This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/G2cdaBqhXgi7RQAazayj_WwNPGY.roa File: G2cdaBqhXgi7RQAazayj_WwNPGY.roa (raw, json) Hash identifier: XbJOe8+5pLE1T6RUVX9hCzpKWaLc4wOKOPNZclQGpTk= Subject key identifier: 1B:67:1D:68:1A:A1:5E:08:BB:45:00:1A:CD:AC:A3:FD:6C:0D:3C:66 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019AFDC931D039396EE937623458E70127CA Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/G2cdaBqhXgi7RQAazayj_WwNPGY.roa Signing time: Mon 08 Dec 2025 11:46:52 +0000 ROA not before: Mon 08 Dec 2025 11:46:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215341 IP address blocks: 2.58.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:c9:31:d0:39:39:6e:e9:37:62:34:58:e7:01:27:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Dec 8 11:46:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b671d681aa15e08bb45001acdaca3fd6c0d3c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:d5:03:fc:a9:b3:ee:ad:6f:d6:6b:b2:13: 10:17:db:e3:98:d6:72:c1:9f:a9:b4:34:71:5f:a9: 10:d0:ed:87:4a:e8:a5:f2:37:c1:e5:2a:00:80:ef: a8:5e:e3:12:58:cb:39:a8:21:6b:64:4c:a2:0f:13: 86:b7:a7:e3:8e:58:5c:4a:68:b3:32:f9:75:57:e2: a4:31:73:13:2b:fd:7d:7a:2e:ed:cf:d8:43:63:68: 51:9b:4e:b5:bf:46:fa:14:c3:8c:2d:65:4a:d0:79: 48:10:e3:d0:bf:00:dc:03:73:8f:f9:b5:08:0b:e9: a8:c4:69:d0:a6:4a:db:df:87:dc:a9:b3:fd:df:da: 6c:71:4f:9e:39:ba:be:15:ac:88:98:aa:72:71:12: 64:08:ca:92:8b:ed:81:43:60:85:83:af:ed:8a:82: e5:e1:1b:9b:f0:d6:0a:eb:2e:d5:aa:23:c2:03:51: 85:bf:4e:5b:66:30:c1:63:b3:5d:b7:98:71:a8:80: 25:a0:18:e0:1c:a3:9b:5c:a7:6c:5c:35:68:0b:73: fc:82:5c:3d:6b:51:ca:4c:a6:9e:3e:a4:a5:be:e2: 33:d0:dd:c7:38:f2:d3:82:11:93:99:f0:19:0b:15: 05:da:10:29:15:6c:0b:ab:06:84:cb:33:22:09:a4: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:1D:68:1A:A1:5E:08:BB:45:00:1A:CD:AC:A3:FD:6C:0D:3C:66 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/G2cdaBqhXgi7RQAazayj_WwNPGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.54.0/24 Signature Algorithm: sha256WithRSAEncryption 55:4f:12:0d:db:ff:04:1a:2d:9a:0a:34:10:92:eb:1a:e0:ec: 94:7f:cf:7b:dd:95:54:ed:03:5e:6a:93:02:d4:03:2b:89:bd: e6:c8:39:a1:56:e2:9c:98:85:b1:fc:82:9f:db:8d:05:3f:f1: eb:9d:58:e9:58:10:8b:4b:78:cb:78:88:09:70:35:46:5e:fe: 0c:2f:3a:e8:3a:03:7a:79:29:35:93:4f:80:32:28:7f:34:40: cb:7a:97:57:94:15:38:d7:3d:81:54:c5:cd:70:06:15:9e:3f: 9c:a3:0a:90:05:f3:d0:fb:e7:89:34:25:2c:fc:d9:90:05:97: 78:6c:a0:36:23:57:1d:08:cc:0c:14:b8:6f:0b:1f:c1:ab:1f: 2e:27:01:ad:6e:12:7a:74:e5:83:74:53:12:bc:e2:7e:04:dc: 48:58:cf:e4:b5:12:0a:c4:ac:46:68:75:4f:25:4c:f8:e2:82: e4:96:e4:bb:f9:44:a7:1a:d7:4c:76:83:36:a6:84:aa:9b:d5: 43:d5:51:3b:10:90:3b:12:da:2d:53:8a:8f:d6:65:74:c7:f6: 14:a6:66:00:1d:88:66:c4:36:db:85:99:52:1b:95:d3:05:5c: 77:71:1d:b1:90:00:17:7e:f7:68:d7:17:b5:c4:26:13:47:95: 9f:58:7e:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr9yTHQOTlu6TdiNFjnASfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjUxMjA4MTE0NjUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjY3MWQ2ODFhYTE1ZTA4YmI0NTAwMWFjZGFjYTNmZDZjMGQzYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup/VA/yps+6tb9ZrshMQF9vjmNZy wZ+ptDRxX6kQ0O2HSuil8jfB5SoAgO+oXuMSWMs5qCFrZEyiDxOGt6fjjlhcSmiz Mvl1V+KkMXMTK/19ei7tz9hDY2hRm061v0b6FMOMLWVK0HlIEOPQvwDcA3OP+bUI C+moxGnQpkrb34fcqbP939pscU+eObq+FayImKpycRJkCMqSi+2BQ2CFg6/tioLl 4Rub8NYK6y7VqiPCA1GFv05bZjDBY7Ndt5hxqIAloBjgHKObXKdsXDVoC3P8glw9 a1HKTKaePqSlvuIz0N3HOPLTghGTmfAZCxUF2hApFWwLqwaEyzMiCaRsLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBtnHWgaoV4Iu0UAGs2so/1sDTxmMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvRzJjZGFCcWhYZ2k3UlFBYXpheWpfV3dOUEdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjo2MA0G CSqGSIb3DQEBCwUAA4IBAQBVTxIN2/8EGi2aCjQQkusa4OyUf8973ZVU7QNeapMC 1AMrib3myDmhVuKcmIWx/IKf240FP/HrnVjpWBCLS3jLeIgJcDVGXv4MLzroOgN6 eSk1k0+AMih/NEDLepdXlBU41z2BVMXNcAYVnj+cowqQBfPQ++eJNCUs/NmQBZd4 bKA2I1cdCMwMFLhvCx/Bqx8uJwGtbhJ6dOWDdFMSvOJ+BNxIWM/ktRIKxKxGaHVP JUz44oLkluS7+USnGtdMdoM2poSqm9VD1VE7EJA7EtotU4qP1mV0x/YUpmYAHYhm xDbbhZlSG5XTBVx3cR2xkAAXfvdo1xe1xCYTR5WfWH49 -----END CERTIFICATE-----Generated at Tue Dec 16 09:20:56 2025 by rpki-client