This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/x-8swSoHWXn2gEZTtgRDy-vs_DM.roa File: x-8swSoHWXn2gEZTtgRDy-vs_DM.roa (raw, json) Hash identifier: ylAYgviMfyC3A9eoEgIb+VgNLg1iORRgtmKdI3QPLJg= Subject key identifier: C7:EF:2C:C1:2A:07:59:79:F6:80:46:53:B6:04:43:CB:EB:EC:FC:33 Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236 Certificate serial: 019B7EA734A119D73E6CBE528F2B4BDA80BB Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/x-8swSoHWXn2gEZTtgRDy-vs_DM.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3342 IP address blocks: 92.241.192.0/20 maxlen: 20 92.241.216.0/21 maxlen: 21 157.250.160.0/20 maxlen: 20 170.118.224.0/20 maxlen: 20 178.72.16.0/21 maxlen: 21 185.98.96.0/22 maxlen: 22 185.157.132.0/22 maxlen: 22 185.170.132.0/22 maxlen: 22 209.131.112.0/22 maxlen: 22 212.237.250.0/23 maxlen: 23 217.61.250.0/23 maxlen: 23 2a06:b00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:34:a1:19:d7:3e:6c:be:52:8f:2b:4b:da:80:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74198f7022b9560501db448af60301fa285e9236 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7ef2cc12a075979f6804653b60443cbebecfc33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:8f:d2:f4:dd:c9:28:d9:de:1b:af:4d:97: bd:31:e8:99:9a:ef:39:ae:bd:fc:7a:93:64:4e:4f: a0:a3:27:b6:6f:09:c2:17:44:fa:a6:94:12:d7:75: f3:31:95:d0:eb:01:fe:f2:3f:1b:e9:a2:4c:74:d3: 9a:f0:dc:d8:a0:3b:68:de:80:ec:64:5a:4a:4f:bb: a7:c6:a0:7c:61:4c:d3:ad:ef:b2:d6:af:71:70:0d: 17:b0:1a:02:31:4d:a9:ee:8d:53:92:d2:06:0e:46: 5a:90:12:fd:6c:33:0b:9f:ba:40:93:70:68:50:34: ed:80:c1:27:d2:70:0f:c4:35:dc:a9:f3:7c:08:25: 91:f6:3d:da:b4:df:69:f4:df:73:1d:92:f0:54:86: 94:20:84:eb:16:8d:5f:80:74:15:52:78:4d:fd:15: 35:d7:53:96:69:ba:1c:b6:57:6f:db:be:92:be:23: 0c:de:c8:6c:ac:c2:13:6b:93:97:58:01:f9:c1:26: ab:0e:d3:24:0e:91:85:31:7f:de:01:21:83:ff:01: a6:09:67:21:08:52:81:55:62:46:09:5f:0a:96:3f: e1:6b:90:b0:d4:22:7d:b8:58:0a:3b:c0:59:83:21: 43:d2:21:41:3e:26:9a:5c:66:ca:0b:ad:6e:14:20: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EF:2C:C1:2A:07:59:79:F6:80:46:53:B6:04:43:CB:EB:EC:FC:33 X509v3 Authority Key Identifier: keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/x-8swSoHWXn2gEZTtgRDy-vs_DM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.241.192.0/20 92.241.216.0/21 157.250.160.0/20 170.118.224.0/20 178.72.16.0/21 185.98.96.0/22 185.157.132.0/22 185.170.132.0/22 209.131.112.0/22 212.237.250.0/23 217.61.250.0/23 IPv6: 