This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/EMaCwLjxvEjldttSlMrOnwekZ_Y.roa File: EMaCwLjxvEjldttSlMrOnwekZ_Y.roa (raw, json) Hash identifier: aBqqe+U1PaVNW6VJZrxz+RRQt4gTnenHJ/Ty1nZ3HHo= Subject key identifier: 10:C6:82:C0:B8:F1:BC:48:E5:76:DB:52:94:CA:CE:9F:07:A4:67:F6 Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Certificate serial: 019B7C7F815E778BC37C71E7EC42D76F852C Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/EMaCwLjxvEjldttSlMrOnwekZ_Y.roa Signing time: Fri 02 Jan 2026 02:18:09 +0000 ROA not before: Fri 02 Jan 2026 02:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29423 IP address blocks: 45.12.48.0/22 maxlen: 24 45.144.132.0/22 maxlen: 24 185.102.92.0/22 maxlen: 24 185.201.144.0/22 maxlen: 24 185.241.32.0/22 maxlen: 24 2a06:2380::/29 maxlen: 33 2a0a:c5c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:81:5e:77:8b:c3:7c:71:e7:ec:42:d7:6f:85:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1 Validity Not Before: Jan 2 02:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10c682c0b8f1bc48e576db5294cace9f07a467f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:00:93:03:81:1b:6f:51:1d:e2:85:01:76: b9:7a:ed:8d:51:25:3a:59:67:4a:76:c0:a7:6c:51: 8c:9a:b4:7b:4b:71:a7:8d:16:ae:fb:e7:91:bd:35: ce:23:cd:7a:de:d4:96:d7:b6:9a:dd:50:ee:60:76: 4a:14:e0:8f:c4:da:00:21:80:12:7c:ba:13:76:f2: 3d:42:e9:16:46:e8:9b:0a:9e:9e:86:fd:77:59:54: e4:e6:d8:15:dd:86:8b:bb:17:47:e5:2d:94:74:ce: 8f:8a:1a:fe:21:35:a0:ae:de:b1:3d:f9:37:dd:79: 8f:7c:d3:c6:d5:4b:1e:73:27:cf:20:39:e7:f3:14: c3:50:ea:30:36:e4:fa:ad:56:27:5f:56:5a:82:c7: 92:d0:a0:ac:d4:f0:75:a8:9f:84:3e:30:44:56:5c: 9f:c2:8c:dc:72:e7:13:3d:6d:87:ca:39:cb:10:32: 5b:fe:a7:7a:6d:47:0c:c1:66:38:c3:e5:46:c9:8c: d1:35:7e:c0:c1:e7:57:22:fa:ca:d1:91:75:3c:06: a8:d7:17:29:5f:0c:12:3b:21:2b:c8:07:9d:53:d6: 0b:2c:71:77:5e:29:5d:12:e8:09:ee:76:29:e9:d7: 04:b6:e8:08:0e:98:66:2e:e6:98:42:99:f6:66:ca: d5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C6:82:C0:B8:F1:BC:48:E5:76:DB:52:94:CA:CE:9F:07:A4:67:F6 X509v3 Authority Key Identifier: keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/EMaCwLjxvEjldttSlMrOnwekZ_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.48.0/22 45.144.132.0/22 185.102.92.0/22 185.201.144.0/22 185.241.32.0/22 IPv6: 2a06:2380::/29 2a0a:c5c0::/29 Signature Algorithm: sha256WithRSAEncryption 22:2e:15:86:57:6c:bd:5d:84:f5:a4:60:9b:63:3d:74:e8:8f: 1e:8c:46:55:43:6e:d7:16:fb:26:0c:2a:99:51:8b:18:39:e1: fe:c8:1b:84:16:3c:23:ac:ff:b3:1a:94:93:b1:ea:78:ec:aa: 24:e5:4a:9a:44:ad:5e:3f:36:2f:99:e4:78:47:ab:9d:96:7b: f8:4f:06:cb:40:bc:8a:44:ba:53:55:8b:ff:15:d6:a4:c3:fd: 7b:31:7f:a6:3e:cd:65:b5:c4:ea:6f:b2:87:75:b0:ce:57:86: ec:68:b6:18:b3:2a:71:7f:d1:f1:30:6d:db:2b:e3:b6:53:74: 45:2b:0f:84:74:f6:a7:1e:61:26:ea:af:7e:3c:e8:45:a9:c2: c6:e0:b1:78:71:8e:89:b6:cd:0f:84:74:5d:7f:41:60:7e:06: 72:2a:17:02:99:71:29:6d:4a:d7:03:b2:81:d2:e2:3c:1a:2e: ba:ee:85:dc:56:be:45:a8:84:f9:c2:69:c1:88:a4:30:fe:8c: a2:46:54:ba:0e:d4:60:7f:bb:d1:53:0a:82:f5:e1:36:1c:7c: c2:e6:9f:9c:7a:36:80:62:be:c4:44:0e:7f:89:42:4e:64:2d: fa:74:02:5a:05:09:30:a0:5b:82:2e:56:3d:24:3f:dc:47:3d: de:73:54:7a -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt8f4Fed4vDfHHn7ELXb4UsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl MDZmYzEwHhcNMjYwMTAyMDIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGM2ODJjMGI4ZjFiYzQ4ZTU3NmRiNTI5NGNhY2U5ZjA3YTQ2N2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hQAkwOBG29RHeKFAXa5eu2NUSU6 WWdKdsCnbFGMmrR7S3GnjRau++eRvTXOI8163tSW17aa3VDuYHZKFOCPxNoAIYAS fLoTdvI9QukWRuibCp6ehv13WVTk5tgV3YaLuxdH5S2UdM6Pihr+ITWgrt6xPfk3 3XmPfNPG1UsecyfPIDnn8xTDUOowNuT6rVYnX1ZagseS0KCs1PB1qJ+EPjBEVlyf wozccucTPW2HyjnLEDJb/qd6bUcMwWY4w+VGyYzRNX7AwedXIvrK0ZF1PAao1xcp XwwSOyEryAedU9YLLHF3XildEugJ7nYp6dcEtugIDphmLuaYQpn2ZsrVwwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFBDGgsC48bxI5XbbUpTKzp8HpGf2MB8GA1UdIwQY MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt ZmUwMWVlYzQwZWMxLzEvRU1hQ3dManh2RWpsZHR0U2xNck9ud2VrWl9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCLQwwAwQC LZCEAwQCuWZcAwQCucmQAwQCufEgMBQEAgACMA4DBQMqBiOAAwUDKgrFwDANBgkq hkiG9w0BAQsFAAOCAQEAIi4VhldsvV2E9aRgm2M9dOiPHoxGVUNu1xb7JgwqmVGL GDnh/sgbhBY8I6z/sxqUk7HqeOyqJOVKmkStXj82L5nkeEernZZ7+E8Gy0C8ikS6 U1WL/xXWpMP9ezF/pj7NZbXE6m+yh3WwzleG7Gi2GLMqcX/R8TBt2yvjtlN0RSsP hHT2px5hJuqvfjzoRanCxuCxeHGOibbND4R0XX9BYH4GcioXAplxKW1K1wOygdLi PBouuu6F3Fa+RaiE+cJpwYikMP6MokZUug7UYH+70VMKgvXhNhx8wuafnHo2gGK+ xEQOf4lCTmQt+nQCWgUJMKBbgi5WPSQ/3Ec93nNUeg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:48 2026 by rpki-client