This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/EMqpNBcCNtehXNjtWHmz4Qx27pk.roa File: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (raw, json) Hash identifier: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI= Subject key identifier: 10:CA:A9:34:17:02:36:D7:A1:5C:D8:ED:58:79:B3:E1:0C:76:EE:99 Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a Certificate serial: 019B79ECCE0C54888FDFC2B02C49A4C0013A Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/EMqpNBcCNtehXNjtWHmz4Qx27pk.roa Signing time: Thu 01 Jan 2026 14:18:41 +0000 ROA not before: Thu 01 Jan 2026 14:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205692 IP address blocks: 2a09:f040::/29 maxlen: 29 2a0b:2fc0::/29 maxlen: 29 2a0d:c00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ce:0c:54:88:8f:df:c2:b0:2c:49:a4:c0:01:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a Validity Not Before: Jan 1 14:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10caa934170236d7a15cd8ed5879b3e10c76ee99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:28:1c:f7:24:01:43:9e:04:a1:99:1a:84:ad: 64:da:63:89:23:a9:28:84:40:c4:16:1b:f7:ff:93: 98:07:34:e3:cc:22:4f:44:d2:c9:4a:38:79:d9:fe: 85:62:27:b4:6b:e4:6a:b3:0b:d2:7f:be:0e:dc:80: f3:10:08:0e:6a:4a:6a:9f:6b:d5:82:55:c4:94:c0: bb:f1:13:64:03:9a:29:0b:b6:81:1d:5e:c8:9a:62: 0a:c2:8e:2d:ad:af:d7:a0:2f:66:05:c5:19:07:1c: bd:12:1d:4a:33:2b:c9:e8:83:a5:e8:d2:5e:cf:95: 54:ec:d3:14:69:5c:7d:6e:f3:d4:32:c0:26:7e:dc: b3:60:1f:8f:ed:57:2f:af:aa:92:ad:f3:fe:df:d3: 64:35:d7:40:d7:20:74:d4:20:73:07:df:2b:3b:3b: ad:39:82:fa:33:62:7f:bc:ed:2a:99:43:78:be:1f: cf:33:d8:78:62:df:82:6a:5a:35:b9:38:d6:10:98: 30:d6:ea:47:8a:27:e4:35:41:eb:88:e0:db:4e:01: e3:68:0f:43:e2:5a:25:6e:5b:09:73:e6:1b:b0:05: b2:6a:b4:40:1c:fa:59:76:77:19:d0:2a:a5:7e:63: b3:8e:48:8b:67:97:05:2e:74:d2:a7:d2:1c:7d:51: 3c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CA:A9:34:17:02:36:D7:A1:5C:D8:ED:58:79:B3:E1:0C:76:EE:99 X509v3 Authority Key Identifier: keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/EMqpNBcCNtehXNjtWHmz4Qx27pk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:f040::/29 2a0b:2fc0::/29 2a0d:c00::/29 Signature Algorithm: sha256WithRSAEncryption 33:bb:93:3d:b5:15:db:02:48:e4:84:2e:9b:fa:64:0c:74:79: 18:d8:ec:67:4f:cb:d9:05:eb:e3:b0:2e:1c:a7:36:e6:e8:fe: ce:a6:b5:d7:72:c0:00:da:b9:7d:b0:62:4e:cf:29:b8:bc:06: ec:59:87:a9:90:cb:bf:c3:fc:e2:c2:ae:4c:d8:24:74:c5:6b: dd:87:69:cb:99:70:71:2d:c6:a3:69:e1:56:bc:a5:ef:38:15: 1a:46:dd:9a:92:65:c2:b3:55:3c:43:ec:b9:c2:e4:a7:76:99: f9:ac:ad:3c:fc:bf:29:57:7f:ed:08:bc:1b:48:44:87:66:e7: 11:e2:50:d5:df:5a:2c:6d:60:63:66:43:ea:95:94:95:57:7a: e7:6a:9c:05:4c:97:7b:c4:7c:ae:26:bc:91:7e:ea:a9:5e:b4: e4:5d:83:cf:23:d3:5f:e2:53:ef:60:60:70:10:a9:d1:37:a0: 02:c4:8f:a9:c4:6e:5a:83:ce:df:58:2f:a0:bc:74:ca:09:57: 16:85:97:c3:a4:39:9c:6e:f5:87:cf:db:a7:1d:98:1d:a0:af: cc:e2:44:4a:95:b0:e3:ed:d0:77:1b:01:34:9c:6f:04:6e:9f: 18:1c:31:ac:e7:d7:af:66:f6:e1:be:e3:b2:77:c5:53:35:60: f0:19:36:e3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57M4MVIiP38KwLEmkwAE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZmY1NDFjZjM2NDE5M2EyYTAwYWRhMTQyNDRhY2QzNGMx NDAzOGEwHhcNMjYwMTAxMTQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGNhYTkzNDE3MDIzNmQ3YTE1Y2Q4ZWQ1ODc5YjNlMTBjNzZlZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSgc9yQBQ54EoZkahK1k2mOJI6ko hEDEFhv3/5OYBzTjzCJPRNLJSjh52f6FYie0a+RqswvSf74O3IDzEAgOakpqn2vV glXElMC78RNkA5opC7aBHV7ImmIKwo4tra/XoC9mBcUZBxy9Eh1KMyvJ6IOl6NJe z5VU7NMUaVx9bvPUMsAmftyzYB+P7Vcvr6qSrfP+39NkNddA1yB01CBzB98rOzut OYL6M2J/vO0qmUN4vh/PM9h4Yt+Calo1uTjWEJgw1upHiifkNUHriODbTgHjaA9D 4lolblsJc+YbsAWyarRAHPpZdncZ0CqlfmOzjkiLZ5cFLnTSp9IcfVE8hQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBDKqTQXAjbXoVzY7Vh5s+EMdu6ZMB8GA1UdIwQY MBaAFMb/VBzzZBk6KgCtoUJErNNMFAOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYt MmE1ZTk4YWJkMWYzLzEvRU1xcE5CY0NOdGVoWE5qdFdIbXo0UXgyN3BrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8zOWEwMjItZmFlZC00Mzc2LThiZTYtMmE1ZTk4YWJkMWYz LzEveHY5VUhQTmtHVG9xQUsyaFFrU3MwMHdVQTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgnwQAMF AyoLL8ADBQMqDQwAMA0GCSqGSIb3DQEBCwUAA4IBAQAzu5M9tRXbAkjkhC6b+mQM dHkY2OxnT8vZBevjsC4cpzbm6P7OprXXcsAA2rl9sGJOzym4vAbsWYepkMu/w/zi wq5M2CR0xWvdh2nLmXBxLcajaeFWvKXvOBUaRt2akmXCs1U8Q+y5wuSndpn5rK08 /L8pV3/tCLwbSESHZucR4lDV31osbWBjZkPqlZSVV3rnapwFTJd7xHyuJryRfuqp XrTkXYPPI9Nf4lPvYGBwEKnRN6ACxI+pxG5ag87fWC+gvHTKCVcWhZfDpDmcbvWH z9unHZgdoK/M4kRKlbDj7dB3GwE0nG8Ebp8YHDGs59evZvbhvuOyd8VTNWDwGTbj -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:13 2026 by rpki-client