This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lWb7NfOrikEOnRVqvZi6ngZpLg4.roa File: lWb7NfOrikEOnRVqvZi6ngZpLg4.roa (raw, json) Hash identifier: hpv4IH4AqXlM3Nh1YpxQ2WmZZRLdSkOs+mxkqYELKQ8= Subject key identifier: 95:66:FB:35:F3:AB:8A:41:0E:9D:15:6A:BD:98:BA:9E:06:69:2E:0E Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F85056A3687F3380636841D97CA52FD Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lWb7NfOrikEOnRVqvZi6ngZpLg4.roa Signing time: Fri 02 Jan 2026 16:23:02 +0000 ROA not before: Fri 02 Jan 2026 16:23:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208946 IP address blocks: 93.171.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:05:6a:36:87:f3:38:06:36:84:1d:97:ca:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9566fb35f3ab8a410e9d156abd98ba9e06692e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:94:29:2a:24:41:a2:79:7a:aa:c2:89:7e:ca: 3c:cc:11:cc:ad:a0:79:3b:f3:e2:18:bb:aa:69:a7: 65:fe:0e:8c:29:19:4d:25:39:e3:b8:97:da:9e:6a: e7:b3:3b:39:dc:dc:87:e9:a1:05:0d:63:4d:a1:1a: a5:de:a3:5c:11:9f:3a:80:1c:2e:36:b5:24:9d:31: 5a:bd:21:59:9d:4c:8c:95:0a:11:e4:26:76:b6:c2: ce:25:da:f8:f0:f3:2b:b9:4f:70:4d:31:78:88:2a: af:49:b7:c2:69:04:3e:d3:70:fa:cf:7a:33:3f:9c: a4:7d:7d:a9:3d:9b:9a:c3:4c:f8:1a:75:92:cf:59: 20:59:2e:46:91:bd:80:10:66:02:c3:1e:df:30:51: 28:44:44:8b:ca:7c:05:39:d9:3a:7f:57:97:10:be: 75:8a:e1:7b:06:c5:b5:a6:f7:66:50:55:7d:ec:5a: d6:a6:17:26:bd:ab:02:d7:9d:14:60:54:a9:c2:3d: 20:de:6f:df:40:90:e2:35:a6:01:e8:67:84:70:27: c7:f1:b5:c9:49:db:a2:4b:a0:6e:d4:07:91:2b:84: eb:9f:f5:10:98:6c:e7:e6:73:fe:46:26:80:3b:0f: 2f:2e:53:e8:56:f2:7d:1e:85:15:7c:03:7f:80:e4: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:66:FB:35:F3:AB:8A:41:0E:9D:15:6A:BD:98:BA:9E:06:69:2E:0E X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lWb7NfOrikEOnRVqvZi6ngZpLg4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.158.0/23 Signature Algorithm: sha256WithRSAEncryption 68:3e:23:4f:70:a9:a7:4f:3c:8e:d9:88:8d:cf:93:4c:55:4f: a2:6a:ae:d0:27:94:31:82:67:be:5d:6d:e3:53:6d:92:55:d5: ab:c0:34:13:d8:36:89:ab:02:9a:30:37:ad:ac:2d:c8:d5:4c: 8f:ad:cb:2b:f5:55:85:8b:20:33:9e:95:32:c5:54:cc:d2:61: e9:af:62:07:e4:9d:40:d1:f5:28:85:4b:0c:ef:34:7f:e0:de: ad:0c:55:6d:08:81:26:f1:45:81:45:8b:64:0d:28:ec:84:13: 78:7b:bf:38:cc:28:51:a8:18:8d:eb:b0:78:60:b1:dd:0b:44: f9:4c:17:92:61:94:ae:1d:bd:de:48:6a:90:12:a9:de:53:57: 69:1a:26:23:61:f4:4f:69:d4:1c:51:a9:66:a7:08:1b:3b:69: a9:ac:1c:f3:62:ee:81:c4:c6:4e:1a:fb:ee:4c:a8:bc:6e:d2: e0:96:10:eb:b5:06:ea:80:c6:ac:ad:0f:2f:15:f3:f6:a7:31: 85:31:12:b7:ee:4a:ab:4d:74:39:c0:cd:1a:d4:80:1d:95:00: 07:55:b8:e9:55:c2:f9:81:fb:b0:39:32:39:e5:91:bb:09:55: 3f:c0:c2:31:d4:fd:27:0b:6c:86:3f:bf:d1:df:b3:3f:a8:6e: ef:93:b7:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hQVqNofzOAY2hB2XylL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTY2ZmIzNWYzYWI4YTQxMGU5ZDE1NmFiZDk4YmE5ZTA2NjkyZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75QpKiRBonl6qsKJfso8zBHMraB5 O/PiGLuqaadl/g6MKRlNJTnjuJfanmrnszs53NyH6aEFDWNNoRql3qNcEZ86gBwu NrUknTFavSFZnUyMlQoR5CZ2tsLOJdr48PMruU9wTTF4iCqvSbfCaQQ+03D6z3oz P5ykfX2pPZuaw0z4GnWSz1kgWS5Gkb2AEGYCwx7fMFEoRESLynwFOdk6f1eXEL51 iuF7BsW1pvdmUFV97FrWphcmvasC150UYFSpwj0g3m/fQJDiNaYB6GeEcCfH8bXJ SduiS6Bu1AeRK4Trn/UQmGzn5nP+RiaAOw8vLlPoVvJ9HoUVfAN/gOTDbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJVm+zXzq4pBDp0Var2Yup4GaS4OMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvbFdiN05mT3Jpa0VPblJWcXZaaTZuZ1pwTGc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXaueMA0G CSqGSIb3DQEBCwUAA4IBAQBoPiNPcKmnTzyO2YiNz5NMVU+iaq7QJ5Qxgme+XW3j U22SVdWrwDQT2DaJqwKaMDetrC3I1UyPrcsr9VWFiyAznpUyxVTM0mHpr2IH5J1A 0fUohUsM7zR/4N6tDFVtCIEm8UWBRYtkDSjshBN4e784zChRqBiN67B4YLHdC0T5 TBeSYZSuHb3eSGqQEqneU1dpGiYjYfRPadQcUalmpwgbO2mprBzzYu6BxMZOGvvu TKi8btLglhDrtQbqgMasrQ8vFfP2pzGFMRK37kqrTXQ5wM0a1IAdlQAHVbjpVcL5 gfuwOTI55ZG7CVU/wMIx1P0nC2yGP7/R37M/qG7vk7dA -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:33 2026 by rpki-client