This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ehIHn3jAZtRRkA33Nc1pYTHjTDg.roa File: ehIHn3jAZtRRkA33Nc1pYTHjTDg.roa (raw, json) Hash identifier: bDhk4ct8DwYt2TZGQPJBM72H8dn80wWF1VZJAu/dGpI= Subject key identifier: 7A:12:07:9F:78:C0:66:D4:51:90:0D:F7:35:CD:69:61:31:E3:4C:38 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019A9D160628E045C0E6E58D51DC0D921A76 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ehIHn3jAZtRRkA33Nc1pYTHjTDg.roa Signing time: Wed 19 Nov 2025 17:07:37 +0000 ROA not before: Wed 19 Nov 2025 17:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 89.187.13.0/24 maxlen: 24 89.187.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:16:06:28:e0:45:c0:e6:e5:8d:51:dc:0d:92:1a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Nov 19 17:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a12079f78c066d451900df735cd696131e34c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:50:53:27:61:1a:a6:5e:22:fc:71:6b:7d: 0f:55:ec:55:4e:22:c7:2e:d8:b0:4a:41:95:2c:1d: e8:7c:7e:7a:02:d7:48:f5:ad:d9:03:3d:6f:2d:3f: b1:4f:86:a5:3a:ff:06:6b:ad:2d:23:76:7a:ee:ba: e5:1d:63:28:a0:18:e2:56:67:18:f3:f2:b1:30:bf: a6:67:d9:d1:83:5e:3c:3b:0f:98:50:9b:8d:ae:e6: e1:64:dc:c2:a1:9a:01:4a:d6:b2:2d:d8:11:0d:7d: a5:eb:bf:2e:c6:cb:e9:31:15:6a:55:2b:aa:e2:0f: 88:96:d4:af:d9:a5:a5:41:e2:84:50:30:12:ab:c6: d4:f3:7b:4c:f4:2e:5d:ae:de:8f:4f:d0:2d:8e:95: f7:d3:80:d8:ab:1c:0c:4c:e3:33:5f:85:d5:3e:e6: f3:84:06:28:46:ae:e4:1f:4c:5f:9c:f7:eb:a5:02: 4d:77:1b:6c:a8:97:df:2a:91:e8:d1:1e:3e:eb:92: df:9f:e1:12:36:4b:f9:ed:04:6d:41:be:c5:1c:60: 36:8c:cf:6f:50:b5:a2:79:e9:d5:a9:f2:62:f0:01: 1d:e5:97:d3:85:6b:6d:86:0c:32:07:16:49:96:24: 6e:56:e9:16:74:a2:cc:0c:2d:39:00:20:64:1e:9c: f1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:12:07:9F:78:C0:66:D4:51:90:0D:F7:35:CD:69:61:31:E3:4C:38 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/ehIHn3jAZtRRkA33Nc1pYTHjTDg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.13.0/24 89.187.16.0/24 Signature Algorithm: sha256WithRSAEncryption 09:e5:23:7d:bd:36:b1:da:1a:7b:e2:e7:55:e8:4e:db:24:40: a6:e7:f8:9d:0b:ab:86:15:ae:51:42:4f:5a:a7:22:4a:0e:cb: ae:be:e3:fd:3a:8f:63:96:7c:7e:22:0c:5d:17:a5:17:f6:67: d4:37:70:ba:25:51:f6:85:4c:c5:fd:88:ed:a5:ea:04:eb:0c: b7:12:e5:f6:1a:cf:95:ee:7c:f7:5e:50:b7:54:5b:11:1f:24: 7f:64:8a:8a:eb:c5:59:25:5f:bd:9d:e8:5a:64:0c:e8:5a:f6: 2b:c9:43:fd:52:6c:5a:4e:ce:fc:69:39:6c:5a:28:55:24:8e: 28:27:12:fe:1b:f8:c0:42:ed:6d:10:ad:a1:c3:a7:5e:e9:40: 02:4f:18:7e:b2:3f:f1:39:0a:ff:03:e9:9f:c1:3f:2d:dc:fc: ce:04:c0:08:3e:00:b6:b0:bb:87:a9:7e:e0:be:15:d2:c3:80: 81:69:df:47:b8:67:65:71:44:7d:41:c8:d6:3b:da:02:4e:0d: bc:bb:d3:25:5a:fa:23:09:1a:5b:37:cf:ce:30:26:be:20:fd: 35:2a:b5:07:c1:d6:12:b6:2d:f5:52:f1:20:55:a4:d0:50:66: 6f:ff:71:97:b9:58:cc:e6:c4:aa:c0:73:99:0a:10:61:64:07: 00:5a:0d:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqdFgYo4EXA5uWNUdwNkhp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjUxMTE5MTcwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTEyMDc5Zjc4YzA2NmQ0NTE5MDBkZjczNWNkNjk2MTMxZTM0YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIhQUydhGqZeIvxxa30PVexVTiLH LtiwSkGVLB3ofH56AtdI9a3ZAz1vLT+xT4alOv8Ga60tI3Z67rrlHWMooBjiVmcY 8/KxML+mZ9nRg148Ow+YUJuNrubhZNzCoZoBStayLdgRDX2l678uxsvpMRVqVSuq 4g+IltSv2aWlQeKEUDASq8bU83tM9C5drt6PT9AtjpX304DYqxwMTOMzX4XVPubz hAYoRq7kH0xfnPfrpQJNdxtsqJffKpHo0R4+65Lfn+ESNkv57QRtQb7FHGA2jM9v ULWieenVqfJi8AEd5ZfThWtthgwyBxZJliRuVukWdKLMDC05ACBkHpzx5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHoSB594wGbUUZAN9zXNaWEx40w4MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvZWhJSG4zakFadFJSa0EzM05jMXBZVEhqVERnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsNAwQA WbsQMA0GCSqGSIb3DQEBCwUAA4IBAQAJ5SN9vTax2hp74udV6E7bJECm5/idC6uG Fa5RQk9apyJKDsuuvuP9Oo9jlnx+IgxdF6UX9mfUN3C6JVH2hUzF/YjtpeoE6wy3 EuX2Gs+V7nz3XlC3VFsRHyR/ZIqK68VZJV+9nehaZAzoWvYryUP9UmxaTs78aTls WihVJI4oJxL+G/jAQu1tEK2hw6de6UACTxh+sj/xOQr/A+mfwT8t3PzOBMAIPgC2 sLuHqX7gvhXSw4CBad9HuGdlcUR9QcjWO9oCTg28u9MlWvojCRpbN8/OMCa+IP01 KrUHwdYSti31UvEgVaTQUGZv/3GXuVjM5sSqwHOZChBhZAcAWg1B -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:24 2025 by rpki-client