This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa File: eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa (raw, json) Hash identifier: zDufrnp/lRdYw6z5myv4nDWlvesG8imRXgNlxsEXDkk= Subject key identifier: 7A:0D:33:BC:DF:13:2E:34:0F:70:92:32:DD:1B:D9:16:33:BF:D2:9E Certificate issuer: /CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7 Certificate serial: 019B79110B14D41CCE34BC22D3C925BEA21B Authority key identifier: 94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204861 IP address blocks: 185.121.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.mft rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0b:14:d4:1c:ce:34:bc:22:d3:c9:25:be:a2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940b9e18eeb094d912deb595dc7aac8661b0d6c7 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0d33bcdf132e340f709232dd1bd91633bfd29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:49:10:9c:7f:7f:9d:7d:ee:22:3b:af:35: 6c:3f:71:50:1f:81:96:ed:56:94:1f:24:6e:6a:44: fd:53:22:ce:d4:b3:ca:e6:66:ef:9f:e7:37:42:32: 1c:c5:4a:3a:c4:09:05:77:a5:7c:b7:1b:da:1c:18: fe:f6:ba:7f:d6:be:5a:bc:36:1c:44:07:34:33:91: 4f:91:42:4e:f4:3c:b5:95:37:23:a2:67:67:d4:96: f1:94:09:69:52:c5:e3:73:fa:22:c9:ea:a8:ed:36: 1d:9b:96:75:89:9b:4b:9b:fa:a6:25:c3:86:2d:53: 1e:77:28:8a:e2:02:2d:34:0b:02:ca:40:1b:6c:a9: 6d:dc:38:12:d4:a4:f9:89:69:a5:d6:db:a7:ae:35: 08:2e:41:5d:0d:2f:70:ec:9d:fb:6f:52:59:e1:5b: 86:54:ca:17:b4:d4:c2:12:dc:73:3f:10:0d:91:2d: 61:8e:0f:2f:19:0e:40:17:a1:4d:cf:52:5c:9b:6a: ce:b1:65:dd:98:95:72:c6:46:39:7d:f3:4b:66:11: fe:13:48:97:1d:68:f2:34:1d:21:b7:95:5a:f8:53: 2a:f5:e7:f7:85:2e:f8:eb:c1:6d:c1:c8:d9:f0:49: f6:ef:4a:03:9a:00:72:1b:e7:e3:63:d8:0a:86:d3: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0D:33:BC:DF:13:2E:34:0F:70:92:32:DD:1B:D9:16:33:BF:D2:9E X509v3 Authority Key Identifier: keyid:94:0B:9E:18:EE:B0:94:D9:12:DE:B5:95:DC:7A:AC:86:61:B0:D6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAueGO6wlNkS3rWV3HqshmGw1sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/eg0zvN8TLjQPcJIy3RvZFjO_0p4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8a707a-5ced-4c75-ae38-56596beed1c7/1/lAueGO6wlNkS3rWV3HqshmGw1sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.106.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:5b:f4:69:96:aa:37:fe:2d:3d:86:00:91:0e:40:b0:93:50: 79:48:28:0b:73:29:92:ad:0d:6c:c0:14:1c:f0:87:00:2f:d7: 1b:c4:2b:8e:30:24:cb:82:6d:d3:9a:0e:5b:5f:b3:14:1f:52: cb:84:8b:01:e2:af:84:99:35:99:7d:bb:ea:39:ce:a8:74:70: f0:d1:c0:6e:e0:94:91:4d:c0:50:62:7d:e3:70:04:7a:bd:fd: 82:15:30:9b:8c:4f:2b:ff:c4:fd:37:92:5e:3d:c2:7f:ab:5c: d3:57:41:bf:a2:67:3f:1d:19:fb:7c:de:8d:db:05:87:08:f6: 37:03:65:89:7a:db:66:b6:73:54:61:7e:90:a9:cf:87:57:0c: 91:1c:2c:c5:0b:b0:03:ce:4a:f1:05:6e:73:6d:17:58:a1:5c: b3:f8:8f:56:86:18:dc:1f:25:3d:01:17:5e:42:a2:2b:d7:7d: 76:c3:88:63:68:2b:f5:13:bf:cb:e9:a1:1a:83:65:6f:13:d1: 33:0a:c7:c4:50:25:07:10:1e:d8:35:1c:eb:a1:2d:5a:9c:06: 9e:05:d6:2e:a2:f3:27:b3:92:f7:da:57:f0:b7:a5:12:82:66: 67:de:e5:2c:11:c9:5a:0b:f7:9c:7a:6f:9f:39:c9:ba:fd:f3: 5f:16:2d:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EQsU1BzONLwi08klvqIbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MGI5ZTE4ZWViMDk0ZDkxMmRlYjU5NWRjN2FhYzg2NjFi MGQ2YzcwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBkMzNiY2RmMTMyZTM0MGY3MDkyMzJkZDFiZDkxNjMzYmZkMjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE5JEJx/f5197iI7rzVsP3FQH4GW 7VaUHyRuakT9UyLO1LPK5mbvn+c3QjIcxUo6xAkFd6V8txvaHBj+9rp/1r5avDYc RAc0M5FPkUJO9Dy1lTcjomdn1JbxlAlpUsXjc/oiyeqo7TYdm5Z1iZtLm/qmJcOG LVMedyiK4gItNAsCykAbbKlt3DgS1KT5iWml1tunrjUILkFdDS9w7J37b1JZ4VuG VMoXtNTCEtxzPxANkS1hjg8vGQ5AF6FNz1Jcm2rOsWXdmJVyxkY5ffNLZhH+E0iX HWjyNB0ht5Va+FMq9ef3hS7468FtwcjZ8En270oDmgByG+fjY9gKhtNJmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoNM7zfEy40D3CSMt0b2RYzv9KeMB8GA1UdIwQY MBaAFJQLnhjusJTZEt61ldx6rIZhsNbHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgt NTY1OTZiZWVkMWM3LzEvZWcwenZOOFRMalFQY0pJeTNSdlpGak9fMHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YTcwN2EtNWNlZC00Yzc1LWFlMzgtNTY1OTZiZWVkMWM3 LzEvbEF1ZUdPNndsTmtTM3JXVjNIcXNobUd3MXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXlqMA0G CSqGSIb3DQEBCwUAA4IBAQBNW/Rplqo3/i09hgCRDkCwk1B5SCgLcymSrQ1swBQc 8IcAL9cbxCuOMCTLgm3Tmg5bX7MUH1LLhIsB4q+EmTWZfbvqOc6odHDw0cBu4JSR TcBQYn3jcAR6vf2CFTCbjE8r/8T9N5JePcJ/q1zTV0G/omc/HRn7fN6N2wWHCPY3 A2WJettmtnNUYX6Qqc+HVwyRHCzFC7ADzkrxBW5zbRdYoVyz+I9WhhjcHyU9ARde QqIr1312w4hjaCv1E7/L6aEag2VvE9EzCsfEUCUHEB7YNRzroS1anAaeBdYuovMn s5L32lfwt6USgmZn3uUsEclaC/ecem+fOcm6/fNfFi1X -----END CERTIFICATE-----Generated at Thu Jan 1 19:50:31 2026 by rpki-client