This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/o2KmTBSx7YAGDylX3itL6SdPUZE.roa File: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (raw, json) Hash identifier: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c= Subject key identifier: A3:62:A6:4C:14:B1:ED:80:06:0F:29:57:DE:2B:4B:E9:27:4F:51:91 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B7E384DC2C6528617EC0A393558AE007C Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/o2KmTBSx7YAGDylX3itL6SdPUZE.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62375 IP address blocks: 158.58.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4d:c2:c6:52:86:17:ec:0a:39:35:58:ae:00:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a362a64c14b1ed80060f2957de2b4be9274f5191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:60:bb:cf:59:85:2e:65:55:28:86:ae:9c:5c: 77:2c:ef:89:fe:7f:74:5d:b8:ff:2b:b5:d5:5c:4e: 92:32:dc:d8:94:9c:5d:f7:2e:e3:68:32:af:95:56: 28:e8:fe:29:97:2d:57:1a:1c:a6:26:f4:57:18:a9: 3c:ff:6e:50:68:7f:fb:e6:cb:b6:b2:20:34:00:c7: 75:5d:64:ac:bd:ca:fe:19:23:f4:01:13:4a:01:fc: 4d:92:1c:d0:c8:e5:1a:8e:de:a7:6a:e8:03:53:b8: 91:95:e5:30:17:85:52:62:2d:dc:ea:14:a5:98:95: b1:e5:00:2f:c5:b2:ac:e3:8c:ff:69:e7:79:68:93: 4a:d1:5b:3f:f5:2c:2b:fe:c9:03:cf:a8:95:85:b9: 19:6c:4a:f6:8c:30:f2:af:0a:07:77:0f:f4:9d:0e: 3a:4b:1d:9b:b3:c2:b6:61:00:14:aa:c5:0e:59:04: 43:e9:c0:60:eb:c2:9b:89:96:b3:c0:7d:e0:80:b2: d8:1d:fd:81:8f:bb:e1:42:30:df:f6:9a:6e:a4:8d: d7:19:7f:b5:2d:f5:1a:0d:d7:e6:e3:0a:68:9c:46: f0:8a:dc:0c:62:01:90:84:47:7d:54:59:e6:72:7b: 0b:fb:e5:20:0d:48:b9:36:40:90:2e:94:34:65:69: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:62:A6:4C:14:B1:ED:80:06:0F:29:57:DE:2B:4B:E9:27:4F:51:91 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/o2KmTBSx7YAGDylX3itL6SdPUZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.58.187.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:90:a0:3d:a2:40:2e:c7:4d:15:a0:2c:2f:ad:2c:b8:7f:a0: 87:99:24:df:a6:65:5b:f7:fb:d7:de:62:a0:99:57:1b:43:f9: 87:09:37:3c:2c:f6:cc:29:1c:b2:37:bf:62:53:74:a1:52:2a: dd:93:e4:be:94:87:99:11:cf:84:ae:d1:f9:0a:32:b8:51:27: a1:12:ad:22:ed:11:56:85:29:de:98:65:1a:06:8d:a0:c5:1f: e8:cc:64:03:a2:77:0a:85:18:5b:ee:a4:c9:5d:6b:01:25:a6: 4b:d8:1a:bf:23:6c:a0:9a:d9:b5:8f:9e:0e:41:50:30:db:a6: ec:17:e7:29:1f:e5:24:fe:b5:1b:98:71:98:94:cd:3c:08:c7: ae:8a:a4:88:1e:6d:2e:0f:64:dd:25:f8:8c:6f:47:f2:8b:1c: 77:30:d7:2f:36:83:06:bc:40:58:38:b2:5c:36:6b:e5:2b:dc: 53:48:8b:d1:ff:cc:56:77:6b:f9:bd:32:be:b6:95:7b:49:9c: 4f:2b:9f:7c:29:14:4e:ce:9b:96:50:76:3f:2b:e9:a0:8f:98: 9e:f7:a7:f1:5b:a9:ca:65:d4:6a:b9:d2:af:68:b5:fe:8f:bb: 1a:b4:2a:97:02:53:36:62:93:a2:9c:11:55:d3:8f:60:16:2d: 21:22:7b:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OE3CxlKGF+wKOTVYrgB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzYyYTY0YzE0YjFlZDgwMDYwZjI5NTdkZTJiNGJlOTI3NGY1MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6WC7z1mFLmVVKIaunFx3LO+J/n90 Xbj/K7XVXE6SMtzYlJxd9y7jaDKvlVYo6P4ply1XGhymJvRXGKk8/25QaH/75su2 siA0AMd1XWSsvcr+GSP0ARNKAfxNkhzQyOUajt6naugDU7iRleUwF4VSYi3c6hSl mJWx5QAvxbKs44z/aed5aJNK0Vs/9Swr/skDz6iVhbkZbEr2jDDyrwoHdw/0nQ46 Sx2bs8K2YQAUqsUOWQRD6cBg68KbiZazwH3ggLLYHf2Bj7vhQjDf9ppupI3XGX+1 LfUaDdfm4wponEbwitwMYgGQhEd9VFnmcnsL++UgDUi5NkCQLpQ0ZWkiawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKNipkwUse2ABg8pV94rS+knT1GRMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvbzJLbVRCU3g3WUFHRHlsWDNpdEw2U2RQVVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjq7MA0G CSqGSIb3DQEBCwUAA4IBAQAdkKA9okAux00VoCwvrSy4f6CHmSTfpmVb9/vX3mKg mVcbQ/mHCTc8LPbMKRyyN79iU3ShUirdk+S+lIeZEc+ErtH5CjK4USehEq0i7RFW hSnemGUaBo2gxR/ozGQDoncKhRhb7qTJXWsBJaZL2Bq/I2ygmtm1j54OQVAw26bs F+cpH+Uk/rUbmHGYlM08CMeuiqSIHm0uD2TdJfiMb0fyixx3MNcvNoMGvEBYOLJc NmvlK9xTSIvR/8xWd2v5vTK+tpV7SZxPK598KRROzpuWUHY/K+mgj5ie96fxW6nK ZdRqudKvaLX+j7satCqXAlM2YpOinBFV049gFi0hInsq -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:10 2026 by rpki-client