This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/eutBwstQCFRzhm35XTnNphMWByQ.roa File: eutBwstQCFRzhm35XTnNphMWByQ.roa (raw, json) Hash identifier: RdOW4ekiWsJoF7BZmUsggiXem+HWt5D8Hbfh8/B+px8= Subject key identifier: 7A:EB:41:C2:CB:50:08:54:73:86:6D:F9:5D:39:CD:A6:13:16:07:24 Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9 Certificate serial: 019B76EB95F57874B300A91DD8966FAC8CD8 Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/eutBwstQCFRzhm35XTnNphMWByQ.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42473 IP address blocks: 176.119.152.0/24 maxlen: 24 176.119.153.0/24 maxlen: 24 176.119.154.0/24 maxlen: 24 176.119.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:95:f5:78:74:b3:00:a9:1d:d8:96:6f:ac:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aeb41c2cb50085473866df95d39cda613160724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ca:42:a9:f0:a9:aa:55:34:50:e2:09:ac:41: 44:a4:40:5d:81:0c:78:03:4c:b5:de:26:8a:41:d1: 0e:96:98:4d:bc:ad:fc:70:bd:2f:4c:92:63:9b:4b: da:a2:eb:52:1e:b7:a6:8b:92:42:7a:30:87:35:9f: f6:6d:c0:15:ed:ee:fe:62:64:8e:a9:69:e3:dc:90: bd:b0:2a:f6:0d:2a:8f:2a:4a:3c:18:f6:38:c1:7a: 9d:0b:ca:a2:b6:ae:e9:6b:98:6b:5a:b8:a7:0f:a8: ca:0d:84:f9:d1:52:97:e7:bb:60:cc:3a:93:95:23: b2:b5:f4:f8:28:b9:4a:6d:9a:a9:0c:0f:c6:49:5d: 88:6e:62:d5:f3:eb:42:65:39:af:05:8a:4f:55:f5: 35:d4:91:a3:4a:59:f6:13:b5:cc:06:97:3f:17:32: 1c:0f:a1:99:1b:f4:f0:53:5b:05:be:72:49:9b:da: c5:ed:56:91:b7:36:17:dc:73:56:37:e1:d0:8b:aa: 4b:5a:f5:5e:67:f3:02:e7:16:e3:cc:79:de:6f:82: bc:53:b3:98:9c:f1:80:6f:5b:60:9c:ed:2f:9b:56: 91:2b:b4:e6:75:89:98:97:06:cc:e9:c8:53:d6:c4: c0:8a:ae:98:33:15:c3:59:25:96:0e:4d:08:dd:af: d9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EB:41:C2:CB:50:08:54:73:86:6D:F9:5D:39:CD:A6:13:16:07:24 X509v3 Authority Key Identifier: keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/eutBwstQCFRzhm35XTnNphMWByQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.119.152.0/22 Signature Algorithm: sha256WithRSAEncryption 32:ee:21:f2:c2:64:de:a4:1c:b8:43:08:0f:4e:b0:10:23:86: 71:40:47:4a:05:97:c4:99:b7:3d:da:f4:a3:37:af:6e:74:bc: f3:b6:d3:69:15:62:9f:42:bc:fb:65:3f:c2:5f:7b:b1:03:bf: fa:11:96:7b:05:a7:69:e1:1c:69:c0:d6:e2:94:32:72:39:35: dc:f9:9f:d7:fb:56:e0:a7:24:d8:f9:76:ab:89:7a:48:37:49: 52:c0:27:35:c9:d1:0f:4b:7e:8e:94:7b:cb:74:fc:7a:14:a4: ff:e0:f8:e4:79:86:a2:e5:22:5c:eb:ba:c5:bb:8b:3c:c1:75: 02:fe:9e:b9:74:bc:ab:c6:d6:93:5b:24:cb:7d:95:9b:ef:11: bf:6f:0c:12:1b:14:10:72:ef:eb:30:77:64:3c:d1:0e:98:46: 35:f7:d2:4b:0a:f1:ab:d5:d5:d7:38:08:5e:40:75:e5:ed:96: 6d:08:2f:0b:5a:13:b5:dd:f1:9f:76:b7:aa:d0:70:fd:cd:8c: cc:bb:0a:e4:aa:31:ea:5f:c3:98:6b:42:dd:59:78:ce:88:36: bb:ff:0b:46:ca:d0:ef:45:0e:2e:3d:80:d5:4b:79:fb:0a:82: a7:ad:e6:99:ed:5e:fa:c2:b3:a6:69:7b:86:b6:43:1b:4c:33: 01:ee:2b:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265X1eHSzAKkd2JZvrIzYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNjg0ZTUwZTMzZjNhMDAxNWM4Zjg5OWM4OGJjYjEzN2Jj ZmI1ZjkwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWViNDFjMmNiNTAwODU0NzM4NjZkZjk1ZDM5Y2RhNjEzMTYwNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMpCqfCpqlU0UOIJrEFEpEBdgQx4 A0y13iaKQdEOlphNvK38cL0vTJJjm0vaoutSHremi5JCejCHNZ/2bcAV7e7+YmSO qWnj3JC9sCr2DSqPKko8GPY4wXqdC8qitq7pa5hrWrinD6jKDYT50VKX57tgzDqT lSOytfT4KLlKbZqpDA/GSV2IbmLV8+tCZTmvBYpPVfU11JGjSln2E7XMBpc/FzIc D6GZG/TwU1sFvnJJm9rF7VaRtzYX3HNWN+HQi6pLWvVeZ/MC5xbjzHneb4K8U7OY nPGAb1tgnO0vm1aRK7TmdYmYlwbM6chT1sTAiq6YMxXDWSWWDk0I3a/ZIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHrrQcLLUAhUc4Zt+V05zaYTFgckMB8GA1UdIwQY MBaAFKtoTlDjPzoAFcj4mciLyxN7z7X5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjIt ODBlNWQ1M2VkYjQxLzEvZXV0QndzdFFDRlJ6aG0zNVhUbk5waE1XQnlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85NDcyYTYtZDAyMi00M2NlLWIzNjItODBlNWQ1M2VkYjQx LzEvcTJoT1VPTV9PZ0FWeVBpWnlJdkxFM3ZQdGZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsHeYMA0G CSqGSIb3DQEBCwUAA4IBAQAy7iHywmTepBy4QwgPTrAQI4ZxQEdKBZfEmbc92vSj N69udLzzttNpFWKfQrz7ZT/CX3uxA7/6EZZ7Badp4RxpwNbilDJyOTXc+Z/X+1bg pyTY+XariXpIN0lSwCc1ydEPS36OlHvLdPx6FKT/4PjkeYai5SJc67rFu4s8wXUC /p65dLyrxtaTWyTLfZWb7xG/bwwSGxQQcu/rMHdkPNEOmEY199JLCvGr1dXXOAhe QHXl7ZZtCC8LWhO13fGfdreq0HD9zYzMuwrkqjHqX8OYa0LdWXjOiDa7/wtGytDv RQ4uPYDVS3n7CoKnreaZ7V76wrOmaXuGtkMbTDMB7isO -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:33 2026 by rpki-client