This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Em0rkhq7w2sTK4EoJQ41G0PG1cA.roa File: Em0rkhq7w2sTK4EoJQ41G0PG1cA.roa (raw, json) Hash identifier: Ar+sKQNON1zxWJsdqL+UX9ra/wLsJXNgP3CzEj3Smvk= Subject key identifier: 12:6D:2B:92:1A:BB:C3:6B:13:2B:81:28:25:0E:35:1B:43:C6:D5:C0 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA548FA1B8103374F7BC8ABCDD6F862 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Em0rkhq7w2sTK4EoJQ41G0PG1cA.roa Signing time: Thu 01 Jan 2026 22:19:48 +0000 ROA not before: Thu 01 Jan 2026 22:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202737 IP address blocks: 185.60.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:48:fa:1b:81:03:37:4f:7b:c8:ab:cd:d6:f8:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=126d2b921abbc36b132b8128250e351b43c6d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:57:7e:b2:38:38:b1:c1:76:e2:cf:bc:a0: f6:c2:63:da:83:37:4a:8c:f2:04:3d:38:25:ef:f4: 18:43:3f:b7:61:f6:e3:41:51:2c:72:7e:19:5e:a7: 20:70:11:11:e6:73:5a:71:77:3b:05:48:15:c4:07: d7:a4:93:c2:7b:54:75:82:c3:62:93:41:04:7b:7c: 55:be:1d:78:98:77:9c:a2:44:e2:a6:fb:16:d7:4c: 0c:cc:57:d3:40:ff:d9:6e:45:18:1a:2b:01:a1:74: 47:c1:30:7c:c5:82:27:cc:f3:6c:88:f7:ac:0b:85: 29:83:1f:a0:ff:29:f3:a9:32:e9:29:97:f6:6d:7d: 0b:4e:55:e3:41:6a:bd:5e:58:26:f3:74:b2:10:98: 7e:18:fb:b3:7a:31:f4:f9:26:63:75:a2:7c:65:f5: f0:0b:f1:f4:46:4a:4d:e2:53:4f:25:b0:5c:45:73: 43:2c:ff:f5:47:ec:f8:9a:08:f4:e4:6e:4a:be:b1: c5:76:66:74:3d:34:18:c5:e9:5f:60:fd:2f:6a:02: e4:5d:33:d7:29:b8:25:65:fb:df:9a:20:b1:9e:20: 1f:7d:f3:1e:a3:e6:ba:23:7e:85:59:28:8f:9a:ec: ca:d0:0a:73:e0:e3:60:a9:62:86:a8:0f:2c:df:fe: 37:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:2B:92:1A:BB:C3:6B:13:2B:81:28:25:0E:35:1B:43:C6:D5:C0 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Em0rkhq7w2sTK4EoJQ41G0PG1cA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.65.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f1:79:cd:43:43:d0:d4:96:ce:75:9d:de:5b:a3:3c:24:16: e9:98:08:97:b3:2b:d0:59:c8:48:1c:64:b4:a4:04:b5:f6:7d: d4:c6:fc:58:1f:85:1a:46:2c:3b:b6:4e:a8:82:02:d7:0c:56: 1f:e9:34:60:d0:78:0a:9f:bb:95:b8:56:66:09:d8:c9:5b:07: f8:b1:5f:cd:f2:84:1b:17:bd:b8:e5:17:74:ce:bd:16:78:a9: c2:bf:10:f4:64:a0:a1:b7:95:bd:9d:be:f7:fd:72:a7:4d:6f: 61:b4:18:0f:e8:d7:f0:19:81:2e:10:fa:0c:30:c7:f1:6c:40: 4f:e9:90:96:fc:41:0e:0e:08:e9:e6:f8:e1:a1:f1:9d:4c:9a: 00:6e:c3:50:eb:8e:75:55:51:38:6c:f6:96:b2:53:f6:13:ad: 37:1b:d4:21:ee:ae:c6:1d:e5:c8:be:ef:1b:51:a3:96:89:4d: 5c:93:b0:94:00:c0:8e:6a:86:bf:ce:7e:ce:b2:17:b1:3b:f1: 69:6c:67:ca:39:86:32:9b:0b:0c:0e:8a:eb:43:63:16:fa:4f: 52:4a:da:b7:c2:53:5c:9b:e6:c6:2a:93:6e:3f:14:27:e4:a9: f2:b0:cd:3e:a4:24:3c:16:39:59:00:fb:07:6e:6f:15:41:7a: 1d:6f:80:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pUj6G4EDN097yKvN1vhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjZkMmI5MjFhYmJjMzZiMTMyYjgxMjgyNTBlMzUxYjQzYzZkNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBtXfrI4OLHBduLPvKD2wmPagzdK jPIEPTgl7/QYQz+3YfbjQVEscn4ZXqcgcBER5nNacXc7BUgVxAfXpJPCe1R1gsNi k0EEe3xVvh14mHecokTipvsW10wMzFfTQP/ZbkUYGisBoXRHwTB8xYInzPNsiPes C4Upgx+g/ynzqTLpKZf2bX0LTlXjQWq9Xlgm83SyEJh+GPuzejH0+SZjdaJ8ZfXw C/H0RkpN4lNPJbBcRXNDLP/1R+z4mgj05G5KvrHFdmZ0PTQYxelfYP0vagLkXTPX KbglZfvfmiCxniAfffMeo+a6I36FWSiPmuzK0Apz4ONgqWKGqA8s3/43EwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJtK5Iau8NrEyuBKCUONRtDxtXAMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvRW0wcmtocTd3MnNUSzRFb0pRNDFHMFBHMWNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTxBMA0G CSqGSIb3DQEBCwUAA4IBAQBP8XnNQ0PQ1JbOdZ3eW6M8JBbpmAiXsyvQWchIHGS0 pAS19n3UxvxYH4UaRiw7tk6oggLXDFYf6TRg0HgKn7uVuFZmCdjJWwf4sV/N8oQb F7245Rd0zr0WeKnCvxD0ZKCht5W9nb73/XKnTW9htBgP6NfwGYEuEPoMMMfxbEBP 6ZCW/EEODgjp5vjhofGdTJoAbsNQ6451VVE4bPaWslP2E603G9Qh7q7GHeXIvu8b UaOWiU1ck7CUAMCOaoa/zn7OshexO/FpbGfKOYYymwsMDorrQ2MW+k9SStq3wlNc m+bGKpNuPxQn5KnysM0+pCQ8FjlZAPsHbm8VQXodb4Cg -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:31 2026 by rpki-client