This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/25mArsav4GG3WtXno9imIubDQu0.roa File: 25mArsav4GG3WtXno9imIubDQu0.roa (raw, json) Hash identifier: Cg3JHKj2K2hfP/W6oR1e2hB6cuYdLQLmtsGZEIJI+LE= Subject key identifier: DB:99:80:AE:C6:AF:E0:61:B7:5A:D5:E7:A3:D8:A6:22:E6:C3:42:ED Certificate issuer: /CN=58ec149761a5d84b8c49e2c9936bbb748033fe66 Certificate serial: 019B7AC84B6E9A06AB9DA02C93DFB7D524F4 Authority key identifier: 58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/25mArsav4GG3WtXno9imIubDQu0.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3278 IP address blocks: 194.180.0.0/22 maxlen: 22 194.180.0.0/24 maxlen: 24 194.180.1.0/24 maxlen: 24 194.180.2.0/24 maxlen: 24 194.180.3.0/24 maxlen: 24 194.180.4.0/23 maxlen: 23 194.180.4.0/24 maxlen: 24 194.180.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4b:6e:9a:06:ab:9d:a0:2c:93:df:b7:d5:24:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ec149761a5d84b8c49e2c9936bbb748033fe66 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db9980aec6afe061b75ad5e7a3d8a622e6c342ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6e:89:ba:bf:68:93:85:72:9f:75:64:75:b8: f5:82:10:08:9c:17:be:32:be:b5:f9:f0:b9:35:60: 94:9c:9f:b6:8d:5b:28:c0:43:33:f3:23:93:78:dd: 67:39:38:fa:41:e2:cb:9f:3b:3d:68:6f:89:d8:cb: 3a:c1:2d:d8:17:6a:3d:57:70:fd:55:28:f8:55:e9: 10:b3:4b:c6:c0:1b:36:bd:d8:24:c4:3d:20:be:08: e9:1d:d9:4b:b1:ea:0f:cf:dc:06:bf:d8:32:ec:84: fc:4e:eb:a2:2d:82:2d:45:d0:77:5e:dd:3e:fb:8f: 2b:6b:16:76:8b:91:66:85:25:e2:be:05:fd:5a:79: 38:82:07:29:23:f4:30:88:08:be:10:f5:4c:0b:e9: 84:1b:b5:75:35:d4:66:4f:98:0a:c4:42:d3:59:ae: fe:a6:20:b1:cd:20:8b:e2:64:2e:96:56:a2:ff:81: 9e:67:32:a3:47:82:1e:e4:a3:9f:2f:94:8b:c1:fe: f4:b0:f6:bc:52:ec:6d:c4:70:e4:20:6f:c0:d2:87: 44:dc:e4:32:25:b5:26:2e:eb:ba:e5:ab:9a:8d:22: 4c:e9:68:88:0a:e8:dc:62:41:3f:d6:93:57:e3:36: 2c:3c:eb:33:40:9c:a0:a4:70:b2:b6:93:47:0a:a9: b3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:99:80:AE:C6:AF:E0:61:B7:5A:D5:E7:A3:D8:A6:22:E6:C3:42:ED X509v3 Authority Key Identifier: keyid:58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/25mArsav4GG3WtXno9imIubDQu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.180.0.0-194.180.5.255 Signature Algorithm: sha256WithRSAEncryption 4e:2c:fa:1c:b5:fa:54:06:88:eb:87:7e:fa:c5:7d:fd:07:6e: 1b:8c:15:d8:d9:ee:a0:27:a5:be:46:86:b1:b0:90:8d:81:d0: