This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/50kG0qdoh20VGTjAB3YZWLGmuFs.roa File: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (raw, json) Hash identifier: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE= Subject key identifier: E7:49:06:D2:A7:68:87:6D:15:19:38:C0:07:76:19:58:B1:A6:B8:5B Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019B7CEE2A201756943FCD6F9B1BA143B583 Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/50kG0qdoh20VGTjAB3YZWLGmuFs.roa Signing time: Fri 02 Jan 2026 04:19:01 +0000 ROA not before: Fri 02 Jan 2026 04:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 158.94.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:2a:20:17:56:94:3f:cd:6f:9b:1b:a1:43:b5:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Jan 2 04:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e74906d2a768876d151938c007761958b1a6b85b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:77:71:da:0c:ec:97:2e:b4:bd:a5:51:e8:bf: 29:e2:aa:82:69:c1:d5:d5:2f:00:eb:c7:13:af:15: 8e:4c:28:82:eb:96:83:59:b8:46:3b:38:88:5b:00: 39:ca:48:b9:06:c1:3f:5d:dc:34:a0:5f:8c:7f:30: 11:e0:c3:bc:21:34:61:61:c5:bc:79:75:36:3c:b1: 2b:f7:9c:a0:de:97:75:f9:e5:f1:57:70:15:ca:7f: b0:5f:ae:8f:52:e1:80:d2:b8:bf:96:89:a2:be:26: 59:36:b7:a9:ca:66:c6:2b:c4:da:4a:53:fb:02:26: 0d:39:72:2c:a1:5c:8a:e2:1c:93:a2:c4:39:56:f6: 11:a2:a6:ad:d5:6e:4d:bb:4a:37:de:de:68:65:91: 33:13:b8:63:d4:fd:aa:af:39:2c:93:2a:8d:40:51: 56:6b:a7:a7:47:0e:2c:25:e2:41:0a:6a:bc:fb:98: 88:50:7f:fb:23:c3:2a:7c:22:68:ee:9e:62:7a:33: d3:9f:a9:e4:99:3a:56:89:38:8e:43:a2:31:d8:04: 20:2e:7b:f4:d7:2d:5a:73:c7:7d:47:dd:75:f2:1c: ad:32:63:9b:5f:7e:15:d0:f7:98:e9:cb:fe:7f:26: 9c:ff:48:99:e4:15:5d:e3:29:cd:6e:6a:56:6f:1e: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:49:06:D2:A7:68:87:6D:15:19:38:C0:07:76:19:58:B1:A6:B8:5B X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/50kG0qdoh20VGTjAB3YZWLGmuFs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.170.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:24:5a:5a:89:80:8e:82:d9:32:2a:cf:76:2d:ee:c7:20:a1: 1f:09:a9:eb:88:87:a1:d3:aa:9f:f9:d4:b0:3a:79:94:26:a5: 5f:47:f6:b8:b5:8f:80:6d:dc:71:62:ce:fe:2c:f7:bd:8f:c7: 54:35:14:68:57:48:99:a6:53:ce:a1:46:10:77:41:93:33:b3: a8:ac:57:6c:11:23:1f:a6:96:03:62:e6:17:64:bc:b5:3b:75: 1e:9e:83:a6:ba:b5:37:ee:bc:5e:18:b1:c9:d0:0d:6a:e8:0a: e0:8a:dd:15:56:3f:1d:ff:b8:0b:55:26:d9:63:ae:43:41:0d: a7:ce:5d:bc:bd:95:b1:5e:cc:4b:f5:7a:7f:91:91:40:98:01: a7:80:4d:0f:4d:f9:c3:a5:7a:9d:a9:8e:46:8b:79:61:b8:62: 66:4c:be:54:a3:4d:16:7a:2e:61:25:08:b2:6b:a0:d0:5a:ef: 70:c2:ed:a2:8e:eb:5e:af:97:81:4c:cb:e0:ce:f2:85:4d:5d: 9f:27:85:b3:79:0d:60:6c:9e:c3:7a:a7:34:de:31:68:61:c5: 3d:c7:76:51:a7:d9:b6:a0:c3:f4:30:f9:77:6b:ce:5f:cc:d0: 8c:02:aa:28:b2:e5:f4:7d:3a:23:00:32:d3:ba:9f:80:6c:e7: 24:c0:2b:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87iogF1aUP81vmxuhQ7WDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjYwMTAyMDQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzQ5MDZkMmE3Njg4NzZkMTUxOTM4YzAwNzc2MTk1OGIxYTZiODViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxndx2gzsly60vaVR6L8p4qqCacHV 1S8A68cTrxWOTCiC65aDWbhGOziIWwA5yki5BsE/Xdw0oF+MfzAR4MO8ITRhYcW8 eXU2PLEr95yg3pd1+eXxV3AVyn+wX66PUuGA0ri/lomiviZZNrepymbGK8TaSlP7 AiYNOXIsoVyK4hyTosQ5VvYRoqat1W5Nu0o33t5oZZEzE7hj1P2qrzkskyqNQFFW a6enRw4sJeJBCmq8+5iIUH/7I8MqfCJo7p5iejPTn6nkmTpWiTiOQ6Ix2AQgLnv0 1y1ac8d9R9118hytMmObX34V0PeY6cv+fyac/0iZ5BVd4ynNbmpWbx6qyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOdJBtKnaIdtFRk4wAd2GVixprhbMB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvNTBrRzBxZG9oMjBWR1RqQUIzWVpXTEdtdUZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl6qMA0G CSqGSIb3DQEBCwUAA4IBAQBeJFpaiYCOgtkyKs92Le7HIKEfCanriIeh06qf+dSw OnmUJqVfR/a4tY+AbdxxYs7+LPe9j8dUNRRoV0iZplPOoUYQd0GTM7OorFdsESMf ppYDYuYXZLy1O3UenoOmurU37rxeGLHJ0A1q6Argit0VVj8d/7gLVSbZY65DQQ2n zl28vZWxXsxL9Xp/kZFAmAGngE0PTfnDpXqdqY5Gi3lhuGJmTL5Uo00Wei5hJQiy a6DQWu9wwu2ijuter5eBTMvgzvKFTV2fJ4WzeQ1gbJ7Deqc03jFoYcU9x3ZRp9m2 oMP0MPl3a85fzNCMAqoosuX0fTojADLTup+AbOckwCvZ -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:59 2026 by rpki-client