This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa File: 58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa (raw, json) Hash identifier: HV8V9oTjMmtSDQrOPyii7uMO61tXElSbpadVB9OFkKU= Subject key identifier: E7:C1:50:93:D5:E5:58:55:AD:FE:74:E0:4B:F0:59:FA:8D:EE:7C:6F Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958 Certificate serial: 019BA18E3227CA023DC139A26574DB93B010 Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa Signing time: Fri 09 Jan 2026 07:00:09 +0000 ROA not before: Fri 09 Jan 2026 07:00:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41817 IP address blocks: 193.194.157.0/24 maxlen: 24 193.200.2.0/24 maxlen: 24 193.200.8.0/24 maxlen: 24 193.200.24.0/24 maxlen: 24 2a0f:97c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:8e:32:27:ca:02:3d:c1:39:a2:65:74:db:93:b0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958 Validity Not Before: Jan 9 07:00:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c15093d5e55855adfe74e04bf059fa8dee7c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:bb:aa:b9:4b:9b:c8:69:72:11:8d:ba:e6: 7c:7b:ad:e8:45:cf:3c:5b:a1:42:c9:10:95:b8:90: 8e:f1:3d:48:8d:82:bc:3b:1e:31:0c:2e:7e:78:ae: f4:2f:36:b8:16:26:b9:f3:24:f6:42:90:c3:74:cd: 96:a3:bf:3f:e4:68:31:20:20:89:95:0b:42:fd:e8: e2:2f:05:11:4e:0d:03:e0:e0:48:a7:9a:21:23:c7: 0c:e8:e2:d8:11:72:79:ce:e2:a1:c2:35:44:ea:38: 2f:29:53:28:f0:68:15:2d:0e:7e:73:d7:41:b0:a8: 7f:d3:e3:c9:92:d4:07:8c:5c:cb:3b:00:ab:a3:ba: ba:70:c8:c5:b7:7a:59:0f:f3:9c:2f:9f:84:6e:da: 6a:29:d6:83:74:e0:63:68:0e:f8:92:d0:20:22:6b: bb:54:54:72:af:48:7f:22:40:a9:70:79:25:69:4a: 79:05:88:99:7e:9e:97:d0:f0:c5:a1:ab:4f:20:cf: 69:f1:7a:ef:a7:52:e6:1a:57:0b:ea:72:cc:58:90: 06:7a:a5:86:b2:fa:e4:34:a1:0e:47:f9:16:53:b0: 03:24:f3:d6:0c:d0:1c:3f:12:4d:24:e7:bd:5a:54: 0c:4f:29:73:a7:5e:c9:0c:54:7b:59:22:d5:c3:18: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:50:93:D5:E5:58:55:AD:FE:74:E0:4B:F0:59:FA:8D:EE:7C:6F X509v3 Authority Key Identifier: keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/58FQk9XlWFWt_nTgS_BZ-o3ufG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.194.157.0/24 193.200.2.0/24 193.200.8.0/24 193.200.24.0/24 IPv6: 2a0f:97c0::/29 Signature Algorithm: sha256WithRSAEncryption 66:03:13:73:11:94:8c:31:4f:c8:2b:99:f5:e2:ca:d7:1d:98: 1f:cd:5e:1c:de:d5:cb:04:31:e9:3b:eb:f7:ec:39:f8:b2:6b: 03:56:9a:d6:8c:f6:2d:54:ae:eb:9f:20:25:4b:9c:5f:49:00: b4:ba:69:20:24:fd:da:0f:82:f0:0f:9d:40:bc:de:c9:02:e3: d8:b3:9f:b0:48:1b:27:da:dc:93:d2:82:32:60:2a:7c:c2:21: 6d:57:18:77:c7:43:d0:7c:98:77:19:d5:39:a4:79:98:31:a8: a5:bd:27:ca:d1:34:42:d9:94:8f:07:ce:2c:59:8f:0f:6a:7c: 07:b2:3f:55:89:e6:bc:99:64:fa:c4:31:00:e0:6f:b5:d9:ca: 0d:96:88:c5:b9:6b:31:22:92:d3:9f:ae:31:df:e0:73:dc:ba: 5b:95:5b:c1:8e:34:bb:f8:0c:1e:df:32:af:27:72:17:cb:fb: 35:c0:f1:4d:c5:75:d3:65:af:89:e3:3d:18:27:b4:ac:50:59: 96:bd:96:fd:0c:5c:dc:03:2a:4a:47:51:3d:61:d2:47:63:3a: 04:5a:0d:f7:bb:99:91:c5:0d:ef:63:95:1c:0e:be:c8:bc:ed: a8:97:68:d2:41:ff:1b:dd:8c:95:2c:0a:d5:7e:61:f3:de:c5: bd:b5:8c:40 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZuhjjInygI9wTmiZXTbk7AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzMyZGNkMGMzNTQyNjE0NGY5ZjAyNjc1NDE3OWRmYWVi ZTg5NTgwHhcNMjYwMTA5MDcwMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2MxNTA5M2Q1ZTU1ODU1YWRmZTc0ZTA0YmYwNTlmYThkZWU3YzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UK7qrlLm8hpchGNuuZ8e63oRc88 W6FCyRCVuJCO8T1IjYK8Ox4xDC5+eK70Lza4Fia58yT2QpDDdM2Wo78/5GgxICCJ lQtC/ejiLwURTg0D4OBIp5ohI8cM6OLYEXJ5zuKhwjVE6jgvKVMo8GgVLQ5+c9dB sKh/0+PJktQHjFzLOwCro7q6cMjFt3pZD/OcL5+EbtpqKdaDdOBjaA74ktAgImu7 VFRyr0h/IkCpcHklaUp5BYiZfp6X0PDFoatPIM9p8Xrvp1LmGlcL6nLMWJAGeqWG svrkNKEOR/kWU7ADJPPWDNAcPxJNJOe9WlQMTylzp17JDFR7WSLVwxhjwwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFOfBUJPV5VhVrf504EvwWfqN7nxvMB8GA1UdIwQY MBaAFDlzLc0MNUJhRPnwJnVBed+uvolYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODIt ZjYwYWYyYTgyMDYwLzEvNThGUWs5WGxXRld0X25UZ1NfQlotbzN1Zkc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODItZjYwYWYyYTgyMDYw LzEvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwcKdAwQA wcgCAwQAwcgIAwQAwcgYMA0EAgACMAcDBQMqD5fAMA0GCSqGSIb3DQEBCwUAA4IB AQBmAxNzEZSMMU/IK5n14srXHZgfzV4c3tXLBDHpO+v37Dn4smsDVprWjPYtVK7r nyAlS5xfSQC0umkgJP3aD4LwD51AvN7JAuPYs5+wSBsn2tyT0oIyYCp8wiFtVxh3 x0PQfJh3GdU5pHmYMailvSfK0TRC2ZSPB84sWY8PanwHsj9Viea8mWT6xDEA4G+1 2coNlojFuWsxIpLTn64x3+Bz3LpblVvBjjS7+Awe3zKvJ3IXy/s1wPFNxXXTZa+J 4z0YJ7SsUFmWvZb9DFzcAypKR1E9YdJHYzoEWg33u5mRxQ3vY5UcDr7IvO2ol2jS Qf8b3YyVLArVfmHz3sW9tYxA -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:26 2026 by rpki-client