This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/eoXWkd1xtZ1roQEK3xiP_tLylxA.roa File: eoXWkd1xtZ1roQEK3xiP_tLylxA.roa (raw, json) Hash identifier: NrOqMq9hL9ufdKS3aMcaSs4hMUYYi6dZ+eM5FvS1frU= Subject key identifier: 7A:85:D6:91:DD:71:B5:9D:6B:A1:01:0A:DF:18:8F:FE:D2:F2:97:10 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808CB31C17C8990E869D90E96211FC Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/eoXWkd1xtZ1roQEK3xiP_tLylxA.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215115 IP address blocks: 194.31.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8c:b3:1c:17:c8:99:0e:86:9d:90:e9:62:11:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a85d691dd71b59d6ba1010adf188ffed2f29710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9c:c8:8c:b1:6d:15:8b:e7:cf:08:2d:c4:ef: 6c:3f:91:25:43:03:25:c7:40:8e:b2:6a:fe:7f:fe: f6:70:d5:70:2c:dd:47:9c:c7:61:94:2d:f2:ef:80: e6:24:c5:10:98:9b:01:d5:21:e8:ad:c3:16:4c:7a: 87:d8:dd:fb:53:25:ae:69:ae:84:da:b2:17:fe:12: 8b:20:f7:98:8b:52:9b:29:e5:2e:32:fe:6c:17:6e: c0:24:02:4e:61:fb:7f:f7:bf:77:95:dd:36:fb:d8: 37:c5:5c:d6:74:26:d7:d9:6b:68:ed:4d:a3:41:a0: 78:31:fe:28:07:56:72:04:ad:ef:d1:14:d6:33:95: 3b:a2:90:9e:1b:cc:c1:d3:24:3c:bd:9d:68:81:a7: dd:1e:bb:82:d8:4a:ca:99:d8:ab:04:9e:cc:5a:b5: 0c:3e:fc:26:b0:83:c4:b0:3e:ba:d0:15:a6:bf:73: 08:63:58:57:72:4c:77:7e:0a:b9:6a:fd:1f:fe:82: 43:50:f4:3b:a8:65:9a:9c:38:90:63:c1:33:be:c0: b1:c7:37:21:da:ab:17:d3:cc:9c:e1:4b:45:99:61: 3b:e0:c3:09:c4:95:c2:26:c9:bd:1a:96:f0:82:e8: 6c:d7:6b:06:f9:ee:50:38:38:e9:9e:d3:f2:be:d2: 0f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:85:D6:91:DD:71:B5:9D:6B:A1:01:0A:DF:18:8F:FE:D2:F2:97:10 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/eoXWkd1xtZ1roQEK3xiP_tLylxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.75.0/24 Signature Algorithm: sha256WithRSAEncryption 35:25:0b:67:30:53:ec:e3:81:7e:df:51:c5:04:79:95:72:45: 0a:92:40:89:fb:63:57:79:c0:16:59:b3:f7:84:24:e2:a3:bd: 1a:bc:70:9d:7c:df:a1:81:0b:a1:40:e4:50:c5:86:00:6e:38: a0:71:82:14:00:37:c6:58:b1:e4:94:b5:53:8a:59:bd:7a:07: a2:62:a6:51:44:15:1a:32:d3:d4:36:ee:83:aa:d2:89:fb:4a: 0b:41:5c:ba:27:8a:48:9c:33:b7:dd:73:f1:06:24:a5:84:92: 69:48:99:61:0f:28:fe:5e:45:32:10:d6:10:21:b2:41:f8:2a: b0:cc:15:6b:07:88:62:29:8d:0a:59:d3:98:f1:15:fa:e2:5a: b7:17:76:53:47:5e:23:78:77:bf:a6:cb:17:a5:c7:68:d5:fa: c0:03:16:ff:af:11:fc:61:cb:8f:be:3e:61:12:19:a9:31:14: 74:00:0e:d8:cc:17:ae:7f:d7:3d:6b:bf:a7:75:58:1b:9b:d3: 02:89:0b:df:f6:15:64:9e:79:9b:e8:2e:50:00:af:4f:88:ed: 85:15:fb:b8:25:22:83:db:55:2a:72:70:f8:ab:80:29:6c:43: ac:be:c7:45:0d:17:4b:7c:26:e5:b1:ce:de:c6:da:14:ea:39: c5:32:75:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIyzHBfImQ6GnZDpYhH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTg1ZDY5MWRkNzFiNTlkNmJhMTAxMGFkZjE4OGZmZWQyZjI5NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJzIjLFtFYvnzwgtxO9sP5ElQwMl x0COsmr+f/72cNVwLN1HnMdhlC3y74DmJMUQmJsB1SHorcMWTHqH2N37UyWuaa6E 2rIX/hKLIPeYi1KbKeUuMv5sF27AJAJOYft/9793ld02+9g3xVzWdCbX2Wto7U2j QaB4Mf4oB1ZyBK3v0RTWM5U7opCeG8zB0yQ8vZ1ogafdHruC2ErKmdirBJ7MWrUM PvwmsIPEsD660BWmv3MIY1hXckx3fgq5av0f/oJDUPQ7qGWanDiQY8EzvsCxxzch 2qsX08yc4UtFmWE74MMJxJXCJsm9Gpbwguhs12sG+e5QODjpntPyvtIPkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqF1pHdcbWda6EBCt8Yj/7S8pcQMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvZW9YV2tkMXh0WjFyb1FFSzN4aVBfdEx5bHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh9LMA0G CSqGSIb3DQEBCwUAA4IBAQA1JQtnMFPs44F+31HFBHmVckUKkkCJ+2NXecAWWbP3 hCTio70avHCdfN+hgQuhQORQxYYAbjigcYIUADfGWLHklLVTilm9egeiYqZRRBUa MtPUNu6DqtKJ+0oLQVy6J4pInDO33XPxBiSlhJJpSJlhDyj+XkUyENYQIbJB+Cqw zBVrB4hiKY0KWdOY8RX64lq3F3ZTR14jeHe/pssXpcdo1frAAxb/rxH8YcuPvj5h EhmpMRR0AA7YzBeuf9c9a7+ndVgbm9MCiQvf9hVknnmb6C5QAK9PiO2FFfu4JSKD 21UqcnD4q4ApbEOsvsdFDRdLfCblsc7extoU6jnFMnU2 -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:49 2026 by rpki-client