2b:ba:df:13:90:4b: b1:f4:91:95:9b:88:2c:b5:1b:45:f9:96:6b:c4:0a:35:51:40: e7:1a:ef:34:5a:97:89:84:99:2e:75:c5:70:11:d2:16:e7:f2: 7c:cb:aa:8a:7d:e6:37:04:48:05:08:9f:f3:0d:ba:4a:38:90: 98:40:8e:ec:20:fa:1d:f4:ac:16:f4:fe:cb:67:e3:c2:ef:48: 39:7e:9e:16:ee:9e:50:1d:ec:23:38:87:8f:62:71:14:80:eb: f5:5c:1e:51:1f:22:3f:59:34:fc:6f:14:47:a7:a2:b9:ab:b1: d7:eb:d2:32:54:33:85:1d:32:52:cd:ad:cc:50:90:e5:7e:ae: 11:98:34:66:82:37:55:48:c5:3f:1b:f8:52:5b:31:e6:e1:6c: 45:87:6a:c3:bf:5c:c1:fe:7b:87:57:23:88:0f:41:9b:72:5a: ed:c7:50:0c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hMi8gg98JJPZ68cP+jEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjM3NWVhMDViMWZkMWNiNmFlZTA0YzBlYWI4MzQ4YzJmODg5NjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1qUufFVmpzlZptxhTqKm0s5tjIv RZ3RVSVVxMZ9bwNz1m54MXSUXHOSMP/VuKzHbcQv9x6BQY4Kxo7hzwA1VvZbaEJs /dJ2vOxjg5xWQin3KcLekxB4UNk3abgX+n9SkCYeA1FI0q77o/9C3Qty/hJ3omuZ mPWvB9RwU4AdcidC5O3dOwHIwtNqAAXp3kIk3Rwhhq+YDAUj6uZwUxzklVDe/6O1 meck1v2TpVNdlDWefUI8hfk8Ha8yNjePVDMaG8le8xxv+KJGPzk+U6SpdttKQwL9 W+LwrbhFcXUEOfi297HavXCUxS9D22+oiS662dYrFD19+hANf3hp/WPhgQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFMs3XqBbH9HLau4EwOq4NIwviJZ+MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEveXpkZW9Gc2YwY3RxN2dUQTZyZzBqQy1JbG40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCXaosAwQB XapaAwQCXauAAwQCXau8AwQBXy96AwQAknj0MA0GCSqGSIb3DQEBCwUAA4IBAQBp V1Z6JHfXjfbtNAPIPHjQjM4zaVXwLCC/2IQ5w43a7EA7i58PYXhDDdW5Kks5b2lg eqkqzqLqcIjkdu6faJAITIA/V8R6/qM9bxlbsU161Y/BpS0rut8TkEux9JGVm4gs tRtF+ZZrxAo1UUDnGu80WpeJhJkudcVwEdIW5/J8y6qKfeY3BEgFCJ/zDbpKOJCY QI7sIPod9KwW9P7LZ+PC70g5fp4W7p5QHewjOIePYnEUgOv1XB5RHyI/WTT8bxRH p6K5q7HX69IyVDOFHTJSza3MUJDlfq4RmDRmgjdVSMU/G/hSWzHm4WxFh2rDv1zB /nuHVyOID0Gbclrtx1AM -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:29 2026 by rpki-client