This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/24BGrstatddE0NyJ9qN4s0D1NFI.roa File: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (raw, json) Hash identifier: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w= Subject key identifier: DB:80:46:AE:CB:5A:B5:D7:44:D0:DC:89:F6:A3:78:B3:40:F5:34:52 Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0 Certificate serial: 019B7C1269616FF6C653E014B8CE7698521A Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/24BGrstatddE0NyJ9qN4s0D1NFI.roa Signing time: Fri 02 Jan 2026 00:18:59 +0000 ROA not before: Fri 02 Jan 2026 00:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15935 IP address blocks: 193.228.234.0/24 maxlen: 24 2001:67c:1314::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:69:61:6f:f6:c6:53:e0:14:b8:ce:76:98:52:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0 Validity Not Before: Jan 2 00:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db8046aecb5ab5d744d0dc89f6a378b340f53452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:1c:2e:a5:dd:82:b7:06:ba:0b:6c:8b:ef: c2:38:4c:fb:ab:a0:b2:91:ef:b3:39:85:a4:5a:54: 4c:70:f8:13:e2:c7:51:17:a6:25:b0:9c:57:d8:e3: 53:63:60:15:a8:fc:96:9f:3d:1e:90:54:e6:bd:3d: d6:e8:b8:b0:47:22:98:26:e5:79:4b:6e:3b:7e:56: 6f:29:0a:10:e8:ff:f8:9d:43:2c:47:89:78:f3:a2: 8d:71:77:b1:4b:23:e0:14:c6:bb:d0:d4:46:8e:0e: 04:dc:48:d8:c8:26:4e:88:2f:4e:ed:27:de:d2:6e: 50:a0:39:01:f0:d3:2c:2e:5b:e8:3f:79:77:32:8a: 6c:a1:25:dc:83:16:b6:06:5a:90:65:2b:a1:50:99: 6f:4d:5c:30:80:1b:c0:c3:6f:19:92:07:be:ea:42: ee:c2:ce:01:14:3e:11:c6:d1:ac:d6:62:66:d7:2f: 70:5b:6f:4c:dd:89:fb:b8:38:b7:1c:b3:21:9a:f4: c3:3f:80:d4:90:e8:14:31:b1:ee:89:aa:da:fe:94: a6:e3:07:8d:69:a3:a9:70:24:c9:f7:a0:c1:05:f9: d1:dc:f8:b2:de:8c:49:fc:cf:03:48:69:98:bf:b4: 70:5a:f6:f0:ba:52:f9:10:bc:c0:48:a3:3d:4a:11: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:80:46:AE:CB:5A:B5:D7:44:D0:DC:89:F6:A3:78:B3:40:F5:34:52 X509v3 Authority Key Identifier: keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/24BGrstatddE0NyJ9qN4s0D1NFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.228.234.0/24 IPv6: 2001:67c:1314::/48 Signature Algorithm: sha256WithRSAEncryption 01:76:b7:3c:0a:bd:9a:40:bf:6a:5d:87:b9:2e:f2:ca:b2:cb: ee:47:6b:9c:0b:50:b0:21:9e:73:34:5a:70:ca:4f:27:b5:24: c0:40:63:ae:3e:1e:0e:35:89:c9:3d:88:b9:ce:a1:84:38:c5: 88:ab:cd:90:84:12:2e:5a:9c:b7:3d:eb:ac:fe:95:e9:4d:b0: c4:0f:d1:08:e3:ee:a6:86:98:58:c5:7a:2c:64:ae:68:25:b7: d5:77:81:34:07:c7:e1:08:c4:d5:08:66:1f:b7:28:54:ad:ff: eb:d3:9f:62:42:40:68:64:f7:bb:50:ec:02:b9:4c:a4:a2:4c: 68:21:ef:5f:7b:65:eb:62:ac:c8:d7:9b:67:9a:5c:d2:fd:b0: 39:17:12:dc:d6:6e:ca:ba:26:ec:2f:7d:87:d8:17:a0:38:2c: 97:5c:90:f5:33:91:68:4a:fc:8b:74:50:86:c4:ab:6c:a7:90: b7:da:d1:d2:de:e1:81:b5:7e:ed:3d:7b:05:0b:5a:6b:43:58: fd:06:32:4e:8f:8f:2a:52:73:2c:79:f1:13:6e:ab:ae:7e:6a: 25:e9:71:3b:52:4f:f1:6b:92:8f:00:32:61:0b:1e:41:48:1b: 1b:1a:ec:8f:e4:aa:36:00:3d:67:73:47:05:fa:df:c7:6d:61: 04:14:61:15 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Emlhb/bGU+AUuM52mFIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz NDg5YjAwHhcNMjYwMTAyMDAxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjgwNDZhZWNiNWFiNWQ3NDRkMGRjODlmNmEzNzhiMzQwZjUzNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqQcLqXdgrcGugtsi+/COEz7q6Cy ke+zOYWkWlRMcPgT4sdRF6YlsJxX2ONTY2AVqPyWnz0ekFTmvT3W6LiwRyKYJuV5 S247flZvKQoQ6P/4nUMsR4l486KNcXexSyPgFMa70NRGjg4E3EjYyCZOiC9O7Sfe 0m5QoDkB8NMsLlvoP3l3MopsoSXcgxa2BlqQZSuhUJlvTVwwgBvAw28Zkge+6kLu ws4BFD4RxtGs1mJm1y9wW29M3Yn7uDi3HLMhmvTDP4DUkOgUMbHuiara/pSm4weN aaOpcCTJ96DBBfnR3Piy3oxJ/M8DSGmYv7RwWvbwulL5ELzASKM9ShGRlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNuARq7LWrXXRNDcifajeLNA9TRSMB8GA1UdIwQY MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt MDk4ZjdjNWZkOTc1LzEvMjRCR3JzdGF0ZGRFME55SjlxTjRzMEQxTkZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1 LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAweTqMA8E AgACMAkDBwAgAQZ8ExQwDQYJKoZIhvcNAQELBQADggEBAAF2tzwKvZpAv2pdh7ku 8sqyy+5Ha5wLULAhnnM0WnDKTye1JMBAY64+Hg41ick9iLnOoYQ4xYirzZCEEi5a nLc966z+lelNsMQP0Qjj7qaGmFjFeixkrmglt9V3gTQHx+EIxNUIZh+3KFSt/+vT n2JCQGhk97tQ7AK5TKSiTGgh7197ZetirMjXm2eaXNL9sDkXEtzWbsq6JuwvfYfY F6A4LJdckPUzkWhK/It0UIbEq2ynkLfa0dLe4YG1fu09ewULWmtDWP0GMk6PjypS cyx58RNuq65+aiXpcTtST/Frko8AMmELHkFIGxsa7I/kqjYAPWdzRwX638dtYQQU YRU= -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:10 2026 by rpki-client