This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa File: Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa (raw, json) Hash identifier: PI1tHHpG8YaScy6OswM5/N0e99dLsaLuV7Co2hegDeg= Subject key identifier: 12:1A:B5:7E:03:81:E6:8A:01:03:B4:9C:C1:7A:C4:CB:36:9C:32:53 Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Certificate serial: 019B7E3937F5B213FC6AF00098C48086521D Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43754 IP address blocks: 185.166.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:37:f5:b2:13:fc:6a:f0:00:98:c4:80:86:52:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=121ab57e0381e68a0103b49cc17ac4cb369c3253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:73:75:30:f7:65:50:04:45:19:ab:a4:a3:1c: 78:08:54:86:0c:10:40:d1:84:76:7d:44:53:26:59: 27:41:2a:8c:b9:43:be:56:3e:f9:15:29:b2:9c:84: 4c:18:a5:ae:fc:87:33:1a:eb:76:04:25:eb:c0:a2: ae:78:bc:f5:3d:8d:24:cb:2c:08:67:ff:75:52:19: ed:4d:3a:bd:ea:c9:4f:05:b4:6c:ed:b5:6d:90:93: 9a:2f:00:c5:af:0c:40:bb:6e:e9:3c:6a:bc:90:0d: 16:d1:ea:d5:92:9a:5a:06:e0:dd:07:1a:dd:3b:49: 51:fa:1a:ab:20:11:ca:e7:ef:76:e6:66:88:7e:71: 2f:2e:52:82:a9:ee:f8:bd:1a:ba:a4:00:3c:06:5c: 3d:7e:70:18:8c:d5:80:12:81:3f:01:03:c4:ec:9b: 6d:ed:9c:cb:9f:ab:05:32:44:37:4f:54:8b:45:c4: 02:8b:f7:06:fd:4e:6d:12:15:b7:58:c7:c6:56:a9: c7:bd:92:f4:b5:1c:23:1f:56:f8:99:3c:86:12:fd: 84:12:aa:c6:79:1c:0f:43:83:f2:32:76:55:20:b6: b0:dd:ba:39:98:d1:aa:be:6f:7b:19:ec:f2:9f:0b: 26:85:bb:74:8b:0e:37:af:73:16:fa:d1:5b:00:24: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1A:B5:7E:03:81:E6:8A:01:03:B4:9C:C1:7A:C4:CB:36:9C:32:53 X509v3 Authority Key Identifier: keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/Ehq1fgOB5ooBA7ScwXrEyzacMlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.115.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:20:0d:28:32:89:4d:7e:9d:0c:e3:35:8a:bf:08:6a:6e:ba: 93:2c:02:99:b5:04:b3:5e:7f:77:01:68:22:6b:4d:68:e2:4d: 07:f5:75:8d:78:67:63:81:3e:eb:f9:10:a1:57:5a:d1:28:eb: 68:87:c6:a6:94:86:be:65:38:2e:bd:a7:fc:4d:0b:c6:f9:22: aa:97:f3:92:d5:40:f2:5d:69:26:b0:6b:33:f7:fe:ce:a1:eb: 9e:fe:14:b6:80:f1:55:a6:a1:7b:bd:a8:2c:9d:de:66:ff:22: 39:65:33:69:42:8f:19:9a:ed:87:3c:2d:57:24:59:95:15:a4: 3d:2f:a8:a2:e4:5c:10:23:bb:35:06:4e:15:84:aa:91:f8:f0: 2d:a3:8d:06:35:ca:75:6b:d0:b5:e6:92:35:f7:ff:da:41:18: 1d:4e:a1:cd:19:a8:21:eb:5d:ef:a1:c3:f0:98:6f:8f:81:61: 21:4f:e6:ff:8b:71:70:01:e1:b0:43:1a:5e:03:9a:f3:4e:16: d3:b0:3e:69:eb:0d:39:d7:d7:d2:99:12:28:97:1a:20:07:8b: 39:f6:c9:cc:e6:18:cf:22:dd:9f:16:95:89:75:bc:2d:59:d8: 8b:b8:28:3b:f3:0d:3b:96:06:f9:10:c8:94:b7:d6:99:85:4e: 3e:1b:5c:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTf1shP8avAAmMSAhlIdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjgxOTg5YzNiNmU1OGZkYzk1MzRlZTdlYjNlMjYwZDFk ODc3NDkwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjFhYjU3ZTAzODFlNjhhMDEwM2I0OWNjMTdhYzRjYjM2OWMzMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXN1MPdlUARFGaukoxx4CFSGDBBA 0YR2fURTJlknQSqMuUO+Vj75FSmynIRMGKWu/IczGut2BCXrwKKueLz1PY0kyywI Z/91UhntTTq96slPBbRs7bVtkJOaLwDFrwxAu27pPGq8kA0W0erVkppaBuDdBxrd O0lR+hqrIBHK5+925maIfnEvLlKCqe74vRq6pAA8Blw9fnAYjNWAEoE/AQPE7Jtt 7ZzLn6sFMkQ3T1SLRcQCi/cG/U5tEhW3WMfGVqnHvZL0tRwjH1b4mTyGEv2EEqrG eRwPQ4PyMnZVILaw3bo5mNGqvm97Gezynwsmhbt0iw43r3MW+tFbACTkLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBIatX4DgeaKAQO0nMF6xMs2nDJTMB8GA1UdIwQY MBaAFI0oGYnDtuWP3JU07n6z4mDR2HdJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEt YmNhODBlNDdjNTczLzEvRWhxMWZnT0I1b29CQTdTY3dYckV5emFjTWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8zYmFlODYtYThmYy00M2U2LTgwMWEtYmNhODBlNDdjNTcz LzEvalNnWmljTzI1WV9jbFRUdWZyUGlZTkhZZDBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaZzMA0G CSqGSIb3DQEBCwUAA4IBAQCNIA0oMolNfp0M4zWKvwhqbrqTLAKZtQSzXn93AWgi a01o4k0H9XWNeGdjgT7r+RChV1rRKOtoh8amlIa+ZTguvaf8TQvG+SKql/OS1UDy XWkmsGsz9/7Ooeue/hS2gPFVpqF7vagsnd5m/yI5ZTNpQo8Zmu2HPC1XJFmVFaQ9 L6ii5FwQI7s1Bk4VhKqR+PAto40GNcp1a9C15pI19//aQRgdTqHNGagh613vocPw mG+PgWEhT+b/i3FwAeGwQxpeA5rzThbTsD5p6w0519fSmRIolxogB4s59snM5hjP It2fFpWJdbwtWdiLuCg78w07lgb5EMiUt9aZhU4+G1zf -----END CERTIFICATE-----Generated at Mon Jan 26 22:58:23 2026 by rpki-client