This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/C1goLcvaglCKMUeiu7f9JTdPMmE.roa File: C1goLcvaglCKMUeiu7f9JTdPMmE.roa (raw, json) Hash identifier: efwewT/eqBTWWiPB6aRMJhm21AM7wQI7HEw7mnfby2Y= Subject key identifier: 0B:58:28:2D:CB:DA:82:50:8A:31:47:A2:BB:B7:FD:25:37:4F:32:61 Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Certificate serial: 019AB7B8883BBF5C34EA3B3D66F08F6E0F85 Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/C1goLcvaglCKMUeiu7f9JTdPMmE.roa Signing time: Mon 24 Nov 2025 21:15:15 +0000 ROA not before: Mon 24 Nov 2025 21:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62976 IP address blocks: 159.197.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:b8:88:3b:bf:5c:34:ea:3b:3d:66:f0:8f:6e:0f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9 Validity Not Before: Nov 24 21:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b58282dcbda82508a3147a2bbb7fd25374f3261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:92:ec:8e:b5:ec:03:d2:3e:56:ac:57:ab: ee:8f:87:8f:82:aa:3d:02:0c:25:7f:25:3f:b9:c6: b1:08:8f:c7:a1:7c:dc:05:b0:22:e7:be:4b:1c:1a: 87:c0:ec:7f:fb:28:a7:78:04:af:82:92:61:66:1e: dd:72:f6:ae:d0:42:63:04:2c:00:75:26:1c:6e:15: 54:d1:bd:99:93:f5:7b:f5:fd:18:9d:bf:24:89:c4: a1:f9:79:ff:11:1b:5e:a9:ca:a5:b5:79:20:bd:5a: d7:0b:3a:fc:78:04:91:3e:b7:62:03:f4:09:20:bd: 65:e1:48:ab:b8:e0:81:6e:41:0d:fa:ad:be:01:2e: 62:80:92:e5:ac:cd:14:ae:b5:8c:87:16:4f:5a:6b: 2d:e6:fb:8a:11:90:98:14:9d:80:07:25:96:f1:99: fe:97:2b:8f:19:56:7c:77:c2:50:4a:cf:00:66:df: 4f:af:30:6a:0a:51:d7:3c:34:c4:7e:70:29:d6:4e: d1:8c:88:c9:fc:8b:1a:c4:42:31:f8:d7:8c:f8:3e: c3:4d:5e:ba:31:46:44:51:42:6a:d6:d9:b8:f3:90: 3c:37:76:fe:56:dc:f7:ba:7f:19:e1:21:54:cd:ed: 68:69:b0:b7:28:f9:58:c0:ee:31:78:27:2b:6d:dd: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:58:28:2D:CB:DA:82:50:8A:31:47:A2:BB:B7:FD:25:37:4F:32:61 X509v3 Authority Key Identifier: keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/C1goLcvaglCKMUeiu7f9JTdPMmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.197.128.0/18 Signature Algorithm: sha256WithRSAEncryption 77:ba:c8:14:91:77:16:16:ec:dd:b9:72:9d:67:e7:8f:d2:0c: 21:7d:84:40:8b:c2:a0:9e:2b:e3:4b:6b:26:56:7c:5f:5b:3b: f3:d8:de:95:c9:42:e7:f1:de:03:68:75:49:b4:2c:fe:2c:58: 91:d4:b2:7d:51:0b:90:b6:c1:10:4f:51:ac:42:5c:44:84:78: 69:20:bc:ce:90:da:0a:aa:4a:f5:87:09:04:8f:a1:94:a5:93: 67:dc:bc:6d:02:3f:56:2c:36:18:a7:bd:2c:c6:f7:b9:0e:94: 9f:2a:8a:f6:e4:c7:c2:d1:76:93:c0:8c:d4:f7:98:1a:dc:5d: 25:13:ee:e1:f0:20:9a:30:55:1c:ca:3c:a3:8b:31:89:ab:17: 05:66:8d:37:f7:5e:72:00:15:12:eb:60:fd:20:17:8c:9c:73: dc:36:35:cc:87:61:83:2c:c4:94:40:7e:af:94:0c:49:c2:48: 90:41:d7:61:f9:1f:b3:68:b4:cf:b4:7a:4b:5b:67:d3:91:23: b1:c3:e5:ca:33:a2:4d:5e:2f:d0:00:a4:68:5e:03:5e:93:d2: e7:d3:44:07:d6:1e:1b:68:06:8f:8f:ff:2f:4a:60:d1:74:fe: 4c:c1:6b:72:0f:1a:16:88:e1:88:ce:7f:e8:66:3b:ab:3f:50: 23:9f:7c:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq3uIg7v1w06js9ZvCPbg+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5 MWQ0YTkwHhcNMjUxMTI0MjExNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjU4MjgyZGNiZGE4MjUwOGEzMTQ3YTJiYmI3ZmQyNTM3NGYzMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAuS7I617APSPlasV6vuj4ePgqo9 AgwlfyU/ucaxCI/HoXzcBbAi575LHBqHwOx/+yineASvgpJhZh7dcvau0EJjBCwA dSYcbhVU0b2Zk/V79f0Ynb8kicSh+Xn/ERteqcqltXkgvVrXCzr8eASRPrdiA/QJ IL1l4UiruOCBbkEN+q2+AS5igJLlrM0UrrWMhxZPWmst5vuKEZCYFJ2AByWW8Zn+ lyuPGVZ8d8JQSs8AZt9PrzBqClHXPDTEfnAp1k7RjIjJ/IsaxEIx+NeM+D7DTV66 MUZEUUJq1tm485A8N3b+Vtz3un8Z4SFUze1oabC3KPlYwO4xeCcrbd1ptQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAtYKC3L2oJQijFHoru3/SU3TzJhMB8GA1UdIwQY MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt ZWI3YWFhNjgyOGJlLzEvQzFnb0xjdmFnbENLTVVlaXU3ZjlKVGRQTW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn8WAMA0G CSqGSIb3DQEBCwUAA4IBAQB3usgUkXcWFuzduXKdZ+eP0gwhfYRAi8KgnivjS2sm VnxfWzvz2N6VyULn8d4DaHVJtCz+LFiR1LJ9UQuQtsEQT1GsQlxEhHhpILzOkNoK qkr1hwkEj6GUpZNn3LxtAj9WLDYYp70sxve5DpSfKor25MfC0XaTwIzU95ga3F0l E+7h8CCaMFUcyjyjizGJqxcFZo03915yABUS62D9IBeMnHPcNjXMh2GDLMSUQH6v lAxJwkiQQddh+R+zaLTPtHpLW2fTkSOxw+XKM6JNXi/QAKRoXgNek9Ln00QH1h4b aAaPj/8vSmDRdP5MwWtyDxoWiOGIzn/oZjurP1Ajn3xS -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:33 2025 by rpki-client