This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa File: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (raw, json) Hash identifier: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU= Subject key identifier: 78:7B:B7:AE:D7:17:8D:DA:B7:D4:2C:08:43:89:F1:EE:7B:E1:07:60 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019B7910F285082456B3F6D73FE3DD14EBE3 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42147 IP address blocks: 193.148.129.0/24 maxlen: 24 193.148.130.0/24 maxlen: 24 193.148.138.0/24 maxlen: 24 193.148.139.0/24 maxlen: 24 193.148.140.0/24 maxlen: 24 193.148.141.0/24 maxlen: 24 193.148.142.0/24 maxlen: 24 193.148.143.0/24 maxlen: 24 193.148.144.0/24 maxlen: 24 193.148.145.0/24 maxlen: 24 193.148.147.0/24 maxlen: 24 193.148.150.0/24 maxlen: 24 193.148.158.0/24 maxlen: 24 193.148.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:85:08:24:56:b3:f6:d7:3f:e3:dd:14:eb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=787bb7aed7178ddab7d42c084389f1ee7be10760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7d:28:d7:5f:40:cd:63:d4:29:1e:15:86:46: 26:fc:ef:66:03:ef:ef:13:60:3b:6e:15:35:8a:a6: b9:b2:36:00:fb:21:a4:74:91:f3:24:f6:4a:3c:37: 73:99:d5:f4:4c:75:90:b3:aa:86:97:60:0e:cc:b3: 78:19:cc:53:fb:8c:0b:96:52:03:73:3d:50:84:74: f6:d5:89:27:71:8b:b2:3b:6a:4f:b5:1a:be:10:bd: 36:a2:be:39:a4:cf:e7:ce:8d:d7:b9:be:43:8e:8a: b4:35:c9:c6:21:ef:0b:0a:fe:81:cb:72:50:bb:ab: 9f:9f:ef:a8:28:fe:d3:35:14:da:eb:b6:3c:7f:65: f5:c9:f8:27:00:4b:87:06:59:4d:f4:76:b7:97:21: 35:2e:c9:51:d2:05:aa:89:75:ff:3e:4a:82:6c:ce: 89:ea:ed:62:bb:91:19:91:de:3a:41:a2:ea:75:50: 6e:00:cd:52:48:e8:43:eb:bd:ff:41:7e:b6:a6:2c: 14:ab:44:f6:85:cb:75:52:d6:d5:69:33:8c:c5:12: 70:69:ee:f5:34:91:4c:d7:4c:0f:9f:01:c3:a4:3b: 1a:8a:66:99:0f:b7:1a:64:16:49:81:2a:7d:5d:9b: 53:76:f6:69:a1:92:a1:10:e5:75:8c:0c:4d:be:68: 3d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7B:B7:AE:D7:17:8D:DA:B7:D4:2C:08:43:89:F1:EE:7B:E1:07:60 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.148.129.0-193.148.130.255 193.148.138.0-193.148.145.255 193.148.147.0/24 193.148.150.0/24 193.148.158.0/23 Signature Algorithm: sha256WithRSAEncryption 30:a5:0a:d1:00:b7:60:0c:e2:ec:44:43:63:b7:cb:20:df:e0: 74:a0:72:2d:1d:3f:a0:68:61:b6:60:9c:55:ab:df:3b:06:30: 5f:89:27:7f:c3:64:3b:f7:f0:af:c1:8b:52:9b:3e:34:21:6f: 5c:87:f6:9a:87:1f:7a:6b:40:06:96:3e:bb:28:56:ef:82:41: 18:1f:96:7f:fa:1b:eb:71:94:f2:54:8d:38:b3:01:c1:df:cd: 43:e9:c1:ff:c5:2f:99:21:41:50:11:11:21:55:d8:21:9c:23: 11:50:65:24:35:03:fe:ec:4a:cf:0f:95:21:c0:73:10:3c:79: 68:36:66:d8:36:cf:39:0b:e3:b6:9f:eb:ba:06:d3:2e:51:45: 4c:d6:4b:af:62:4e:66:f7:1f:36:fb:07:94:fb:eb:2a:5c:99: 59:b3:74:f2:38:70:18:25:76:34:9f:ec:c3:a7:b0:50:78:b8: 27:24:10:db:cf:a9:43:84:16:cd:9a:5f:d2:0f:37:bb:d4:58: 5d:d7:4b:d3:a6:9b:2d:35:15:4f:b3:f2:06:08:68:44:22:ef: b7:cc:c9:dd:dc:05:12:2a:cd:1e:09:57:fe:91:d0:6c:d7:8d: 65:85:4e:53:09:c5:5c:b6:9f:73:fe:a3:6c:8f:6b:3d:83:5d: 33:11:ee:b4 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt5EPKFCCRWs/bXP+PdFOvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODdiYjdhZWQ3MTc4ZGRhYjdkNDJjMDg0Mzg5ZjFlZTdiZTEwNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA030o119AzWPUKR4VhkYm/O9mA+/v E2A7bhU1iqa5sjYA+yGkdJHzJPZKPDdzmdX0THWQs6qGl2AOzLN4GcxT+4wLllID cz1QhHT21YkncYuyO2pPtRq+EL02or45pM/nzo3Xub5Djoq0NcnGIe8LCv6By3JQ u6ufn++oKP7TNRTa67Y8f2X1yfgnAEuHBllN9Ha3lyE1LslR0gWqiXX/PkqCbM6J 6u1iu5EZkd46QaLqdVBuAM1SSOhD673/QX62piwUq0T2hct1UtbVaTOMxRJwae71 NJFM10wPnwHDpDsaimaZD7caZBZJgSp9XZtTdvZpoZKhEOV1jAxNvmg9YwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHh7t67XF43at9QsCEOJ8e574QdgMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvZUh1M3J0Y1hqZHEzMUN3SVE0bng3bnZoQjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBADBlIED BADBlIIwDAMEAcGUigMEAcGUkAMEAMGUkwMEAMGUlgMEAcGUnjANBgkqhkiG9w0B AQsFAAOCAQEAMKUK0QC3YAzi7ERDY7fLIN/gdKByLR0/oGhhtmCcVavfOwYwX4kn f8NkO/fwr8GLUps+NCFvXIf2mocfemtABpY+uyhW74JBGB+Wf/ob63GU8lSNOLMB wd/NQ+nB/8UvmSFBUBERIVXYIZwjEVBlJDUD/uxKzw+VIcBzEDx5aDZm2DbPOQvj tp/rugbTLlFFTNZLr2JOZvcfNvsHlPvrKlyZWbN08jhwGCV2NJ/sw6ewUHi4JyQQ 28+pQ4QWzZpf0g83u9RYXddL06abLTUVT7PyBghoRCLvt8zJ3dwFEirNHglX/pHQ bNeNZYVOUwnFXLafc/6jbI9rPYNdMxHutA== -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:33 2026 by rpki-client