This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i-cMlrXhQLGl75tazDqvh0j7t78.roa File: i-cMlrXhQLGl75tazDqvh0j7t78.roa (raw, json) Hash identifier: vpCcQY1Uu4qXzKXsxjYnDQ3cwoj4w9TY14dn0wmpPLY= Subject key identifier: 8B:E7:0C:96:B5:E1:40:B1:A5:EF:9B:5A:CC:3A:AF:87:48:FB:B7:BF Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019A86E7046C75C698FFB0833A046F1860AE Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i-cMlrXhQLGl75tazDqvh0j7t78.roa Signing time: Sat 15 Nov 2025 09:44:38 +0000 ROA not before: Sat 15 Nov 2025 09:44:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207695 IP address blocks: 2.58.196.0/23 maxlen: 23 2.58.196.0/24 maxlen: 24 2.58.197.0/24 maxlen: 24 45.141.116.0/24 maxlen: 24 45.142.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:e7:04:6c:75:c6:98:ff:b0:83:3a:04:6f:18:60:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Nov 15 09:44:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8be70c96b5e140b1a5ef9b5acc3aaf8748fbb7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:f1:4b:c9:8e:cf:f9:27:44:4a:9e:bf:cc: 34:e8:39:c3:0f:91:6d:d8:58:ea:34:23:a2:dc:52: 7a:61:af:59:62:1d:52:73:a7:84:6b:e3:51:ca:45: 4b:e4:76:f3:7c:1b:41:64:f9:c9:5e:de:27:81:40: 73:87:58:cd:5f:c3:d2:59:40:03:14:b9:ea:65:09: ff:5f:e3:70:8b:fa:5f:64:d2:f6:d1:3e:dd:f4:ee: 98:76:de:d1:a8:e0:9b:70:6f:2e:49:b2:e9:35:e3: c5:11:d0:4c:86:94:ec:20:54:63:8b:97:55:6c:08: fb:58:f7:48:4e:c0:a5:85:79:dc:02:43:51:04:c1: f2:33:97:a8:5d:b1:a0:db:f8:06:3b:c8:ed:c2:e9: 31:59:37:4f:1b:12:4a:a3:ad:36:29:f8:46:4a:56: 43:57:d6:ba:b3:ce:c8:8e:90:78:01:96:36:ff:fa: ee:cb:a9:f2:d6:74:2a:34:80:94:87:73:af:73:a4: d9:c5:ed:71:44:8f:91:55:de:53:4f:55:de:d0:fa: 2f:39:04:ef:8d:8c:1f:19:d2:82:9c:ba:d6:2d:9a: c6:79:9d:25:8a:dc:e3:01:0d:be:d8:19:cb:e0:68: 6d:16:f6:49:9a:d8:85:27:1b:f3:7d:35:ad:aa:49: be:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E7:0C:96:B5:E1:40:B1:A5:EF:9B:5A:CC:3A:AF:87:48:FB:B7:BF X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i-cMlrXhQLGl75tazDqvh0j7t78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.196.0/23 45.141.116.0/24 45.142.106.0/24 Signature Algorithm: sha256WithRSAEncryption 74:6a:ca:14:a7:7d:2e:06:8b:8d:07:81:eb:b8:0c:40:c7:2b: 90:3f:c5:cd:20:00:be:21:04:85:17:9f:b6:ad:77:a6:cd:f1: 16:ec:48:ad:7d:3e:24:0b:c2:9e:6d:ef:f9:9a:23:4e:27:6d: ef:fb:35:78:35:30:26:e2:80:84:57:53:ba:a9:61:e5:1b:18: 60:ee:fb:8a:7c:c6:f6:fb:13:66:c2:15:24:00:f8:23:4c:7c: 5c:e5:d6:0b:66:97:ee:81:93:09:93:77:93:a7:25:65:21:31: 32:6c:29:7e:7f:79:ff:01:2a:a7:62:c1:6e:88:01:85:e6:8b: 70:96:93:b2:d8:a0:3d:b6:27:fe:6b:46:fc:78:53:06:bb:6f: 10:38:56:bb:23:84:f8:41:d3:09:9b:49:42:ff:99:da:30:bb: 28:62:b3:26:4a:52:7c:30:ba:8e:23:93:b4:a6:d1:9f:90:c7: 30:c6:90:db:93:23:a0:39:ff:91:4f:e1:6d:fd:39:d7:e6:74: 3b:ca:d1:39:a4:be:e2:77:2f:f2:97:94:9c:77:c4:91:a1:ce: ac:8c:5f:c6:f6:9c:d4:6e:f9:6a:0f:07:8f:c9:c8:70:dd:75: 9b:e1:1c:ce:df:9d:3f:c6:36:89:0f:73:00:0d:d1:33:1c:63: d1:26:d2:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqG5wRsdcaY/7CDOgRvGGCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjUxMTE1MDk0NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmU3MGM5NmI1ZTE0MGIxYTVlZjliNWFjYzNhYWY4NzQ4ZmJiN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfnxS8mOz/knREqev8w06DnDD5Ft 2FjqNCOi3FJ6Ya9ZYh1Sc6eEa+NRykVL5HbzfBtBZPnJXt4ngUBzh1jNX8PSWUAD FLnqZQn/X+Nwi/pfZNL20T7d9O6Ydt7RqOCbcG8uSbLpNePFEdBMhpTsIFRji5dV bAj7WPdITsClhXncAkNRBMHyM5eoXbGg2/gGO8jtwukxWTdPGxJKo602KfhGSlZD V9a6s87IjpB4AZY2//ruy6ny1nQqNICUh3Ovc6TZxe1xRI+RVd5TT1Xe0PovOQTv jYwfGdKCnLrWLZrGeZ0litzjAQ2+2BnL4GhtFvZJmtiFJxvzfTWtqkm+eQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIvnDJa14UCxpe+bWsw6r4dI+7e/MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvaS1jTWxyWGhRTEdsNzV0YXpEcXZoMGo3dDc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBAjrEAwQA LY10AwQALY5qMA0GCSqGSIb3DQEBCwUAA4IBAQB0asoUp30uBouNB4HruAxAxyuQ P8XNIAC+IQSFF5+2rXemzfEW7EitfT4kC8Kebe/5miNOJ23v+zV4NTAm4oCEV1O6 qWHlGxhg7vuKfMb2+xNmwhUkAPgjTHxc5dYLZpfugZMJk3eTpyVlITEybCl+f3n/ ASqnYsFuiAGF5otwlpOy2KA9tif+a0b8eFMGu28QOFa7I4T4QdMJm0lC/5naMLso YrMmSlJ8MLqOI5O0ptGfkMcwxpDbkyOgOf+RT+Ft/TnX5nQ7ytE5pL7idy/yl5Sc d8SRoc6sjF/G9pzUbvlqDwePychw3XWb4RzO350/xjaJD3MADdEzHGPRJtLk -----END CERTIFICATE-----Generated at Fri Dec 5 16:32:03 2025 by rpki-client