This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa File: E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa (raw, json) Hash identifier: uZyNbiAwY6QAC7VVWqEYh3JF/qKdTnkMJgQyPmYloS4= Subject key identifier: 13:94:B6:EB:C1:5F:72:1D:4D:B1:45:E6:E5:77:84:A7:55:F2:F8:9C Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb Certificate serial: 019B7FF29F9A44EAE81D236DE56256481330 Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa Signing time: Fri 02 Jan 2026 18:22:45 +0000 ROA not before: Fri 02 Jan 2026 18:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31519 IP address blocks: 2.58.16.0/22 maxlen: 22 195.26.20.0/23 maxlen: 23 2a09:e0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:9f:9a:44:ea:e8:1d:23:6d:e5:62:56:48:13:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb Validity Not Before: Jan 2 18:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1394b6ebc15f721d4db145e6e57784a755f2f89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:a0:79:d8:14:b0:08:58:cb:49:73:14:eb: 61:58:29:18:19:c7:52:b5:cb:26:52:bb:0a:4b:23: b7:81:81:e7:aa:f4:4f:d0:5c:e2:ed:63:af:aa:6b: f3:04:76:ea:09:67:52:3c:65:50:8a:94:00:b4:eb: 7d:60:c0:df:17:04:a7:d2:80:a4:4d:d8:c6:35:2b: af:18:b1:ac:37:0d:94:2f:3d:df:2a:ac:4f:cd:1e: 16:1c:ab:f5:f6:8e:f9:24:a5:ca:85:dc:f0:61:90: 97:56:a5:bf:89:bf:c3:bc:86:c0:69:7a:6c:72:3d: 49:ad:48:e7:45:cc:15:f7:2b:9a:54:46:8d:14:97: 54:21:78:56:38:b7:f0:b9:68:55:ef:25:fb:2f:e6: c7:4c:7e:2a:d1:b8:96:8e:c1:c7:e5:fe:40:51:ab: d2:75:1d:e7:83:6b:40:79:fe:a6:0c:ea:bf:de:38: 58:36:b3:53:36:bd:8f:0f:43:d6:4f:bf:77:56:d8: 52:10:5d:cb:e2:b9:6e:ac:72:d9:21:7c:14:f0:8d: 5c:06:14:6d:52:9a:33:69:33:aa:4f:4b:a2:b0:2f: b4:e0:6e:9f:53:7b:e3:75:d6:3d:5c:cc:0f:90:a9: e9:27:d4:c4:08:2f:18:d5:7a:69:24:28:b9:86:ab: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:94:B6:EB:C1:5F:72:1D:4D:B1:45:E6:E5:77:84:A7:55:F2:F8:9C X509v3 Authority Key Identifier: keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.16.0/22 195.26.20.0/23 IPv6: 2a09:e0c0::/29 Signature Algorithm: sha256WithRSAEncryption 31:c9:ce:92:3b:18:8a:2d:ff:a6:23:93:3d:c9:67:0a:8f:0c: 39:b7:33:0e:c5:57:ac:36:9d:e6:78:6d:f1:6f:45:91:7c:19: be:36:50:ce:56:e8:03:74:c9:92:24:5d:b6:71:11:f3:f5:5f: e1:08:3a:27:af:df:ee:4f:80:39:de:5f:7f:f2:d6:10:69:6c: ea:6f:b1:34:f4:49:2d:23:b0:cb:cb:33:aa:b0:98:b2:82:eb: 42:b2:22:dd:2c:4d:7b:66:2a:01:0e:2e:46:6e:96:1b:99:46: d2:5c:a2:04:1c:74:41:31:af:c4:fe:ae:4a:8a:29:6f:12:98: 6f:41:dd:d5:3b:a6:cd:5b:a2:c8:bb:1e:f5:5e:ae:86:04:39: 63:6d:97:2b:d4:81:eb:75:4e:a4:6b:18:f6:b6:7c:ce:68:8e: e4:78:34:4b:77:57:d5:bb:e4:65:01:b5:e8:f7:7b:54:b3:b7: 20:04:8e:3a:d5:8b:e8:04:3e:5d:f4:14:9c:e0:26:08:0f:c1: 54:47:30:5e:19:a8:ea:97:70:96:d1:40:de:42:1d:c2:29:ff: c3:0f:7e:90:6b:9c:7d:5c:e2:4e:70:a9:b4:c8:98:52:78:4c: a0:cf:dd:c4:05:a9:90:10:76:1b:c7:5c:33:be:3b:76:03:7e: e8:56:79:70 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8p+aROroHSNt5WJWSBMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl OGE5ZmIwHhcNMjYwMTAyMTgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzk0YjZlYmMxNWY3MjFkNGRiMTQ1ZTZlNTc3ODRhNzU1ZjJmODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCagedgUsAhYy0lzFOthWCkYGcdS tcsmUrsKSyO3gYHnqvRP0Fzi7WOvqmvzBHbqCWdSPGVQipQAtOt9YMDfFwSn0oCk TdjGNSuvGLGsNw2ULz3fKqxPzR4WHKv19o75JKXKhdzwYZCXVqW/ib/DvIbAaXps cj1JrUjnRcwV9yuaVEaNFJdUIXhWOLfwuWhV7yX7L+bHTH4q0biWjsHH5f5AUavS dR3ng2tAef6mDOq/3jhYNrNTNr2PD0PWT793VthSEF3L4rlurHLZIXwU8I1cBhRt UpozaTOqT0uisC+04G6fU3vjddY9XMwPkKnpJ9TECC8Y1XppJCi5hqu+bQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBOUtuvBX3IdTbFF5uV3hKdV8vicMB8GA1UdIwQY MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt NzlkNDI4ODJjOGMwLzEvRTVTMjY4RmZjaDFOc1VYbTVYZUVwMVh5LUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjoQAwQB wxoUMA0EAgACMAcDBQMqCeDAMA0GCSqGSIb3DQEBCwUAA4IBAQAxyc6SOxiKLf+m I5M9yWcKjww5tzMOxVesNp3meG3xb0WRfBm+NlDOVugDdMmSJF22cRHz9V/hCDon r9/uT4A53l9/8tYQaWzqb7E09EktI7DLyzOqsJiygutCsiLdLE17ZioBDi5GbpYb mUbSXKIEHHRBMa/E/q5KiilvEphvQd3VO6bNW6LIux71Xq6GBDljbZcr1IHrdU6k axj2tnzOaI7keDRLd1fVu+RlAbXo93tUs7cgBI461YvoBD5d9BSc4CYID8FURzBe Gajql3CW0UDeQh3CKf/DD36Qa5x9XOJOcKm0yJhSeEygz93EBamQEHYbx1wzvjt2 A37oVnlw -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:21 2026 by rpki-client