This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EmEnpJ8t686hMeLbgosP3B7h96w.roa
File: EmEnpJ8t686hMeLbgosP3B7h96w.roa (raw, json)
Hash identifier: 435RfVZ/uhHhMSOv29jcJPMueeeCaC0ENFliqYVQ6cA=
Subject key identifier: 12:61:27:A4:9F:2D:EB:CE:A1:31:E2:DB:82:8B:0F:DC:1E:E1:F7:AC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019A7A7D36F087D283DDFDE9789F982E7191
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EmEnpJ8t686hMeLbgosP3B7h96w.roa
Signing time: Wed 12 Nov 2025 23:53:37 +0000
ROA not before: Wed 12 Nov 2025 23:53:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213929
IP address blocks: 2a0e:7d43::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:7a:7d:36:f0:87:d2:83:dd:fd:e9:78:9f:98:2e:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 12 23:53:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=126127a49f2debcea131e2db828b0fdc1ee1f7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:85:15:43:66:0f:ae:9a:d7:27:ba:65:94:
e3:ec:aa:71:e0:c1:19:a8:7a:07:83:54:1a:c9:85:
7b:53:58:e7:a0:96:67:fa:70:bd:12:a4:89:30:85:
8e:6a:fb:01:12:01:31:de:ec:3c:e3:b7:d7:04:d1:
e9:51:15:a4:a9:04:af:01:3f:b9:93:3a:1f:73:e0:
77:0b:e5:44:7f:6a:d6:f3:e9:ed:d5:bf:d1:98:f3:
71:7c:a6:7d:d2:4e:1d:74:75:d9:8e:81:f4:47:f0:
09:84:91:1d:9f:9e:e5:62:cc:44:01:98:1a:16:47:
dc:17:94:aa:d3:8b:b1:d3:32:72:b8:58:fc:dd:9a:
49:4d:40:f6:2d:b6:be:7b:22:ab:5d:9c:49:f8:a7:
4a:c1:9e:ef:61:24:ea:38:9b:ca:d0:69:d6:00:96:
4f:8b:5d:f9:12:ae:11:ad:3f:6f:cb:c3:53:2e:e9:
db:57:ec:ec:8f:14:3a:d4:6f:ff:b3:45:7e:89:ca:
29:b9:15:6a:b5:eb:30:68:9f:b3:37:d8:33:7e:ed:
92:38:bf:11:34:a6:77:c7:81:0f:cd:b4:2b:c1:f9:
d1:50:f8:03:40:f0:b5:a9:b6:78:b0:41:16:18:54:
ad:5e:8a:94:e4:35:e6:c3:11:76:f4:07:cd:9e:cc:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:27:A4:9F:2D:EB:CE:A1:31:E2:DB:82:8B:0F:DC:1E:E1:F7:AC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/EmEnpJ8t686hMeLbgosP3B7h96w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7d43::/32
Signature Algorithm: sha256WithRSAEncryption
5a:05:73:1b:ca:60:fb:ec:cf:69:65:9e:f3:7a:8c:4e:6d:51:
89:97:1d:30:2e:1b:4c:ee:75:14:41:fd:c1:5a:8c:02:3d:59:
4d:64:0f:41:e0:b0:0c:75:ca:3f:33:ff:0f:1a:66:b0:0b:6b:
c5:37:c0:88:4d:f2:1e:b6:83:d3:99:8b:5a:1e:d8:07:6b:27:
d5:8e:a1:83:8c:f6:19:03:1a:ac:c9:9f:6d:61:df:1e:b8:99:
bf:10:d1:f6:65:12:6d:b6:3c:43:02:7e:cb:2c:64:0f:83:3a:
87:da:15:d0:1d:32:e4:ab:88:b6:cb:7e:bd:74:b6:b4:fa:c2:
ee:d6:de:d0:1a:10:74:10:9a:b4:6a:3e:ef:32:08:a2:2b:9c:
ee:a6:2b:8f:c3:fe:4d:18:95:28:d5:a8:e8:90:5e:35:5f:c2:
0c:8e:e1:64:8b:a5:ba:e9:56:7f:91:30:9a:08:6b:e7:66:64:
7c:ea:fb:b8:3c:50:3b:c0:34:18:95:4e:bf:98:72:2e:74:d3:
98:bb:13:da:76:bc:2e:91:d4:81:d0:2a:34:c8:23:ba:68:90:
56:bd:66:c1:42:00:6e:25:b1:32:cf:41:f5:7a:30:fe:15:6d:
5f:31:50:b9:57:ab:89:0a:f9:db:30:be:06:a6:c1:2b:5e:c6:
68:28:89:4f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZp6fTbwh9KD3f3peJ+YLnGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjUxMTEyMjM1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjYxMjdhNDlmMmRlYmNlYTEzMWUyZGI4MjhiMGZkYzFlZTFmN2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxiFFUNmD66a1ye6ZZTj7Kpx4MEZ
qHoHg1QayYV7U1jnoJZn+nC9EqSJMIWOavsBEgEx3uw847fXBNHpURWkqQSvAT+5
kzofc+B3C+VEf2rW8+nt1b/RmPNxfKZ90k4ddHXZjoH0R/AJhJEdn57lYsxEAZga
FkfcF5Sq04ux0zJyuFj83ZpJTUD2Lba+eyKrXZxJ+KdKwZ7vYSTqOJvK0GnWAJZP
i135Eq4RrT9vy8NTLunbV+zsjxQ61G//s0V+icopuRVqteswaJ+zN9gzfu2SOL8R
NKZ3x4EPzbQrwfnRUPgDQPC1qbZ4sEEWGFStXoqU5DXmwxF29AfNnszkLwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBJhJ6SfLevOoTHi24KLD9we4fesMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvRW1FbnBKOHQ2ODZoTWVMYmdvc1AzQjdoOTZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg59QzAN
BgkqhkiG9w0BAQsFAAOCAQEAWgVzG8pg++zPaWWe83qMTm1RiZcdMC4bTO51FEH9
wVqMAj1ZTWQPQeCwDHXKPzP/DxpmsAtrxTfAiE3yHraD05mLWh7YB2sn1Y6hg4z2
GQMarMmfbWHfHriZvxDR9mUSbbY8QwJ+yyxkD4M6h9oV0B0y5KuItst+vXS2tPrC
7tbe0BoQdBCatGo+7zIIoiuc7qYrj8P+TRiVKNWo6JBeNV/CDI7hZIuluulWf5Ew
mghr52ZkfOr7uDxQO8A0GJVOv5hyLnTTmLsT2na8LpHUgdAqNMgjumiQVr1mwUIA
biWxMs9B9Xow/hVtXzFQuVeriQr52zC+BqbBK17GaCiJTw==
-----END CERTIFICATE-----
Generated at Sat Dec 6 08:58:47 2025 by rpki-client