This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/ejhx-gadggmweDD7LTvGkXuubDk.roa File: ejhx-gadggmweDD7LTvGkXuubDk.roa (raw, json) Hash identifier: qceFGO0N3SsqKOwEV1zGkAfuEl6PCwI7cu5tB/f/1Ak= Subject key identifier: 7A:38:71:FA:06:9D:82:09:B0:78:30:FB:2D:3B:C6:91:7B:AE:6C:39 Certificate issuer: /CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e Certificate serial: 019BFA0A308565FC4BED09EF805F47F76710 Authority key identifier: 9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/ejhx-gadggmweDD7LTvGkXuubDk.roa Signing time: Mon 26 Jan 2026 11:22:10 +0000 ROA not before: Mon 26 Jan 2026 11:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198311 IP address blocks: 194.174.72.0/24 maxlen: 24 194.174.73.0/24 maxlen: 24 194.174.74.0/24 maxlen: 24 194.174.75.0/24 maxlen: 24 194.174.76.0/24 maxlen: 24 194.174.77.0/24 maxlen: 24 194.174.79.0/24 maxlen: 24 195.93.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.mft rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:0a:30:85:65:fc:4b:ed:09:ef:80:5f:47:f7:67:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a62c4a39aceccde1e781e7ecc2f02294f0c213e Validity Not Before: Jan 26 11:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a3871fa069d8209b07830fb2d3bc6917bae6c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:18:5d:f6:83:a8:db:64:3d:07:11:da:77: 56:ff:6a:42:7c:8f:a5:b7:1e:f4:c9:e7:0d:d8:ae: 49:6b:d3:e6:03:60:e2:33:e3:9b:37:ca:d8:ba:ba: 24:08:74:ab:e1:d9:88:9a:e0:b3:e2:d1:50:d3:b1: bc:60:ee:91:cb:a4:a0:37:30:8b:ab:d5:3e:84:6b: 4e:21:cf:48:d7:8b:f2:ef:eb:d6:a5:cb:3e:3c:c2: 25:d0:0b:7b:3e:b1:ec:7b:23:d7:52:03:91:ef:58: a8:1a:8f:41:fa:ed:a8:f9:a2:d1:34:46:74:7a:3b: a1:10:15:17:0c:3e:78:c3:22:37:bd:97:13:86:fd: 34:f9:01:a2:57:ac:6d:b2:6c:ce:21:85:19:dc:0b: ef:5f:68:eb:ae:de:f0:e1:b2:32:ae:eb:4c:54:5a: e5:a2:c8:20:88:9f:2f:a8:67:a8:73:33:0e:12:d0: fc:85:e8:da:de:71:be:db:fc:96:74:64:9e:90:4f: e0:75:ed:17:d2:f4:be:2d:69:56:b0:1c:8a:c8:1e: fb:3b:f7:fd:17:1a:e4:77:7a:aa:34:f6:25:1f:6a: 5d:c4:13:05:69:57:72:ba:53:df:31:f2:71:d5:a6: 9a:68:b9:27:f9:b0:90:ba:e5:af:6b:84:9e:64:d5: 34:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:38:71:FA:06:9D:82:09:B0:78:30:FB:2D:3B:C6:91:7B:AE:6C:39 X509v3 Authority Key Identifier: keyid:9A:62:C4:A3:9A:CE:CC:DE:1E:78:1E:7E:CC:2F:02:29:4F:0C:21:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLEo5rOzN4eeB5-zC8CKU8MIT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/ejhx-gadggmweDD7LTvGkXuubDk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/3a0c41-ef80-4f4c-abb2-5d688dfd1fb8/1/mmLEo5rOzN4eeB5-zC8CKU8MIT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.174.72.0-194.174.77.255 194.174.79.0/24 195.93.198.