This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JdEhgClEdQgZSWhmA9CKh2es3mw.roa File: JdEhgClEdQgZSWhmA9CKh2es3mw.roa (raw, json) Hash identifier: T4GHZbZl4uGxGRdok0lRmyELbTG1q3Fw1xAlcEd7cnw= Subject key identifier: 25:D1:21:80:29:44:75:08:19:49:68:66:03:D0:8A:87:67:AC:DE:6C Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C801D714E26212C13CBB8410E5F6430 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JdEhgClEdQgZSWhmA9CKh2es3mw.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52073 IP address blocks: 2.58.198.0/24 maxlen: 24 2.58.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1d:71:4e:26:21:2c:13:cb:b8:41:0e:5f:64:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25d12180294475081949686603d08a8767acde6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:3a:5f:4b:21:ba:6d:b9:6d:80:80:42:cc: f9:a1:fc:05:24:be:8c:ca:59:df:41:f5:20:44:ae: 60:e8:de:64:2f:29:19:35:10:1b:3d:ed:fa:95:45: c6:8e:46:4e:8b:1d:47:e5:fa:37:46:b8:ed:24:9f: e9:52:ec:9e:3b:47:7c:3a:4e:b3:f9:5e:30:d0:d0: 85:f9:9d:4b:87:78:cd:b0:d6:84:6e:91:8a:8c:c8: 75:d0:d0:6c:6d:95:b2:cc:94:3c:95:f7:9b:16:91: 1e:58:1f:af:fe:eb:b3:96:4d:e0:40:46:11:b9:d8: 94:ee:5f:96:c6:1f:d6:81:cd:d3:3d:ac:29:b2:0f: db:38:65:b4:fb:fc:c3:d2:ee:39:0c:92:56:bd:5f: 65:31:aa:6c:53:66:11:6c:ea:37:29:4f:59:9a:11: 70:96:7a:90:71:56:e4:15:bd:ae:2a:8c:f8:83:fe: 8f:c7:b3:cd:18:2c:df:83:55:e3:a6:0b:de:35:3a: 8e:44:f3:43:82:72:14:16:cd:58:1f:db:1c:cf:2a: 47:c9:4e:de:d6:4f:80:d8:86:de:98:74:6f:82:69: c9:89:1c:ca:f1:9d:8f:1d:e3:54:e8:f6:d9:16:63: d5:b7:6f:9d:33:36:2a:9a:77:5c:62:56:b1:b4:fa: d7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D1:21:80:29:44:75:08:19:49:68:66:03:D0:8A:87:67:AC:DE:6C X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JdEhgClEdQgZSWhmA9CKh2es3mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.198.0/23 Signature Algorithm: sha256WithRSAEncryption 69:c5:ac:bc:aa:7e:fa:f6:01:b8:68:72:d4:36:33:85:d1:7b: af:0b:92:11:e0:16:23:f4:ff:1b:5a:3a:91:35:cb:7c:7b:28: 96:ac:c1:f2:1b:14:27:61:1f:29:1a:c4:ac:db:ba:e3:ba:a5: 5d:e0:4a:d7:2e:c9:49:75:19:23:21:9e:52:03:ab:ba:1d:29: 5d:32:17:fe:d4:53:ff:32:63:17:b4:b1:b3:dd:8a:fd:3f:2e: 86:22:f6:f5:b8:de:32:7f:0c:1c:76:36:42:56:68:92:b8:17: 38:b9:66:16:31:2f:60:07:a3:83:68:da:6d:eb:49:bd:6b:13: 79:15:69:cf:41:dd:5e:f4:bb:f8:4a:cb:75:9f:1c:c0:db:1d: 71:6c:de:32:2c:61:0a:1d:9a:f3:59:c9:b1:4d:fb:e1:de:66: 90:7c:b5:25:d6:aa:5a:fe:9c:4c:63:3b:6c:80:33:01:ab:8a: cf:b9:79:6c:3b:08:4c:b0:09:f8:d2:aa:96:2d:c1:a8:5a:c3: 35:ac:c5:75:95:8e:7a:7c:f6:9c:18:33:f4:a6:12:64:c7:20: 3d:4b:c4:08:93:44:9c:c7:de:33:a5:10:1f:0a:d9:bb:24:ec: a1:e9:ec:9d:f9:7c:2e:93:10:6c:14:57:f5:39:e7:0c:5c:c9: 22:92:a0:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gB1xTiYhLBPLuEEOX2QwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWQxMjE4MDI5NDQ3NTA4MTk0OTY4NjYwM2QwOGE4NzY3YWNkZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN46X0shum25bYCAQsz5ofwFJL6M ylnfQfUgRK5g6N5kLykZNRAbPe36lUXGjkZOix1H5fo3RrjtJJ/pUuyeO0d8Ok6z +V4w0NCF+Z1Lh3jNsNaEbpGKjMh10NBsbZWyzJQ8lfebFpEeWB+v/uuzlk3gQEYR udiU7l+Wxh/Wgc3TPawpsg/bOGW0+/zD0u45DJJWvV9lMapsU2YRbOo3KU9ZmhFw lnqQcVbkFb2uKoz4g/6Px7PNGCzfg1XjpgveNTqORPNDgnIUFs1YH9sczypHyU7e 1k+A2IbemHRvgmnJiRzK8Z2PHeNU6PbZFmPVt2+dMzYqmndcYlaxtPrXcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXRIYApRHUIGUloZgPQiodnrN5sMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvSmRFaGdDbEVkUWdaU1dobUE5Q0toMmVzM213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjrGMA0G CSqGSIb3DQEBCwUAA4IBAQBpxay8qn769gG4aHLUNjOF0XuvC5IR4BYj9P8bWjqR Nct8eyiWrMHyGxQnYR8pGsSs27rjuqVd4ErXLslJdRkjIZ5SA6u6HSldMhf+1FP/ MmMXtLGz3Yr9Py6GIvb1uN4yfwwcdjZCVmiSuBc4uWYWMS9gB6ODaNpt60m9axN5 FWnPQd1e9Lv4Sst1nxzA2x1xbN4yLGEKHZrzWcmxTfvh3maQfLUl1qpa/pxMYzts gDMBq4rPuXlsOwhMsAn40qqWLcGoWsM1rMV1lY56fPacGDP0phJkxyA9S8QIk0Sc x94zpRAfCtm7JOyh6eyd+XwukxBsFFf1OecMXMkikqA2 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:13 2026 by rpki-client