This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/p22i5NlXphpjpdeMcOJN9-jvrCA.roa File: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (raw, json) Hash identifier: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4= Subject key identifier: A7:6D:A2:E4:D9:57:A6:1A:63:A5:D7:8C:70:E2:4D:F7:E8:EF:AC:20 Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8 Certificate serial: 019B79ED565C06C235E6A680F5D07549CC84 Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/p22i5NlXphpjpdeMcOJN9-jvrCA.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47866 IP address blocks: 93.158.0.0/18 maxlen: 18 93.158.16.0/20 maxlen: 20 93.158.32.0/19 maxlen: 19 93.158.32.0/21 maxlen: 21 93.158.36.0/23 maxlen: 23 185.28.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:56:5c:06:c2:35:e6:a6:80:f5:d0:75:49:cc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8 Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a76da2e4d957a61a63a5d78c70e24df7e8efac20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8f:9b:96:a8:9c:cf:57:72:25:d2:9b:11:84: 6a:02:1c:45:a2:6f:2d:d4:60:e3:fe:13:91:20:ce: 97:b5:58:58:a9:dd:54:f6:36:56:02:75:b3:34:77: 99:b7:77:57:b6:95:1d:c4:0d:6f:51:c1:31:f3:d4: 18:86:c7:0d:32:ce:4c:7e:9c:84:2c:89:26:47:d0: 6d:75:d8:06:3a:ff:49:6a:c9:3c:bf:e7:2c:b5:62: 69:75:c5:a3:fd:f2:cb:2e:fd:63:7a:96:24:93:55: ca:83:9a:27:d6:1e:4b:14:ad:0c:31:33:d3:5b:b1: 2b:3c:9b:a4:e0:04:3b:4e:96:52:a7:c7:06:ce:f8: 5c:a6:08:6a:c9:26:01:a7:73:6b:2b:c6:d8:50:5e: 62:bc:53:8a:49:6a:49:3d:ba:d4:58:96:71:2e:08: 55:17:50:3c:1b:0f:86:2f:86:68:d3:f2:68:a6:c3: 8c:98:6c:ee:5c:e2:05:bf:f8:7a:32:7d:4e:1f:25: 62:5b:a4:a7:99:ef:44:d5:2d:6e:f1:9c:8d:6e:6a: 2f:28:f2:36:55:bc:7d:2e:f5:61:c2:1a:51:c9:b6: a0:22:07:bd:61:69:da:8f:8b:95:46:0a:9d:3b:68: 71:d8:b5:ea:45:db:ce:e1:40:83:6d:7d:e5:b1:e2: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6D:A2:E4:D9:57:A6:1A:63:A5:D7:8C:70:E2:4D:F7:E8:EF:AC:20 X509v3 Authority Key Identifier: keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/p22i5NlXphpjpdeMcOJN9-jvrCA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.158.0.0/18 185.28.28.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:16:b2:4f:05:d0:7b:39:b6:95:28:11:22:59:a7:cb:21:24: bc:aa:c7:17:b6:07:6f:56:1e:f3:19:53:c7:01:90:1e:71:f4: fb:25:01:97:f4:79:72:4a:05:54:11:bf:b4:e5:b4:4e:7b:3a: 3d:0a:58:b1:b0:69:78:fb:10:fa:fb:55:29:2a:49:98:7c:dc: d5:31:ce:1a:75:86:04:cf:9b:21:05:31:3d:2b:9e:92:d9:78: 60:97:59:a9:e0:94:a4:83:50:e4:b6:71:09:5c:2f:6f:e9:47: 1a:c0:ae:c7:c2:91:b3:0c:d2:a8:9d:70:a6:df:36:b0:66:0f: 91:78:08:22:f5:1b:34:89:d1:b6:10:d7:36:c2:d8:e0:3d:2e: d4:26:77:d6:1c:d7:28:88:9c:15:b5:03:48:3b:79:b4:1c:0b: 3e:a0:91:ac:10:43:e0:d1:e6:31:2b:a8:ed:a7:63:0e:94:1d: 42:40:77:f0:68:d0:1e:29:8f:7a:77:f8:fb:84:1a:39:40:71: 3d:e1:bd:1d:05:c6:55:61:36:00:6a:b4:4d:8f:58:d4:03:fb: 08:df:6a:b1:c6:d7:e7:8a:24:cf:d8:a5:31:aa:d7:82:16:f7: 36:52:ca:73:4e:a5:ca:18:25:f9:0e:a7:fe:2e:78:53:d6:4c: 63:e3:2a:40 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57VZcBsI15qaA9dB1ScyEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzQwN2QyZTdiMmZmNGJjZWU2ZWExMGQ0MDg1MmVjZGNi YzY5YjgwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzZkYTJlNGQ5NTdhNjFhNjNhNWQ3OGM3MGUyNGRmN2U4ZWZhYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY+blqicz1dyJdKbEYRqAhxFom8t 1GDj/hORIM6XtVhYqd1U9jZWAnWzNHeZt3dXtpUdxA1vUcEx89QYhscNMs5MfpyE LIkmR9BtddgGOv9Jask8v+cstWJpdcWj/fLLLv1jepYkk1XKg5on1h5LFK0MMTPT W7ErPJuk4AQ7TpZSp8cGzvhcpghqySYBp3NrK8bYUF5ivFOKSWpJPbrUWJZxLghV F1A8Gw+GL4Zo0/JopsOMmGzuXOIFv/h6Mn1OHyViW6Snme9E1S1u8ZyNbmovKPI2 Vbx9LvVhwhpRybagIge9YWnaj4uVRgqdO2hx2LXqRdvO4UCDbX3lseLl4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKdtouTZV6YaY6XXjHDiTffo76wgMB8GA1UdIwQY MBaAFAV0B9Lnsv9LzubqENQIUuzcvGm4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEt MWJlZDJlZTA2NWYwLzEvcDIyaTVObFhwaHBqcGRlTWNPSk45LWp2ckNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85MjlmMWItYjA0Ny00OGJmLWE4ZjEtMWJlZDJlZTA2NWYw LzEvQlhRSDB1ZXlfMHZPNXVvUTFBaFM3Tnk4YWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGXZ4AAwQC uRwcMA0GCSqGSIb3DQEBCwUAA4IBAQBuFrJPBdB7ObaVKBEiWafLISS8qscXtgdv Vh7zGVPHAZAecfT7JQGX9HlySgVUEb+05bROezo9ClixsGl4+xD6+1UpKkmYfNzV Mc4adYYEz5shBTE9K56S2Xhgl1mp4JSkg1DktnEJXC9v6UcawK7HwpGzDNKonXCm 3zawZg+ReAgi9Rs0idG2ENc2wtjgPS7UJnfWHNcoiJwVtQNIO3m0HAs+oJGsEEPg 0eYxK6jtp2MOlB1CQHfwaNAeKY96d/j7hBo5QHE94b0dBcZVYTYAarRNj1jUA/sI 32qxxtfniiTP2KUxqteCFvc2UspzTqXKGCX5Dqf+LnhT1kxj4ypA -----END CERTIFICATE-----Generated at Mon Feb 9 23:41:37 2026 by rpki-client