This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58gFn1zxbpKQWo2LOS_z3_Mkuxo.roa File: 58gFn1zxbpKQWo2LOS_z3_Mkuxo.roa (raw, json) Hash identifier: CbSfE4TP2J/nJtXe4qvc4h/JvLKIRIPyS/xZyFRRCpc= Subject key identifier: E7:C8:05:9F:5C:F1:6E:92:90:5A:8D:8B:39:2F:F3:DF:F3:24:BB:1A Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5AC5E4FBF745173CB858B745EA8E Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58gFn1zxbpKQWo2LOS_z3_Mkuxo.roa Signing time: Fri 02 Jan 2026 06:20:28 +0000 ROA not before: Fri 02 Jan 2026 06:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210558 IP address blocks: 45.80.158.0/24 maxlen: 24 45.83.28.0/24 maxlen: 24 45.83.31.0/24 maxlen: 24 45.92.1.0/24 maxlen: 24 84.54.33.0/24 maxlen: 24 185.241.208.0/24 maxlen: 24 192.159.99.0/24 maxlen: 24 193.26.115.0/24 maxlen: 24 203.159.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5a:c5:e4:fb:f7:45:17:3c:b8:58:b7:45:ea:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7c8059f5cf16e92905a8d8b392ff3dff324bb1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:67:d1:ca:ae:d8:73:47:90:1b:3f:42:de:b2: b5:e8:7a:11:77:6a:84:b6:e5:50:d0:2c:2c:24:72: 1f:b0:de:b5:53:7f:07:14:43:3f:02:cc:ae:b7:28: 11:c0:35:1b:60:78:3b:0a:7f:f4:d9:4a:1f:f8:1e: f3:42:42:ab:34:c9:aa:0e:72:86:ba:65:43:53:6d: e9:dc:59:e1:99:32:ae:71:c2:bd:7c:f6:de:f3:0c: 72:90:b8:30:f2:77:d2:23:49:a6:5c:6d:c2:54:8a: 3d:70:55:d4:c0:ce:3e:3a:67:e5:5b:8a:07:5d:ae: e3:13:c6:c4:ec:e2:18:51:7c:0c:a8:56:ce:56:05: 1e:f6:f2:84:07:28:cf:64:3e:e5:7a:bc:7d:a2:49: d3:3c:27:1c:1d:82:ab:f1:54:91:3c:81:0c:53:9f: bb:71:0b:fb:c1:10:7a:e5:55:f1:b9:d7:af:68:65: 24:1a:f7:e8:71:21:2b:7c:9d:05:17:76:12:1d:d7: b3:ad:b6:38:55:52:d4:63:f5:6c:5a:b6:c5:5a:95: dc:7b:1e:a2:4f:f0:db:a4:a6:49:c9:ad:47:3a:c7: e1:bf:ae:f2:07:56:2c:55:2d:d8:67:08:3b:3c:fd: ad:20:c5:f1:1e:23:ff:4d:ff:da:ad:cb:30:95:50: 37:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C8:05:9F:5C:F1:6E:92:90:5A:8D:8B:39:2F:F3:DF:F3:24:BB:1A X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58gFn1zxbpKQWo2LOS_z3_Mkuxo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.158.0/24 45.83.28.0/24 45.83.31.0/24 45.92.1.0/24 84.54.33.0/24 185.241.208.0/24 192.159.99.0/24 193.26.115.0/24 203.159.90.0/24 Signature Algorithm: sha256WithRSAEncryption 61:67:81:33:bf:0b:04:31:31:14:8b:5e:4c:f4:1b:c0:a5:9a: bb:1f:e9:d6:c8:9d:8b:33:56:b4:24:ab:d5:ed:14:c2:a4:8c: 45:ee:5b:76:85:32:d3:9e:57:36:45:f7:a8:5b:0a:73:49:2d: 29:c5:32:e8:0f:af:f1:5e:1d:ad:83:81:3e:40:d9:5f:51:0e: bd:76:b9:a2:80:97:db:3c:21:85:de:c5:cd:a8:45:d5:c8:b6: 58:c8:3e:a4:c5:0f:74:44:34:31:ff:56:16:84:29:0d:af:5a: 8c:3e:c9:ca:ea:68:cc:dc:68:f6:1a:35:05:5a:0f:35:bc:c0: 79:8a:f5:31:63:54:c7:6a:ce:50:8d:db:88:9f:1d:99:3f:3e: f1:9d:81:f8:c1:8b:6c:94:2f:82:b7:3d:a3:d0:ee:a6:d6:a2: cb:06:bc:09:09:f1:94:4f:43:3a:bb:26:a8:a0:fb:a4:fb:f0: cf:39:3e:1c:75:6d:ac:06:6e:54:89:35:b4:52:e0:d7:bb:e8: 56:79:c5:24:9b:ce:6b:69:ab:12:de:23:28:65:65:02:2a:73: 24:36:5a:8f:f1:52:4b:78:e9:48:c2:1a:14:9f:4d:7a:a2:61: 7f:d0:e4:fa:78:35:56:88:04:eb:cc:e0:ad:9b:81:08:a3:11: ed:a4:e9:9c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt9XVrF5Pv3RRc8uFi3ReqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2M4MDU5ZjVjZjE2ZTkyOTA1YThkOGIzOTJmZjNkZmYzMjRiYjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmfRyq7Yc0eQGz9C3rK16HoRd2qE tuVQ0CwsJHIfsN61U38HFEM/AsyutygRwDUbYHg7Cn/02Uof+B7zQkKrNMmqDnKG umVDU23p3FnhmTKuccK9fPbe8wxykLgw8nfSI0mmXG3CVIo9cFXUwM4+OmflW4oH Xa7jE8bE7OIYUXwMqFbOVgUe9vKEByjPZD7lerx9oknTPCccHYKr8VSRPIEMU5+7 cQv7wRB65VXxudevaGUkGvfocSErfJ0FF3YSHdezrbY4VVLUY/VsWrbFWpXcex6i T/DbpKZJya1HOsfhv67yB1YsVS3YZwg7PP2tIMXxHiP/Tf/arcswlVA3WwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFOfIBZ9c8W6SkFqNizkv89/zJLsaMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvNThnRm4xenhicEtRV28yTE9TX3ozX01rdXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQALVCeAwQA LVMcAwQALVMfAwQALVwBAwQAVDYhAwQAufHQAwQAwJ9jAwQAwRpzAwQAy59aMA0G CSqGSIb3DQEBCwUAA4IBAQBhZ4EzvwsEMTEUi15M9BvApZq7H+nWyJ2LM1a0JKvV 7RTCpIxF7lt2hTLTnlc2RfeoWwpzSS0pxTLoD6/xXh2tg4E+QNlfUQ69drmigJfb PCGF3sXNqEXVyLZYyD6kxQ90RDQx/1YWhCkNr1qMPsnK6mjM3Gj2GjUFWg81vMB5 ivUxY1THas5QjduInx2ZPz7xnYH4wYtslC+Ctz2j0O6m1qLLBrwJCfGUT0M6uyao oPuk+/DPOT4cdW2sBm5UiTW0UuDXu+hWecUkm85raasS3iMoZWUCKnMkNlqP8VJL eOlIwhoUn016omF/0OT6eDVWiATrzOCtm4EIoxHtpOmc -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:41 2026 by rpki-client