This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EHuoH4GsOSze-6UdYiqB3K1cJzc.roa File: EHuoH4GsOSze-6UdYiqB3K1cJzc.roa (raw, json) Hash identifier: iFy0kUQ+ItggCsB9LqI2lk06ajZRHH54YwRuOHw+AYA= Subject key identifier: 10:7B:A8:1F:81:AC:39:2C:DE:FB:A5:1D:62:2A:81:DC:AD:5C:27:37 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA76A6874A8048DA90CD3B9D054F943 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EHuoH4GsOSze-6UdYiqB3K1cJzc.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31496 IP address blocks: 213.158.16.0/24 maxlen: 24 213.158.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:6a:68:74:a8:04:8d:a9:0c:d3:b9:d0:54:f9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=107ba81f81ac392cdefba51d622a81dcad5c2737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9d:cd:ac:21:0b:41:12:f3:11:28:c5:bf:f1: d6:3d:46:fb:33:c1:ab:75:4c:02:8b:3c:b1:d6:80: cc:15:c6:e9:e8:6d:67:ec:f8:e8:0e:0a:1a:80:9b: 63:60:a7:05:54:7b:05:6f:8a:e2:17:6d:77:7e:bc: cc:e6:93:e6:19:a9:cb:c7:f4:56:1c:13:06:cf:14: 97:90:5e:92:85:82:b5:fa:1e:c2:e1:78:49:fd:00: 7c:5c:6d:c2:b2:97:68:b3:bc:d0:40:8c:79:e9:8d: 24:97:f8:50:b6:22:17:e9:9a:06:f8:0b:37:67:34: af:d8:4f:8e:42:34:2a:18:5d:6e:46:60:43:41:12: 2d:d6:5f:e5:1e:34:18:85:f2:48:cf:27:93:7b:64: a6:8e:89:ba:13:bb:96:5b:45:6a:c9:1e:16:ff:39: 2f:79:b3:57:41:f9:ca:28:89:10:65:fd:2d:5c:b0: 3f:46:3f:22:ab:4f:fa:58:d8:60:68:ec:45:54:ac: b0:d5:f2:05:e8:72:1a:5a:07:31:33:8f:eb:73:88: 3c:2d:85:c6:fd:af:55:d9:75:ef:80:13:02:e1:dd: 53:22:96:e7:a0:7b:46:16:b4:fa:18:13:56:38:e9: 9a:a8:58:7e:15:9c:31:de:ac:30:9c:13:6d:2e:84: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7B:A8:1F:81:AC:39:2C:DE:FB:A5:1D:62:2A:81:DC:AD:5C:27:37 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EHuoH4GsOSze-6UdYiqB3K1cJzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.158.16.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:80:53:86:f9:55:0f:0d:94:fe:9d:d5:05:b0:14:1f:34:92: 7a:b5:60:c4:90:db:47:a0:06:96:75:97:65:c6:f4:fd:d8:1c: 5a:f3:2d:87:26:ab:30:82:2d:55:67:54:b7:13:5f:d0:65:77: 52:6f:68:10:4f:36:3e:0a:1b:1c:d6:b9:5e:ae:f5:3c:63:5e: a6:7e:e1:fe:9a:72:21:3f:e1:7a:10:b8:00:68:75:3c:22:c7: 68:de:07:5a:8d:63:da:9b:21:fd:eb:8c:28:67:21:5b:3e:db: 3f:06:c0:42:dd:bc:51:a6:de:bf:17:7a:53:89:f0:3a:de:76: 71:a2:58:56:bc:fc:a1:c1:4f:f6:85:75:7c:52:32:1c:8f:46: b3:d8:bf:eb:0f:38:26:7d:a1:3a:79:12:41:a7:db:bc:9a:fb: d4:a5:55:dc:08:69:e0:41:b4:ab:2b:93:84:f5:d1:95:09:08: f7:37:0a:12:d5:44:d5:72:06:6e:11:1b:46:a6:64:1d:71:d8: 94:91:69:f2:ec:ef:15:18:59:5c:d9:00:62:37:d3:9f:fc:0d: c1:ca:e4:14:9d:60:6f:98:dc:b2:bc:f1:85:65:ec:55:c6:a6: c0:0e:69:7c:ce:78:25:56:ff:dc:6b:c2:6b:36:c4:4b:49:2a: 08:ba:7b:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2podKgEjakM07nQVPlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDdiYTgxZjgxYWMzOTJjZGVmYmE1MWQ2MjJhODFkY2FkNWMyNzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p3NrCELQRLzESjFv/HWPUb7M8Gr dUwCizyx1oDMFcbp6G1n7PjoDgoagJtjYKcFVHsFb4riF213frzM5pPmGanLx/RW HBMGzxSXkF6ShYK1+h7C4XhJ/QB8XG3Cspdos7zQQIx56Y0kl/hQtiIX6ZoG+As3 ZzSv2E+OQjQqGF1uRmBDQRIt1l/lHjQYhfJIzyeTe2Smjom6E7uWW0VqyR4W/zkv ebNXQfnKKIkQZf0tXLA/Rj8iq0/6WNhgaOxFVKyw1fIF6HIaWgcxM4/rc4g8LYXG /a9V2XXvgBMC4d1TIpbnoHtGFrT6GBNWOOmaqFh+FZwx3qwwnBNtLoQtcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBB7qB+BrDks3vulHWIqgdytXCc3MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvRUh1b0g0R3NPU3plLTZVZFlpcUIzSzFjSnpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1Z4QMA0G CSqGSIb3DQEBCwUAA4IBAQArgFOG+VUPDZT+ndUFsBQfNJJ6tWDEkNtHoAaWdZdl xvT92Bxa8y2HJqswgi1VZ1S3E1/QZXdSb2gQTzY+Chsc1rlervU8Y16mfuH+mnIh P+F6ELgAaHU8Isdo3gdajWPamyH964woZyFbPts/BsBC3bxRpt6/F3pTifA63nZx olhWvPyhwU/2hXV8UjIcj0az2L/rDzgmfaE6eRJBp9u8mvvUpVXcCGngQbSrK5OE 9dGVCQj3NwoS1UTVcgZuERtGpmQdcdiUkWny7O8VGFlc2QBiN9Of/A3ByuQUnWBv mNyyvPGFZexVxqbADml8znglVv/ca8JrNsRLSSoIunt4 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:33 2026 by rpki-client