This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/eh4veodx92qLlbRds_FdhFYGXUY.roa File: eh4veodx92qLlbRds_FdhFYGXUY.roa (raw, json) Hash identifier: Lu4cjet76Xm54FMH5x8nZEK5D9qX3aYtuOYuw1rQxqE= Subject key identifier: 7A:1E:2F:7A:87:71:F7:6A:8B:95:B4:5D:B3:F1:5D:84:56:06:5D:46 Certificate issuer: /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Certificate serial: 019B7835265F8FA798D2762C827AE1D7F425 Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/eh4veodx92qLlbRds_FdhFYGXUY.roa Signing time: Thu 01 Jan 2026 06:18:27 +0000 ROA not before: Thu 01 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199639 IP address blocks: 176.124.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:26:5f:8f:a7:98:d2:76:2c:82:7a:e1:d7:f4:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1 Validity Not Before: Jan 1 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a1e2f7a8771f76a8b95b45db3f15d8456065d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9d:3c:7e:cc:ba:80:d5:b8:98:82:c2:26:35: bd:25:f6:77:40:94:71:e3:0c:fa:1d:40:14:0b:04: 61:7d:c2:78:c3:83:d3:79:1a:38:bd:96:4d:5d:54: ea:25:c9:6d:f7:65:20:29:aa:a7:e7:a9:1b:8c:5c: 8f:85:3a:64:df:f0:a2:3c:f0:d8:bc:d6:2d:22:bf: fc:d3:ef:46:05:0d:a2:b3:eb:c3:e5:77:7d:59:64: 79:5d:93:ad:02:c5:b9:66:3f:6c:98:33:a2:3d:8e: f9:c8:6d:df:8f:bb:b3:d3:40:91:0c:9b:e2:73:7f: b4:fe:bb:1f:03:e8:77:34:b1:48:e7:0d:8d:5b:bd: 29:9e:a5:b9:74:13:51:98:0a:bb:b6:c2:4a:27:c3: e0:97:8a:03:62:20:b4:91:df:d6:cf:21:08:61:82: df:9a:2d:ac:78:47:b2:08:96:70:78:48:3e:8b:e6: c4:37:e9:af:c1:20:4b:7a:40:a4:6b:2b:4c:c4:36: de:77:a2:a4:bb:88:3b:07:78:a0:b1:99:44:9a:5b: 78:8d:5f:d0:ee:1e:3e:08:fc:b5:c7:06:5b:03:c3: e9:40:6e:24:d5:67:32:bc:53:21:4c:2d:e8:c4:c9: f4:08:8a:c6:c2:f0:d6:de:af:11:ae:71:ac:19:60: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1E:2F:7A:87:71:F7:6A:8B:95:B4:5D:B3:F1:5D:84:56:06:5D:46 X509v3 Authority Key Identifier: keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/eh4veodx92qLlbRds_FdhFYGXUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.224.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:1e:96:12:62:fe:f2:b7:49:d3:95:41:b9:6a:ef:87:5f:c6: 35:d2:86:6b:58:e0:50:8c:e7:e4:73:bd:0e:f8:2c:46:2e:a8: db:e8:7b:81:3e:f7:d4:5e:c9:e0:6e:fe:0e:cf:16:3d:a1:96: 8f:19:14:5c:6d:9c:26:1b:a1:fa:a2:e2:85:5a:94:85:bf:09: 8f:bb:7d:bb:8e:9f:82:82:22:d8:86:d1:07:a5:e6:0b:02:6d: 0e:34:66:f0:7a:03:b9:43:61:fa:07:59:0d:a3:45:36:ca:d9: c1:8d:71:d0:eb:81:c2:b5:8e:44:09:96:85:63:32:b7:51:6c: 92:00:56:8a:b1:7f:5f:d4:2b:60:07:03:6a:29:02:e5:4f:83: 66:03:24:7d:fb:d0:fe:14:1f:9d:52:22:57:4f:dd:d0:e5:6d: e7:99:c0:06:78:11:51:70:96:47:3e:f5:35:18:36:9b:f8:27: 11:29:4c:5d:b2:de:ce:7e:fe:1a:4c:c8:04:02:b3:a3:d1:6c: a1:5c:99:51:ec:dd:5e:24:7a:4d:b5:e3:5a:de:9d:79:3b:ff: 90:c1:7d:66:45:b9:66:9f:6d:09:6e:51:e6:82:92:ba:66:cb: 42:90:43:15:66:ba:e4:13:31:e2:1b:85:5f:67:7e:9b:c7:49: b0:64:b1:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NSZfj6eY0nYsgnrh1/QlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOTUzZTYwNzY3MGZmNzM4ZWVlNmE2YjU3N2Q4YzhiMjgw NGUxZTEwHhcNMjYwMTAxMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTFlMmY3YTg3NzFmNzZhOGI5NWI0NWRiM2YxNWQ4NDU2MDY1ZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr508fsy6gNW4mILCJjW9JfZ3QJRx 4wz6HUAUCwRhfcJ4w4PTeRo4vZZNXVTqJclt92UgKaqn56kbjFyPhTpk3/CiPPDY vNYtIr/80+9GBQ2is+vD5Xd9WWR5XZOtAsW5Zj9smDOiPY75yG3fj7uz00CRDJvi c3+0/rsfA+h3NLFI5w2NW70pnqW5dBNRmAq7tsJKJ8Pgl4oDYiC0kd/WzyEIYYLf mi2seEeyCJZweEg+i+bEN+mvwSBLekCkaytMxDbed6Kku4g7B3igsZlEmlt4jV/Q 7h4+CPy1xwZbA8PpQG4k1WcyvFMhTC3oxMn0CIrGwvDW3q8RrnGsGWAjKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoeL3qHcfdqi5W0XbPxXYRWBl1GMB8GA1UdIwQY MBaAFBCVPmB2cP9zju5qa1d9jIsoBOHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMt MWJjNTUyYzAwZGQ3LzEvZWg0dmVvZHg5MnFMbGJSZHNfRmRoRllHWFVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9hOTkzNTUtMmQwMS00ZGE1LThlNzMtMWJjNTUyYzAwZGQ3 LzEvRUpVLVlIWndfM09PN21wclYzMk1peWdFNGVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHzgMA0G CSqGSIb3DQEBCwUAA4IBAQAPHpYSYv7yt0nTlUG5au+HX8Y10oZrWOBQjOfkc70O +CxGLqjb6HuBPvfUXsngbv4OzxY9oZaPGRRcbZwmG6H6ouKFWpSFvwmPu327jp+C giLYhtEHpeYLAm0ONGbwegO5Q2H6B1kNo0U2ytnBjXHQ64HCtY5ECZaFYzK3UWyS AFaKsX9f1CtgBwNqKQLlT4NmAyR9+9D+FB+dUiJXT93Q5W3nmcAGeBFRcJZHPvU1 GDab+CcRKUxdst7Ofv4aTMgEArOj0WyhXJlR7N1eJHpNteNa3p15O/+QwX1mRblm n20JblHmgpK6ZstCkEMVZrrkEzHiG4VfZ36bx0mwZLEu -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:52 2026 by rpki-client