This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EHcmsU9G__vsQla0xf2hh29-zig.roa File: EHcmsU9G__vsQla0xf2hh29-zig.roa (raw, json) Hash identifier: rnqZgbrJ+jdgKDM3MbQHdJ7tJl86aX6592UyPAK8Wmc= Subject key identifier: 10:77:26:B1:4F:46:FF:FB:EC:42:56:B4:C5:FD:A1:87:6F:7E:CE:28 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F7175E7E707316FAD4C8ED422F51 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EHcmsU9G__vsQla0xf2hh29-zig.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42446 IP address blocks: 87.120.91.0/24 maxlen: 24 87.120.197.0/24 maxlen: 24 91.92.232.0/24 maxlen: 24 91.92.233.0/24 maxlen: 24 91.92.234.0/24 maxlen: 24 91.92.235.0/24 maxlen: 24 93.123.104.0/22 maxlen: 24 94.156.146.0/24 maxlen: 24 94.156.147.0/24 maxlen: 24 2a00:1728:30::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f7:17:5e:7e:70:73:16:fa:d4:c8:ed:42:2f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=107726b14f46fffbec4256b4c5fda1876f7ece28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:fb:13:d3:a1:3a:8c:3b:7b:ab:14:06:2b: b4:51:87:95:2d:ef:50:18:3a:77:6e:e4:ba:6c:d7: d0:1e:a6:a0:b8:ff:ec:47:e3:01:71:56:d3:67:9c: 95:52:ec:c9:33:23:e8:37:46:cb:eb:6d:d5:6c:22: 2d:11:ac:8a:50:2f:d0:f2:14:9f:03:14:74:b7:16: 8a:07:43:32:b1:88:51:2e:63:4d:ae:8d:7a:03:26: 05:83:e3:2e:b7:29:8b:41:ef:7c:7b:ed:00:1d:8a: 87:6b:3b:98:8a:f2:04:ea:34:77:e2:b9:b6:35:4f: 68:22:c9:2a:ed:d8:74:16:65:44:b4:ff:3f:7f:eb: 64:79:c8:ca:5e:e0:1e:22:bc:4e:c1:35:34:4b:2d: 92:c5:0a:85:7a:65:ed:60:57:99:2a:af:bc:ba:79: 34:01:fc:d5:06:a3:27:99:a1:43:38:56:9f:0a:f3: 18:fc:7b:5d:b6:c9:f9:49:1e:d2:84:e1:d9:ef:67: fd:da:63:75:f7:e7:c0:eb:37:92:a5:5d:13:17:02: cd:1d:41:8f:73:95:4a:61:28:31:8d:84:e7:f2:68: 1c:a5:7f:73:92:fa:bf:0b:ab:06:c2:03:e3:b8:fa: 14:b6:1d:28:60:fc:9e:79:a3:f0:29:59:99:1b:56: 68:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:77:26:B1:4F:46:FF:FB:EC:42:56:B4:C5:FD:A1:87:6F:7E:CE:28 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EHcmsU9G__vsQla0xf2hh29-zig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.91.0/24 87.120.197.0/24 91.92.232.0/22 93.123.104.0/22 94.156.146.0/23 IPv6: 2a00:1728:30::/48 Signature Algorithm: sha256WithRSAEncryption 58:b1:f1:da:f8:e3:65:54:39:98:f7:c5:8e:47:fc:b0:69:a0: b4:41:88:b4:c6:a4:a0:88:81:3c:94:96:92:ea:f9:df:c2:a3: 1e:e1:65:03:5d:6b:09:c9:48:f3:7e:d1:68:52:3b:90:09:ae: d8:5f:6a:bf:49:35:2d:6b:ad:45:00:ee:ae:36:80:39:9a:44: 8c:75:00:91:34:3e:6f:a3:0b:89:2b:5e:7c:73:74:ee:d0:60: b1:26:90:71:c3:64:ac:0c:2e:16:c5:d2:95:8a:1b:76:87:1f: a7:40:de:86:1e:fb:82:bf:a4:7c:b7:93:59:77:87:c8:9b:70: 43:c1:44:3c:6d:11:50:3d:c2:11:1d:8d:0c:21:bd:3c:5b:b4: dd:6f:55:b6:e5:ee:c3:9b:dd:4a:fc:b6:da:c0:94:03:8d:21: 3a:5b:a6:f9:84:73:5c:50:cb:28:08:92:e8:89:d2:af:65:ce: 07:b5:d3:06:3a:1e:3c:04:25:0c:0d:74:e3:85:11:96:99:57: 22:73:0b:3b:0b:2c:9e:b3:92:63:be:2f:cd:34:cb:f2:ba:36: 6e:d2:8b:d6:c1:6d:33:63:be:d1:b8:c1:9f:67:b2:e6:3b:17: 65:df:3e:8a:96:c4:50:bb:99:6d:d4:e3:6a:6c:81:f5:ac:2f: 62:c0:93:bf -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt4ovcXXn5wcxb61MjtQi9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDc3MjZiMTRmNDZmZmZiZWM0MjU2YjRjNWZkYTE4NzZmN2VjZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLD7E9OhOow7e6sUBiu0UYeVLe9Q GDp3buS6bNfQHqaguP/sR+MBcVbTZ5yVUuzJMyPoN0bL623VbCItEayKUC/Q8hSf AxR0txaKB0MysYhRLmNNro16AyYFg+MutymLQe98e+0AHYqHazuYivIE6jR34rm2 NU9oIskq7dh0FmVEtP8/f+tkecjKXuAeIrxOwTU0Sy2SxQqFemXtYFeZKq+8unk0 AfzVBqMnmaFDOFafCvMY/Htdtsn5SR7ShOHZ72f92mN19+fA6zeSpV0TFwLNHUGP c5VKYSgxjYTn8mgcpX9zkvq/C6sGwgPjuPoUth0oYPyeeaPwKVmZG1ZoFQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFBB3JrFPRv/77EJWtMX9oYdvfs4oMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRUhjbXNVOUdfX3ZzUWxhMHhmMmhoMjktemlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQAV3hbAwQA V3jFAwQCW1zoAwQCXXtoAwQBXpySMA8EAgACMAkDBwAqABcoADAwDQYJKoZIhvcN AQELBQADggEBAFix8dr442VUOZj3xY5H/LBpoLRBiLTGpKCIgTyUlpLq+d/Cox7h ZQNdawnJSPN+0WhSO5AJrthfar9JNS1rrUUA7q42gDmaRIx1AJE0Pm+jC4krXnxz dO7QYLEmkHHDZKwMLhbF0pWKG3aHH6dA3oYe+4K/pHy3k1l3h8ibcEPBRDxtEVA9 whEdjQwhvTxbtN1vVbbl7sOb3Ur8ttrAlAONITpbpvmEc1xQyygIkuiJ0q9lzge1 0wY6HjwEJQwNdOOFEZaZVyJzCzsLLJ6zkmO+L800y/K6Nm7Si9bBbTNjvtG4wZ9n suY7F2XfPoqWxFC7mW3U42psgfWsL2LAk78= -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:04 2026 by rpki-client