This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/EgoHat_Mmduzy9sVoMLljVSWe1M.roa File: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (raw, json) Hash identifier: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI= Subject key identifier: 12:0A:07:6A:DF:CC:99:DB:B3:CB:DB:15:A0:C2:E5:8D:54:96:7B:53 Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Certificate serial: 019B7DCAED4502E14355F9CFE54FA995864C Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/EgoHat_Mmduzy9sVoMLljVSWe1M.roa Signing time: Fri 02 Jan 2026 08:20:09 +0000 ROA not before: Fri 02 Jan 2026 08:20:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29278 IP address blocks: 82.150.63.0/24 maxlen: 24 212.92.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ed:45:02:e1:43:55:f9:cf:e5:4f:a9:95:86:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233 Validity Not Before: Jan 2 08:20:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=120a076adfcc99dbb3cbdb15a0c2e58d54967b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:43:f2:61:d5:a4:9a:d2:cb:89:37:d3:d5:33: 53:3c:f1:0e:07:f8:15:2f:57:45:3b:a7:69:83:d5: a9:aa:ba:7e:4d:4d:6d:18:3c:2b:08:66:29:98:d6: 22:3c:d4:d1:ee:14:19:f3:d1:51:4f:5b:e4:37:cd: f1:f1:96:65:ef:36:08:87:5b:bf:6b:81:f3:6c:5f: b4:71:59:e3:b0:12:2a:02:64:c0:c3:e7:b8:84:73: 34:e8:e0:d0:94:8a:77:c5:8a:de:40:27:fa:2e:b5: 2d:4b:38:58:d2:d7:ef:2e:57:4d:eb:f2:03:1b:d1: 21:1b:6e:a5:9f:67:41:30:62:74:df:bc:e2:11:8e: b7:c9:94:29:ff:60:0d:12:e8:4f:a6:d2:5a:c4:f5: 9e:e1:8d:85:c7:22:63:60:e8:26:0a:ca:eb:1f:0f: 50:ff:bd:a7:b5:6b:5c:a3:13:1e:5d:30:83:4d:ab: 80:53:8a:58:d0:2d:ff:e4:3d:70:2e:55:f8:38:51: fb:c5:77:03:e4:01:68:84:cd:d3:ce:40:b2:bc:a7: ea:2a:cc:ce:83:58:0a:c4:41:6f:75:57:c7:e3:01: f4:a0:69:63:c7:59:09:6f:01:4e:00:95:61:54:27: 6c:71:9b:fe:84:9e:92:b0:b8:ff:e7:9d:80:bc:ac: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0A:07:6A:DF:CC:99:DB:B3:CB:DB:15:A0:C2:E5:8D:54:96:7B:53 X509v3 Authority Key Identifier: keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/EgoHat_Mmduzy9sVoMLljVSWe1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.150.63.0/24 212.92.23.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:d0:81:63:ae:f8:52:a0:80:bb:ba:df:ca:78:1d:12:c2:35: 78:4b:99:9c:ba:51:1c:a6:d8:a3:d8:98:b1:48:6b:c5:6b:9a: ac:49:c2:ae:96:e7:11:2a:c4:d5:58:b0:15:65:a3:47:f0:1a: 1b:c6:7d:25:ac:44:f3:5a:0b:e9:79:65:3c:20:43:71:c8:0d: 54:26:cc:8d:51:02:87:a5:29:0e:2e:87:23:75:c8:be:5c:7c: 77:79:54:ea:47:d8:24:7d:43:f2:03:13:76:62:2e:0c:fc:a6: 9f:43:88:e5:3a:f8:57:5d:6f:9f:87:59:30:81:bb:e4:b2:a3: 56:9b:d5:8b:e7:3f:cd:82:bb:60:b1:49:0a:11:31:94:0c:fe: 86:89:5a:99:6e:4c:38:a7:2a:c3:1b:58:d9:4f:43:28:05:0e: 37:e7:93:ae:75:70:b4:88:18:b1:02:ec:7d:08:b4:b4:cb:a8: c9:60:95:e5:6f:de:6a:0d:98:55:08:32:48:a1:de:b9:29:e9: a7:6c:c6:0c:f2:3b:32:38:8f:27:92:c9:3e:a6:f3:89:4f:96: e8:21:36:0b:a6:17:6d:32:66:33:69:22:3c:38:e4:a9:f4:06: fe:59:26:51:cc:7a:c5:09:08:0e:e7:45:45:00:f0:89:e4:98: 91:78:df:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yu1FAuFDVfnP5U+plYZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMzYxMDMzNDRmY2QzYjU3NTlmMmRiM2YzYzcwNzEzNzZm OWUyMzMwHhcNMjYwMTAyMDgyMDA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjBhMDc2YWRmY2M5OWRiYjNjYmRiMTVhMGMyZTU4ZDU0OTY3YjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEPyYdWkmtLLiTfT1TNTPPEOB/gV L1dFO6dpg9Wpqrp+TU1tGDwrCGYpmNYiPNTR7hQZ89FRT1vkN83x8ZZl7zYIh1u/ a4HzbF+0cVnjsBIqAmTAw+e4hHM06ODQlIp3xYreQCf6LrUtSzhY0tfvLldN6/ID G9EhG26ln2dBMGJ037ziEY63yZQp/2ANEuhPptJaxPWe4Y2FxyJjYOgmCsrrHw9Q /72ntWtcoxMeXTCDTauAU4pY0C3/5D1wLlX4OFH7xXcD5AFohM3TzkCyvKfqKszO g1gKxEFvdVfH4wH0oGljx1kJbwFOAJVhVCdscZv+hJ6SsLj/552AvKx7fQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBIKB2rfzJnbs8vbFaDC5Y1UlntTMB8GA1UdIwQY MBaAFE82EDNE/NO1dZ8ts/PHBxN2+eIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUt MGFjYzg5MmIxMWQyLzEvRWdvSGF0X01tZHV6eTlzVm9NTGxqVlNXZTFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy84MGQ5ZGYtZWFmMy00OGI2LThmZDUtMGFjYzg5MmIxMWQy LzEvVHpZUU0wVDgwN1Yxbnkyejg4Y0hFM2I1NGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUpY/AwQA 1FwXMA0GCSqGSIb3DQEBCwUAA4IBAQBt0IFjrvhSoIC7ut/KeB0SwjV4S5mculEc ptij2JixSGvFa5qsScKulucRKsTVWLAVZaNH8Bobxn0lrETzWgvpeWU8IENxyA1U JsyNUQKHpSkOLocjdci+XHx3eVTqR9gkfUPyAxN2Yi4M/KafQ4jlOvhXXW+fh1kw gbvksqNWm9WL5z/NgrtgsUkKETGUDP6GiVqZbkw4pyrDG1jZT0MoBQ4355OudXC0 iBixAux9CLS0y6jJYJXlb95qDZhVCDJIod65KemnbMYM8jsyOI8nksk+pvOJT5bo ITYLphdtMmYzaSI8OOSp9Ab+WSZRzHrFCQgO50VFAPCJ5JiReN95 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:24 2026 by rpki-client