This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EAZxUmnb_lL07Xb6_giS2hKqaVA.roa File: EAZxUmnb_lL07Xb6_giS2hKqaVA.roa (raw, json) Hash identifier: 5GoGpK3TH7M3P5ISG3eHVb4cn1Ji53A6w3RQW1+Rh5s= Subject key identifier: 10:06:71:52:69:DB:FE:52:F4:ED:76:FA:FE:08:92:DA:12:AA:69:50 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7E142674F4F55E78D9DA7AF23D850 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EAZxUmnb_lL07Xb6_giS2hKqaVA.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215537 IP address blocks: 159.148.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e1:42:67:4f:4f:55:e7:8d:9d:a7:af:23:d8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1006715269dbfe52f4ed76fafe0892da12aa6950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f2:5f:3c:a9:0e:11:2d:1b:52:d3:bb:4b:d5: 66:1f:bc:5c:72:22:3f:a1:61:39:5c:73:fb:cb:d7: 10:9b:da:e8:c7:cc:54:ae:4c:76:39:b9:83:4d:4f: ae:b6:55:da:60:8d:04:98:0e:bb:c1:92:ab:76:1c: 64:ab:0b:1f:a3:a0:8c:c8:f2:32:b0:28:a8:af:53: 3b:a9:a1:7c:4f:be:17:65:ff:ae:3d:a2:d8:e3:ba: 78:84:76:32:04:50:83:65:73:eb:82:25:ef:6e:01: 04:6d:78:5c:79:40:e6:52:c6:c7:bc:7a:8c:9c:66: ef:a3:f2:b0:2c:c6:bf:75:d4:ee:eb:19:45:61:8e: e0:65:8c:0d:2e:b0:97:72:02:f2:fc:e9:1f:02:cf: ea:ff:92:b5:9e:a6:1d:70:25:65:a8:50:98:d5:e4: 0c:47:7e:9c:73:b9:b3:6c:af:73:bb:8a:93:75:c3: 1a:19:de:60:f2:94:ab:5e:77:b6:6b:e8:0d:74:1f: 26:5a:5c:7a:8f:59:88:f8:e0:c2:ef:e1:01:21:01: 06:ef:80:0a:c8:9f:0f:af:e7:88:e1:7b:24:f0:66: 79:90:dc:11:d3:50:ea:3a:5b:76:7d:4b:20:ea:46: 88:ee:a1:b2:a8:ee:97:84:78:63:ce:f9:64:7c:56: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:06:71:52:69:DB:FE:52:F4:ED:76:FA:FE:08:92:DA:12:AA:69:50 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EAZxUmnb_lL07Xb6_giS2hKqaVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.124.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:89:fa:96:14:30:cf:c6:11:f3:0b:0e:f9:80:bd:11:f4:2e: fd:e3:b7:ae:92:94:d9:c2:fa:dd:aa:ca:cb:58:19:ea:49:fd: 59:35:2b:ac:c4:e0:15:77:95:b9:e0:d6:c5:f3:5a:19:eb:59: e0:a3:8e:ad:d8:9a:c0:e7:8c:a1:f5:21:e8:ee:a4:82:09:98: ff:fa:5f:d2:90:71:2d:3a:4e:27:67:46:6c:d6:cf:09:a0:b0: d5:50:15:5e:3b:7c:69:7f:a8:41:ba:63:04:44:8e:03:ff:3f: c9:21:5a:5c:6f:58:9b:5a:ea:aa:24:ea:dc:56:25:95:8c:2d: 7d:82:3c:ae:2a:13:45:e4:fa:a3:08:5a:20:2e:38:31:bf:bf: 5b:1d:86:a9:2e:6d:39:93:54:ee:14:0f:09:19:18:5d:d8:de: fd:4c:99:a0:9a:da:75:88:3f:53:ad:36:8c:73:17:a7:04:59: 45:51:2d:64:16:b1:63:59:6f:a2:6c:14:00:2c:d9:9a:e7:dd: dc:5c:d4:b5:11:84:34:b9:0d:31:4a:5b:6d:7f:3b:44:74:01: d6:b4:41:61:6a:fa:16:bc:3f:25:f3:b4:eb:72:ae:dc:43:d1: 51:3a:79:1b:a9:97:3b:5c:f2:fd:cd:2e:87:bf:0d:12:dd:bc: 77:5a:3a:73 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+FCZ09PVeeNnaevI9hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDA2NzE1MjY5ZGJmZTUyZjRlZDc2ZmFmZTA4OTJkYTEyYWE2OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfJfPKkOES0bUtO7S9VmH7xcciI/ oWE5XHP7y9cQm9rox8xUrkx2ObmDTU+utlXaYI0EmA67wZKrdhxkqwsfo6CMyPIy sCior1M7qaF8T74XZf+uPaLY47p4hHYyBFCDZXPrgiXvbgEEbXhceUDmUsbHvHqM nGbvo/KwLMa/ddTu6xlFYY7gZYwNLrCXcgLy/OkfAs/q/5K1nqYdcCVlqFCY1eQM R36cc7mzbK9zu4qTdcMaGd5g8pSrXne2a+gNdB8mWlx6j1mI+ODC7+EBIQEG74AK yJ8Pr+eI4Xsk8GZ5kNwR01DqOlt2fUsg6kaI7qGyqO6XhHhjzvlkfFZbxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAGcVJp2/5S9O12+v4IktoSqmlQMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvRUFaeFVtbmJfbEwwN1hiNl9naVMyaEtxYVZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5R8MA0G CSqGSIb3DQEBCwUAA4IBAQAvifqWFDDPxhHzCw75gL0R9C7947eukpTZwvrdqsrL WBnqSf1ZNSusxOAVd5W54NbF81oZ61ngo46t2JrA54yh9SHo7qSCCZj/+l/SkHEt Ok4nZ0Zs1s8JoLDVUBVeO3xpf6hBumMERI4D/z/JIVpcb1ibWuqqJOrcViWVjC19 gjyuKhNF5PqjCFogLjgxv79bHYapLm05k1TuFA8JGRhd2N79TJmgmtp1iD9TrTaM cxenBFlFUS1kFrFjWW+ibBQALNma593cXNS1EYQ0uQ0xSlttfztEdAHWtEFhavoW vD8l87Trcq7cQ9FROnkbqZc7XPL9zS6Hvw0S3bx3Wjpz -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client