This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EMmw32ZwEIJ6fyo8AqzfYbVAjvc.roa File: EMmw32ZwEIJ6fyo8AqzfYbVAjvc.roa (raw, json) Hash identifier: HK/LfIk2sIxuN3SEqERwV8VtlBvazhC7eMk3clByiis= Subject key identifier: 10:C9:B0:DF:66:70:10:82:7A:7F:2A:3C:02:AC:DF:61:B5:40:8E:F7 Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Certificate serial: 019B77C76E3C24FDA1061DE21CFEB438F37E Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EMmw32ZwEIJ6fyo8AqzfYbVAjvc.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33806 IP address blocks: 195.136.180.0/23 maxlen: 23 195.136.182.0/23 maxlen: 23 195.136.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6e:3c:24:fd:a1:06:1d:e2:1c:fe:b4:38:f3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10c9b0df667010827a7f2a3c02acdf61b5408ef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:62:f8:33:b9:64:20:d1:85:40:3d:71:fd: 80:1c:0a:af:8a:9d:9f:4b:f0:a8:1c:34:80:63:38: a8:f5:5e:c4:bb:b1:36:e9:bc:bb:11:13:d7:49:37: 0e:7a:9f:8e:ba:79:da:a9:4b:ef:d9:aa:42:1c:05: 41:e7:e0:10:cd:82:fe:c4:25:53:c9:92:49:09:95: 9a:eb:08:c4:e1:94:d6:dc:2f:4a:4d:f5:89:c3:20: 57:36:77:46:aa:df:16:51:b5:3a:18:a3:31:bf:d0: ff:aa:41:74:09:b9:dd:82:0f:f1:30:d4:0a:34:40: a0:83:62:f8:65:64:56:23:ef:c2:9f:24:fb:fa:6e: 90:38:80:0d:67:c7:f7:35:be:12:fd:2f:64:e7:fd: 91:1b:f3:ee:b6:d1:65:f4:90:3f:49:fe:b6:a5:c5: 18:96:d5:b0:e3:6f:bf:1e:10:20:a2:2a:23:6d:4c: ac:cd:98:1c:81:55:6d:19:9d:f6:5d:22:57:3f:d9: 3f:12:9c:44:78:d6:bc:b8:05:6d:16:09:9b:30:38: aa:e1:81:cb:5e:da:96:b6:51:2b:3f:93:d4:dd:c3: b8:bd:b2:81:b2:0e:78:d2:b4:1a:8b:b5:0f:94:ce: fe:07:c3:25:31:f9:f9:59:ee:97:39:f8:d3:37:e5: e5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C9:B0:DF:66:70:10:82:7A:7F:2A:3C:02:AC:DF:61:B5:40:8E:F7 X509v3 Authority Key Identifier: keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/EMmw32ZwEIJ6fyo8AqzfYbVAjvc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.136.180.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:2f:30:3f:09:7c:25:63:93:9a:39:62:b3:c1:1c:63:5c:5b: 4b:22:3b:a1:78:fb:d1:6d:dc:88:11:cc:95:21:4f:73:07:ab: 5f:b1:b3:b5:5c:10:2e:78:af:ce:e2:d3:5c:6b:7f:2f:55:77: a8:73:ae:90:a1:35:13:cf:af:66:a9:b0:5b:90:b8:7c:07:0c: f8:f5:2b:b3:87:ed:6a:38:73:10:dc:4c:a5:ae:ec:da:05:b8: 3d:18:1b:fb:d7:a5:3b:3c:e2:de:64:10:ad:43:19:5a:16:7d: 01:8b:02:42:c8:78:c3:94:fd:02:fc:37:95:9d:ae:6c:a8:c9: 1d:7a:a8:3e:af:d1:81:ec:06:01:b3:2c:3d:68:ca:71:8b:e5: 17:1a:ee:c0:2e:0e:31:fb:bc:10:85:67:9f:82:49:35:9a:06: 32:e8:0c:1b:8d:83:d0:72:56:f0:ea:8b:1d:9e:40:0f:19:1f: f4:3b:f0:da:0f:17:a7:2a:ff:ae:fc:eb:0a:17:c6:04:e8:8c: 87:14:82:2a:88:33:a3:48:b4:0d:64:0f:4b:ed:1a:d9:a9:bc: e0:f1:fe:02:6b:90:ae:8c:78:5b:89:0f:58:fd:e4:ae:d1:16: 81:a5:a2:80:d8:2c:87:0a:45:8c:60:27:6d:a8:9c:98:63:6a: ac:56:5e:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x248JP2hBh3iHP60OPN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj MmQ3NmIwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGM5YjBkZjY2NzAxMDgyN2E3ZjJhM2MwMmFjZGY2MWI1NDA4ZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP5i+DO5ZCDRhUA9cf2AHAqvip2f S/CoHDSAYzio9V7Eu7E26by7ERPXSTcOep+OunnaqUvv2apCHAVB5+AQzYL+xCVT yZJJCZWa6wjE4ZTW3C9KTfWJwyBXNndGqt8WUbU6GKMxv9D/qkF0Cbndgg/xMNQK NECgg2L4ZWRWI+/CnyT7+m6QOIANZ8f3Nb4S/S9k5/2RG/PuttFl9JA/Sf62pcUY ltWw42+/HhAgoiojbUyszZgcgVVtGZ32XSJXP9k/EpxEeNa8uAVtFgmbMDiq4YHL XtqWtlErP5PU3cO4vbKBsg540rQai7UPlM7+B8MlMfn5We6XOfjTN+XlrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDJsN9mcBCCen8qPAKs32G1QI73MB8GA1UdIwQY MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt NTI3NjZiMjRiYWE0LzEvRU1tdzMyWndFSUo2ZnlvOEFxemZZYlZBanZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0 LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw4i0MA0G CSqGSIb3DQEBCwUAA4IBAQAvLzA/CXwlY5OaOWKzwRxjXFtLIjuhePvRbdyIEcyV IU9zB6tfsbO1XBAueK/O4tNca38vVXeoc66QoTUTz69mqbBbkLh8Bwz49Suzh+1q OHMQ3EylruzaBbg9GBv716U7POLeZBCtQxlaFn0BiwJCyHjDlP0C/DeVna5sqMkd eqg+r9GB7AYBsyw9aMpxi+UXGu7ALg4x+7wQhWefgkk1mgYy6AwbjYPQclbw6osd nkAPGR/0O/DaDxenKv+u/OsKF8YE6IyHFIIqiDOjSLQNZA9L7RrZqbzg8f4Ca5Cu jHhbiQ9Y/eSu0RaBpaKA2CyHCkWMYCdtqJyYY2qsVl4v -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:40 2026 by rpki-client