This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/EmJaWy9ErTq18djeUNfT6TYwXlA.roa File: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (raw, json) Hash identifier: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y= Subject key identifier: 12:62:5A:5B:2F:44:AD:3A:B5:F1:D8:DE:50:D7:D3:E9:36:30:5E:50 Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Certificate serial: 019B7CEDF3AD699C65699E11897E36FE7ECF Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/EmJaWy9ErTq18djeUNfT6TYwXlA.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42595 IP address blocks: 62.181.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f3:ad:69:9c:65:69:9e:11:89:7e:36:fe:7e:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12625a5b2f44ad3ab5f1d8de50d7d3e936305e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:12:ed:28:7f:62:d8:55:62:17:cd:43:f5: 7b:c9:3e:1d:54:f5:ed:4c:69:f0:8f:0d:19:90:3d: 8d:f7:f9:94:d7:7d:a0:5e:33:7f:38:c9:93:e1:75: c1:1d:88:89:59:f4:a3:a5:67:6a:03:d4:f7:c7:30: 9a:28:c9:62:dd:94:32:6f:de:5d:e7:08:87:5c:27: b1:3f:b6:b5:de:c2:b0:c5:15:bd:1b:99:25:12:32: df:c6:00:40:4e:6f:55:74:ed:bc:20:a1:72:61:b6: 76:ca:37:c4:64:36:98:45:13:a2:06:2b:11:6a:62: c8:79:e4:d2:af:a1:aa:76:d0:7d:bb:9e:53:1e:87: 58:4e:61:13:e5:99:e6:62:76:3c:1c:8c:38:c6:78: ae:46:f2:8e:fa:17:f8:85:64:22:63:ac:46:75:d9: db:69:65:c4:d3:08:e8:00:46:57:8b:91:a3:ba:3d: d6:f7:74:c0:15:f6:94:00:5a:d5:8f:f8:e9:11:ef: b7:af:4b:95:7d:5b:cc:d9:f8:7a:a3:2f:ab:b8:26: fe:65:6e:13:ea:77:58:85:98:bd:1c:9e:ee:dd:55: 54:b1:6f:28:a7:17:59:a9:43:73:70:2f:30:20:2c: 37:5a:fa:6e:9d:df:64:4d:64:6c:3c:cb:2e:f5:37: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:62:5A:5B:2F:44:AD:3A:B5:F1:D8:DE:50:D7:D3:E9:36:30:5E:50 X509v3 Authority Key Identifier: keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/EmJaWy9ErTq18djeUNfT6TYwXlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.181.223.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:d6:76:bc:53:7b:12:53:3c:fb:b9:0b:25:45:99:3a:b6:dc: 76:64:ce:6e:51:c1:0e:0e:57:65:4b:be:13:d4:77:d2:f9:59: 8e:d7:3e:ee:6a:68:ca:9d:2b:58:ef:38:a1:8c:1d:0a:d8:46: d0:42:a7:b1:b4:6c:f2:ed:1e:ab:1c:db:a2:53:07:81:ab:78: 36:c1:a0:13:d1:f8:b4:1d:46:af:21:e3:f0:44:83:cc:05:45: 6c:53:c4:17:28:e7:a9:e3:24:8d:02:8b:b5:e5:9a:cb:a2:ce: 63:1a:43:41:9f:10:ed:79:44:5a:b7:36:b7:44:1e:5e:41:a8: 35:95:90:f7:76:c1:f7:e9:0a:e0:ba:c9:08:a4:b5:3d:2f:0e: 2e:47:57:aa:aa:4c:33:f4:6b:04:c6:b7:3c:53:0f:b0:f0:c0: 58:5c:7d:7b:93:2e:95:36:3e:ad:c9:0f:a9:ce:8b:9c:fa:43: db:7f:73:d9:89:a4:71:18:f9:18:d1:d7:4f:57:cf:e7:31:00: a9:b7:93:ea:32:a9:3b:aa:49:da:27:66:11:04:a9:09:3c:02: 61:f6:c6:3f:d1:d2:35:b4:2f:85:ce:12:7c:93:d1:d6:07:d2: 97:73:72:74:d3:a8:52:60:94:e9:48:30:95:54:00:b4:1f:da: c9:a4:13:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fOtaZxlaZ4RiX42/n7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNzQ2ZTlmMTJjMmMwZTU0NTlmZTRlM2Q0MTNjMWM4OWRl NmRiMGUwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjYyNWE1YjJmNDRhZDNhYjVmMWQ4ZGU1MGQ3ZDNlOTM2MzA1ZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcUS7Sh/YthVYhfNQ/V7yT4dVPXt TGnwjw0ZkD2N9/mU132gXjN/OMmT4XXBHYiJWfSjpWdqA9T3xzCaKMli3ZQyb95d 5wiHXCexP7a13sKwxRW9G5klEjLfxgBATm9VdO28IKFyYbZ2yjfEZDaYRROiBisR amLIeeTSr6GqdtB9u55THodYTmET5ZnmYnY8HIw4xniuRvKO+hf4hWQiY6xGddnb aWXE0wjoAEZXi5Gjuj3W93TAFfaUAFrVj/jpEe+3r0uVfVvM2fh6oy+ruCb+ZW4T 6ndYhZi9HJ7u3VVUsW8opxdZqUNzcC8wICw3Wvpund9kTWRsPMsu9TeE7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJiWlsvRK06tfHY3lDX0+k2MF5QMB8GA1UdIwQY MBaAFFx0bp8SwsDlRZ/k49QTwcid5tsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMt ZTU5NDc2MTRlZjNmLzEvRW1KYVd5OUVyVHExOGRqZVVOZlQ2VFl3WGxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kNmJmNWUtNDgxMi00MzBlLTlhMTMtZTU5NDc2MTRlZjNm LzEvWEhSdW54TEN3T1ZGbi1UajFCUEJ5SjNtMnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPrXfMA0G CSqGSIb3DQEBCwUAA4IBAQAM1na8U3sSUzz7uQslRZk6ttx2ZM5uUcEODldlS74T 1HfS+VmO1z7uamjKnStY7zihjB0K2EbQQqextGzy7R6rHNuiUweBq3g2waAT0fi0 HUavIePwRIPMBUVsU8QXKOep4ySNAou15ZrLos5jGkNBnxDteURatza3RB5eQag1 lZD3dsH36QrguskIpLU9Lw4uR1eqqkwz9GsExrc8Uw+w8MBYXH17ky6VNj6tyQ+p zouc+kPbf3PZiaRxGPkY0ddPV8/nMQCpt5PqMqk7qknaJ2YRBKkJPAJh9sY/0dI1 tC+FzhJ8k9HWB9KXc3J006hSYJTpSDCVVAC0H9rJpBOj -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:59 2026 by rpki-client