This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa File: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (raw, json) Hash identifier: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU= Subject key identifier: BF:D5:79:51:D4:BB:5B:B8:2F:F0:CB:7A:FF:B5:75:23:31:D9:02:23 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 019B7E384CFA4075794545F7A3C307684E2A Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa Signing time: Fri 02 Jan 2026 10:19:37 +0000 ROA not before: Fri 02 Jan 2026 10:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48732 IP address blocks: 158.58.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:4c:fa:40:75:79:45:45:f7:a3:c3:07:68:4e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Jan 2 10:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfd57951d4bb5bb82ff0cb7affb5752331d90223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:94:cc:83:e7:a4:68:ac:a5:29:95:09:94:d8: a8:e4:9d:2e:b8:c3:59:e2:3f:40:af:e2:13:16:6c: d7:27:cb:2b:4b:f5:d5:1c:fa:21:37:3b:1c:c0:f8: f9:ff:c5:c0:d0:b9:84:49:4c:94:65:a3:84:8f:00: 0c:fe:df:8d:56:f9:f1:2e:63:ad:d5:23:41:b7:de: b9:32:6e:4c:d0:5c:0b:a3:34:ef:ba:4a:56:9c:85: f1:7e:97:ae:ee:b2:62:fe:03:eb:cc:78:5d:89:da: b9:70:21:00:60:3c:fd:9d:b2:d2:d3:69:18:36:63: f9:5f:df:fe:65:97:ed:da:a5:c1:a3:bc:ea:83:5f: eb:3e:e7:bd:92:6d:d9:c5:44:09:33:7a:53:bf:de: 96:9c:04:21:30:df:90:69:50:21:35:9d:15:d3:f7: 3d:a5:7f:49:b5:a2:96:e1:65:45:56:56:3d:0b:69: 69:0c:52:34:9c:6b:cd:be:9c:ec:62:fb:67:fe:c4: 48:93:e3:12:d1:7d:5d:ea:e1:b7:85:68:36:30:c1: b3:19:6a:a6:df:38:99:ba:2b:74:62:90:2d:6e:9c: 87:a2:de:c5:9a:54:7e:df:66:c4:4f:f1:4d:63:07: d5:25:47:e7:8e:62:50:58:d8:2f:97:ca:ac:6b:25: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D5:79:51:D4:BB:5B:B8:2F:F0:CB:7A:FF:B5:75:23:31:D9:02:23 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.58.187.0/24 Signature Algorithm: sha256WithRSAEncryption 97:4c:51:66:61:59:75:fd:ec:77:77:8f:00:1b:f7:b5:99:cb: 06:9e:fc:8d:79:e0:18:6d:14:77:7c:0a:85:4e:ed:e7:01:a3: bf:f4:1e:60:37:d2:3e:89:7d:13:e7:8e:57:27:e5:b5:25:f6: 21:b5:67:7c:0c:af:e8:ac:7d:02:89:a5:5e:e3:a0:3d:1b:22: d0:31:32:9e:51:99:19:0f:cb:e4:a8:03:5f:9d:3c:45:8d:ee: 4e:4f:5d:56:71:97:b5:21:b4:b6:8a:2d:7b:93:ae:af:02:e4: d0:6c:49:70:4b:80:e9:96:41:43:30:8b:84:79:a0:80:fe:08: d7:47:eb:a0:a3:df:a0:b0:5f:2d:9d:b7:2b:93:7d:df:ad:d7: fe:6d:3e:19:bd:93:8c:28:3d:d8:0c:96:07:32:2c:db:34:8c: c2:37:cd:25:c6:17:67:3f:7b:a2:a5:0d:d4:7f:c8:a4:18:0b: 83:9e:4d:ed:af:84:35:67:87:7b:88:bc:bd:de:f6:e7:70:96: 9c:09:6e:5b:26:0e:fb:37:a2:3b:4a:b8:d6:76:e6:9f:46:3a: 27:2c:d0:17:ae:19:b4:f0:53:50:80:b6:af:df:94:80:2d:24: 5b:a9:47:41:91:96:c4:7e:a6:16:3a:c6:f8:da:6c:94:83:ea: 12:aa:67:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OEz6QHV5RUX3o8MHaE4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwMTAyMTAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmQ1Nzk1MWQ0YmI1YmI4MmZmMGNiN2FmZmI1NzUyMzMxZDkwMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZTMg+ekaKylKZUJlNio5J0uuMNZ 4j9Ar+ITFmzXJ8srS/XVHPohNzscwPj5/8XA0LmESUyUZaOEjwAM/t+NVvnxLmOt 1SNBt965Mm5M0FwLozTvukpWnIXxfpeu7rJi/gPrzHhdidq5cCEAYDz9nbLS02kY NmP5X9/+ZZft2qXBo7zqg1/rPue9km3ZxUQJM3pTv96WnAQhMN+QaVAhNZ0V0/c9 pX9JtaKW4WVFVlY9C2lpDFI0nGvNvpzsYvtn/sRIk+MS0X1d6uG3hWg2MMGzGWqm 3ziZuit0YpAtbpyHot7FmlR+32bET/FNYwfVJUfnjmJQWNgvl8qsayVrBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/VeVHUu1u4L/DLev+1dSMx2QIjMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdjlWNVVkUzdXN2d2OE10Nl83VjFJekhaQWlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjq7MA0G CSqGSIb3DQEBCwUAA4IBAQCXTFFmYVl1/ex3d48AG/e1mcsGnvyNeeAYbRR3fAqF Tu3nAaO/9B5gN9I+iX0T545XJ+W1JfYhtWd8DK/orH0CiaVe46A9GyLQMTKeUZkZ D8vkqANfnTxFje5OT11WcZe1IbS2ii17k66vAuTQbElwS4DplkFDMIuEeaCA/gjX R+ugo9+gsF8tnbcrk33frdf+bT4ZvZOMKD3YDJYHMizbNIzCN80lxhdnP3uipQ3U f8ikGAuDnk3tr4Q1Z4d7iLy93vbncJacCW5bJg77N6I7SrjWduafRjonLNAXrhm0 8FNQgLav35SALSRbqUdBkZbEfqYWOsb42myUg+oSqmd7 -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:27 2026 by rpki-client