This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/58GFDuus_tVD8dh1HAcQzm6Bd5s.roa File: 58GFDuus_tVD8dh1HAcQzm6Bd5s.roa (raw, json) Hash identifier: pyGHBxobR5Y4/oQZr4EFtkYZAaS4T1/SsoP9evw4DUA= Subject key identifier: E7:C1:85:0E:EB:AC:FE:D5:43:F1:D8:75:1C:07:10:CE:6E:81:77:9B Certificate issuer: /CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Certificate serial: 019B7E38C9F570EF9FB2D1A166DC17A4889C Authority key identifier: DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/58GFDuus_tVD8dh1HAcQzm6Bd5s.roa Signing time: Fri 02 Jan 2026 10:20:09 +0000 ROA not before: Fri 02 Jan 2026 10:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.244.64.0/24 maxlen: 24 185.244.65.0/24 maxlen: 24 185.244.66.0/24 maxlen: 24 185.244.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.mft rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:c9:f5:70:ef:9f:b2:d1:a1:66:dc:17:a4:88:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc8cb4a11cabac204adfb8a5b587e32fee4a1b55 Validity Not Before: Jan 2 10:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c1850eebacfed543f1d8751c0710ce6e81779b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:5c:cc:f9:39:9c:40:51:da:e1:67:68:96: e3:7e:0e:0b:3a:a4:c3:51:55:79:f0:6a:3f:e7:0f: 15:a5:11:49:7d:01:de:22:9e:c4:ae:5d:2e:d7:a0: 51:d9:de:cc:d0:99:6c:a8:2d:35:6a:6e:31:84:67: d7:30:50:b2:99:53:ef:ac:6b:5a:97:8b:8a:01:6a: 8a:1c:ea:cd:c2:27:f9:0a:6a:84:b9:eb:19:2d:ff: 3e:b7:26:b2:a0:9e:c5:ed:4d:c7:31:a4:84:ee:4c: 85:73:f4:42:a0:2d:c5:0e:f9:5c:7d:bf:c7:c0:ed: c9:66:71:02:83:e1:e1:e1:b5:8e:fd:37:6b:23:10: 7e:56:7e:91:9d:81:f8:8f:95:2e:f8:72:5d:cc:3c: 74:09:38:d5:bb:3c:2a:94:37:a2:75:16:aa:1c:a8: 47:a9:cd:82:57:7c:77:eb:e3:90:c5:69:e9:8c:2a: 1f:98:77:3d:6e:a3:20:a6:27:f7:3f:10:4b:6d:60: 1f:86:f2:18:59:e5:96:4c:63:9f:73:c8:fc:b2:94: 73:0c:84:0a:03:3d:f3:30:5d:a5:32:e7:88:86:f8: 19:c7:a2:5d:b3:10:46:f2:bd:85:cb:4c:76:11:b5: 89:bc:63:2c:d7:88:34:ce:f8:a7:6b:c3:3f:cb:d7: 23:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:85:0E:EB:AC:FE:D5:43:F1:D8:75:1C:07:10:CE:6E:81:77:9B X509v3 Authority Key Identifier: keyid:DC:8C:B4:A1:1C:AB:AC:20:4A:DF:B8:A5:B5:87:E3:2F:EE:4A:1B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Iy0oRyrrCBK37iltYfjL-5KG1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/58GFDuus_tVD8dh1HAcQzm6Bd5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0d919f-c0e6-4735-9802-99d5e07bae76/1/3Iy0oRyrrCBK37iltYfjL-5KG1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.244.64.