This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/EhydGNTB-hB89eN92UxIng6UVZM.roa File: EhydGNTB-hB89eN92UxIng6UVZM.roa (raw, json) Hash identifier: gWjLjnj1fBxsYuib5uZNn6bhDyaTmXoH7T7zFvCCLkU= Subject key identifier: 12:1C:9D:18:D4:C1:FA:10:7C:F5:E3:7D:D9:4C:48:9E:0E:94:55:93 Certificate issuer: /CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Certificate serial: 019B7FF08E349E0863D20274F69FDB241D7B Authority key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/EhydGNTB-hB89eN92UxIng6UVZM.roa Signing time: Fri 02 Jan 2026 18:20:30 +0000 ROA not before: Fri 02 Jan 2026 18:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59676 IP address blocks: 31.13.6.0/24 maxlen: 24 193.105.150.0/24 maxlen: 24 2a00:10e8:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:8e:34:9e:08:63:d2:02:74:f6:9f:db:24:1d:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda96d02a822f46253c2aee680441d5ac27c3df5 Validity Not Before: Jan 2 18:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=121c9d18d4c1fa107cf5e37dd94c489e0e945593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:59:da:83:7e:f9:fd:74:01:8a:20:59:98: 2b:aa:ec:b7:6e:6d:b6:c1:8c:aa:f8:1f:0b:07:e9: e9:7b:d1:64:64:ad:1d:e4:2e:2f:de:52:b0:29:93: e8:34:04:c3:26:49:f0:68:ce:12:a6:83:01:bc:c6: ba:53:aa:ea:b6:61:ea:0f:65:f2:6d:1e:37:bb:ab: 9a:fa:11:e6:f8:07:2c:7a:99:a7:bb:6e:8c:10:c6: d2:4f:3e:e5:8f:7b:20:45:ba:47:a4:04:8b:c4:c6: 28:63:13:75:c2:a3:c5:e9:d5:13:72:5d:b2:2f:3e: 20:08:7c:e9:b2:d5:a1:f3:c0:06:3e:81:ea:de:ae: 6d:4b:5b:10:c4:09:70:4e:e5:c4:97:ce:7c:e4:ba: 4d:b7:67:73:d7:a0:e2:1e:10:03:b0:e2:21:28:4c: c9:18:2a:72:7e:9a:fd:fa:b2:cf:23:09:9e:1c:85: c7:76:85:4c:e8:e7:ce:c9:0b:97:28:d3:44:0a:78: 50:01:a9:77:61:df:f0:14:c9:82:b1:f3:9f:e2:e1: 31:9b:04:0e:3b:03:ce:fa:e6:f8:2a:c3:c5:f8:c5: 4d:f1:b4:b1:01:01:f4:bb:01:17:91:71:5a:9a:85: 7d:e2:f4:5a:d2:fc:76:ef:97:21:e2:78:53:47:63: ae:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1C:9D:18:D4:C1:FA:10:7C:F5:E3:7D:D9:4C:48:9E:0E:94:55:93 X509v3 Authority Key Identifier: keyid:BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/EhydGNTB-hB89eN92UxIng6UVZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.6.0/24 193.105.150.0/24 IPv6: 2a00:10e8:2::/48 Signature Algorithm: sha256WithRSAEncryption 4a:ae:42:3d:9a:3f:a6:eb:e3:44:1d:7d:93:05:50:6b:20:27: 5c:d6:ef:98:64:d6:9b:a5:c8:18:07:f7:ef:3f:9e:06:df:20: 6c:6d:57:1b:46:a3:2c:6a:18:77:ed:f2:2e:cc:df:4e:06:e3: 5e:c1:56:28:d6:a5:a3:a4:ca:f5:e4:f2:01:87:3b:43:c2:83: f6:57:65:8d:f3:69:19:8e:1e:72:2e:93:b1:8c:ba:4a:69:05: ce:38:be:d4:5c:42:50:90:56:ce:07:bc:72:fb:0d:29:9a:a1: 1d:93:d4:b6:71:86:de:34:bb:b0:dd:89:ca:77:d3:8a:10:b0: 9f:34:a9:e8:20:36:53:bf:31:05:a9:7a:6e:8a:65:ef:c0:86: 56:8d:d0:5f:74:06:04:75:55:b7:47:53:cc:cf:79:2d:c1:4c: 1e:89:28:e6:23:11:1e:26:5d:a0:f3:75:3e:10:8d:27:d5:7b: 08:72:64:40:e3:bd:bd:ac:ca:f9:13:5c:6c:a2:14:ed:d3:d9: 2d:ca:72:52:5b:f3:5f:12:88:b9:5b:14:6a:50:43:13:03:00: 9f:89:a4:5e:4d:3a:61:b3:10:4d:a9:da:9c:dd:90:06:a1:56: 84:2f:fb:bb:c4:be:7b:f7:a4:69:31:1f:7e:5c:d4:c2:f2:c5: a3:bc:3f:0d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/8I40nghj0gJ09p/bJB17MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTk2ZDAyYTgyMmY0NjI1M2MyYWVlNjgwNDQxZDVhYzI3 YzNkZjUwHhcNMjYwMTAyMTgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjFjOWQxOGQ0YzFmYTEwN2NmNWUzN2RkOTRjNDg5ZTBlOTQ1NTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscJZ2oN++f10AYogWZgrquy3bm22 wYyq+B8LB+npe9FkZK0d5C4v3lKwKZPoNATDJknwaM4SpoMBvMa6U6rqtmHqD2Xy bR43u6ua+hHm+Acsepmnu26MEMbSTz7lj3sgRbpHpASLxMYoYxN1wqPF6dUTcl2y Lz4gCHzpstWh88AGPoHq3q5tS1sQxAlwTuXEl8585LpNt2dz16DiHhADsOIhKEzJ GCpyfpr9+rLPIwmeHIXHdoVM6OfOyQuXKNNECnhQAal3Yd/wFMmCsfOf4uExmwQO OwPO+ub4KsPF+MVN8bSxAQH0uwEXkXFamoV94vRa0vx275ch4nhTR2OumQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBIcnRjUwfoQfPXjfdlMSJ4OlFWTMB8GA1UdIwQY MBaAFL2pbQKoIvRiU8Ku5oBEHVrCfD31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzIt Y2Y4M2Q2ZTQwNTU4LzEvRWh5ZEdOVEItaEI4OWVOOTJVeEluZzZVVlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hMjdiMzktODAxMS00MTQyLTg2YzItY2Y4M2Q2ZTQwNTU4 LzEvdmFsdEFxZ2k5R0pUd3E3bWdFUWRXc0o4UGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAHw0GAwQA wWmWMA8EAgACMAkDBwAqABDoAAIwDQYJKoZIhvcNAQELBQADggEBAEquQj2aP6br 40QdfZMFUGsgJ1zW75hk1pulyBgH9+8/ngbfIGxtVxtGoyxqGHft8i7M304G417B VijWpaOkyvXk8gGHO0PCg/ZXZY3zaRmOHnIuk7GMukppBc44vtRcQlCQVs4HvHL7 DSmaoR2T1LZxht40u7Ddicp304oQsJ80qeggNlO/MQWpem6KZe/AhlaN0F90BgR1 VbdHU8zPeS3BTB6JKOYjER4mXaDzdT4QjSfVewhyZEDjvb2syvkTXGyiFO3T2S3K clJb818SiLlbFGpQQxMDAJ+JpF5NOmGzEE2p2pzdkAahVoQv+7vEvnv3pGkxH35c 1MLyxaO8Pw0= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:26 2026 by rpki-client