This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa File: DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa (raw, json) Hash identifier: Lt0of1f9vpxCYESgZXRaRcNizfsrbZc9ngbx6gbOqaQ= Subject key identifier: 0C:E8:87:97:A0:65:AF:9F:06:EF:E8:39:AF:24:35:E2:86:FF:05:24 Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019A784854C6026B56675E8A17AFE21E4B47 Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa Signing time: Wed 12 Nov 2025 13:36:37 +0000 ROA not before: Wed 12 Nov 2025 13:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21263 IP address blocks: 158.94.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:48:54:c6:02:6b:56:67:5e:8a:17:af:e2:1e:4b:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Nov 12 13:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ce88797a065af9f06efe839af2435e286ff0524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a2:fe:8d:f1:1d:7c:67:23:b5:b7:fd:9f:4f: 73:68:28:a0:04:eb:ca:6a:98:8b:c9:57:50:89:8e: 2e:8b:3d:b1:87:0b:7d:82:77:9c:04:4a:8f:fa:9a: dd:39:6e:98:3a:54:a5:0e:90:d8:09:46:ca:ef:bd: 4f:ac:8d:05:3c:bc:40:b8:6f:59:90:1a:6d:28:8c: 32:25:68:63:d3:8b:e7:a3:19:c8:56:cd:ab:2a:fd: a1:81:b5:37:61:31:48:50:bd:e2:09:04:6b:b5:2c: c3:35:bb:78:04:7c:25:9b:9d:b0:8f:39:4c:86:3c: 47:a3:a7:7c:66:0d:0e:ae:03:17:69:8c:6c:fb:10: ad:50:48:82:8a:fe:af:84:de:52:02:73:fc:b7:b7: 5a:9e:a1:36:d3:0b:97:1b:b7:ec:88:f0:cd:f3:50: a2:3d:69:eb:a1:a4:bd:42:a6:5d:91:58:8e:bc:52: f1:f5:b9:e1:44:db:55:e7:b3:35:cf:7b:10:15:54: ef:2b:b9:ec:67:46:80:e0:6f:66:19:b5:9f:4a:4a: d2:5b:8e:8b:1b:ff:bb:7b:d9:5b:88:1b:7d:01:c6: 09:cb:c2:e7:c2:50:34:a5:00:93:fc:0d:38:73:5d: f2:54:bc:18:f6:c4:de:04:7a:6b:20:29:ff:f7:fd: 12:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:87:97:A0:65:AF:9F:06:EF:E8:39:AF:24:35:E2:86:FF:05:24 X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.168.0/24 Signature Algorithm: sha256WithRSAEncryption a9:08:6d:5d:a2:0d:bb:2b:e5:5e:de:a2:ed:83:ae:87:a7:27: 44:4d:02:35:e2:43:67:4f:90:8c:83:f5:4c:27:03:e9:25:c8: 44:4a:48:f7:bb:98:41:b8:3f:24:74:5c:83:57:22:15:5a:cf: ab:34:35:27:6b:28:2a:42:ee:43:5d:24:8b:cc:5c:e6:df:53: ce:15:97:0f:f6:8d:f4:0b:93:52:52:0b:31:87:a0:6f:78:dd: 5b:2f:97:2a:4e:f7:fd:59:3c:f2:4c:6a:39:d0:9d:43:9d:a1: 0a:34:bc:24:9d:e5:a4:b8:20:c3:44:ce:b6:6f:5c:2c:05:be: 96:79:3c:53:60:92:f9:f4:f6:6a:31:34:98:55:bf:d4:d2:64: 41:dc:e5:c1:e3:96:63:ad:0b:1f:e3:79:70:5d:ce:10:aa:5f: 0f:cd:b9:a4:32:30:62:cc:a9:1a:5d:8e:30:b1:4f:79:57:bf: 24:a5:01:12:53:38:33:22:87:1b:28:19:7f:46:4d:a7:91:34: af:29:ae:be:cc:14:f0:d0:89:08:71:81:9d:b5:12:99:00:73: 88:a8:5e:6a:a0:15:18:44:f1:b5:3d:35:9a:f1:0b:ba:0a:cb: 04:8f:f1:84:8d:8e:1d:4e:a9:c4:2c:bb:41:65:b7:f8:bb:9e: e2:cd:ed:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp4SFTGAmtWZ16KF6/iHktHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjUxMTEyMTMzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2U4ODc5N2EwNjVhZjlmMDZlZmU4MzlhZjI0MzVlMjg2ZmYwNTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KL+jfEdfGcjtbf9n09zaCigBOvK apiLyVdQiY4uiz2xhwt9gnecBEqP+prdOW6YOlSlDpDYCUbK771PrI0FPLxAuG9Z kBptKIwyJWhj04vnoxnIVs2rKv2hgbU3YTFIUL3iCQRrtSzDNbt4BHwlm52wjzlM hjxHo6d8Zg0OrgMXaYxs+xCtUEiCiv6vhN5SAnP8t7danqE20wuXG7fsiPDN81Ci PWnroaS9QqZdkViOvFLx9bnhRNtV57M1z3sQFVTvK7nsZ0aA4G9mGbWfSkrSW46L G/+7e9lbiBt9AcYJy8LnwlA0pQCT/A04c13yVLwY9sTeBHprICn/9/0SdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAzoh5egZa+fBu/oOa8kNeKG/wUkMB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvRE9pSGw2QmxyNThHNy1nNXJ5UTE0b2JfQlNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl6oMA0G CSqGSIb3DQEBCwUAA4IBAQCpCG1dog27K+Ve3qLtg66HpydETQI14kNnT5CMg/VM JwPpJchESkj3u5hBuD8kdFyDVyIVWs+rNDUnaygqQu5DXSSLzFzm31POFZcP9o30 C5NSUgsxh6BveN1bL5cqTvf9WTzyTGo50J1DnaEKNLwkneWkuCDDRM62b1wsBb6W eTxTYJL59PZqMTSYVb/U0mRB3OXB45ZjrQsf43lwXc4Qql8PzbmkMjBizKkaXY4w sU95V78kpQESUzgzIocbKBl/Rk2nkTSvKa6+zBTw0IkIcYGdtRKZAHOIqF5qoBUY RPG1PTWa8Qu6CssEj/GEjY4dTqnELLtBZbf4u57ize2z -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:29 2025 by rpki-client