This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/Lxg1J8cwURTY9_JQsifitMf5y7A.roa File: Lxg1J8cwURTY9_JQsifitMf5y7A.roa (raw, json) Hash identifier: u1s6RVg6iJ41ZyF0RLUZtYyTUMW/RJjsSfzM2NLlGNs= Subject key identifier: 2F:18:35:27:C7:30:51:14:D8:F7:F2:50:B2:27:E2:B4:C7:F9:CB:B0 Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716 Certificate serial: 019C0588FF687017AFC79EFD733B522E0409 Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/Lxg1J8cwURTY9_JQsifitMf5y7A.roa Signing time: Wed 28 Jan 2026 16:56:30 +0000 ROA not before: Wed 28 Jan 2026 16:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207843 IP address blocks: 2.58.164.0/24 maxlen: 24 2.58.165.0/24 maxlen: 24 2.58.167.0/24 maxlen: 24 2a0f:91c0::/48 maxlen: 48 2a0f:91c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:88:ff:68:70:17:af:c7:9e:fd:73:3b:52:2e:04:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716 Validity Not Before: Jan 28 16:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f183527c7305114d8f7f250b227e2b4c7f9cbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:13:0d:ad:61:c6:5a:89:0a:d9:c9:75:4f:34: 2e:35:64:1c:76:ad:ac:74:5a:0c:ee:e5:b6:1d:5a: 83:14:83:e3:10:3b:76:d2:35:db:e2:ea:6e:14:ab: 10:f6:87:8b:3e:da:82:c6:69:13:9b:4b:35:6b:12: 9a:01:ec:8c:e6:e5:1c:4f:d1:60:8e:d0:9e:1b:0c: 95:3b:11:7e:2d:aa:e7:2d:cc:b6:39:6a:02:6f:22: bf:6e:b6:05:60:3c:5f:c5:16:d2:99:45:97:38:cd: b6:67:d6:98:c3:50:78:19:23:c7:8a:7e:f9:43:f9: ac:e2:60:c3:24:16:89:49:e4:6d:90:36:58:c8:94: ab:05:3f:15:03:fe:8c:93:09:f7:c6:71:8e:9a:4a: f0:e7:37:d9:18:cd:4f:14:dd:f8:34:5d:fa:b5:40: 29:60:ec:40:f2:a2:03:7a:17:e6:c7:f9:af:a3:3e: 76:92:ac:48:74:b9:5b:41:01:24:0d:02:d4:b5:12: aa:8a:7d:da:6a:b9:03:0f:7d:af:0c:90:58:48:94: 33:9c:0b:cc:c5:9d:63:7b:7a:d8:e7:39:95:2d:6c: 4f:33:8f:bf:b3:f9:a0:e5:41:ff:4f:48:d2:58:1b: c7:65:3b:a5:78:7f:53:36:0b:5c:ea:19:c7:fd:82: 65:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:18:35:27:C7:30:51:14:D8:F7:F2:50:B2:27:E2:B4:C7:F9:CB:B0 X509v3 Authority Key Identifier: keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/Lxg1J8cwURTY9_JQsifitMf5y7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.164.0/23 2.58.167.0/24 IPv6: 2a0f:91c0::/47 Signature Algorithm: sha256WithRSAEncryption 03:e0:40:5f:03:d4:5b:a5:6d:45:f3:8c:7a:2b:39:90:3e:92: a4:8b:f2:68:db:62:8c:d6:34:1d:1d:68:ef:95:9e:d8:d9:0d: b9:38:b1:b8:5c:82:b2:a9:23:57:10:e3:06:ff:76:61:0f:e2: 12:dc:76:68:f4:69:78:2e:5b:a4:ec:77:2e:c7:06:ef:69:dc: 01:92:55:d3:78:ef:2f:ea:e5:bc:69:27:c9:5f:6d:5c:c4:35: 29:e7:14:36:fd:eb:07:b8:3e:43:6b:c5:2d:05:2c:80:8d:21: 62:4f:8b:ac:9a:da:2f:69:65:a7:fc:92:92:49:7c:a7:6d:2a: 3c:cd:d4:89:41:4c:d4:db:3a:fa:99:fd:63:3d:69:79:f5:e2: 86:7b:79:2a:89:a6:3b:aa:d5:1a:02:da:e7:15:ea:37:7c:64: d7:aa:65:7d:3c:02:f3:a3:f8:b1:85:9e:79:ce:91:87:52:ad: b0:80:51:c9:d9:44:3d:1d:0c:36:15:dd:f0:4f:3d:71:29:b2: 76:ee:9c:af:16:bd:8b:04:fb:11:f9:d9:25:60:92:0d:7d:63: 50:d6:70:35:63:b4:74:d2:a8:30:26:b6:82:59:ed:ff:75:79: 6d:ae:0e:12:08:b5:d0:16:e8:19:fc:8d:f2:3a:cd:1d:a7:47: ac:3d:bf:62 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZwFiP9ocBevx579cztSLgQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWI2Y2IyZTgwN2FlY2ViZDdlMDNhODA4MDhmYWIyM2Q5 YzQ3MTYwHhcNMjYwMTI4MTY1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjE4MzUyN2M3MzA1MTE0ZDhmN2YyNTBiMjI3ZTJiNGM3ZjljYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxMNrWHGWokK2cl1TzQuNWQcdq2s dFoM7uW2HVqDFIPjEDt20jXb4upuFKsQ9oeLPtqCxmkTm0s1axKaAeyM5uUcT9Fg jtCeGwyVOxF+LarnLcy2OWoCbyK/brYFYDxfxRbSmUWXOM22Z9aYw1B4GSPHin75 Q/ms4mDDJBaJSeRtkDZYyJSrBT8VA/6Mkwn3xnGOmkrw5zfZGM1PFN34NF36tUAp YOxA8qIDehfmx/mvoz52kqxIdLlbQQEkDQLUtRKqin3aarkDD32vDJBYSJQznAvM xZ1je3rY5zmVLWxPM4+/s/mg5UH/T0jSWBvHZTuleH9TNgtc6hnH/YJldwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFC8YNSfHMFEU2PfyULIn4rTH+cuwMB8GA1UdIwQY MBaAFL2rbLLoB67OvX4DqAgI+rI9nEcWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2It MjlmNzhjMjc5ODlmLzEvTHhnMUo4Y3dVUlRZOV9KUXNpZml0TWY1eTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS85YjQ1MzAtNzZlNC00NDAxLWE4N2ItMjlmNzhjMjc5ODlm LzEvdmF0c3N1Z0hyczY5ZmdPb0NBajZzajJjUnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBAjqkAwQA AjqnMA8EAgACMAkDBwEqD5HAAAAwDQYJKoZIhvcNAQELBQADggEBAAPgQF8D1Ful bUXzjHorOZA+kqSL8mjbYozWNB0daO+VntjZDbk4sbhcgrKpI1cQ4wb/dmEP4hLc dmj0aXguW6Tsdy7HBu9p3AGSVdN47y/q5bxpJ8lfbVzENSnnFDb96we4PkNrxS0F LICNIWJPi6ya2i9pZaf8kpJJfKdtKjzN1IlBTNTbOvqZ/WM9aXn14oZ7eSqJpjuq 1RoC2ucV6jd8ZNeqZX08AvOj+LGFnnnOkYdSrbCAUcnZRD0dDDYV3fBPPXEpsnbu nK8WvYsE+xH52SVgkg19Y1DWcDVjtHTSqDAmtoJZ7f91eW2uDhIItdAW6Bn8jfI6 zR2nR6w9v2I= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:31 2026 by rpki-client