This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/H_uDKBlLLYWjSkRrdAcK39eeDV0.roa File: H_uDKBlLLYWjSkRrdAcK39eeDV0.roa (raw, json) Hash identifier: sLa+J14Ys0E4r0lAG5B4hthFqhO6LkphRctxzt1Vj/U= Subject key identifier: 1F:FB:83:28:19:4B:2D:85:A3:4A:44:6B:74:07:0A:DF:D7:9E:0D:5D Certificate issuer: /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb Certificate serial: 019B7FF2A03220B63A19BF0C4D3598BDAB01 Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/H_uDKBlLLYWjSkRrdAcK39eeDV0.roa Signing time: Fri 02 Jan 2026 18:22:45 +0000 ROA not before: Fri 02 Jan 2026 18:22:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64421 IP address blocks: 2.58.16.0/22 maxlen: 22 195.26.20.0/23 maxlen: 23 2a09:e0c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a0:32:20:b6:3a:19:bf:0c:4d:35:98:bd:ab:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb Validity Not Before: Jan 2 18:22:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ffb8328194b2d85a34a446b74070adfd79e0d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:91:28:03:37:fc:43:2a:7a:4a:67:87:3e: 14:bd:4a:4d:b6:a9:ea:8f:d3:e5:25:ec:66:4f:87: c1:04:01:00:c2:a7:ee:72:b0:aa:cf:2c:f9:ce:d8: e8:04:81:70:32:dc:6f:7d:27:87:1b:fb:02:e8:dd: 06:6c:9e:c0:7d:e5:c5:11:20:db:12:03:4c:8f:84: 5b:29:10:4a:65:b9:a8:d6:23:9d:3b:b8:0d:0e:9b: 00:be:8c:72:4f:aa:44:1d:d8:10:56:24:d7:80:ae: 23:32:ab:bd:cd:2d:f3:e6:40:4e:05:f2:75:3e:76: a9:5b:02:74:92:78:ef:35:b1:49:0d:7d:3b:4d:af: df:2c:13:cd:51:f1:b4:c6:a9:27:ee:1b:3e:51:34: 49:a1:d2:7d:d2:63:b0:6f:c0:67:b0:f0:05:47:fe: d7:0e:bf:95:0d:83:b5:e9:5c:ee:5a:5b:81:90:8e: a1:4c:32:63:ed:25:44:a0:f4:f8:8b:20:ea:aa:aa: f2:e2:09:93:d7:a9:ad:fb:cc:b0:af:25:43:b4:b1: 02:6c:76:d4:39:b2:f5:1d:67:bf:b0:c9:a5:ee:27: 53:05:6a:b0:03:8e:e3:78:39:b4:32:36:b0:93:77: 83:fa:a9:07:3c:46:36:5a:ff:05:ae:45:eb:c9:c3: bc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:FB:83:28:19:4B:2D:85:A3:4A:44:6B:74:07:0A:DF:D7:9E:0D:5D X509v3 Authority Key Identifier: keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/H_uDKBlLLYWjSkRrdAcK39eeDV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.16.0/22 195.26.20.0/23 IPv6: 2a09:e0c0::/29 Signature Algorithm: sha256WithRSAEncryption 9b:74:a8:c2:ab:ee:af:83:e1:d3:b5:e2:f8:9f:7e:3f:a4:b2: b4:77:cd:7a:9c:18:6e:2a:b5:63:28:d4:fc:29:de:4b:97:73: 89:cb:92:1b:f2:40:68:75:65:c8:25:0d:d4:34:8b:00:9b:7d: 62:62:ea:a5:33:aa:99:b4:30:bf:8a:5e:69:6b:d4:14:1f:8d: de:a2:85:73:f9:68:f7:48:12:9f:9e:0b:f8:6c:c4:3b:0b:2d: c9:53:d6:38:19:4d:76:5d:f6:19:03:a8:67:23:72:53:a3:2b: 30:7a:6c:e2:11:8d:c4:e1:c3:39:90:54:b5:06:99:4e:67:47: 1a:be:9f:e3:65:6d:b9:5e:c0:06:97:95:db:52:2a:8c:b9:b9: 3c:4b:df:b8:41:ee:9c:e6:96:83:0a:85:e6:70:fe:e7:e4:bd: d3:73:08:8e:45:da:bf:54:ed:31:25:f2:19:06:79:90:f2:94: e2:5d:e4:ba:05:44:74:2e:8a:40:d9:a7:3e:2d:8e:bc:f2:1f: 54:bc:1e:6c:5b:2b:60:6c:1c:3b:4e:91:b6:af:ac:a8:f3:1e: 6e:36:d2:22:d7:71:34:d9:46:a4:79:50:06:b4:d2:ec:56:85: a5:cb:93:c2:13:b5:6e:0e:c8:61:10:a7:4f:de:de:f5:0d:0e: 29:e6:8b:e8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8qAyILY6Gb8MTTWYvasBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl OGE5ZmIwHhcNMjYwMTAyMTgyMjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZmZiODMyODE5NGIyZDg1YTM0YTQ0NmI3NDA3MGFkZmQ3OWUwZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9aRKAM3/EMqekpnhz4UvUpNtqnq j9PlJexmT4fBBAEAwqfucrCqzyz5ztjoBIFwMtxvfSeHG/sC6N0GbJ7AfeXFESDb EgNMj4RbKRBKZbmo1iOdO7gNDpsAvoxyT6pEHdgQViTXgK4jMqu9zS3z5kBOBfJ1 PnapWwJ0knjvNbFJDX07Ta/fLBPNUfG0xqkn7hs+UTRJodJ90mOwb8BnsPAFR/7X Dr+VDYO16VzuWluBkI6hTDJj7SVEoPT4iyDqqqry4gmT16mt+8ywryVDtLECbHbU ObL1HWe/sMml7idTBWqwA47jeDm0Mjawk3eD+qkHPEY2Wv8FrkXrycO8VQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFB/7gygZSy2Fo0pEa3QHCt/Xng1dMB8GA1UdIwQY MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt NzlkNDI4ODJjOGMwLzEvSF91REtCbExMWVdqU2tScmRBY0szOWVlRFYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCAjoQAwQB wxoUMA0EAgACMAcDBQMqCeDAMA0GCSqGSIb3DQEBCwUAA4IBAQCbdKjCq+6vg+HT teL4n34/pLK0d816nBhuKrVjKNT8Kd5Ll3OJy5Ib8kBodWXIJQ3UNIsAm31iYuql M6qZtDC/il5pa9QUH43eooVz+Wj3SBKfngv4bMQ7Cy3JU9Y4GU12XfYZA6hnI3JT oyswemziEY3E4cM5kFS1BplOZ0cavp/jZW25XsAGl5XbUiqMubk8S9+4Qe6c5paD CoXmcP7n5L3TcwiORdq/VO0xJfIZBnmQ8pTiXeS6BUR0LopA2ac+LY688h9UvB5s WytgbBw7TpG2r6yo8x5uNtIi13E02UakeVAGtNLsVoWly5PCE7VuDshhEKdP3t71 DQ4p5ovo -----END CERTIFICATE-----Generated at Sat Jan 10 03:55:18 2026 by rpki-client