This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/EmDxLEh2Fw2oixd2X0EsOpq-E-E.roa File: EmDxLEh2Fw2oixd2X0EsOpq-E-E.roa (raw, json) Hash identifier: J39/sid9YkKCBoGhNN+cUZMBo1S7pqnLMPtaeCs59f0= Subject key identifier: 12:60:F1:2C:48:76:17:0D:A8:8B:17:76:5F:41:2C:3A:9A:BE:13:E1 Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e Certificate serial: 019BD5921E6BCE5CB2C1C36F6279878DF3AC Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/EmDxLEh2Fw2oixd2X0EsOpq-E-E.roa Signing time: Mon 19 Jan 2026 09:24:41 +0000 ROA not before: Mon 19 Jan 2026 09:24:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212041 IP address blocks: 87.192.192.0/21 maxlen: 24 185.245.246.0/23 maxlen: 23 185.247.60.0/24 maxlen: 24 185.252.128.0/24 maxlen: 31 185.252.129.0/24 maxlen: 31 185.252.130.0/24 maxlen: 31 185.252.131.0/24 maxlen: 31 194.61.81.0/24 maxlen: 24 195.28.20.0/24 maxlen: 24 2a0c:2740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.mft rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:92:1e:6b:ce:5c:b2:c1:c3:6f:62:79:87:8d:f3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e Validity Not Before: Jan 19 09:24:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1260f12c4876170da88b17765f412c3a9abe13e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:20:a5:79:62:0d:a6:96:b2:b5:f6:70:16: 2c:ca:e3:9a:6b:02:9d:c0:c8:fe:68:78:2c:c0:63: 4c:df:7e:2c:e7:49:79:e3:98:9e:5a:4d:6a:fb:b9: 57:56:51:fb:22:ab:1f:0c:84:7f:01:08:c3:11:8f: 47:4c:ee:43:45:00:55:53:8d:2f:5f:54:76:5d:35: 3c:3d:97:e3:1d:42:4c:2c:b1:89:27:02:f9:ac:70: ad:bb:3e:dd:91:5b:ae:a6:ce:45:14:12:37:7f:2b: 19:59:ec:71:0b:e1:1f:5e:20:c9:6a:42:8d:16:57: 6f:95:de:72:de:ab:97:13:72:18:4d:1a:92:36:80: 5f:65:bc:db:c1:44:10:b9:e4:6a:26:23:0d:50:ec: 37:ac:d3:c4:a6:cc:1a:3c:9f:34:ba:8d:3c:e0:6e: 1c:a2:ca:89:98:82:cf:ae:8b:e5:cb:70:5b:34:1a: d1:8f:6f:5b:19:0d:65:a1:e2:25:09:14:0c:6d:67: 74:08:a7:3f:ea:ed:17:67:5c:cb:45:d4:74:00:1b: aa:f0:19:ad:1d:2d:bf:c5:a5:91:f1:ca:53:c9:18: ac:3d:09:6e:cd:77:56:47:28:4d:65:dc:4e:c6:7a: be:37:a4:8f:2f:44:f3:69:7d:0c:3e:40:ec:d0:7a: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:60:F1:2C:48:76:17:0D:A8:8B:17:76:5F:41:2C:3A:9A:BE:13:E1 X509v3 Authority Key Identifier: keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/EmDxLEh2Fw2oixd2X0EsOpq-E-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.192.192.0/21 185.245.246.0/23 185.247.60.0/24 185.252.128.0/22 194.61.81.0/24 195.28.20.0/24 IPv6: 2a0c:2740::/29 Signature