This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6emA3pTEafcOiEfNIuZ-GtDDkT8.roa File: 6emA3pTEafcOiEfNIuZ-GtDDkT8.roa (raw, json) Hash identifier: xQowLxGBfyXEonbIvPO8fiDwnrLgdjvcz1zHHkHRFfs= Subject key identifier: E9:E9:80:DE:94:C4:69:F7:0E:88:47:CD:22:E6:7E:1A:D0:C3:91:3F Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B755169243BE8E022E6CD4B28AC7 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6emA3pTEafcOiEfNIuZ-GtDDkT8.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213167 IP address blocks: 45.132.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b7:55:16:92:43:be:8e:02:2e:6c:d4:b2:8a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9e980de94c469f70e8847cd22e67e1ad0c3913f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:cf:f5:fb:de:0b:63:d2:a4:91:47:27:80:dc: 1b:5f:93:58:67:89:62:66:f4:d7:09:6e:74:d8:f0: 3a:4a:9f:2d:2e:b8:a4:90:c8:ae:4f:65:82:40:7c: d5:61:d7:d5:bf:cc:d9:24:8d:e1:85:50:af:d1:ab: 29:cb:cf:ec:3c:7b:19:d3:79:7c:4b:bb:32:7d:dd: 8b:84:68:2f:be:2d:bf:e0:31:9d:23:80:dd:71:cf: 52:52:32:1f:cb:18:44:86:75:02:79:26:c6:07:9e: 52:a7:4d:ef:8e:09:7d:21:27:44:3d:12:03:64:7f: ba:61:eb:eb:58:be:6b:d1:8b:31:47:80:c8:99:fa: 29:2e:30:c2:7e:f5:19:43:78:a9:c0:16:e8:b6:97: 5a:98:27:d4:b2:ff:ca:d6:ae:e0:a4:ad:7e:2d:e3: 56:f0:b9:7b:05:25:13:96:71:74:23:2c:1f:d1:a4: 08:4a:98:0f:d7:e4:8a:56:72:9e:9d:c6:95:e1:fe: d8:87:16:aa:e7:aa:e7:62:42:9b:75:78:16:f1:49: 2c:d2:52:94:1a:d4:03:3a:de:97:29:99:19:4c:f7: a9:cd:e6:20:9c:71:61:0c:70:1b:69:57:9b:88:1d: 45:c0:06:9f:47:9d:b2:f4:b4:67:a6:01:28:2d:f6: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E9:80:DE:94:C4:69:F7:0E:88:47:CD:22:E6:7E:1A:D0:C3:91:3F X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/6emA3pTEafcOiEfNIuZ-GtDDkT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.114.0/24 Signature Algorithm: sha256WithRSAEncryption 30:db:bd:90:35:d7:18:da:d3:89:64:07:79:71:a1:a8:91:0e: 2a:ae:82:7c:8c:c3:24:f1:e5:e3:02:0e:71:4f:fa:b2:f3:c1: 2b:69:a7:46:85:7c:3c:7c:d3:df:c7:70:b7:30:b9:16:50:3a: 88:7b:9a:96:e0:77:23:ce:d7:4b:dd:66:cf:d6:d7:28:4c:f0: 7d:f3:3b:76:66:ac:97:aa:29:b6:53:c9:29:d5:60:31:09:16: c9:13:62:91:96:05:f1:44:5f:7b:37:94:75:58:d1:3e:62:4d: 75:7f:fa:4a:b0:c2:09:26:d5:98:7b:00:26:71:5c:94:d8:89: 1e:d0:0f:6a:cb:5d:53:ab:90:f8:84:85:17:0d:5b:80:b6:bd: 4f:59:8a:ff:74:02:40:ee:22:21:79:c4:f8:1b:ad:4a:81:e4: 93:29:51:39:5e:86:c1:b6:5d:32:65:f0:af:1a:af:99:80:25: 5a:aa:a0:81:ee:d5:39:b1:64:63:a6:45:60:c8:1f:92:2c:0c: 70:81:96:69:44:91:e5:d0:9a:d8:61:9b:f4:7a:76:67:b7:b6: 6b:f1:2b:d4:d8:64:f7:4f:a4:b4:76:87:fe:19:7b:09:5c:9b: 56:ab:df:7f:e5:2e:f0:d7:b7:c0:5a:0b:0d:6e:7c:30:b9:f6: b4:fe:88:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ordVFpJDvo4CLmzUsorHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWU5ODBkZTk0YzQ2OWY3MGU4ODQ3Y2QyMmU2N2UxYWQwYzM5MTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8s/1+94LY9KkkUcngNwbX5NYZ4li ZvTXCW502PA6Sp8tLrikkMiuT2WCQHzVYdfVv8zZJI3hhVCv0aspy8/sPHsZ03l8 S7syfd2LhGgvvi2/4DGdI4Ddcc9SUjIfyxhEhnUCeSbGB55Sp03vjgl9ISdEPRID ZH+6YevrWL5r0YsxR4DImfopLjDCfvUZQ3ipwBbotpdamCfUsv/K1q7gpK1+LeNW 8Ll7BSUTlnF0Iywf0aQISpgP1+SKVnKencaV4f7Yhxaq56rnYkKbdXgW8Uks0lKU GtQDOt6XKZkZTPepzeYgnHFhDHAbaVebiB1FwAafR52y9LRnpgEoLfZyPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOnpgN6UxGn3DohHzSLmfhrQw5E/MB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvNmVtQTNwVEVhZmNPaUVmTkl1Wi1HdEREa1Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYRyMA0G CSqGSIb3DQEBCwUAA4IBAQAw272QNdcY2tOJZAd5caGokQ4qroJ8jMMk8eXjAg5x T/qy88EraadGhXw8fNPfx3C3MLkWUDqIe5qW4HcjztdL3WbP1tcoTPB98zt2ZqyX qim2U8kp1WAxCRbJE2KRlgXxRF97N5R1WNE+Yk11f/pKsMIJJtWYewAmcVyU2Ike 0A9qy11Tq5D4hIUXDVuAtr1PWYr/dAJA7iIhecT4G61KgeSTKVE5XobBtl0yZfCv Gq+ZgCVaqqCB7tU5sWRjpkVgyB+SLAxwgZZpRJHl0JrYYZv0enZnt7Zr8SvU2GT3 T6S0dof+GXsJXJtWq99/5S7w17fAWgsNbnwwufa0/ogm -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:35 2026 by rpki-client