This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/e8WFEOGRjq_7XKy94zM9J13kTeQ.roa File: e8WFEOGRjq_7XKy94zM9J13kTeQ.roa (raw, json) Hash identifier: 3P9KGWUtlekMxzLx7pO8jvUcY8FiZdNAqH6w1gutoYc= Subject key identifier: 7B:C5:85:10:E1:91:8E:AF:FB:5C:AC:BD:E3:33:3D:27:5D:E4:4D:E4 Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758FADD8E48882998DA6B68E3A1D2FB Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/e8WFEOGRjq_7XKy94zM9J13kTeQ.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215341 IP address blocks: 2.58.54.0/24 maxlen: 24 5.180.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fa:dd:8e:48:88:29:98:da:6b:68:e3:a1:d2:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc58510e1918eaffb5cacbde3333d275de44de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:13:71:1e:bc:e1:bd:ce:cf:c4:48:76:22: 9e:a0:5e:d6:a7:3c:98:c0:7e:4e:1e:96:ed:16:06: 76:58:2d:0c:52:04:45:69:37:3b:7a:3b:80:1f:df: 05:3f:96:1b:68:70:a2:19:1f:db:dd:3f:c1:de:8f: 4c:00:70:dd:b5:9f:10:24:02:09:90:68:24:ca:77: d0:c5:30:1e:42:3f:ac:52:d7:67:a6:67:74:8e:5b: 76:bc:95:23:80:c1:04:85:49:a8:dc:4f:0f:2e:c6: b9:11:a5:fc:58:11:c5:3d:ce:1b:8c:82:0f:b6:42: 83:95:90:23:d3:9b:fe:4c:72:0b:e6:d2:5f:b4:c6: 7d:5b:72:d4:7f:fc:4c:89:15:0e:e6:8a:a9:2e:8c: a2:18:23:d1:0a:3c:5a:27:fb:95:8a:6b:3f:18:89: ac:2a:ee:b7:65:70:52:b4:81:16:3a:af:71:8d:2d: 05:2c:5b:e0:d4:1c:ba:14:01:4b:23:8f:db:c2:9e: 59:92:6f:da:7a:78:37:19:92:ab:06:ad:43:9b:75: bd:0e:b5:c6:2e:d5:8d:60:0b:75:58:52:4e:c3:02: 2c:72:32:0f:f5:67:fe:a1:34:fe:59:14:02:37:2c: 92:97:77:dd:2d:4c:a2:8d:4d:1d:46:69:ff:63:47: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C5:85:10:E1:91:8E:AF:FB:5C:AC:BD:E3:33:3D:27:5D:E4:4D:E4 X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/e8WFEOGRjq_7XKy94zM9J13kTeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.54.0/24 5.180.194.0/24 Signature Algorithm: sha256WithRSAEncryption 99:5e:bf:29:2b:63:14:5b:1d:65:bc:77:ee:19:41:91:10:4c: 16:16:32:ea:5d:b8:ee:14:0b:40:9d:b8:bf:74:15:ce:e8:33: d5:bf:4b:b7:45:32:c4:7e:00:8c:44:07:8f:02:a9:2f:84:fd: 4f:a8:54:1e:c2:63:1f:dc:07:56:36:c7:ee:8c:82:e7:e9:26: 46:ef:12:ce:97:ea:28:a9:43:b6:f6:2d:97:60:24:9e:4d:b3: 82:ad:b4:8d:b4:cd:02:43:1b:08:12:1e:ce:29:87:80:5f:56: 06:4e:18:23:ca:af:85:57:21:aa:86:d6:cf:96:3f:b6:31:2f: 87:68:91:0b:41:cb:81:33:84:7e:50:38:fa:15:f8:f4:ba:71: c2:1a:02:a0:5d:d0:f4:55:4e:f2:b9:a7:f0:a1:e0:c0:b3:89: be:cf:14:bb:2a:a4:53:65:0d:53:14:7a:d3:73:8e:ee:0f:bd: fd:de:79:e9:59:ec:1a:38:10:1d:3e:03:7b:f9:6f:79:78:f0: 44:9e:fd:9f:65:d5:de:e4:d6:da:9b:71:53:cf:64:05:9d:48: 33:b0:e8:61:99:a3:a8:a1:1b:c3:cc:a0:78:9a:db:ae:43:9f: 39:b9:f9:bb:a7:65:f8:d9:12:ff:28:45:a5:b0:7a:be:97:78: 5b:98:2b:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WPrdjkiIKZjaa2jjodL7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmM1ODUxMGUxOTE4ZWFmZmI1Y2FjYmRlMzMzM2QyNzVkZTQ0ZGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfMTcR684b3Oz8RIdiKeoF7WpzyY wH5OHpbtFgZ2WC0MUgRFaTc7ejuAH98FP5YbaHCiGR/b3T/B3o9MAHDdtZ8QJAIJ kGgkynfQxTAeQj+sUtdnpmd0jlt2vJUjgMEEhUmo3E8PLsa5EaX8WBHFPc4bjIIP tkKDlZAj05v+THIL5tJftMZ9W3LUf/xMiRUO5oqpLoyiGCPRCjxaJ/uVims/GIms Ku63ZXBStIEWOq9xjS0FLFvg1By6FAFLI4/bwp5Zkm/aeng3GZKrBq1Dm3W9DrXG LtWNYAt1WFJOwwIscjIP9Wf+oTT+WRQCNyySl3fdLUyijU0dRmn/Y0dpqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHvFhRDhkY6v+1ysveMzPSdd5E3kMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvZThXRkVPR1JqcV83WEt5OTR6TTlKMTNrVGVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjo2AwQA BbTCMA0GCSqGSIb3DQEBCwUAA4IBAQCZXr8pK2MUWx1lvHfuGUGREEwWFjLqXbju FAtAnbi/dBXO6DPVv0u3RTLEfgCMRAePAqkvhP1PqFQewmMf3AdWNsfujILn6SZG 7xLOl+ooqUO29i2XYCSeTbOCrbSNtM0CQxsIEh7OKYeAX1YGThgjyq+FVyGqhtbP lj+2MS+HaJELQcuBM4R+UDj6Ffj0unHCGgKgXdD0VU7yuafwoeDAs4m+zxS7KqRT ZQ1TFHrTc47uD7393nnpWewaOBAdPgN7+W95ePBEnv2fZdXe5Nbam3FTz2QFnUgz sOhhmaOooRvDzKB4mtuuQ585ufm7p2X42RL/KEWlsHq+l3hbmCuL -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:47 2026 by rpki-client