This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/Emuj5k89JyREiy7IdcOgO90JxIk.roa File: Emuj5k89JyREiy7IdcOgO90JxIk.roa (raw, json) Hash identifier: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U= Subject key identifier: 12:6B:A3:E6:4F:3D:27:24:44:8B:2E:C8:75:C3:A0:3B:DD:09:C4:89 Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14 Certificate serial: 019B7834B186CCE279346B6CADEA8D9D9DA4 Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/Emuj5k89JyREiy7IdcOgO90JxIk.roa Signing time: Thu 01 Jan 2026 06:17:57 +0000 ROA not before: Thu 01 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56577 IP address blocks: 31.41.40.0/21 maxlen: 21 185.68.92.0/22 maxlen: 22 2a05:1700::/48 maxlen: 48 2a05:1700:2::/48 maxlen: 48 2a05:1700:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b1:86:cc:e2:79:34:6b:6c:ad:ea:8d:9d:9d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14 Validity Not Before: Jan 1 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=126ba3e64f3d2724448b2ec875c3a03bdd09c489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d4:c0:5a:b8:fd:f6:1b:ca:34:e6:d0:c0:ed: 3d:b8:3d:f0:68:ee:9c:2d:2f:04:24:17:82:87:fd: ba:69:d9:ed:d9:4c:14:3d:cc:67:3a:48:a4:e5:84: 2e:de:8a:40:36:bf:d4:6c:ef:6f:40:a6:85:f1:57: 89:2d:14:83:36:b3:85:f4:2b:14:32:ea:fd:e4:ec: 79:92:6e:b6:42:da:f0:8b:e2:25:cb:43:ca:a0:ae: ea:d6:a7:76:30:b8:ac:5e:2e:2d:3c:6d:39:d4:8d: be:81:3b:73:09:8b:6a:eb:78:b4:27:d1:e0:0f:03: 55:a8:7f:54:eb:d7:1b:e1:9e:0a:45:e5:87:df:22: 3c:06:50:d1:69:ff:28:80:ce:ff:c5:fc:a0:b7:53: 0e:07:01:9e:ef:82:7b:77:69:6d:92:e4:a6:6c:58: 19:99:03:79:7c:5d:57:38:a3:21:23:64:e4:c6:63: b2:59:e2:43:97:4b:43:38:92:36:51:a0:29:07:0f: 9a:f7:34:cb:9a:2c:fc:b6:28:4c:a1:6e:b8:fb:29: 78:9f:5f:52:60:d9:81:79:8c:c9:30:78:08:35:37: e1:97:ee:95:6e:dc:bf:58:5b:4e:35:73:e6:1f:3b: 4d:ea:c3:3f:a5:5a:61:c8:f7:83:f9:a2:79:f4:1c: 68:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6B:A3:E6:4F:3D:27:24:44:8B:2E:C8:75:C3:A0:3B:DD:09:C4:89 X509v3 Authority Key Identifier: keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/Emuj5k89JyREiy7IdcOgO90JxIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.40.0/21 185.68.92.0/22 IPv6: 2a05:1700::/48 2a05:1700:2::/47 Signature Algorithm: sha256WithRSAEncryption 4b:ef:1e:f0:7c:8c:32:7a:a1:7c:1e:13:88:ae:3f:33:f3:29: 9b:f3:09:b2:72:93:78:d3:bb:e7:e7:c3:d7:47:82:a5:2a:c9: 8c:be:3f:9b:64:6a:cd:e6:a7:c3:33:f4:2f:be:4c:6a:bc:f3: 81:b4:96:4e:e1:5b:c2:a0:30:ad:a9:37:65:58:3d:2d:ed:be: 61:5e:3b:43:f8:3b:4b:74:cc:4f:41:c0:af:92:1a:3e:83:8a: ba:46:09:ba:d4:e7:9e:3a:a0:c3:92:00:c6:a6:5e:fa:2c:ec: 76:24:1e:83:83:89:51:9e:1a:1b:7d:44:24:a4:1c:e5:68:78: bb:e3:7a:74:10:2f:8b:d6:89:9a:16:66:3b:93:f1:3f:6b:b7: c8:b6:75:8d:2c:62:cf:90:a4:4a:24:78:91:b2:d8:e7:f5:6e: 89:8f:14:2b:15:c0:69:9a:ea:f7:2e:ab:4b:1e:b9:43:b9:46: 42:34:c5:b5:b1:4f:98:2a:d1:bd:f4:c7:24:5e:71:04:b6:07: c9:1c:e6:8c:fd:9e:76:67:c6:39:27:fa:05:bc:7d:47:31:ab: e0:97:65:ab:88:fd:c4:1c:76:62:78:67:45:05:f4:0f:9e:f2: 3d:99:75:cd:18:04:f5:5a:c3:03:08:58:64:3e:54:cd:31:70: d3:a3:c5:c8 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt4NLGGzOJ5NGtsreqNnZ2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYzJjMjkxMmUxMDU4MTU4NzA1MmE1Y2E3NzA5MTBiMjYx NzRmMTQwHhcNMjYwMTAxMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjZiYTNlNjRmM2QyNzI0NDQ4YjJlYzg3NWMzYTAzYmRkMDljNDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndTAWrj99hvKNObQwO09uD3waO6c LS8EJBeCh/26adnt2UwUPcxnOkik5YQu3opANr/UbO9vQKaF8VeJLRSDNrOF9CsU Mur95Ox5km62Qtrwi+Ily0PKoK7q1qd2MLisXi4tPG051I2+gTtzCYtq63i0J9Hg DwNVqH9U69cb4Z4KReWH3yI8BlDRaf8ogM7/xfygt1MOBwGe74J7d2ltkuSmbFgZ mQN5fF1XOKMhI2TkxmOyWeJDl0tDOJI2UaApBw+a9zTLmiz8tihMoW64+yl4n19S YNmBeYzJMHgINTfhl+6Vbty/WFtONXPmHztN6sM/pVphyPeD+aJ59BxohwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBJro+ZPPSckRIsuyHXDoDvdCcSJMB8GA1UdIwQY MBaAFJHCwpEuEFgVhwUqXKdwkQsmF08UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYt OTBmOTdmNzQ2Njc2LzEvRW11ajVrODlKeVJFaXk3SWRjT2dPOTBKeElrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9iMzBiNTctZTdlOS00YjJmLTk5YjYtOTBmOTdmNzQ2Njc2 LzEva2NMQ2tTNFFXQldIQlNwY3AzQ1JDeVlYVHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQDHykoAwQC uURcMBgEAgACMBIDBwAqBRcAAAADBwEqBRcAAAIwDQYJKoZIhvcNAQELBQADggEB AEvvHvB8jDJ6oXweE4iuPzPzKZvzCbJyk3jTu+fnw9dHgqUqyYy+P5tkas3mp8Mz 9C++TGq884G0lk7hW8KgMK2pN2VYPS3tvmFeO0P4O0t0zE9BwK+SGj6DirpGCbrU 5546oMOSAMamXvos7HYkHoODiVGeGht9RCSkHOVoeLvjenQQL4vWiZoWZjuT8T9r t8i2dY0sYs+QpEokeJGy2Of1bomPFCsVwGma6vcuq0seuUO5RkI0xbWxT5gq0b30 xyRecQS2B8kc5oz9nnZnxjkn+gW8fUcxq+CXZauI/cQcdmJ4Z0UF9A+e8j2Zdc0Y BPVawwMIWGQ+VM0xcNOjxcg= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:50 2026 by rpki-client