This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/EMHyn8USQYYAwip53OFX3GcU8Ig.roa File: EMHyn8USQYYAwip53OFX3GcU8Ig.roa (raw, json) Hash identifier: GKc0X/C0dqDFZ9/iYyqKAh6YmFA9MsPi0sI8GP0tfoQ= Subject key identifier: 10:C1:F2:9F:C5:12:41:86:00:C2:2A:79:DC:E1:57:DC:67:14:F0:88 Certificate issuer: /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095 Certificate serial: 019B7759111C530315B047EFA9E61F13EE88 Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/EMHyn8USQYYAwip53OFX3GcU8Ig.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29063 IP address blocks: 83.138.0.0/21 maxlen: 24 212.25.192.0/20 maxlen: 24 212.25.212.0/23 maxlen: 24 212.159.192.0/19 maxlen: 24 212.159.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:11:1c:53:03:15:b0:47:ef:a9:e6:1f:13:ee:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10c1f29fc512418600c22a79dce157dc6714f088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:27:51:5e:31:9a:50:b8:da:ac:a6:e3:7c: bf:5f:28:e1:d6:76:78:e0:27:8f:56:ca:05:e7:ff: c4:4d:45:1a:a1:8a:a0:10:8e:0e:ac:27:0b:44:53: 7b:13:75:ee:f6:a9:35:81:fa:37:27:c8:33:b1:5c: 46:4f:e9:bc:0e:33:7f:2a:7a:cc:e5:f8:5f:0b:76: b6:b5:65:4a:29:ec:ed:68:61:e3:9e:00:99:57:ef: 16:c7:8f:e0:88:e2:bb:4b:9e:0a:d3:8d:ec:67:8d: 0e:90:6d:ee:27:e1:64:ff:bd:4c:f0:b6:81:28:55: a9:d4:75:83:e1:d5:a9:bf:70:df:53:53:c6:20:e4: f9:ed:e0:1c:42:c5:97:0c:a2:c5:78:03:5f:5e:d8: d6:dd:68:b4:88:80:bb:db:db:e5:3f:2e:b2:92:dc: a3:a6:c2:b2:85:c7:5c:49:3f:ba:69:cd:d9:0d:03: fc:0d:4a:c1:62:22:30:3d:2c:b4:96:27:99:4e:78: 34:5f:14:ea:7b:be:af:bc:98:f8:cd:79:ac:38:9b: b8:6d:11:1f:9c:0a:4b:77:a7:5c:ef:3e:09:ec:6d: 5c:32:e7:3b:36:36:0a:1f:c5:dd:89:3e:20:49:e6: 3e:57:fd:af:f7:c2:20:6c:6e:fd:8b:14:55:0a:ab: b3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C1:F2:9F:C5:12:41:86:00:C2:2A:79:DC:E1:57:DC:67:14:F0:88 X509v3 Authority Key Identifier: keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/EMHyn8USQYYAwip53OFX3GcU8Ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.138.0.0/21 212.25.192.0/20 212.25.212.0/23 212.159.192.0/18 Signature Algorithm: sha256WithRSAEncryption 93:0e:88:54:6b:29:90:24:5a:97:87:5c:a2:20:fc:2d:68:7a: fc:2a:65:4d:8f:10:30:78:b2:51:04:09:84:35:0b:6b:95:c2: d2:76:13:7e:a6:b0:8a:53:c8:5c:eb:82:2b:3d:1a:ec:df:32: bd:bb:77:13:7e:7a:09:cc:d5:fe:73:49:a0:9d:13:36:e6:ba: 0e:27:c4:79:b8:a5:ca:c4:ad:e6:ea:13:bd:d7:17:49:84:77: 3c:b7:9c:ea:f5:ea:32:c0:e1:28:cd:6d:6d:1f:18:76:6c:d6: 4e:5b:96:1e:d0:c0:01:e6:05:67:56:f3:f8:75:eb:9e:b0:4d: ca:74:53:a5:cd:8a:b5:7f:29:9d:9b:da:ef:1e:c1:18:30:97: 2a:b6:c1:89:40:fa:5d:5d:37:a7:d0:a3:bb:92:f3:b6:c7:3c: 8f:7a:ec:12:39:84:00:d7:f1:02:e7:75:0b:af:d8:e5:f4:4e: be:e4:de:cc:a3:1a:3b:4b:56:67:45:a4:9b:8a:96:fb:ac:71: 05:f7:0c:39:b1:fb:42:9e:5a:4a:c8:9d:fc:80:3d:26:16:00: 64:75:e9:8c:c0:c1:41:03:d0:3c:64:34:d7:79:75:9f:fa:eb: 26:31:5d:2d:52:65:bb:d9:fb:14:16:60:0a:9b:ea:f0:12:89: 6c:76:9d:d4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WREcUwMVsEfvqeYfE+6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNmJmZDkyOGJjY2I0MmFkOWM0NjhhNTUyYWI3MzkzZmRk ODcwOTUwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGMxZjI5ZmM1MTI0MTg2MDBjMjJhNzlkY2UxNTdkYzY3MTRmMDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ScnUV4xmlC42qym43y/Xyjh1nZ4 4CePVsoF5//ETUUaoYqgEI4OrCcLRFN7E3Xu9qk1gfo3J8gzsVxGT+m8DjN/KnrM 5fhfC3a2tWVKKeztaGHjngCZV+8Wx4/giOK7S54K043sZ40OkG3uJ+Fk/71M8LaB KFWp1HWD4dWpv3DfU1PGIOT57eAcQsWXDKLFeANfXtjW3Wi0iIC729vlPy6yktyj psKyhcdcST+6ac3ZDQP8DUrBYiIwPSy0lieZTng0XxTqe76vvJj4zXmsOJu4bREf nApLd6dc7z4J7G1cMuc7NjYKH8XdiT4gSeY+V/2v98IgbG79ixRVCquzZQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBDB8p/FEkGGAMIqedzhV9xnFPCIMB8GA1UdIwQY MBaAFNNr/ZKLzLQq2cRopVKrc5P92HCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjkt YTc0ZTRhODg3ODA0LzEvRU1IeW44VVNRWVlBd2lwNTNPRlgzR2NVOElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9jN2FhMmEtMDkwYy00Zjc3LTlkNjktYTc0ZTRhODg3ODA0 LzEvMDJ2OWtvdk10Q3JaeEdpbFVxdHprXzNZY0pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDU4oAAwQE 1BnAAwQB1BnUAwQG1J/AMA0GCSqGSIb3DQEBCwUAA4IBAQCTDohUaymQJFqXh1yi IPwtaHr8KmVNjxAweLJRBAmENQtrlcLSdhN+prCKU8hc64IrPRrs3zK9u3cTfnoJ zNX+c0mgnRM25roOJ8R5uKXKxK3m6hO91xdJhHc8t5zq9eoywOEozW1tHxh2bNZO W5Ye0MAB5gVnVvP4deuesE3KdFOlzYq1fymdm9rvHsEYMJcqtsGJQPpdXTen0KO7 kvO2xzyPeuwSOYQA1/EC53ULr9jl9E6+5N7Moxo7S1ZnRaSbipb7rHEF9ww5sftC nlpKyJ38gD0mFgBkdemMwMFBA9A8ZDTXeXWf+usmMV0tUmW72fsUFmAKm+rwEols dp3U -----END CERTIFICATE-----Generated at Sun Jan 25 19:43:08 2026 by rpki-client