This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa File: n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa (raw, json) Hash identifier: x0QsbLQxSgzw6qfolhfMqYovLG9uc3eYJ7ouYr0O1Vk= Subject key identifier: 9F:43:1E:EB:09:23:73:C5:DE:C9:CD:9E:BB:D4:CB:FA:AE:7D:BB:C2 Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019A78476ABE74FE2AD1450F9DDDD05C203F Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa Signing time: Wed 12 Nov 2025 13:35:37 +0000 ROA not before: Wed 12 Nov 2025 13:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 158.94.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:47:6a:be:74:fe:2a:d1:45:0f:9d:dd:d0:5c:20:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Nov 12 13:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9f431eeb092373c5dec9cd9ebbd4cbfaae7dbbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8f:43:e2:39:d4:01:8d:3b:55:cc:03:b8:01: 8a:9a:90:29:98:e1:0b:e8:49:73:37:8e:91:dc:49: 85:18:bd:ce:94:da:18:4d:6f:c9:99:65:59:43:62: b3:6f:a1:5a:9f:a6:7e:63:ac:85:85:cd:35:36:c3: 5f:ea:25:c6:30:10:1c:30:a6:09:a1:22:22:e4:c7: c3:83:d6:ca:bd:d2:5c:de:c7:e9:34:35:00:96:b0: bb:dc:30:f2:7e:12:e3:bd:dc:f1:f6:0e:ef:98:8d: 98:d1:a1:a4:c4:a2:d6:f2:f9:8b:94:b6:9e:b8:84: e9:5c:70:b7:31:1a:54:1d:9f:5a:b1:84:00:48:93: 9f:6f:95:3d:6e:86:cb:5a:18:ed:3c:35:03:18:7f: b8:37:07:23:36:32:e6:64:af:80:a2:f1:67:d5:a6: 07:02:7e:79:6b:8f:55:64:f0:46:6e:98:ae:45:99: fc:75:68:08:c8:77:e7:0d:17:65:64:fd:82:91:2e: 11:40:5c:82:94:ad:de:62:60:95:cb:76:2a:54:90: fe:3c:21:cb:59:32:5d:41:d6:82:10:e6:73:a0:46: 20:ca:e9:3b:de:9d:07:1c:f2:3a:87:2f:3d:df:0c: 72:59:85:1b:fc:cf:fc:84:43:24:0d:ec:b7:b9:f9: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:1E:EB:09:23:73:C5:DE:C9:CD:9E:BB:D4:CB:FA:AE:7D:BB:C2 X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.94.170.0/24 Signature Algorithm: sha256WithRSAEncryption 20:ea:47:96:d9:b2:f9:6d:3d:3d:51:cb:39:12:3c:3f:9f:3d: e9:09:68:a2:d0:ff:fe:74:25:34:12:47:35:d3:d8:4f:1f:df: 49:7c:fa:bd:ec:e3:21:cc:fa:92:f3:c7:90:28:54:d4:e1:d3: c7:66:5a:f5:d2:d6:61:ed:2e:f7:cb:2e:6c:9f:4f:cf:ab:cf: e2:34:85:d9:11:6d:0b:64:5a:d9:96:2c:ed:f4:4d:1f:87:b0: 12:b0:b3:6d:4c:6b:6b:b7:bf:a8:f6:92:86:40:a1:42:0c:8c: a3:a5:84:88:e0:fe:ed:b6:b1:90:dc:7a:2a:ed:e4:17:00:53: c9:97:4d:1b:15:4b:50:6f:24:24:90:f5:4c:ac:0f:b9:da:70: c5:46:2c:b5:cb:e1:10:30:37:2c:8d:d5:fd:ee:34:b1:b1:e4: 52:34:a7:fe:23:64:15:7a:16:7f:1b:b5:90:c4:56:5f:61:d9: 34:bd:46:f8:f9:34:d5:c6:39:14:ec:ab:05:ad:1a:07:76:9a: 48:3f:2d:ac:8f:c1:4e:75:35:e5:82:5e:68:ef:91:b0:3b:e2: 9e:ee:71:9b:38:e2:f8:67:00:e1:ff:03:59:20:b2:74:30:6c: cb:89:93:db:3e:1c:eb:07:c9:cc:3d:e4:bb:4b:8d:93:6b:d2: cb:fe:16:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp4R2q+dP4q0UUPnd3QXCA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjUxMTEyMTMzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjQzMWVlYjA5MjM3M2M1ZGVjOWNkOWViYmQ0Y2JmYWFlN2RiYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY9D4jnUAY07VcwDuAGKmpApmOEL 6ElzN46R3EmFGL3OlNoYTW/JmWVZQ2Kzb6Fan6Z+Y6yFhc01NsNf6iXGMBAcMKYJ oSIi5MfDg9bKvdJc3sfpNDUAlrC73DDyfhLjvdzx9g7vmI2Y0aGkxKLW8vmLlLae uITpXHC3MRpUHZ9asYQASJOfb5U9bobLWhjtPDUDGH+4NwcjNjLmZK+AovFn1aYH An55a49VZPBGbpiuRZn8dWgIyHfnDRdlZP2CkS4RQFyClK3eYmCVy3YqVJD+PCHL WTJdQdaCEOZzoEYgyuk73p0HHPI6hy893wxyWYUb/M/8hEMkDey3ufkcEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9DHusJI3PF3snNnrvUy/qufbvCMB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvbjBNZTZ3a2pjOFhleWMyZXU5VEwtcTU5dThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl6qMA0G CSqGSIb3DQEBCwUAA4IBAQAg6keW2bL5bT09Ucs5Ejw/nz3pCWii0P/+dCU0Ekc1 09hPH99JfPq97OMhzPqS88eQKFTU4dPHZlr10tZh7S73yy5sn0/Pq8/iNIXZEW0L ZFrZlizt9E0fh7ASsLNtTGtrt7+o9pKGQKFCDIyjpYSI4P7ttrGQ3Hoq7eQXAFPJ l00bFUtQbyQkkPVMrA+52nDFRiy1y+EQMDcsjdX97jSxseRSNKf+I2QVehZ/G7WQ xFZfYdk0vUb4+TTVxjkU7KsFrRoHdppIPy2sj8FOdTXlgl5o75GwO+Ke7nGbOOL4 ZwDh/wNZILJ0MGzLiZPbPhzrB8nMPeS7S42Ta9LL/hZ1 -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:04 2025 by rpki-client