This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k4bapB3mTv3UWY96p1yiwbuVt2A.roa File: k4bapB3mTv3UWY96p1yiwbuVt2A.roa (raw, json) Hash identifier: sywT/6iVAkYq+oGVhMwNl9PdBMq86JJD/FEnQlGGZjI= Subject key identifier: 93:86:DA:A4:1D:E6:4E:FD:D4:59:8F:7A:A7:5C:A2:C1:BB:95:B7:60 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8506CC19D2EBD31494FE12D1622B38 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k4bapB3mTv3UWY96p1yiwbuVt2A.roa Signing time: Fri 02 Jan 2026 16:23:03 +0000 ROA not before: Fri 02 Jan 2026 16:23:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209229 IP address blocks: 92.253.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:06:cc:19:d2:eb:d3:14:94:fe:12:d1:62:2b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9386daa41de64efdd4598f7aa75ca2c1bb95b760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d3:71:96:c4:28:61:7d:13:11:00:48:6e:17: 8e:63:8d:37:d9:9f:eb:63:b8:f1:58:e1:3c:2f:6c: a1:79:ef:d1:75:6f:ac:a0:7f:2d:aa:bb:79:4f:86: fb:ad:af:af:d6:93:75:65:ca:c6:83:30:dd:34:23: 8c:f7:67:60:20:6a:ff:c1:6a:59:7d:6b:7a:e1:55: ca:dd:71:52:69:00:71:fa:5c:8a:f0:3f:8e:f8:11: fa:ff:eb:26:21:4d:2a:44:b6:ea:a6:ff:0c:97:c1: 2a:ed:fa:ea:d9:39:53:45:00:32:a4:a3:72:e9:ea: 99:13:25:b3:03:f8:9c:68:ec:ae:2a:43:8e:04:d4: ca:cb:00:79:d9:70:3b:18:79:16:ed:e9:2f:28:91: 25:7c:b9:55:cf:6b:e1:77:2c:af:76:03:7e:ed:d2: 26:13:55:5a:b9:8d:33:cb:04:7e:d5:ee:2c:f2:da: a5:e0:91:1a:0d:5d:14:70:88:e4:b3:1c:54:bd:75: d7:10:32:e8:74:da:e7:55:07:d6:de:8f:ce:5a:26: f3:19:71:f9:01:7f:82:41:b4:02:2b:c5:66:46:43: 51:b4:95:e7:89:cb:48:16:45:45:55:a5:a1:d0:e8: 7b:4e:e2:26:73:c7:85:61:4e:9e:96:86:c7:1f:e6: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:86:DA:A4:1D:E6:4E:FD:D4:59:8F:7A:A7:5C:A2:C1:BB:95:B7:60 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/k4bapB3mTv3UWY96p1yiwbuVt2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.253.233.0/24 Signature Algorithm: sha256WithRSAEncryption 32:ff:6c:84:4d:63:da:d8:b9:3f:b4:8a:7d:70:6d:8e:cf:23: 8d:48:af:8b:72:2f:29:cf:24:71:51:da:d9:4f:7b:e3:a7:bb: b9:a8:2c:62:c1:e6:fb:ca:6a:8f:86:6d:dd:93:0a:03:cc:18: 76:df:fb:b4:ad:d6:91:90:78:13:09:71:90:4e:b0:9b:96:ab: b4:2a:d0:1a:75:54:ec:4f:ae:34:7d:70:03:c1:ba:a0:2b:25: 9e:59:ed:97:4b:9a:f6:00:83:8b:a0:3b:c5:06:14:59:27:ba: 30:5b:3b:fb:8d:9b:ff:59:34:f8:a8:95:04:db:13:c7:25:19: bd:7f:69:83:b3:a9:f4:b9:58:51:90:9f:02:b9:f1:50:04:37: 35:c9:2e:3d:43:2b:4e:c6:5e:63:fa:ba:71:0d:0a:b0:1a:1a: 78:5e:ff:e2:64:b1:73:a1:25:00:32:2b:53:1c:ed:ff:ef:99: 2f:c8:e8:9a:b4:1b:6e:db:4b:11:16:78:7b:03:1c:26:8d:b4: 36:3c:69:04:c2:10:be:99:25:3e:aa:51:c0:6e:12:fa:0a:3f: 85:27:b9:0e:8a:2f:b4:30:e3:16:99:8a:6b:b9:3a:07:74:2d: 74:5a:61:7c:7c:1b:b7:5a:64:ae:75:a3:1d:35:e2:c5:10:14: fb:12:bd:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQbMGdLr0xSU/hLRYis4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzg2ZGFhNDFkZTY0ZWZkZDQ1OThmN2FhNzVjYTJjMWJiOTViNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNNxlsQoYX0TEQBIbheOY4032Z/r Y7jxWOE8L2yhee/RdW+soH8tqrt5T4b7ra+v1pN1ZcrGgzDdNCOM92dgIGr/wWpZ fWt64VXK3XFSaQBx+lyK8D+O+BH6/+smIU0qRLbqpv8Ml8Eq7frq2TlTRQAypKNy 6eqZEyWzA/icaOyuKkOOBNTKywB52XA7GHkW7ekvKJElfLlVz2vhdyyvdgN+7dIm E1VauY0zywR+1e4s8tql4JEaDV0UcIjksxxUvXXXEDLodNrnVQfW3o/OWibzGXH5 AX+CQbQCK8VmRkNRtJXnictIFkVFVaWh0Oh7TuImc8eFYU6elobHH+Zy/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJOG2qQd5k791FmPeqdcosG7lbdgMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvazRiYXBCM21UdjNVV1k5NnAxeWl3YnVWdDJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXP3pMA0G CSqGSIb3DQEBCwUAA4IBAQAy/2yETWPa2Lk/tIp9cG2OzyONSK+Lci8pzyRxUdrZ T3vjp7u5qCxiweb7ymqPhm3dkwoDzBh23/u0rdaRkHgTCXGQTrCblqu0KtAadVTs T640fXADwbqgKyWeWe2XS5r2AIOLoDvFBhRZJ7owWzv7jZv/WTT4qJUE2xPHJRm9 f2mDs6n0uVhRkJ8CufFQBDc1yS49QytOxl5j+rpxDQqwGhp4Xv/iZLFzoSUAMitT HO3/75kvyOiatBtu20sRFnh7AxwmjbQ2PGkEwhC+mSU+qlHAbhL6Cj+FJ7kOii+0 MOMWmYpruToHdC10WmF8fBu3WmSudaMdNeLFEBT7Er1N -----END CERTIFICATE-----Generated at Mon Jan 26 08:04:23 2026 by rpki-client