This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Eg3GqHXllqai--Ryqfs4LnsAQkw.roa File: Eg3GqHXllqai--Ryqfs4LnsAQkw.roa (raw, json) Hash identifier: VLqYkINKHVPdCU/Vh9maJ2+fkqMvSysdguW+i1/SBzQ= Subject key identifier: 12:0D:C6:A8:75:E5:96:A6:A2:FB:E4:72:A9:FB:38:2E:7B:00:42:4C Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10 Certificate serial: 019B77C6CA13C09AE4A312C76A97A50A5406 Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Eg3GqHXllqai--Ryqfs4LnsAQkw.roa Signing time: Thu 01 Jan 2026 04:17:55 +0000 ROA not before: Thu 01 Jan 2026 04:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 157.97.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 10:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ca:13:c0:9a:e4:a3:12:c7:6a:97:a5:0a:54:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10 Validity Not Before: Jan 1 04:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=120dc6a875e596a6a2fbe472a9fb382e7b00424c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:ec:15:79:c4:48:b3:41:54:06:a1:05:ea: 09:5d:5d:8a:3b:a9:e4:17:f8:57:e3:7d:7b:48:34: de:ab:3f:fe:8a:9b:07:b7:b5:cb:f5:53:b8:c3:bc: 6b:a3:c9:a4:0c:81:68:0c:54:c5:b5:ed:b9:b1:23: 84:86:89:6f:fa:0d:4f:2a:9d:e3:41:54:0f:41:03: ee:07:b5:b6:fa:81:b4:e2:c7:0c:d6:23:2b:31:56: d6:dd:82:49:54:88:b6:3e:0e:10:b6:a2:2d:55:b8: d2:c1:1b:4d:9d:cb:79:70:f5:94:8e:14:d9:b2:b9: 29:fc:6f:37:75:48:96:32:c3:d4:34:d5:06:09:dc: 90:a9:8d:18:dd:19:28:f4:ba:5f:92:d0:a1:b0:33: 70:20:1e:a1:58:27:36:25:6f:23:2f:22:ac:26:2b: 02:03:ee:1c:b4:d1:87:a3:b6:ea:03:a9:92:53:60: 5a:4f:1f:c1:5d:b2:d5:b8:d0:2c:3f:1e:9a:08:88: a9:03:8e:01:d7:f7:7b:f4:61:47:a2:85:78:ab:de: 8f:4e:52:ba:4e:61:94:b0:89:fd:61:52:c0:30:41: 16:68:42:bb:68:91:0a:8e:2a:27:97:96:f3:cd:45: c2:69:25:1e:7e:94:05:be:71:05:8a:20:dc:12:91: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0D:C6:A8:75:E5:96:A6:A2:FB:E4:72:A9:FB:38:2E:7B:00:42:4C X509v3 Authority Key Identifier: keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/Eg3GqHXllqai--Ryqfs4LnsAQkw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.124.0/22 Signature Algorithm: sha256WithRSAEncryption 02:b8:6c:49:f2:99:82:1a:4e:07:f7:67:a3:eb:cf:8e:65:52: 32:9f:51:f0:b1:19:ee:1e:54:91:85:9f:12:fd:a8:26:7c:dc: 67:0a:15:4b:e9:1c:92:d8:c4:90:ca:44:b4:6c:35:69:dd:ea: 2a:95:da:ec:19:e8:14:ac:a9:7b:49:9e:11:a4:79:31:16:e4: 14:8a:0d:bc:62:8c:ff:00:13:fb:e1:90:a5:93:f0:59:b4:33: 15:e3:88:df:b8:df:f6:87:13:d0:62:70:de:44:70:c0:a8:6a: 2d:90:a9:20:61:bc:d5:af:d4:e9:35:b8:ef:ab:e8:dc:68:76: df:50:a6:c6:01:ba:7c:e8:c0:77:3a:49:dd:31:39:5e:01:fc: 41:9c:b0:d2:3b:ec:51:31:fc:6b:fe:94:f0:c3:ea:3e:f5:ef: b9:ea:3c:7f:ee:db:04:c2:48:c8:40:9f:12:71:b4:75:99:42: 47:37:2c:95:3a:1f:57:67:4f:bf:82:94:7a:a8:fa:a7:3f:7e: 0d:f1:62:c6:b9:ac:41:6c:fb:83:a3:6a:5b:24:57:01:89:9c: 8e:be:36:96:a3:9c:5b:6e:a9:b0:45:42:58:1a:82:6e:8f:a7: 63:df:6e:6b:52:a9:0c:2f:aa:27:b8:8e:46:1f:0a:ae:86:bc: b8:e7:cd:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsoTwJrkoxLHapelClQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy NzFlMTAwHhcNMjYwMTAxMDQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjBkYzZhODc1ZTU5NmE2YTJmYmU0NzJhOWZiMzgyZTdiMDA0MjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1XsFXnESLNBVAahBeoJXV2KO6nk F/hX4317SDTeqz/+ipsHt7XL9VO4w7xro8mkDIFoDFTFte25sSOEholv+g1PKp3j QVQPQQPuB7W2+oG04scM1iMrMVbW3YJJVIi2Pg4QtqItVbjSwRtNnct5cPWUjhTZ srkp/G83dUiWMsPUNNUGCdyQqY0Y3Rko9LpfktChsDNwIB6hWCc2JW8jLyKsJisC A+4ctNGHo7bqA6mSU2BaTx/BXbLVuNAsPx6aCIipA44B1/d79GFHooV4q96PTlK6 TmGUsIn9YVLAMEEWaEK7aJEKjionl5bzzUXCaSUefpQFvnEFiiDcEpHjqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBINxqh15Zamovvkcqn7OC57AEJMMB8GA1UdIwQY MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt NjM0MTEzNjdkOTBhLzEvRWczR3FIWGxscWFpLS1SeXFmczRMbnNBUWt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnWF8MA0G CSqGSIb3DQEBCwUAA4IBAQACuGxJ8pmCGk4H92ej68+OZVIyn1HwsRnuHlSRhZ8S /agmfNxnChVL6RyS2MSQykS0bDVp3eoqldrsGegUrKl7SZ4RpHkxFuQUig28Yoz/ ABP74ZClk/BZtDMV44jfuN/2hxPQYnDeRHDAqGotkKkgYbzVr9TpNbjvq+jcaHbf UKbGAbp86MB3OkndMTleAfxBnLDSO+xRMfxr/pTww+o+9e+56jx/7tsEwkjIQJ8S cbR1mUJHNyyVOh9XZ0+/gpR6qPqnP34N8WLGuaxBbPuDo2pbJFcBiZyOvjaWo5xb bqmwRUJYGoJuj6dj325rUqkML6onuI5GHwquhry4581H -----END CERTIFICATE-----Generated at Tue Jan 20 17:19:08 2026 by rpki-client