This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/EuHmvZqA0d7whOU9Mu_fZulPfvk.roa File: EuHmvZqA0d7whOU9Mu_fZulPfvk.roa (raw, json) Hash identifier: eTa89x27kdSBV0z11RQY9zM4csiG8i7HDOpZrHPd1yA= Subject key identifier: 12:E1:E6:BD:9A:80:D1:DE:F0:84:E5:3D:32:EF:DF:66:E9:4F:7E:F9 Certificate issuer: /CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Certificate serial: 019B791136143DE64C51092E60997141CEC3 Authority key identifier: 25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/EuHmvZqA0d7whOU9Mu_fZulPfvk.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199393 IP address blocks: 194.169.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.mft rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:36:14:3d:e6:4c:51:09:2e:60:99:71:41:ce:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25907f90d9f9d902fcf04bd0b46152c3827a7d50 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12e1e6bd9a80d1def084e53d32efdf66e94f7ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f6:d3:3e:04:5b:b7:4b:7d:e5:83:be:e0:9a: 55:84:c9:2e:cd:39:cc:05:7e:67:10:39:f7:4f:b0: 7e:65:68:c4:c0:59:8d:83:a7:19:ec:63:85:6c:64: 62:98:b4:18:50:82:ca:8f:f8:24:48:4d:cc:be:2f: 19:dd:54:5d:6f:ed:d4:11:9e:d1:82:62:28:ec:ce: 4a:d1:ec:35:fa:19:36:44:fc:5d:5a:f5:bf:c7:59: 8e:95:9a:01:00:aa:b0:0e:d3:58:62:5a:4f:56:af: dc:2f:4e:a1:11:55:31:79:89:cc:d7:c2:b4:37:b7: f7:a4:b1:50:a3:b1:c9:f5:1a:aa:7e:b1:ac:f3:cc: 8d:92:6c:e0:d8:2b:85:37:ce:90:91:c5:d7:05:d3: f7:6d:18:99:9d:ec:fa:9a:67:32:98:96:aa:b5:f3: a6:d2:af:74:b5:b7:5d:15:a9:a7:fc:be:94:34:3b: b3:af:07:54:34:c1:e5:57:f6:7a:62:0c:82:68:47: 92:ee:1b:00:2d:6d:fa:35:d2:32:7a:41:5d:3a:13: cd:05:a6:a1:ad:0d:09:85:d8:6e:c6:d3:de:2c:9e: 06:a0:67:b7:1e:77:f3:70:af:74:24:2a:11:23:af: 0c:bc:8c:4e:ad:57:b3:b5:d2:a0:b6:36:81:a5:20: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E1:E6:BD:9A:80:D1:DE:F0:84:E5:3D:32:EF:DF:66:E9:4F:7E:F9 X509v3 Authority Key Identifier: keyid:25:90:7F:90:D9:F9:D9:02:FC:F0:4B:D0:B4:61:52:C3:82:7A:7D:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZB_kNn52QL88EvQtGFSw4J6fVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/EuHmvZqA0d7whOU9Mu_fZulPfvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd1ec7-3446-4709-b93c-089c89ef63c8/1/JZB_kNn52QL88EvQtGFSw4J6fVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.183.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:18:5d:75:63:29:a4:b5:78:fd:4e:a8:e7:c1:5f:87:60:49: 1e:f5:6f:97:c5:71:55:fb:0e:07:c0:60:09:0c:9e:b2:8e:64: f9:c7:da:15:26:a8:52:ce:f5:4b:f5:d8:74:22:81:98:40:cd: 98:f9:88:26:0f:b9:87:57:3f:40:37:a5:18:0a:d8:95:92:52: 2d:09:b2:90:08:fb:6d:06:4a:0a:85:46:99:c0:eb:57:b0:5a: 25:d2:d1:4b:ac:b9:10:27:77:c9:1e:41:db:d3:d4:da:97:d6: 65:40:c2:0c:83:ec:36:9d:3c:57:2e:94:82:9e:52:cf:c8:85: aa:89:1c:5c:15:b0:73:5b:01:7d:88:91:59:84:80:fc:40:5a: ce:b3:af:1c:84:65:53:83:35:ed:04:cf:70:a0:63:29:75:af: 9f:fe:d0:3b:19:fd:cd:8e:f8:d1:a9:c2:a6:21:3e:ab:74:60: 37:b5:72:7a:b5:94:01:98:e3:3e:d5:9b:6d:9e:c6:d7:60:2a: 6d:21:74:ca:78:a1:fd:ec:44:61:b0:d8:78:fd:c2:e8:24:b7: 58:91:1b:33:6d:df:e6:76:93:26:2e:79:94:e9:e9:e9:ee:34: 66:84:c6:53:72:4f:a6:96:f4:74:f1:22:19:f7:f7:1d:6d:8c: 92:5d:4e:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETYUPeZMUQkuYJlxQc7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1OTA3ZjkwZDlmOWQ5MDJmY2YwNGJkMGI0NjE1MmMzODI3 YTdkNTAwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmUxZTZiZDlhODBkMWRlZjA4NGU1M2QzMmVmZGY2NmU5NGY3ZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPbTPgRbt0t95YO+4JpVhMkuzTnM BX5nEDn3T7B+ZWjEwFmNg6cZ7GOFbGRimLQYUILKj/gkSE3Mvi8Z3VRdb+3UEZ7R gmIo7M5K0ew1+hk2RPxdWvW/x1mOlZoBAKqwDtNYYlpPVq/cL06hEVUxeYnM18K0 N7f3pLFQo7HJ9RqqfrGs88yNkmzg2CuFN86QkcXXBdP3bRiZnez6mmcymJaqtfOm 0q90tbddFamn/L6UNDuzrwdUNMHlV/Z6YgyCaEeS7hsALW36NdIyekFdOhPNBaah rQ0JhdhuxtPeLJ4GoGe3HnfzcK90JCoRI68MvIxOrVeztdKgtjaBpSAhEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLh5r2agNHe8ITlPTLv32bpT375MB8GA1UdIwQY MBaAFCWQf5DZ+dkC/PBL0LRhUsOCen1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2Mt MDg5Yzg5ZWY2M2M4LzEvRXVIbXZacUEwZDd3aE9VOU11X2ZadWxQZnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDFlYzctMzQ0Ni00NzA5LWI5M2MtMDg5Yzg5ZWY2M2M4 LzEvSlpCX2tObjUyUUw4OEV2UXRHRlN3NEo2ZlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqm3MA0G CSqGSIb3DQEBCwUAA4IBAQAsGF11YymktXj9TqjnwV+HYEke9W+XxXFV+w4HwGAJ DJ6yjmT5x9oVJqhSzvVL9dh0IoGYQM2Y+YgmD7mHVz9AN6UYCtiVklItCbKQCPtt BkoKhUaZwOtXsFol0tFLrLkQJ3fJHkHb09Tal9ZlQMIMg+w2nTxXLpSCnlLPyIWq iRxcFbBzWwF9iJFZhID8QFrOs68chGVTgzXtBM9woGMpda+f/tA7Gf3NjvjRqcKm IT6rdGA3tXJ6tZQBmOM+1ZttnsbXYCptIXTKeKH97ERhsNh4/cLoJLdYkRszbd/m dpMmLnmU6enp7jRmhMZTck+mlvR08SIZ9/cdbYySXU6V -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:14 2026 by rpki-client