Algorithm: sha256WithRSAEncryption 83:1e:87:4c:4f:ed:36:4d:99:95:8e:6b:57:c3:c3:27:42:2a: 29:5e:bb:2e:3c:de:c3:bd:52:55:00:7f:75:17:ab:d3:f4:25: e4:6b:f1:d7:1f:81:04:18:6b:65:c8:31:28:4d:a9:34:42:0a: 37:0b:d5:07:0b:99:e5:87:5b:e4:d0:f8:c4:5a:0d:f8:94:1b: ae:74:06:f1:0b:70:9b:cd:38:9b:a8:b6:35:8c:c4:4d:71:61: 03:a9:a0:52:12:33:29:8d:39:37:e8:50:89:af:05:0a:74:41: 43:41:20:6d:e7:25:dd:43:0a:4e:77:61:72:9a:c9:62:be:07: 6c:46:cd:51:c6:9d:b8:6b:b1:a5:22:7f:c3:dd:ab:e8:70:79: 05:c5:9b:74:fc:47:5d:c2:da:af:98:07:7a:98:41:d5:15:cc: 47:4a:73:19:29:ec:10:60:e1:a8:89:34:73:ed:96:0a:91:fd: e6:e7:b8:81:23:99:32:1c:49:77:05:3c:67:1b:db:a9:21:3b: b5:66:1b:eb:1a:d4:dc:41:ae:4a:e3:2f:bb:23:3e:9f:f2:94: 8e:1a:65:80:69:30:61:d4:53:a5:2b:ab:ce:8e:7c:4c:0d:2c: 96:77:ca:15:6c:20:c5:41:16:48:57:03:30:6e:94:4b:9e:be: c6:4e:03:66 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZvVkh5rzlyywcNvYnmHjfOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTRmMDA0NzFlMjQ4YWJlMzk0ZDUyMWU5NmNiYTk2MzBk ODUyMGUwHhcNMjYwMTE5MDkyNDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjYwZjEyYzQ4NzYxNzBkYTg4YjE3NzY1ZjQxMmMzYTlhYmUxM2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyQgpXliDaaWsrX2cBYsyuOaawKd wMj+aHgswGNM334s50l545ieWk1q+7lXVlH7IqsfDIR/AQjDEY9HTO5DRQBVU40v X1R2XTU8PZfjHUJMLLGJJwL5rHCtuz7dkVuups5FFBI3fysZWexxC+EfXiDJakKN Fldvld5y3quXE3IYTRqSNoBfZbzbwUQQueRqJiMNUOw3rNPEpswaPJ80uo084G4c osqJmILProvly3BbNBrRj29bGQ1loeIlCRQMbWd0CKc/6u0XZ1zLRdR0ABuq8Bmt HS2/xaWR8cpTyRisPQluzXdWRyhNZdxOxnq+N6SPL0TzaX0MPkDs0Ho+7wIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFBJg8SxIdhcNqIsXdl9BLDqavhPhMB8GA1UdIwQY MBaAFBWU8ARx4kir45TVIelsupYw2FIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEt OGNkNDJjZWRlMjIwLzEvRW1EeExFaDJGdzJvaXhkMlgwRXNPcHEtRS1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi83OWE2NGUtMDY5Zi00OTlkLWE2MzEtOGNkNDJjZWRlMjIw LzEvRlpUd0JISGlTS3ZqbE5VaDZXeTZsakRZVWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDV8DAAwQB ufX2AwQAufc8AwQCufyAAwQAwj1RAwQAwxwUMA0EAgACMAcDBQMqDCdAMA0GCSqG SIb3DQEBCwUAA4IBAQCDHodMT+02TZmVjmtXw8MnQiopXrsuPN7DvVJVAH91F6vT 9CXka/HXH4EEGGtlyDEoTak0Qgo3C9UHC5nlh1vk0PjEWg34lBuudAbxC3CbzTib qLY1jMRNcWEDqaBSEjMpjTk36FCJrwUKdEFDQSBt5yXdQwpOd2FymslivgdsRs1R xp24a7GlIn/D3avocHkFxZt0/EddwtqvmAd6mEHVFcxHSnMZKewQYOGoiTRz7ZYK kf3m57iBI5kyHEl3BTxnG9upITu1ZhvrGtTcQa5K4y+7Iz6f8pSOGmWAaTBh1FOl K6vOjnxMDSyWd8oVbCDFQRZIVwMwbpRLnr7GTgNm -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:01 2026 by rpki-client