This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/EMQb1ehNu3j_7dRl1hEcmy2I1X0.roa File: EMQb1ehNu3j_7dRl1hEcmy2I1X0.roa (raw, json) Hash identifier: r9MF1Sny4W9NzIge6lOagoY0iltbVPrI73iobB24DGE= Subject key identifier: 10:C4:1B:D5:E8:4D:BB:78:FF:ED:D4:65:D6:11:1C:9B:2D:88:D5:7D Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Certificate serial: 019B78351986A49EE1E1DB40CB082EE74AFC Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/EMQb1ehNu3j_7dRl1hEcmy2I1X0.roa Signing time: Thu 01 Jan 2026 06:18:24 +0000 ROA not before: Thu 01 Jan 2026 06:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211042 IP address blocks: 2001:678:fb8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:19:86:a4:9e:e1:e1:db:40:cb:08:2e:e7:4a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843 Validity Not Before: Jan 1 06:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10c41bd5e84dbb78ffedd465d6111c9b2d88d57d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:a3:a9:81:79:4a:3d:b3:4f:aa:0e:94:38: f5:90:35:34:29:65:02:74:89:ef:a4:44:ad:e4:0a: 1a:7a:3e:c1:24:cf:4f:6a:2a:49:62:48:12:18:25: 73:3b:16:30:d1:62:f6:7a:3d:d8:38:73:02:0c:c4: 13:43:28:24:cb:56:60:5e:aa:60:34:73:65:72:7f: c4:9d:d1:d7:bd:a9:1b:54:5c:15:e0:5e:ff:b1:dd: 6e:23:ce:30:5c:b5:7c:29:e5:22:9a:d4:68:7f:a3: e5:47:ef:d4:ed:94:b6:bc:c7:3e:1f:10:3f:b9:85: 79:ba:ab:46:b1:20:11:c7:48:c5:de:e7:f9:30:21: d6:4c:6a:55:15:74:0b:51:fe:4d:78:99:4a:3c:e7: ec:04:36:4c:8a:47:bc:08:d8:41:ef:c0:36:8e:d6: f3:dd:d4:36:2b:46:3c:40:23:aa:b1:25:66:b4:ea: 55:93:d1:00:bc:2a:13:d4:4a:0a:e1:6e:ce:d0:f9: b3:1e:7e:00:72:13:2b:42:12:01:22:65:aa:e6:07: 8f:41:af:53:89:4e:b6:78:f6:0c:fc:4a:25:19:fd: 1c:0b:ba:96:f6:52:0b:ba:f4:57:01:ee:3b:06:99: b9:38:22:80:83:1b:a8:7e:d9:42:71:9d:df:71:8b: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C4:1B:D5:E8:4D:BB:78:FF:ED:D4:65:D6:11:1C:9B:2D:88:D5:7D X509v3 Authority Key Identifier: keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/EMQb1ehNu3j_7dRl1hEcmy2I1X0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:fb8::/48 Signature Algorithm: sha256WithRSAEncryption 07:17:a6:d3:73:b0:c4:f9:52:d1:91:69:9b:c8:70:b2:84:e7: 9f:d0:d1:54:05:91:9a:68:7d:8f:a7:bf:de:25:d2:0d:86:2d: 1b:48:a6:8f:9f:1a:a4:fc:80:09:b5:d7:49:a7:3e:85:a3:95: d4:32:54:64:be:56:02:f5:93:43:2a:ae:5f:81:ae:bb:76:da: d4:7f:87:e0:51:5b:e9:fa:1c:14:ee:52:f3:16:ea:a9:ab:b3: 8c:ae:34:5f:21:da:db:d2:e7:e1:73:57:21:14:ef:c2:44:4e: a6:8d:2a:5f:e4:06:14:dd:4e:7b:43:2e:3b:ac:7b:b1:b5:0f: 9a:b5:42:92:b9:c7:f9:f2:3d:32:89:9e:b5:02:a7:e4:09:47: 4f:9d:b1:fd:6e:f0:e7:b4:8d:bb:62:dd:c1:e8:b9:ee:79:bf: 1a:c3:a6:46:0c:9b:3c:97:b9:13:91:29:08:ab:14:10:bf:18: 38:e8:4a:a1:bb:2e:2f:3e:54:bb:bf:20:a5:d3:c8:c9:29:0e: a0:d3:c4:5d:27:40:4f:11:8f:35:cb:7b:41:e5:59:e8:17:f9: e5:20:6d:fa:08:02:00:10:6b:dc:13:8e:cb:d9:14:34:d2:b7: b4:c4:54:a0:2c:d6:c6:5c:e7:c2:79:79:0e:83:6b:af:7a:94: d2:5f:cc:e5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NRmGpJ7h4dtAywgu50r8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0 ODU4NDMwHhcNMjYwMTAxMDYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGM0MWJkNWU4NGRiYjc4ZmZlZGQ0NjVkNjExMWM5YjJkODhkNTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6ujqYF5Sj2zT6oOlDj1kDU0KWUC dInvpESt5Aoaej7BJM9PaipJYkgSGCVzOxYw0WL2ej3YOHMCDMQTQygky1ZgXqpg NHNlcn/EndHXvakbVFwV4F7/sd1uI84wXLV8KeUimtRof6PlR+/U7ZS2vMc+HxA/ uYV5uqtGsSARx0jF3uf5MCHWTGpVFXQLUf5NeJlKPOfsBDZMike8CNhB78A2jtbz 3dQ2K0Y8QCOqsSVmtOpVk9EAvCoT1EoK4W7O0PmzHn4AchMrQhIBImWq5gePQa9T iU62ePYM/EolGf0cC7qW9lILuvRXAe47Bpm5OCKAgxuoftlCcZ3fcYuuLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBDEG9XoTbt4/+3UZdYRHJstiNV9MB8GA1UdIwQY MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct YmU4Yzc4YzA2ZmM3LzEvRU1RYjFlaE51M2pfN2RSbDFoRWNteTJJMVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3 LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA+4 MA0GCSqGSIb3DQEBCwUAA4IBAQAHF6bTc7DE+VLRkWmbyHCyhOef0NFUBZGaaH2P p7/eJdINhi0bSKaPnxqk/IAJtddJpz6Fo5XUMlRkvlYC9ZNDKq5fga67dtrUf4fg UVvp+hwU7lLzFuqpq7OMrjRfIdrb0ufhc1chFO/CRE6mjSpf5AYU3U57Qy47rHux tQ+atUKSucf58j0yiZ61AqfkCUdPnbH9bvDntI27Yt3B6Lnueb8aw6ZGDJs8l7kT kSkIqxQQvxg46Eqhuy4vPlS7vyCl08jJKQ6g08RdJ0BPEY81y3tB5VnoF/nlIG36 CAIAEGvcE47L2RQ00re0xFSgLNbGXOfCeXkOg2uvepTSX8zl -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:10 2026 by rpki-client