This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EPH936Qc4pN-NRZEtks45mMYwdw.roa File: EPH936Qc4pN-NRZEtks45mMYwdw.roa (raw, json) Hash identifier: g4y5Rg9awyTSmqRwn21zxTNz1btz8mDWqc67pAJI2As= Subject key identifier: 10:F1:FD:DF:A4:1C:E2:93:7E:35:16:44:B6:4B:38:E6:63:18:C1:DC Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6CF4609B21882F801AE13519FDF4C Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EPH936Qc4pN-NRZEtks45mMYwdw.roa Signing time: Thu 01 Jan 2026 04:17:56 +0000 ROA not before: Thu 01 Jan 2026 04:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 157.97.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:cf:46:09:b2:18:82:f8:01:ae:13:51:9f:df:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10f1fddfa41ce2937e351644b64b38e66318c1dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:17:b4:31:a5:1b:97:a0:cf:7c:a0:0f:48:57: 2e:ba:0f:47:37:d6:5e:a6:ac:f8:98:19:b2:ff:f8: 0d:83:fe:34:63:ac:85:8c:db:47:39:01:19:50:42: e0:d5:c2:2e:16:e1:9d:df:a6:27:e7:cf:c4:41:fc: a8:ba:cc:72:20:65:9f:ee:14:1b:92:db:99:89:4e: cb:63:1c:0c:32:e8:f1:f0:0e:dc:0a:16:a5:71:97: 8c:61:64:dd:bd:5e:4c:1e:16:69:0b:b4:57:45:a9: 49:30:a7:c6:17:45:f3:21:6a:02:f3:de:2c:f7:a3: 93:48:a0:74:80:bc:23:bd:32:84:a2:7f:f1:13:3a: 52:a5:ba:a9:60:a8:eb:d5:df:43:69:95:14:be:e3: 15:9e:a6:4c:04:e3:7b:a1:41:8f:29:0a:32:2e:55: d7:07:64:71:2c:3b:ca:e1:8c:be:6d:fe:28:9b:5b: ab:c8:be:38:e2:47:89:95:8f:e3:ea:7f:3d:b2:97: bc:9a:07:b8:5c:8a:f7:27:05:f6:8d:c3:f0:5f:24: 66:da:ea:80:e4:91:c2:18:43:ae:34:4a:ca:14:e7: 15:b4:4e:61:ce:05:64:7a:0d:21:08:9a:94:ce:2f: bc:57:48:57:ef:96:cd:3f:ae:5f:f1:3a:82:8f:a9: 56:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F1:FD:DF:A4:1C:E2:93:7E:35:16:44:B6:4B:38:E6:63:18:C1:DC X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/EPH936Qc4pN-NRZEtks45mMYwdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.122.0/24 Signature Algorithm: sha256WithRSAEncryption 53:61:ab:60:b3:a5:b0:34:80:af:6a:e2:6d:78:5c:d5:60:dd: da:8f:e3:e3:90:04:7f:bb:d7:da:42:ba:0d:f9:b8:b7:6b:c9: e4:15:48:03:97:99:c8:99:29:86:35:01:2e:e9:2f:05:50:a0: d3:4a:a0:a7:f5:a2:b0:69:fa:1f:64:21:00:19:fb:87:55:bc: 22:eb:97:b1:38:46:86:e4:4b:ea:6e:b7:68:d2:11:7f:26:78: cd:f0:ef:69:5e:1e:39:c9:d3:06:b2:ed:43:09:ba:92:b0:0f: c7:24:7b:fd:65:4b:26:58:48:7f:7e:cc:5c:39:58:19:78:0c: 49:1d:80:0d:35:34:a6:1e:3e:98:c3:5e:99:d2:3e:af:5f:b5: 57:a3:d6:4f:8a:f7:a1:45:6a:e8:15:75:e5:fe:b2:10:b1:43: 03:c5:46:61:51:76:e9:ab:26:17:c3:34:a2:81:60:d3:ee:82: 65:da:d9:f1:85:fd:3b:ff:fd:27:a6:19:53:de:b9:aa:b3:73: e6:55:82:8d:d3:75:19:f1:0a:5a:2c:88:df:c2:63:45:43:32: 28:5c:2c:aa:8b:7d:8e:18:5c:53:31:1a:a9:71:98:d4:84:60: f0:1e:04:f3:9a:df:9f:45:86:81:4b:7e:ed:b7:6b:c7:67:f1: b6:49:75:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xs9GCbIYgvgBrhNRn99MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGYxZmRkZmE0MWNlMjkzN2UzNTE2NDRiNjRiMzhlNjYzMThjMWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Be0MaUbl6DPfKAPSFcuug9HN9Ze pqz4mBmy//gNg/40Y6yFjNtHOQEZUELg1cIuFuGd36Yn58/EQfyousxyIGWf7hQb ktuZiU7LYxwMMujx8A7cChalcZeMYWTdvV5MHhZpC7RXRalJMKfGF0XzIWoC894s 96OTSKB0gLwjvTKEon/xEzpSpbqpYKjr1d9DaZUUvuMVnqZMBON7oUGPKQoyLlXX B2RxLDvK4Yy+bf4om1uryL444keJlY/j6n89spe8mge4XIr3JwX2jcPwXyRm2uqA 5JHCGEOuNErKFOcVtE5hzgVkeg0hCJqUzi+8V0hX75bNP65f8TqCj6lWzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDx/d+kHOKTfjUWRLZLOOZjGMHcMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvRVBIOTM2UWM0cE4tTlJaRXRrczQ1bU1Zd2R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnWF6MA0G CSqGSIb3DQEBCwUAA4IBAQBTYatgs6WwNICvauJteFzVYN3aj+PjkAR/u9faQroN +bi3a8nkFUgDl5nImSmGNQEu6S8FUKDTSqCn9aKwafofZCEAGfuHVbwi65exOEaG 5Evqbrdo0hF/JnjN8O9pXh45ydMGsu1DCbqSsA/HJHv9ZUsmWEh/fsxcOVgZeAxJ HYANNTSmHj6Yw16Z0j6vX7VXo9ZPivehRWroFXXl/rIQsUMDxUZhUXbpqyYXwzSi gWDT7oJl2tnxhf07//0nphlT3rmqs3PmVYKN03UZ8QpaLIjfwmNFQzIoXCyqi32O GFxTMRqpcZjUhGDwHgTzmt+fRYaBS37tt2vHZ/G2SXVq -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:08 2026 by rpki-client