This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/58JHZYwChQxy5A0DEGSJKm5qgGY.roa File: 58JHZYwChQxy5A0DEGSJKm5qgGY.roa (raw, json) Hash identifier: xeMISReSvUH9kHX33+O3dRk8u4xWQHey/QlYUL5cwIs= Subject key identifier: E7:C2:47:65:8C:02:85:0C:72:E4:0D:03:10:64:89:2A:6E:6A:80:66 Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Certificate serial: 019A79E367E59BC603A6988AE5D7387FB243 Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/58JHZYwChQxy5A0DEGSJKm5qgGY.roa Signing time: Wed 12 Nov 2025 21:05:37 +0000 ROA not before: Wed 12 Nov 2025 21:05:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3209 IP address blocks: 193.97.184.0/24 maxlen: 24 193.97.185.0/24 maxlen: 24 193.97.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:e3:67:e5:9b:c6:03:a6:98:8a:e5:d7:38:7f:b2:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Validity Not Before: Nov 12 21:05:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e7c247658c02850c72e40d031064892a6e6a8066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:17:aa:25:7b:90:58:44:47:28:db:95:3b: 54:e0:01:25:0d:54:25:d5:99:eb:42:b0:b3:f0:36: 50:53:24:9a:46:59:13:19:4b:20:48:bc:51:3b:ca: 3c:eb:d5:7c:09:f0:88:4e:e6:42:fa:7d:6c:6f:51: 7f:12:7e:90:fc:f2:87:ff:4c:e9:7e:ee:53:ca:17: bd:49:a6:6e:5b:92:84:c5:24:c7:76:2c:31:24:6e: 99:75:3f:76:eb:b6:27:41:bb:6a:65:a7:69:7d:66: ae:f4:65:aa:18:a3:57:2f:50:09:6b:04:1f:05:18: d7:50:08:fc:15:b6:18:83:ec:42:f0:ea:28:29:c1: 6f:b1:5e:f4:ee:eb:af:bf:de:1d:0c:23:e7:49:de: 4a:90:d5:1d:00:bf:24:d2:22:24:6c:95:e4:10:75: 94:76:03:ac:24:6d:03:40:80:ee:4a:45:79:c5:60: bc:dd:b9:c9:a4:75:0f:90:9e:9a:2a:b3:9b:7a:2e: 68:0b:84:d7:f3:9f:3c:77:ce:88:7f:bd:bc:ba:7b: e5:81:e0:0f:31:65:39:c1:e1:6f:c6:cc:90:9d:2c: 99:82:ae:29:0a:35:8c:8c:95:97:b9:6e:ee:84:7c: b3:80:ad:6c:f6:c2:ee:2d:f1:83:24:24:9e:2d:d1: 6a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:47:65:8C:02:85:0C:72:E4:0D:03:10:64:89:2A:6E:6A:80:66 X509v3 Authority Key Identifier: keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/58JHZYwChQxy5A0DEGSJKm5qgGY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.97.184.0-193.97.186.255 Signature Algorithm: sha256WithRSAEncryption 03:65:0d:c4:11:f7:d8:9c:22:6c:22:1c:05:17:cd:34:1a:ef: 29:4e:c2:1a:b4:b5:56:36:c4:33:06:5d:34:a1:eb:b1:49:e8: 60:c7:07:1c:43:bf:7a:8c:cc:02:47:a2:eb:f5:7d:92:9c:a9: 5d:40:13:a3:c5:b5:d6:e0:4a:be:85:19:6d:e4:77:7f:6d:1a: cf:f9:60:68:1a:51:fa:cd:30:b8:89:3e:14:7d:84:00:56:6a: ff:d0:4c:39:ac:48:9d:5a:a7:2b:b1:2b:5c:ef:96:16:7c:ff: ba:10:d3:f4:fa:87:5c:10:ce:6f:96:b1:66:c8:df:0a:46:99: 1a:eb:61:10:b3:e7:d6:b6:a0:0f:08:5c:b9:97:d0:fa:1e:4c: aa:5f:5e:0f:48:87:8a:fa:41:94:bf:d0:cc:29:84:06:4a:b1: 6c:0b:d0:48:6d:48:e9:a3:03:9a:fd:d8:1a:bf:33:b2:60:fd: f0:5e:ef:dd:d8:e5:f5:5b:a8:19:1f:29:f7:5a:ce:fe:fc:d9: 3e:db:62:c2:f4:78:38:82:18:2c:be:e3:71:d7:99:41:35:b0: 6d:a6:83:bf:a0:b6:f8:83:7a:6c:3f:da:92:00:24:52:ab:c9: 50:3d:7f:7c:25:53:e5:24:cb:1e:c8:50:c2:65:80:6f:97:75: ea:19:d8:35 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZp542flm8YDppiK5dc4f7JDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1 Njc0YzUwHhcNMjUxMTEyMjEwNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2MyNDc2NThjMDI4NTBjNzJlNDBkMDMxMDY0ODkyYTZlNmE4MDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYIXqiV7kFhERyjblTtU4AElDVQl 1ZnrQrCz8DZQUySaRlkTGUsgSLxRO8o869V8CfCITuZC+n1sb1F/En6Q/PKH/0zp fu5Tyhe9SaZuW5KExSTHdiwxJG6ZdT9267YnQbtqZadpfWau9GWqGKNXL1AJawQf BRjXUAj8FbYYg+xC8OooKcFvsV707uuvv94dDCPnSd5KkNUdAL8k0iIkbJXkEHWU dgOsJG0DQIDuSkV5xWC83bnJpHUPkJ6aKrObei5oC4TX8588d86If728unvlgeAP MWU5weFvxsyQnSyZgq4pCjWMjJWXuW7uhHyzgK1s9sLuLfGDJCSeLdFqcwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFOfCR2WMAoUMcuQNAxBkiSpuaoBmMB8GA1UdIwQY MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt MDc2ZTFkNzdhZWJlLzEvNThKSFpZd0NoUXh5NUEwREVHU0pLbTVxZ0dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPBYbgD BADBYbowDQYJKoZIhvcNAQELBQADggEBAANlDcQR99icImwiHAUXzTQa7ylOwhq0 tVY2xDMGXTSh67FJ6GDHBxxDv3qMzAJHouv1fZKcqV1AE6PFtdbgSr6FGW3kd39t Gs/5YGgaUfrNMLiJPhR9hABWav/QTDmsSJ1apyuxK1zvlhZ8/7oQ0/T6h1wQzm+W sWbI3wpGmRrrYRCz59a2oA8IXLmX0PoeTKpfXg9Ih4r6QZS/0MwphAZKsWwL0Eht SOmjA5r92Bq/M7Jg/fBe793Y5fVbqBkfKfdazv782T7bYsL0eDiCGCy+43HXmUE1 sG2mg7+gtviDemw/2pIAJFKryVA9f3wlU+Ukyx7IUMJlgG+XdeoZ2DU= -----END CERTIFICATE-----Generated at Sat Dec 6 14:40:34 2025 by rpki-client