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:0e:35:7c:9e:b4:48:42:dd:da:97:3f:3a:c7:7e:48:18:8e: 8a:6b:0d:62:de:53:ed:df:d9:11:e2:aa:7d:01:d1:16:a3:dd: 6e:92:d4:fa:71:b8:b4:4b:6d:a7:37:3a:7b:84:9e:73:17:d7: c8:d5:d6:44:26:29:bb:3d:d6:e1:8d:21:67:5a:8a:8b:47:b7: bc:74:0f:29:55:e4:f0:e7:49:f7:3c:79:c3:0c:16:e2:f2:45: f6:ca:ee:be:66:07:11:56:e9:05:b0:26:df:9f:65:87:5f:72: 71:69:98:6f:53:5c:a1:7d:d3:d9:85:fd:1e:ea:f6:cf:f0:9f: b1:b5:ca:88:ae:87:62:ce:a5:7a:66:6c:13:73:12:1f:38:0c: c3:fb:fa:f3:85:96:69:10:7b:bd:7c:2c:41:34:d6:8a:c9:40: 06:8b:d9:11:d1:e7:e9:c3:a7:f7:cd:e8:f6:3d:f8:0e:9e:7a: e0:b1:ec:73:5b:ae:b2:be:c9:3d:30:e9:8f:00:b5:93:b8:5f: 54:95:5a:b2:76:c1:61:e0:26:c9:41:86:ca:6c:e6:59:8c:36: 75:ec:1a:6d:0a:2a:f4:64:20:ba:f9:78:7f:71:31:b4:8a:77: db:e4:71:00:2a:c2:66:db:5c:22:7a:95:53:df:59:39:2b:90: ba:b0:01:2b -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZv6CjCFZfxL7QnvgF9H92cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNjJjNGEzOWFjZWNjZGUxZTc4MWU3ZWNjMmYwMjI5NGYw YzIxM2UwHhcNMjYwMTI2MTEyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTM4NzFmYTA2OWQ4MjA5YjA3ODMwZmIyZDNiYzY5MTdiYWU2YzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNoYXfaDqNtkPQcR2ndW/2pCfI+l tx70yecN2K5Ja9PmA2DiM+ObN8rYurokCHSr4dmImuCz4tFQ07G8YO6Ry6SgNzCL q9U+hGtOIc9I14vy7+vWpcs+PMIl0At7PrHseyPXUgOR71ioGo9B+u2o+aLRNEZ0 ejuhEBUXDD54wyI3vZcThv00+QGiV6xtsmzOIYUZ3AvvX2jrrt7w4bIyrutMVFrl osggiJ8vqGeoczMOEtD8heja3nG+2/yWdGSekE/gde0X0vS+LWlWsByKyB77O/f9 Fxrkd3qqNPYlH2pdxBMFaVdyulPfMfJx1aaaaLkn+bCQuuWva4SeZNU05QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHo4cfoGnYIJsHgw+y07xpF7rmw5MB8GA1UdIwQY MBaAFJpixKOazszeHngefswvAilPDCE+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW1MRW81ck96TjRlZUI1LXpDOENLVThNSVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zYTBjNDEtZWY4MC00ZjRjLWFiYjIt NWQ2ODhkZmQxZmI4LzEvZWpoeC1nYWRnZ213ZUREN0xUdkdrWHV1YkRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8zYTBjNDEtZWY4MC00ZjRjLWFiYjItNWQ2ODhkZmQxZmI4 LzEvbW1MRW81ck96TjRlZUI1LXpDOENLVThNSVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAPCrkgD BAHCrkwDBADCrk8DBADDXcYwDQYJKoZIhvcNAQELBQADggEBADwONXyetEhC3dqX PzrHfkgYjoprDWLeU+3f2RHiqn0B0Raj3W6S1PpxuLRLbac3OnuEnnMX18jV1kQm Kbs91uGNIWdaiotHt7x0DylV5PDnSfc8ecMMFuLyRfbK7r5mBxFW6QWwJt+fZYdf cnFpmG9TXKF909mF/R7q9s/wn7G1yoiuh2LOpXpmbBNzEh84DMP7+vOFlmkQe718 LEE01orJQAaL2RHR5+nDp/fN6PY9+A6eeuCx7HNbrrK+yT0w6Y8AtZO4X1SVWrJ2 wWHgJslBhsps5lmMNnXsGm0KKvRkILr5eH9xMbSKd9vkcQAqwmbbXCJ6lVPfWTkr kLqwASs= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:28 2026 by rpki-client