2a06:b00::/29 Signature Algorithm: sha256WithRSAEncryption 3d:0b:13:36:84:e6:f0:75:da:94:48:6e:5b:0e:f1:80:f5:b6: eb:52:1c:cf:d2:d9:3a:f5:2b:d7:be:07:d5:6b:57:cc:f1:2d: 8a:06:db:6a:d0:cd:9d:06:21:3a:99:07:5b:cd:13:9b:39:e5: f9:6a:31:07:07:74:c5:5f:d6:f1:dc:f3:30:ca:ef:f7:ec:79: 9c:5a:a1:d5:ca:e6:50:33:ec:f5:7e:ec:e4:4e:4d:d8:56:cc: 52:09:d1:83:44:2f:c1:d7:4c:69:40:f7:36:97:8d:a8:21:e0: 67:72:40:4a:fa:ab:0d:ef:5f:df:26:e2:65:1e:fb:5a:0d:fc: 8e:27:c7:16:08:30:ff:4f:d7:92:60:3c:8e:b5:fe:cd:e0:04: d5:52:c5:c7:d3:a0:9f:90:54:86:b1:2c:86:98:61:c0:fd:fb: 00:4e:7a:d8:91:9b:89:58:ce:50:e0:3e:e7:ac:ae:e3:25:a9: aa:0b:09:86:09:cc:fd:fa:70:f7:07:ac:b4:dc:46:65:c8:b8: fb:48:d7:39:74:32:7d:e7:a1:ad:62:07:dc:01:7e:a4:c7:0a: a0:88:4f:10:f0:38:bb:0f:7b:7e:95:f8:03:19:67:aa:28:06: 00:93:33:10:ee:9e:dc:1c:be:e8:79:c2:b8:84:45:3e:8a:42: 30:7d:bc:56 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt+pzShGdc+bL5SjytL2oC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MTk4ZjcwMjJiOTU2MDUwMWRiNDQ4YWY2MDMwMWZhMjg1 ZTkyMzYwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2VmMmNjMTJhMDc1OTc5ZjY4MDQ2NTNiNjA0NDNjYmViZWNmYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo22P0vTdySjZ3huvTZe9MeiZmu85 rr38epNkTk+goye2bwnCF0T6ppQS13XzMZXQ6wH+8j8b6aJMdNOa8NzYoDto3oDs ZFpKT7unxqB8YUzTre+y1q9xcA0XsBoCMU2p7o1TktIGDkZakBL9bDMLn7pAk3Bo UDTtgMEn0nAPxDXcqfN8CCWR9j3atN9p9N9zHZLwVIaUIITrFo1fgHQVUnhN/RU1 11OWaboctldv276SviMM3shsrMITa5OXWAH5wSarDtMkDpGFMX/eASGD/wGmCWch CFKBVWJGCV8Klj/ha5Cw1CJ9uFgKO8BZgyFD0iFBPiaaXGbKC61uFCAMqQIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFMfvLMEqB1l59oBGU7YEQ8vr7PwzMB8GA1UdIwQY MBaAFHQZj3AiuVYFAdtEivYDAfooXpI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWIt NmYxNjM5NjZhZjhiLzEveC04c3dTb0hXWG4yZ0VaVHRnUkR5LXZzX0RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWItNmYxNjM5NjZhZjhi LzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQEXPHAAwQD XPHYAwQEnfqgAwQEqnbgAwQDskgQAwQCuWJgAwQCuZ2EAwQCuaqEAwQC0YNwAwQB 1O36AwQB2T36MA0EAgACMAcDBQMqBgsAMA0GCSqGSIb3DQEBCwUAA4IBAQA9CxM2 hObwddqUSG5bDvGA9bbrUhzP0tk69SvXvgfVa1fM8S2KBttq0M2dBiE6mQdbzROb OeX5ajEHB3TFX9bx3PMwyu/37HmcWqHVyuZQM+z1fuzkTk3YVsxSCdGDRC/B10xp QPc2l42oIeBnckBK+qsN71/fJuJlHvtaDfyOJ8cWCDD/T9eSYDyOtf7N4ATVUsXH 06CfkFSGsSyGmGHA/fsATnrYkZuJWM5Q4D7nrK7jJamqCwmGCcz9+nD3B6y03EZl yLj7SNc5dDJ956GtYgfcAX6kxwqgiE8Q8Di7D3t+lfgDGWeqKAYAkzMQ7p7cHL7o ecK4hEU+ikIwfbxW -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:53 2026 by rpki-client