This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/eGusB22iBagLcPjVaFn4WP4kVSs.roa
File: eGusB22iBagLcPjVaFn4WP4kVSs.roa (raw, json)
Hash identifier: 6GDF0QjNp0uRC8EMGmqG2R5ubhulgzL+JF9qTx5ScHA=
Subject key identifier: 78:6B:AC:07:6D:A2:05:A8:0B:70:F8:D5:68:59:F8:58:FE:24:55:2B
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019B7DCB5C8FCCE10AF7D4C6F899B3795783
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/eGusB22iBagLcPjVaFn4WP4kVSs.roa
Signing time: Fri 02 Jan 2026 08:20:38 +0000
ROA not before: Fri 02 Jan 2026 08:20:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38974
IP address blocks: 195.216.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:5c:8f:cc:e1:0a:f7:d4:c6:f8:99:b3:79:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 2 08:20:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=786bac076da205a80b70f8d56859f858fe24552b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:26:5f:f8:6c:c0:db:cc:b6:96:19:cf:72:
ac:92:e0:88:63:f1:29:59:bd:c1:b1:6e:bf:a2:57:
d0:90:34:d1:40:a7:6d:d7:06:cd:0f:f0:e6:5f:5e:
05:b5:38:77:e1:74:a3:7a:45:31:58:e2:95:57:b8:
ab:a9:7e:13:fe:16:b0:48:b5:e7:26:0e:f6:c0:54:
3c:4d:95:65:4d:1d:bd:c0:d5:41:b4:e4:14:65:02:
09:67:6f:f8:d1:e6:2e:f7:49:ae:99:a5:7d:30:0f:
6a:b8:1a:39:17:ed:8e:01:32:07:32:76:79:76:b9:
3b:9f:58:ff:7a:72:e9:f4:c9:12:5e:76:1e:62:b5:
61:19:fb:19:58:c3:6b:d4:91:33:24:50:d6:4d:c1:
8f:8e:2f:2b:5e:5c:70:13:30:c8:25:6e:34:d8:5b:
17:46:b3:97:0f:08:bf:9c:60:ea:d2:00:2d:5b:17:
73:e9:a6:7b:9e:ee:0a:b1:45:41:d4:61:cf:3a:ab:
8c:2f:64:76:80:94:fd:76:3f:59:a3:c8:02:52:97:
0f:43:f1:e9:7d:78:39:7c:04:6e:06:3b:0c:20:aa:
f8:2e:08:0d:39:47:39:9f:c3:9b:e2:e7:46:45:b0:
da:10:d1:51:1e:10:c9:e0:cc:51:a8:d7:41:87:af:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6B:AC:07:6D:A2:05:A8:0B:70:F8:D5:68:59:F8:58:FE:24:55:2B
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/eGusB22iBagLcPjVaFn4WP4kVSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.152.0/24
Signature Algorithm: sha256WithRSAEncryption
43:5d:43:1e:3b:2a:ad:9b:19:ea:e4:89:c3:59:20:f9:2d:66:
01:3d:e8:bd:61:e0:39:c8:d0:a7:f4:c0:1c:90:91:ac:6c:5f:
74:19:8a:df:1e:db:48:37:57:1c:30:38:e7:57:83:6c:30:39:
19:a4:7d:7f:2e:df:c2:2b:0e:0a:f9:40:38:cf:1f:ae:14:fa:
f4:26:b5:48:a3:17:91:52:d4:90:b6:7a:29:2f:d4:69:19:22:
00:3a:f0:17:9e:d2:8c:bb:dd:a8:c5:2b:2c:e6:67:a5:34:b5:
21:31:60:ca:3e:d5:10:03:1d:86:17:ef:31:01:1f:eb:ab:c0:
9c:3e:2f:f4:5c:41:0e:37:f6:9e:4e:9a:81:e0:5a:2b:75:8d:
6f:75:11:67:bb:79:31:56:7e:19:e6:7d:f9:f4:fc:cf:57:38:
97:4c:6d:6b:45:64:7e:e3:24:f0:c0:5d:54:82:54:6c:ef:84:
7d:f1:5c:7a:6b:fe:fc:79:6d:8c:a6:51:ed:7c:53:cf:a0:fb:
8f:51:b9:29:09:a5:d1:21:02:d1:18:61:0b:7c:e0:f8:4d:3d:
6c:2f:85:cd:e8:12:9d:25:1f:8d:76:47:fa:ce:7b:dd:99:c1:
5b:9c:18:32:9a:bd:68:c0:61:68:24:77:72:b1:f0:f3:af:2c:
8c:06:72:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9y1yPzOEK99TG+JmzeVeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZiYWMwNzZkYTIwNWE4MGI3MGY4ZDU2ODU5Zjg1OGZlMjQ1NTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorQmX/hswNvMtpYZz3KskuCIY/Ep
Wb3BsW6/olfQkDTRQKdt1wbND/DmX14FtTh34XSjekUxWOKVV7irqX4T/hawSLXn
Jg72wFQ8TZVlTR29wNVBtOQUZQIJZ2/40eYu90mumaV9MA9quBo5F+2OATIHMnZ5
drk7n1j/enLp9MkSXnYeYrVhGfsZWMNr1JEzJFDWTcGPji8rXlxwEzDIJW402FsX
RrOXDwi/nGDq0gAtWxdz6aZ7nu4KsUVB1GHPOquML2R2gJT9dj9Zo8gCUpcPQ/Hp
fXg5fARuBjsMIKr4LggNOUc5n8Ob4udGRbDaENFRHhDJ4MxRqNdBh6/i6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhrrAdtogWoC3D41WhZ+Fj+JFUrMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvZUd1c0IyMmlCYWdMY1BqVmFGbjRXUDRrVlNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9iYMA0G
CSqGSIb3DQEBCwUAA4IBAQBDXUMeOyqtmxnq5InDWSD5LWYBPei9YeA5yNCn9MAc
kJGsbF90GYrfHttIN1ccMDjnV4NsMDkZpH1/Lt/CKw4K+UA4zx+uFPr0JrVIoxeR
UtSQtnopL9RpGSIAOvAXntKMu92oxSss5melNLUhMWDKPtUQAx2GF+8xAR/rq8Cc
Pi/0XEEON/aeTpqB4FordY1vdRFnu3kxVn4Z5n359PzPVziXTG1rRWR+4yTwwF1U
glRs74R98Vx6a/78eW2MplHtfFPPoPuPUbkpCaXRIQLRGGELfOD4TT1sL4XN6BKd
JR+Ndkf6znvdmcFbnBgymr1owGFoJHdysfDzryyMBnJD
-----END CERTIFICATE-----
Generated at Tue Jan 20 02:44:44 2026 by rpki-client