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:83:ab:83:c5:2a:be:21:b9:4d:36:a4:88:41:1c:09:d1:33: 3f:34:cf:00:f7:d6:ff:9a:84:bc:7d:b0:39:fb:2f:42:da:2d: ab:b6:90:ee:68:31:15:05:59:39:7a:44:ca:44:70:e5:18:d5: 06:82:10:c0:67:26:e7:cc:40:81:1f:b1:58:e1:be:9a:bf:de: eb:05:cd:35:76:a1:45:d1:69:49:62:f2:db:69:cd:c2:79:59: 89:d1:7f:43:ad:a5:19:12:57:3f:9d:e8:c5:f4:70:df:9d:49: d3:2c:25:98:b1:f0:00:b2:04:62:b1:6a:8a:67:52:74:a5:43: 12:8a:48:78:45:b3:78:79:04:ec:00:06:32:5e:09:83:23:22: 57:79:63:ce:8b:47:22:be:cd:7e:8c:2e:f0:80:56:94:3d:ef: 21:a1:69:70:d0:a9:45:a4:a5:2b:ad:12:e9:ba:d0:d6:54:d4: 5d:07:ef:cd:bd:0d:6f:0f:c8:70:2f:c6:2c:f8:41:6f:91:14: 51:a8:af:e9:5e:92:ff:f3:4b:14:0a:98:06:91:fa:09:48:87: 90:9e:98:d2:89:eb:88:5e:e7:a8:47:54:96:78:2a:8e:07:58: a8:05:97:39:ef:13:48:31:34:8c:d3:8f:61:02:64:c6:9f:74: 87:ae:68:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OMn1cO+fstGhZtwXpIicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOGNiNGExMWNhYmFjMjA0YWRmYjhhNWI1ODdlMzJmZWU0 YTFiNTUwHhcNMjYwMTAyMTAyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2MxODUwZWViYWNmZWQ1NDNmMWQ4NzUxYzA3MTBjZTZlODE3NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkChczPk5nEBR2uFnaJbjfg4LOqTD UVV58Go/5w8VpRFJfQHeIp7Erl0u16BR2d7M0JlsqC01am4xhGfXMFCymVPvrGta l4uKAWqKHOrNwif5CmqEuesZLf8+tyayoJ7F7U3HMaSE7kyFc/RCoC3FDvlcfb/H wO3JZnECg+Hh4bWO/TdrIxB+Vn6RnYH4j5Uu+HJdzDx0CTjVuzwqlDeidRaqHKhH qc2CV3x36+OQxWnpjCofmHc9bqMgpif3PxBLbWAfhvIYWeWWTGOfc8j8spRzDIQK Az3zMF2lMueIhvgZx6JdsxBG8r2Fy0x2EbWJvGMs14g0zvina8M/y9cjfwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOfBhQ7rrP7VQ/HYdRwHEM5ugXebMB8GA1UdIwQY MBaAFNyMtKEcq6wgSt+4pbWH4y/uShtVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDIt OTlkNWUwN2JhZTc2LzEvNThHRkR1dXNfdFZEOGRoMUhBY1F6bTZCZDVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wZDkxOWYtYzBlNi00NzM1LTk4MDItOTlkNWUwN2JhZTc2 LzEvM0l5MG9SeXJyQ0JLMzdpbHRZZmpMLTVLRzFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufRAMA0G CSqGSIb3DQEBCwUAA4IBAQAeg6uDxSq+IblNNqSIQRwJ0TM/NM8A99b/moS8fbA5 +y9C2i2rtpDuaDEVBVk5ekTKRHDlGNUGghDAZybnzECBH7FY4b6av97rBc01dqFF 0WlJYvLbac3CeVmJ0X9DraUZElc/nejF9HDfnUnTLCWYsfAAsgRisWqKZ1J0pUMS ikh4RbN4eQTsAAYyXgmDIyJXeWPOi0civs1+jC7wgFaUPe8hoWlw0KlFpKUrrRLp utDWVNRdB+/NvQ1vD8hwL8Ys+EFvkRRRqK/pXpL/80sUCpgGkfoJSIeQnpjSieuI XueoR1SWeCqOB1ioBZc57xNIMTSM049hAmTGn3SHrmgZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:35 2026 by rpki-client