This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Em30JMreKh1DLV4bs3mOhdLf3qk.roa File: Em30JMreKh1DLV4bs3mOhdLf3qk.roa (raw, json) Hash identifier: OikHlekzlibFoH4+uH6zYFGaEBbtczlB1ckRsntKVZk= Subject key identifier: 12:6D:F4:24:CA:DE:2A:1D:43:2D:5E:1B:B3:79:8E:85:D2:DF:DE:A9 Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396 Certificate serial: 019A7933A007A11FED266D13AD013A04B18E Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Em30JMreKh1DLV4bs3mOhdLf3qk.roa Signing time: Wed 12 Nov 2025 17:53:37 +0000 ROA not before: Wed 12 Nov 2025 17:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30058 IP address blocks: 2.59.21.0/24 maxlen: 24 2.59.22.0/24 maxlen: 24 86.54.28.0/24 maxlen: 24 86.54.29.0/24 maxlen: 24 2a01:e940::/48 maxlen: 48 2a01:e943::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:33:a0:07:a1:1f:ed:26:6d:13:ad:01:3a:04:b1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396 Validity Not Before: Nov 12 17:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=126df424cade2a1d432d5e1bb3798e85d2dfdea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:7c:2c:a5:1b:3c:67:eb:02:83:8b:70:d9: 56:f5:b5:37:8a:07:05:7e:d2:ff:74:a9:c8:b4:32: c4:a2:60:80:55:61:ed:27:22:b1:7e:a7:52:70:7b: 1d:ba:01:0d:89:5d:30:d2:44:65:d5:eb:16:b9:99: 15:11:d3:ee:43:2d:47:cd:9d:24:e1:79:24:06:69: 3b:15:ec:18:6d:1a:90:b8:14:e8:d7:fd:b7:0e:ea: 1b:7c:cb:29:5d:61:47:fc:b0:12:28:ca:01:7c:88: a9:d5:c4:29:34:d8:ea:a9:50:58:a3:9f:a6:00:aa: 6b:38:6e:9e:73:34:11:b6:f1:cb:16:4e:02:cd:e6: 95:b3:ad:ce:76:a5:f9:e2:88:b4:45:bd:ac:fe:6f: de:91:79:4b:ae:8c:54:64:ae:21:2f:45:50:61:96: ac:eb:71:70:f0:53:fe:44:5c:61:df:4c:ed:aa:74: 05:b8:60:38:a2:17:16:e9:ea:f8:27:c5:da:83:30: 6d:75:6a:57:ea:d1:cf:57:32:34:f6:12:b1:49:d2: 96:8f:62:bb:08:24:91:2a:c8:93:c1:92:fc:3f:00: 46:e2:42:f8:5e:4e:48:df:51:ea:ce:41:01:77:c9: 01:8b:cb:d9:18:ae:91:e0:3a:57:3a:9a:e0:a4:ae: 29:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:F4:24:CA:DE:2A:1D:43:2D:5E:1B:B3:79:8E:85:D2:DF:DE:A9 X509v3 Authority Key Identifier: keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Em30JMreKh1DLV4bs3mOhdLf3qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.21.0-2.59.22.255 86.54.28.0/23 IPv6: 2a01:e940::/48 2a01:e943::/48 Signature Algorithm: sha256WithRSAEncryption a5:72:cb:b2:20:2a:4f:e4:cf:c9:15:d2:cb:19:46:bd:9e:34: fc:38:e6:75:d0:64:9e:a4:ab:37:d2:54:4c:d8:2a:50:1d:d5: dc:52:f6:75:ab:c4:62:92:10:49:f1:b0:45:a0:9a:f6:6a:07: 0d:08:bf:a7:74:a9:8b:97:16:fe:ac:7c:11:c7:c6:bd:b2:cd: c6:a2:23:24:4a:39:db:fa:64:89:ce:7c:1c:6d:84:16:6a:22: f7:78:49:19:12:1b:a4:c3:5a:c0:09:1c:5e:05:70:ba:b9:0c: 2b:38:cb:e8:ca:2b:a6:a0:d6:7a:52:a8:94:58:b7:c4:a1:85: f7:f2:ca:44:ac:e8:19:d9:99:73:65:2e:c3:f5:fc:e7:94:64: d1:aa:19:5d:cb:10:f5:88:06:75:97:00:37:b3:ec:39:36:c6: fa:88:ea:d2:75:31:05:67:ab:47:ee:41:92:9b:ec:63:ac:63: 3c:52:a2:bd:5f:26:9b:ab:b8:50:a6:d9:b0:6f:f2:c2:8d:6e: 2d:8a:17:6b:78:2d:44:84:ff:95:43:d6:a8:28:d8:a2:d4:e2: e8:ec:cc:e6:a4:4f:06:a0:66:d0:1b:81:7a:9e:0a:37:8a:01: f8:29:63:f0:48:75:ab:08:3a:2f:70:f0:67:1e:bc:87:f6:20: 84:36:ee:f4 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZp5M6AHoR/tJm0TrQE6BLGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi NTEzOTYwHhcNMjUxMTEyMTc1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjZkZjQyNGNhZGUyYTFkNDMyZDVlMWJiMzc5OGU4NWQyZGZkZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsx8LKUbPGfrAoOLcNlW9bU3igcF ftL/dKnItDLEomCAVWHtJyKxfqdScHsdugENiV0w0kRl1esWuZkVEdPuQy1HzZ0k 4XkkBmk7FewYbRqQuBTo1/23DuobfMspXWFH/LASKMoBfIip1cQpNNjqqVBYo5+m AKprOG6eczQRtvHLFk4CzeaVs63OdqX54oi0Rb2s/m/ekXlLroxUZK4hL0VQYZas 63Fw8FP+RFxh30ztqnQFuGA4ohcW6er4J8XagzBtdWpX6tHPVzI09hKxSdKWj2K7 CCSRKsiTwZL8PwBG4kL4Xk5I31HqzkEBd8kBi8vZGK6R4DpXOprgpK4piwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFBJt9CTK3iodQy1eG7N5joXS396pMB8GA1UdIwQY MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt ZmQ4MTQ0NTVhODY4LzEvRW0zMEpNcmVLaDFETFY0YnMzbU9oZExmM3FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4 LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUMAwDBAACOxUD BAACOxYDBAFWNhwwGAQCAAIwEgMHACoB6UAAAAMHACoB6UMAADANBgkqhkiG9w0B AQsFAAOCAQEApXLLsiAqT+TPyRXSyxlGvZ40/DjmddBknqSrN9JUTNgqUB3V3FL2 davEYpIQSfGwRaCa9moHDQi/p3Spi5cW/qx8EcfGvbLNxqIjJEo52/pkic58HG2E Fmoi93hJGRIbpMNawAkcXgVwurkMKzjL6MorpqDWelKolFi3xKGF9/LKRKzoGdmZ c2Uuw/X855Rk0aoZXcsQ9YgGdZcAN7PsOTbG+ojq0nUxBWerR+5BkpvsY6xjPFKi vV8mm6u4UKbZsG/ywo1uLYoXa3gtRIT/lUPWqCjYotTi6OzM5qRPBqBm0BuBep4K N4oB+Clj8Eh1qwg6L3DwZx68h/YghDbu9A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:01 2025 by rpki-client