c1:8f:50:50:03:f8:e1:95:d0:f6:88:e1:b3:6e:d6:c8:d3:ba: 25:5d:25:74:93:e8:80:e8:de:d3:fa:d8:97:63:d6:64:01:2f: fe:cd:12:33:53:56:37:cc:7b:9c:b6:2b:60:57:a0:5e:47:28: 4c:2f:3f:27:c8:16:25:9f:b3:e1:30:e3:ae:c3:17:46:c2:19: 15:4e:78:e0:4e:5b:77:03:27:8c:91:88:66:5e:88:61:02:18: d5:ba:7c:06:8f:d3:f3:d5:0e:76:62:14:8a:82:1a:c5:91:ab: a0:89:9f:e2:90:1e:19:84:2a:48:9d:47:3c:9c:25:17:3f:b2: 72:a7:99:38:af:e1:3c:9a:49:9f:04:d5:34:39:3c:15:62:de: 94:09:ec:79:7b:f0:67:d4:ac:a9:3c:3c:37:0c:a7:b0:5f:e2: 0a:13:1b:24:bd:1f:83:9d:e1:67:50:49:81:b3:d5:99:4b:f6: 60:76:2f:51:66:45:40:aa:ea:22:0c:16:c1:2b:b7:8d:17:92: 5f:41:04:62:c3:de:99:f5:6b:c2:ea:85:36:94:e0:63:d6:d7: 4a:2d:5a:7e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt6yEtumgarnaAsk9+31ST0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWMxNDk3NjFhNWQ4NGI4YzQ5ZTJjOTkzNmJiYjc0ODAz M2ZlNjYwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjk5ODBhZWM2YWZlMDYxYjc1YWQ1ZTdhM2Q4YTYyMmU2YzM0MmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m6Jur9ok4Vyn3Vkdbj1ghAInBe+ Mr61+fC5NWCUnJ+2jVsowEMz8yOTeN1nOTj6QeLLnzs9aG+J2Ms6wS3YF2o9V3D9 VSj4VekQs0vGwBs2vdgkxD0gvgjpHdlLseoPz9wGv9gy7IT8TuuiLYItRdB3Xt0+ +48raxZ2i5FmhSXivgX9Wnk4ggcpI/QwiAi+EPVMC+mEG7V1NdRmT5gKxELTWa7+ piCxzSCL4mQullai/4GeZzKjR4Ie5KOfL5SLwf70sPa8UuxtxHDkIG/A0odE3OQy JbUmLuu65auajSJM6WiICujcYkE/1pNX4zYsPOszQJygpHCytpNHCqmzEwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFNuZgK7Gr+Bht1rV56PYpiLmw0LtMB8GA1UdIwQY MBaAFFjsFJdhpdhLjEniyZNru3SAM/5mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV093VWwyR2wyRXVNU2VMSmsydTdkSUF6X21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iNGFkOWMtMGQwYi00YzNkLTg1MzMt ZGJmNjJmYzViZWIwLzEvMjVtQXJzYXY0R0czV3RYbm85aW1JdWJEUXUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iNGFkOWMtMGQwYi00YzNkLTg1MzMtZGJmNjJmYzViZWIw LzEvV093VWwyR2wyRXVNU2VMSmsydTdkSUF6X21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwLCtAME AcK0BDANBgkqhkiG9w0BAQsFAAOCAQEATiz6HLX6VAaI64d++sV9/QduG4wV2Nnu oCelvkaGsbCQjYHQwY9QUAP44ZXQ9ojhs27WyNO6JV0ldJPogOje0/rYl2PWZAEv /s0SM1NWN8x7nLYrYFegXkcoTC8/J8gWJZ+z4TDjrsMXRsIZFU544E5bdwMnjJGI Zl6IYQIY1bp8Bo/T89UOdmIUioIaxZGroImf4pAeGYQqSJ1HPJwlFz+ycqeZOK/h PJpJnwTVNDk8FWLelAnseXvwZ9SsqTw8NwynsF/iChMbJL0fg53hZ1BJgbPVmUv2 YHYvUWZFQKrqIgwWwSu3jReSX0EEYsPemfVrwuqFNpTgY9bXSi1afg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:03 2026 by rpki-client