This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/e0mqpoyerEwgfwn630BBy-7h2Aw.roa File: e0mqpoyerEwgfwn630BBy-7h2Aw.roa (raw, json) Hash identifier: df32SBG/MCCgShjqDSEznurD9/POvO/0GUiJekDpit8= Subject key identifier: 7B:49:AA:A6:8C:9E:AC:4C:20:7F:09:FA:DF:40:41:CB:EE:E1:D8:0C Certificate issuer: /CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Certificate serial: 019B47B960543531C36E5B26830350DC9D86 Authority key identifier: DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/e0mqpoyerEwgfwn630BBy-7h2Aw.roa Signing time: Mon 22 Dec 2025 20:21:29 +0000 ROA not before: Mon 22 Dec 2025 20:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39637 IP address blocks: 194.107.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.mft rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:b9:60:54:35:31:c3:6e:5b:26:83:03:50:dc:9d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6412c5ddf128ec714afaea483e87b1bc74d41f Validity Not Before: Dec 22 20:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b49aaa68c9eac4c207f09fadf4041cbeee1d80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:aa:46:d3:9f:98:ee:9a:6d:c3:58:e6:3e: 55:e3:c1:ed:1c:11:ee:76:6f:f4:b7:97:e4:7d:2f: e6:1a:f3:7e:bc:e5:a1:da:b9:36:a0:26:c0:a9:55: a8:69:01:11:9d:06:52:05:a8:db:fb:f4:20:4c:53: 1f:51:15:b0:8e:bf:79:d7:56:f4:5a:21:de:93:7f: ad:22:30:d6:0e:ce:49:07:c9:24:13:76:3b:2c:ce: 58:ed:0b:57:aa:6d:04:51:c8:e1:4d:87:c5:83:2b: 12:ab:30:06:4d:26:09:3b:62:b5:26:d0:cf:34:59: f0:00:b1:21:b0:80:bb:25:0c:5c:9b:75:b8:3a:f5: 0d:ed:9b:8b:eb:15:1c:53:f5:2d:18:8f:fc:d2:01: 22:b2:ac:c8:4f:4b:41:16:42:09:98:07:a5:01:f3: 4b:1c:9d:44:6c:df:7d:f4:63:34:47:98:81:64:c4: 95:81:50:2d:42:20:38:b3:21:71:2d:b6:57:b1:c0: df:27:32:18:fd:ff:a9:db:19:68:76:23:25:a6:c1: 8d:5f:67:d4:92:c5:d6:fa:77:ba:62:fd:cd:3b:bf: 20:3b:a4:42:ba:c5:fa:47:4c:3f:b9:9d:da:30:87: f5:b3:9b:71:a2:88:44:9e:f1:6a:92:ca:42:75:4d: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:AA:A6:8C:9E:AC:4C:20:7F:09:FA:DF:40:41:CB:EE:E1:D8:0C X509v3 Authority Key Identifier: keyid:DF:64:12:C5:DD:F1:28:EC:71:4A:FA:EA:48:3E:87:B1:BC:74:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32QSxd3xKOxxSvrqSD6Hsbx01B8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/e0mqpoyerEwgfwn630BBy-7h2Aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/101c05-a91c-4fbd-bd07-f950420b9e06/1/32QSxd3xKOxxSvrqSD6Hsbx01B8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.121.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:7a:97:9b:60:fa:ce:fa:08:dc:0d:56:46:2c:ec:fe:ae:e1: e7:bd:da:3c:b7:1a:7d:be:3d:9d:7e:a6:12:50:40:30:4f:b7: eb:4d:39:e5:8f:95:58:bf:6d:3f:36:75:c7:41:0c:b7:07:a3: 80:09:70:ca:be:b7:72:5e:f4:20:45:6a:42:59:f1:dc:25:2b: ad:5f:d8:1c:98:60:96:63:92:de:65:ed:8f:03:4e:b2:e4:e2: 00:40:e0:7d:45:b1:fa:52:c1:34:88:36:7a:f0:7c:41:cf:39: 59:bf:36:5a:3d:fb:f3:b7:f8:e3:6e:cf:3d:19:b8:3a:a7:10: ce:40:5d:ec:3e:59:7d:4d:17:06:d7:f5:24:6b:5e:d2:33:67: 6b:bf:9d:11:28:09:2f:3b:75:9c:98:f6:94:bb:06:49:c0:cf: fb:b7:46:a3:9d:8b:51:40:b6:fb:09:79:62:b1:1a:04:0b:55: e1:55:4b:70:0e:30:d7:ea:ca:4f:5c:41:6f:09:e7:f3:ef:b5: fb:2a:b3:fc:d4:59:97:45:01:81:46:e9:54:ee:77:40:be:83: 40:56:28:ae:85:5e:c7:2c:65:06:28:73:70:44:0e:67:69:8a: 34:47:00:52:00:b2:4e:d0:24:6b:1b:fd:dc:90:13:1a:7e:07: 6a:fb:5a:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtHuWBUNTHDblsmgwNQ3J2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNjQxMmM1ZGRmMTI4ZWM3MTRhZmFlYTQ4M2U4N2IxYmM3 NGQ0MWYwHhcNMjUxMjIyMjAyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjQ5YWFhNjhjOWVhYzRjMjA3ZjA5ZmFkZjQwNDFjYmVlZTFkODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoiqRtOfmO6abcNY5j5V48HtHBHu dm/0t5fkfS/mGvN+vOWh2rk2oCbAqVWoaQERnQZSBajb+/QgTFMfURWwjr9511b0 WiHek3+tIjDWDs5JB8kkE3Y7LM5Y7QtXqm0EUcjhTYfFgysSqzAGTSYJO2K1JtDP NFnwALEhsIC7JQxcm3W4OvUN7ZuL6xUcU/UtGI/80gEisqzIT0tBFkIJmAelAfNL HJ1EbN999GM0R5iBZMSVgVAtQiA4syFxLbZXscDfJzIY/f+p2xlodiMlpsGNX2fU ksXW+ne6Yv3NO78gO6RCusX6R0w/uZ3aMIf1s5txoohEnvFqkspCdU3ANQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHtJqqaMnqxMIH8J+t9AQcvu4dgMMB8GA1UdIwQY MBaAFN9kEsXd8SjscUr66kg+h7G8dNQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDct Zjk1MDQyMGI5ZTA2LzEvZTBtcXBveWVyRXdnZnduNjMwQkJ5LTdoMkF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xMDFjMDUtYTkxYy00ZmJkLWJkMDctZjk1MDQyMGI5ZTA2 LzEvMzJRU3hkM3hLT3h4U3ZycVNENkhzYngwMUI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmt5MA0G CSqGSIb3DQEBCwUAA4IBAQB7epebYPrO+gjcDVZGLOz+ruHnvdo8txp9vj2dfqYS UEAwT7frTTnlj5VYv20/NnXHQQy3B6OACXDKvrdyXvQgRWpCWfHcJSutX9gcmGCW Y5LeZe2PA06y5OIAQOB9RbH6UsE0iDZ68HxBzzlZvzZaPfvzt/jjbs89Gbg6pxDO QF3sPll9TRcG1/Uka17SM2drv50RKAkvO3WcmPaUuwZJwM/7t0ajnYtRQLb7CXli sRoEC1XhVUtwDjDX6spPXEFvCefz77X7KrP81FmXRQGBRulU7ndAvoNAViiuhV7H LGUGKHNwRA5naYo0RwBSALJO0CRrG/3ckBMafgdq+1oO -----END CERTIFICATE-----Generated at Thu Dec 25 01:16:43 2025 by rpki-client