This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ehRbssTu-uCbiOQmcMxAxNH82GI.roa File: ehRbssTu-uCbiOQmcMxAxNH82GI.roa (raw, json) Hash identifier: aYjSWmwkop/Ic11eCu/RIPvn387xQFE72I0LsyWzzf0= Subject key identifier: 7A:14:5B:B2:C4:EE:FA:E0:9B:88:E4:26:70:CC:40:C4:D1:FC:D8:62 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB8B632E65A50A8A452B07FED47FCE Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ehRbssTu-uCbiOQmcMxAxNH82GI.roa Signing time: Thu 01 Jan 2026 00:18:26 +0000 ROA not before: Thu 01 Jan 2026 00:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203634 IP address blocks: 82.222.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8b:63:2e:65:a5:0a:8a:45:2b:07:fe:d4:7f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a145bb2c4eefae09b88e42670cc40c4d1fcd862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:fb:25:81:a8:44:6f:9e:a3:5b:3f:71:89: 8a:41:f8:95:6e:8a:4d:62:1f:6f:dd:74:6c:76:e2: 82:11:68:be:3b:0a:c9:72:8a:b6:ce:fa:93:85:ca: dc:25:0f:de:4c:42:1e:6a:a9:61:32:6f:1b:2d:41: 1d:56:8c:a5:58:22:b6:10:01:bc:ab:6a:38:19:bb: af:9a:19:7b:64:ef:1d:5e:fe:0f:75:bb:73:ab:50: 65:19:b0:de:06:ea:7a:02:50:3f:9c:92:f0:39:3d: c5:be:06:db:ed:45:c2:14:9d:04:0d:ac:20:14:fc: 4d:d4:37:e4:3e:a8:73:61:35:83:68:60:44:15:58: 94:58:d6:1b:c3:c8:b4:cc:5b:60:30:8d:54:51:bd: 86:00:78:74:da:2d:12:94:79:5a:1b:63:46:d2:c1: cd:78:93:bf:e8:c2:01:31:0d:39:62:03:ad:4c:b2: d4:25:5a:ee:88:31:5d:50:b9:fe:db:92:fa:ac:47: e5:69:a6:2a:eb:f9:28:a2:1a:47:28:3a:e8:9e:e2: 17:c1:21:cd:fd:ef:e4:56:9c:34:86:94:b5:a6:eb: da:c9:71:a8:0a:05:8d:1d:db:1d:8c:21:d0:a8:bf: f6:56:4d:4c:4d:6c:8d:0c:48:67:ac:fb:bf:16:74: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:5B:B2:C4:EE:FA:E0:9B:88:E4:26:70:CC:40:C4:D1:FC:D8:62 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ehRbssTu-uCbiOQmcMxAxNH82GI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.222.159.0/24 Signature Algorithm: sha256WithRSAEncryption 01:45:2d:31:63:bc:5a:77:a2:2f:bb:31:7c:21:38:82:3b:5b: c2:79:b1:06:aa:25:1b:ea:e7:40:e1:b8:83:60:65:0e:e4:c1: e8:e8:88:76:96:2b:43:27:92:a4:37:ce:60:99:b4:4e:29:87: e8:3b:a4:84:e7:40:47:16:fa:55:d4:87:c2:30:a3:fa:e4:47: ef:6e:63:d8:f9:02:cb:71:af:87:8b:a1:a1:d3:6e:cb:91:0d: 7d:83:9c:7e:4d:09:b4:af:59:55:19:c5:77:8b:84:8d:41:7f: 03:c6:99:61:65:50:15:1d:57:c1:6f:ab:b0:04:ef:01:eb:d7: ef:16:98:d3:d7:1d:86:ab:47:ec:2f:47:6f:96:6e:f2:a5:7c: 95:ea:af:1b:8e:d3:2a:c2:ff:79:a3:6d:a9:b9:96:48:00:a6: 8e:fb:04:a4:f7:8e:81:4d:bf:ee:af:f9:93:24:e1:da:7a:ee: 43:bd:a7:46:a8:78:29:6f:5a:f1:ba:1d:99:79:67:54:62:d0: 62:9a:1c:ba:c7:14:75:eb:2a:2f:95:46:9a:a3:fc:d6:0b:be: 62:97:1a:c0:5e:44:6a:c6:c3:a3:64:b9:c1:d6:76:ec:d9:5e: 2e:01:e7:6f:3e:cc:e6:f3:34:ff:75:06:79:2f:21:f1:d7:34: 43:5f:5b:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264tjLmWlCopFKwf+1H/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTE0NWJiMmM0ZWVmYWUwOWI4OGU0MjY3MGNjNDBjNGQxZmNkODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c37JYGoRG+eo1s/cYmKQfiVbopN Yh9v3XRsduKCEWi+OwrJcoq2zvqThcrcJQ/eTEIeaqlhMm8bLUEdVoylWCK2EAG8 q2o4Gbuvmhl7ZO8dXv4Pdbtzq1BlGbDeBup6AlA/nJLwOT3Fvgbb7UXCFJ0EDawg FPxN1DfkPqhzYTWDaGBEFViUWNYbw8i0zFtgMI1UUb2GAHh02i0SlHlaG2NG0sHN eJO/6MIBMQ05YgOtTLLUJVruiDFdULn+25L6rEflaaYq6/koohpHKDronuIXwSHN /e/kVpw0hpS1puvayXGoCgWNHdsdjCHQqL/2Vk1MTWyNDEhnrPu/FnTmvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoUW7LE7vrgm4jkJnDMQMTR/NhiMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvZWhSYnNzVHUtdUNiaU9RbWNNeEF4Tkg4MkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUt6fMA0G CSqGSIb3DQEBCwUAA4IBAQABRS0xY7xad6IvuzF8ITiCO1vCebEGqiUb6udA4biD YGUO5MHo6Ih2litDJ5KkN85gmbROKYfoO6SE50BHFvpV1IfCMKP65EfvbmPY+QLL ca+Hi6Gh027LkQ19g5x+TQm0r1lVGcV3i4SNQX8DxplhZVAVHVfBb6uwBO8B69fv FpjT1x2Gq0fsL0dvlm7ypXyV6q8bjtMqwv95o22puZZIAKaO+wSk946BTb/ur/mT JOHaeu5DvadGqHgpb1rxuh2ZeWdUYtBimhy6xxR16yovlUaao/zWC75ilxrAXkRq xsOjZLnB1nbs2V4uAedvPszm8zT/dQZ5LyHx1zRDX1uo -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:17 2026 by rpki-client