This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/itKqiN2W4QxylppmfujvqNX8d_8.roa File: itKqiN2W4QxylppmfujvqNX8d_8.roa (raw, json) Hash identifier: 9nKxbU67EZr1I9WqH+uk/bvGo4DMW9Z5B1YZzAMeEj4= Subject key identifier: 8A:D2:AA:88:DD:96:E1:0C:72:96:9A:66:7E:E8:EF:A8:D5:FC:77:FF Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84E11E0413CD1C19090F0A6BFC8F5D Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/itKqiN2W4QxylppmfujvqNX8d_8.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61390 IP address blocks: 92.38.33.0/24 maxlen: 24 93.170.108.0/22 maxlen: 24 93.170.180.0/22 maxlen: 24 93.170.232.0/22 maxlen: 24 93.171.40.0/22 maxlen: 24 93.171.182.0/23 maxlen: 24 95.46.116.0/22 maxlen: 24 146.120.22.0/23 maxlen: 24 146.120.48.0/22 maxlen: 24 146.120.120.0/22 maxlen: 24 146.120.236.0/22 maxlen: 24 146.120.252.0/22 maxlen: 24 146.158.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e1:1e:04:13:cd:1c:19:09:0f:0a:6b:fc:8f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ad2aa88dd96e10c72969a667ee8efa8d5fc77ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:ac:b2:77:38:db:2d:e4:94:a4:f0:bb:66: 0a:28:5b:8e:56:67:b3:10:7a:ed:58:b1:7e:d6:95: ca:20:7c:d4:b4:5c:96:58:b3:af:50:7b:d1:7d:72: 62:51:71:5a:74:a8:79:4d:12:05:9f:8f:b7:62:98: 64:f9:2a:f8:f1:c5:be:97:7c:b4:22:3e:3e:dc:62: b1:54:08:c6:9f:60:af:64:de:62:0c:75:c2:3a:e2: 79:c7:53:65:f6:28:00:2c:e1:57:f6:3f:12:2e:6d: ad:66:a9:96:03:a3:18:37:fe:3a:fa:08:12:49:a4: a4:d3:51:a6:36:31:55:40:7a:fd:37:c8:a8:b4:75: 6b:ff:fc:13:75:d0:e9:80:ec:d3:f8:35:9c:83:95: 38:8b:32:c2:30:5d:b9:f8:bd:76:1f:76:50:aa:f5: 23:b1:64:74:f9:de:a5:45:a9:2a:40:e9:ca:a2:11: ec:ec:91:c1:a6:72:15:22:47:71:a9:00:7a:60:fb: 52:fd:e2:08:d9:09:84:09:24:8f:d2:e0:3e:98:f0: e7:da:94:3b:02:d9:42:eb:a2:00:98:79:c4:25:a1: 5a:1b:79:a3:4a:7f:98:0e:00:63:42:e7:e8:3d:b5: 2c:2d:54:81:97:76:80:3d:55:16:08:de:e2:58:04: 27:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:AA:88:DD:96:E1:0C:72:96:9A:66:7E:E8:EF:A8:D5:FC:77:FF X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/itKqiN2W4QxylppmfujvqNX8d_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.38.33.0/24 93.170.108.0/22 93.170.180.0/22 93.170.232.0/22 93.171.40.0/22 93.171.182.0/23 95.46.116.0/22 146.120.22.0/23 146.120.48.0/22 146.120.120.0/22 146.120.236.0/22 146.120.252.0/22 146.158.60.0/22 Signature Algorithm: sha256WithRSAEncryption a5:71:d3:2d:fb:3e:1d:18:a1:4a:51:f9:bb:69:44:9c:3f:b3: da:0a:4b:a0:f2:19:43:b9:99:30:89:bb:7b:1e:dc:0d:c4:fc: d0:46:3d:d1:c3:09:a7:7a:2c:ce:59:28:a6:68:ac:ad:44:7e: 75:ed:84:07:29:32:ba:95:8a:61:dc:f9:0d:aa:45:61:e2:93: cf:25:39:94:00:d1:3f:12:e4:d9:7c:d6:7d:d4:01:13:58:ab: 45:fa:26:88:2b:78:9b:05:2b:e8:d9:90:95:fe:40:6d:7a:1b: d1:cc:84:75:fb:fc:b3:f8:e6:f3:7b:bd:a0:fa:aa:10:de:06: 72:4b:d2:a5:d1:e8:05:f3:34:d8:70:78:1b:11:29:44:62:e2: cc:66:7e:0b:60:4f:f1:c1:98:be:d6:e9:9b:d6:dc:b0:dc:57: 02:47:42:8e:c5:52:e1:df:f3:52:13:1f:58:88:a8:75:72:09: 2b:2d:92:ff:2c:84:a8:5f:f4:d2:fa:59:08:cd:59:eb:d3:66: 74:47:12:d9:99:d6:1d:82:67:2c:71:e1:16:9d:f8:29:62:6e: e0:93:98:85:89:bb:a2:c9:d2:19:a0:2b:6e:ff:6e:83:f7:60: d0:42:7f:69:4b:51:45:7a:ba:22:78:34:43:82:74:c6:0f:0f: 41:71:5b:08 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt/hOEeBBPNHBkJDwpr/I9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWQyYWE4OGRkOTZlMTBjNzI5NjlhNjY3ZWU4ZWZhOGQ1ZmM3N2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/2ssnc42y3klKTwu2YKKFuOVmez EHrtWLF+1pXKIHzUtFyWWLOvUHvRfXJiUXFadKh5TRIFn4+3Yphk+Sr48cW+l3y0 Ij4+3GKxVAjGn2CvZN5iDHXCOuJ5x1Nl9igALOFX9j8SLm2tZqmWA6MYN/46+ggS SaSk01GmNjFVQHr9N8iotHVr//wTddDpgOzT+DWcg5U4izLCMF25+L12H3ZQqvUj sWR0+d6lRakqQOnKohHs7JHBpnIVIkdxqQB6YPtS/eII2QmECSSP0uA+mPDn2pQ7 AtlC66IAmHnEJaFaG3mjSn+YDgBjQufoPbUsLVSBl3aAPVUWCN7iWAQnuwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFIrSqojdluEMcpaaZn7o76jV/Hf/MB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvaXRLcWlOMlc0UXh5bHBwbWZ1anZxTlg4ZF84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAXCYhAwQC XapsAwQCXaq0AwQCXaroAwQCXasoAwQBXau2AwQCXy50AwQBkngWAwQCkngwAwQC knh4AwQCknjsAwQCknj8AwQCkp48MA0GCSqGSIb3DQEBCwUAA4IBAQClcdMt+z4d GKFKUfm7aUScP7PaCkug8hlDuZkwibt7HtwNxPzQRj3RwwmneizOWSimaKytRH51 7YQHKTK6lYph3PkNqkVh4pPPJTmUANE/EuTZfNZ91AETWKtF+iaIK3ibBSvo2ZCV /kBtehvRzIR1+/yz+Obze72g+qoQ3gZyS9Kl0egF8zTYcHgbESlEYuLMZn4LYE/x wZi+1umb1tyw3FcCR0KOxVLh3/NSEx9YiKh1cgkrLZL/LISoX/TS+lkIzVnr02Z0 RxLZmdYdgmcsceEWnfgpYm7gk5iFibuiydIZoCtu/26D92DQQn9pS1FFeroieDRD gnTGDw9BcVsI -----END CERTIFICATE-----Generated at Wed Jan 21 09:54:39 2026 by rpki-client