This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/emGgIQ-xmgCz8P72gkT0Si2n-IY.roa File: emGgIQ-xmgCz8P72gkT0Si2n-IY.roa (raw, json) Hash identifier: rV3ZI2902oBE03NEz2asQLt1I8iQ/Cv7eftYbg62quc= Subject key identifier: 7A:61:A0:21:0F:B1:9A:00:B3:F0:FE:F6:82:44:F4:4A:2D:A7:F8:86 Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d Certificate serial: 019B7A5B1EA8795A7E1DDFEF48627208E173 Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/emGgIQ-xmgCz8P72gkT0Si2n-IY.roa Signing time: Thu 01 Jan 2026 16:19:10 +0000 ROA not before: Thu 01 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43726 IP address blocks: 91.198.130.0/24 maxlen: 24 193.26.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:1e:a8:79:5a:7e:1d:df:ef:48:62:72:08:e1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d Validity Not Before: Jan 1 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a61a0210fb19a00b3f0fef68244f44a2da7f886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:0b:0f:49:ff:3c:0b:f6:ac:ce:8b:ab:78: 16:77:69:12:81:9c:62:f2:98:e8:42:f8:2b:bf:0f: 0e:5d:04:3b:1e:f2:5e:bb:b6:79:69:12:71:2d:90: cd:6b:9d:76:bd:d2:81:be:8d:2c:bd:a0:24:99:7b: 9a:a4:48:6b:77:c5:ba:d3:ff:1e:be:13:ff:7f:9b: 73:d7:dd:dc:a7:25:7e:2b:d1:32:6b:1e:8a:ed:50: 2d:f0:0c:39:ee:b7:38:9d:cf:7a:35:6f:5f:93:3e: 4b:15:58:f8:25:c0:c0:1c:f1:a2:12:3f:55:1f:69: 31:28:d0:77:d6:92:b1:43:a1:77:b0:79:98:6c:a0: d2:7d:8b:75:e4:62:47:10:70:10:64:19:88:be:d1: ae:f1:71:b7:31:54:8b:a7:3a:24:8a:c8:67:ee:c1: 51:50:dc:4c:d0:f2:d4:63:fd:0e:e9:4d:df:7e:c3: 41:ea:d0:15:cd:7e:64:04:e5:94:d2:78:6a:ac:32: cd:15:8b:30:6f:22:7a:17:0c:da:a1:ef:ac:e1:0e: a4:a2:b6:ff:79:ab:f2:87:8b:d2:76:4c:3e:90:44: fd:93:70:6d:63:98:4f:f5:93:03:2d:54:44:76:8e: e6:0b:15:61:47:57:23:33:ba:a7:df:a6:fc:32:63: a5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:61:A0:21:0F:B1:9A:00:B3:F0:FE:F6:82:44:F4:4A:2D:A7:F8:86 X509v3 Authority Key Identifier: keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/emGgIQ-xmgCz8P72gkT0Si2n-IY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.130.0/24 193.26.214.0/24 Signature Algorithm: sha256WithRSAEncryption b0:ba:06:b1:14:ef:40:6f:d6:2f:c2:db:51:96:1e:91:c0:e8: 77:a9:aa:b3:82:01:b1:00:0a:c0:22:4a:69:8b:92:cb:81:52: 22:a5:fd:b2:8b:cf:df:06:59:84:d3:5b:9c:18:7e:ca:06:4b: fa:3b:9f:d5:cb:9b:e9:c1:ec:91:10:2e:1d:0e:0b:0b:7c:c2: 1f:c9:0f:c4:88:02:73:13:97:f3:71:d8:1e:d9:2a:e7:c4:92: 87:a4:41:b6:00:4c:bc:7b:4e:d6:41:f1:34:53:61:4f:99:31: a4:f0:ec:89:af:9d:ee:1f:95:10:67:2f:35:f0:9e:e3:6a:3b: 94:2a:1c:dc:5c:70:47:d7:76:9a:48:26:c0:82:9d:f3:19:09: b1:fc:ab:07:60:fe:35:ed:6a:f5:c4:95:89:5a:0d:e7:9d:22: ac:3a:4a:59:3e:52:8c:98:4f:65:b2:2e:ff:82:e9:d8:2e:e0: d8:0f:e9:10:f0:bb:9c:80:71:04:46:c6:7b:e7:7d:a3:2b:32: 42:92:0e:9e:b7:32:76:f0:44:3e:2e:d1:69:b7:07:0a:4b:e5: ea:04:25:4b:cc:b7:f3:a7:53:3c:a2:30:08:33:4f:f0:9e:99: 5d:1a:a1:0c:1d:9a:63:99:eb:a7:52:7b:78:71:86:c1:dc:af: 1f:b7:29:0a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wx6oeVp+Hd/vSGJyCOFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5 ZGY4NWQwHhcNMjYwMTAxMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTYxYTAyMTBmYjE5YTAwYjNmMGZlZjY4MjQ0ZjQ0YTJkYTdmODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbELD0n/PAv2rM6Lq3gWd2kSgZxi 8pjoQvgrvw8OXQQ7HvJeu7Z5aRJxLZDNa512vdKBvo0svaAkmXuapEhrd8W60/8e vhP/f5tz193cpyV+K9Eyax6K7VAt8Aw57rc4nc96NW9fkz5LFVj4JcDAHPGiEj9V H2kxKNB31pKxQ6F3sHmYbKDSfYt15GJHEHAQZBmIvtGu8XG3MVSLpzokishn7sFR UNxM0PLUY/0O6U3ffsNB6tAVzX5kBOWU0nhqrDLNFYswbyJ6Fwzaoe+s4Q6korb/ eavyh4vSdkw+kET9k3BtY5hP9ZMDLVREdo7mCxVhR1cjM7qn36b8MmOldwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHphoCEPsZoAs/D+9oJE9Eotp/iGMB8GA1UdIwQY MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt M2Q1MjIxODFhMmM0LzEvZW1HZ0lRLXhtZ0N6OFA3MmdrVDBTaTJuLUlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0 LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8aCAwQA wRrWMA0GCSqGSIb3DQEBCwUAA4IBAQCwugaxFO9Ab9YvwttRlh6RwOh3qaqzggGx AArAIkppi5LLgVIipf2yi8/fBlmE01ucGH7KBkv6O5/Vy5vpweyREC4dDgsLfMIf yQ/EiAJzE5fzcdge2SrnxJKHpEG2AEy8e07WQfE0U2FPmTGk8OyJr53uH5UQZy81 8J7jajuUKhzcXHBH13aaSCbAgp3zGQmx/KsHYP417Wr1xJWJWg3nnSKsOkpZPlKM mE9lsi7/gunYLuDYD+kQ8LucgHEERsZ7532jKzJCkg6etzJ28EQ+LtFptwcKS+Xq BCVLzLfzp1M8ojAIM0/wnpldGqEMHZpjmeunUnt4cYbB3K8ftykK -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:41 2026 by rpki-client