This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/58YF0ymtPf000UYsXQwLeX0ZufU.roa File: 58YF0ymtPf000UYsXQwLeX0ZufU.roa (raw, json) Hash identifier: 40hd3BRBbvBiTvhYzazTmqFgM3O0ax5/aAw4bE5lLLg= Subject key identifier: E7:C6:05:D3:29:AD:3D:FD:34:D1:46:2C:5D:0C:0B:79:7D:19:B9:F5 Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c Certificate serial: 019B7A5B22D1A596FF6E36A3261DE9B135AD Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/58YF0ymtPf000UYsXQwLeX0ZufU.roa Signing time: Thu 01 Jan 2026 16:19:11 +0000 ROA not before: Thu 01 Jan 2026 16:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42523 IP address blocks: 194.62.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:22:d1:a5:96:ff:6e:36:a3:26:1d:e9:b1:35:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c Validity Not Before: Jan 1 16:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c605d329ad3dfd34d1462c5d0c0b797d19b9f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e9:52:83:cb:36:d8:85:13:4e:25:fd:77:eb: 0a:85:9b:31:5b:da:8a:c5:b7:d1:f9:b8:5f:e0:5c: 6d:67:95:ee:e3:97:b5:cc:1f:b4:10:f7:5a:af:b3: 55:5d:11:d1:d1:0c:34:f5:71:d7:7f:e3:bb:58:0d: af:ee:d8:3f:5d:6a:b0:12:9e:89:69:99:3d:62:fd: dd:e6:e5:cf:24:4e:b7:6c:79:c3:93:24:8a:55:a0: ea:ee:43:fc:5e:6b:2b:38:55:2d:a9:8f:45:c7:a8: 17:66:42:3e:71:6f:8a:e4:f8:18:8e:6e:bf:82:2a: 26:15:f8:93:e1:fe:a9:87:97:d8:09:63:6a:bd:07: b7:cd:45:a4:7e:60:02:4a:ff:a1:7c:e5:b7:9c:66: d3:81:dc:ae:75:3e:18:c2:31:60:01:59:39:5a:09: 6e:dd:51:c2:2d:b9:d5:bd:8b:5c:a4:31:c1:f8:1b: da:a8:d3:d7:69:2e:80:7f:79:fb:27:e6:d3:a8:8b: 63:1c:2b:e4:17:05:7d:51:18:6f:a2:fc:29:4f:7b: 52:fb:85:e7:8c:12:3e:9a:67:d4:7c:bf:9f:e5:3c: f0:cd:ad:e5:c5:0c:fe:f0:8d:17:77:94:1c:a6:7b: 3d:e0:1f:e8:33:bb:43:6c:9a:eb:99:da:57:86:c5: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:05:D3:29:AD:3D:FD:34:D1:46:2C:5D:0C:0B:79:7D:19:B9:F5 X509v3 Authority Key Identifier: keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/58YF0ymtPf000UYsXQwLeX0ZufU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.152.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:02:41:00:9c:7a:f6:0e:dc:d6:60:96:c6:84:f1:51:43:b1: e4:da:fb:35:48:f5:29:0f:32:01:01:e3:ba:23:f9:d8:32:d6: 11:45:e2:1c:52:03:d7:4d:73:19:73:e0:82:3f:3a:09:f3:51: a3:a3:57:e7:11:0b:7b:a3:cc:7e:ba:df:57:6a:86:65:46:fc: 3f:e1:19:2e:a4:f6:33:17:2e:8e:b0:f9:48:a3:a5:55:29:ed: 24:ca:76:c9:5f:33:71:2b:06:f3:16:6e:81:a4:ef:e8:ae:4f: 0b:dc:ab:09:f9:5c:3e:54:b6:7b:a3:a5:8a:dd:2f:a4:10:25: 85:9a:ff:12:18:ac:0d:4d:e2:b1:52:6b:1a:d7:19:ed:a5:56: e2:74:77:49:ca:64:a7:88:f0:a7:09:35:01:32:ef:8c:e2:88: 22:d5:39:fd:22:d6:42:35:a7:08:75:e1:63:75:fd:80:26:08: 83:de:14:5d:0b:ed:f9:cd:5b:9e:ad:e8:ca:72:b3:7e:f3:e3: 7b:53:d2:95:e1:40:5e:c9:c1:4f:fc:61:8e:2f:0c:63:74:07: 23:66:54:fc:07:ea:32:29:30:47:df:67:a3:d5:50:1c:82:7d: 42:f7:ff:48:f2:0c:1d:17:f5:05:82:3c:00:a6:74:69:c1:4f: 18:6f:16:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WyLRpZb/bjajJh3psTWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGQ2NjZhNTRkNWUxYmMzNTVjMGQ3MjUwM2E0NThmYzBl OGUwNmMwHhcNMjYwMTAxMTYxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2M2MDVkMzI5YWQzZGZkMzRkMTQ2MmM1ZDBjMGI3OTdkMTliOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyulSg8s22IUTTiX9d+sKhZsxW9qK xbfR+bhf4FxtZ5Xu45e1zB+0EPdar7NVXRHR0Qw09XHXf+O7WA2v7tg/XWqwEp6J aZk9Yv3d5uXPJE63bHnDkySKVaDq7kP8XmsrOFUtqY9Fx6gXZkI+cW+K5PgYjm6/ giomFfiT4f6ph5fYCWNqvQe3zUWkfmACSv+hfOW3nGbTgdyudT4YwjFgAVk5Wglu 3VHCLbnVvYtcpDHB+BvaqNPXaS6Af3n7J+bTqItjHCvkFwV9URhvovwpT3tS+4Xn jBI+mmfUfL+f5Tzwza3lxQz+8I0Xd5Qcpns94B/oM7tDbJrrmdpXhsXzPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOfGBdMprT39NNFGLF0MC3l9Gbn1MB8GA1UdIwQY MBaAFGoNZmpU1eG8NVwNclA6RY/A6OBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4Mjct YTgyYWQ1NGRlZmJjLzEvNThZRjB5bXRQZjAwMFVZc1hRd0xlWDBadWZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4MjctYTgyYWQ1NGRlZmJj LzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwj6YMA0G CSqGSIb3DQEBCwUAA4IBAQBNAkEAnHr2DtzWYJbGhPFRQ7Hk2vs1SPUpDzIBAeO6 I/nYMtYRReIcUgPXTXMZc+CCPzoJ81Gjo1fnEQt7o8x+ut9XaoZlRvw/4RkupPYz Fy6OsPlIo6VVKe0kynbJXzNxKwbzFm6BpO/ork8L3KsJ+Vw+VLZ7o6WK3S+kECWF mv8SGKwNTeKxUmsa1xntpVbidHdJymSniPCnCTUBMu+M4ogi1Tn9ItZCNacIdeFj df2AJgiD3hRdC+35zVuerejKcrN+8+N7U9KV4UBeycFP/GGOLwxjdAcjZlT8B+oy KTBH32ej1VAcgn1C9/9I8gwdF/UFgjwApnRpwU8YbxZZ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:51 2026 by rpki-client