This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa File: EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa (raw, json) Hash identifier: WLZZDdaT7EIhgSFh+wJhMvZeYoYBiu555dqxXusPvfs= Subject key identifier: 10:C7:1D:C3:53:E1:F8:99:61:1E:FB:C7:85:54:A3:4B:13:F1:35:28 Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Certificate serial: 019B7E38B681F243954BF99489938020CCC5 Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200233 IP address blocks: 138.124.176.0/24 maxlen: 24 147.87.0.0/16 maxlen: 24 193.5.80.0/21 maxlen: 24 2a07:6b40::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b6:81:f2:43:95:4b:f9:94:89:93:80:20:cc:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1 Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10c71dc353e1f899611efbc78554a34b13f13528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e5:af:d8:bc:d6:bd:61:9d:3d:f4:1b:07:be: 8a:7b:79:8c:11:de:84:80:2f:2c:70:96:11:7b:ca: 1f:77:81:01:78:1b:40:61:b4:09:b7:b5:13:88:52: a0:0c:2b:3c:89:cf:4e:b4:df:19:79:9f:19:7b:48: 5e:ec:d5:f9:f2:79:bd:3a:d6:20:b6:39:ad:d2:ec: 15:ea:60:0f:89:f8:37:40:b6:53:f3:31:f5:08:01: 71:ec:97:fd:ad:74:f6:00:98:7c:2e:3b:25:2a:3e: cc:e3:26:cf:ff:ad:f7:95:a6:ff:1c:b9:60:4f:99: ba:61:8a:f8:a5:95:bc:84:80:24:2d:b7:3a:30:e6: 88:6a:99:0b:04:6c:20:34:e5:ae:21:b8:b6:a3:72: 1e:bd:a2:c0:71:fe:22:2e:90:ab:30:94:6a:dd:47: 32:c2:97:94:ce:22:af:69:24:f8:85:45:5b:e6:17: 96:3d:ca:c3:30:76:c7:cd:0a:4d:ca:c2:b5:a9:cd: 1a:61:b4:01:e5:86:72:40:b4:c3:87:b1:4a:33:26: 78:e1:fc:62:0b:ee:8e:71:3e:0b:d1:6e:0b:37:d0: be:8d:19:58:41:19:52:4b:0d:62:22:86:a1:f9:be: c4:9d:16:a7:4c:d2:ad:4c:9b:a8:e3:af:4c:86:44: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C7:1D:C3:53:E1:F8:99:61:1E:FB:C7:85:54:A3:4B:13:F1:35:28 X509v3 Authority Key Identifier: keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/EMcdw1Ph-JlhHvvHhVSjSxPxNSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.176.0/24 147.87.0.0/16 193.5.80.0/21 IPv6: 2a07:6b40::/29 Signature Algorithm: sha256WithRSAEncryption 69:bb:91:78:6d:82:20:5e:30:1c:28:41:7c:e6:fc:84:6c:d5: 18:12:74:d5:5d:a2:dc:44:6a:33:5e:a5:d9:34:7c:03:83:fb: cd:04:fa:e3:81:79:e6:d7:5b:f7:0e:1a:a8:4e:55:bb:e1:e1: 01:20:b6:7a:0d:ac:56:7e:bf:87:be:8d:d8:a1:f5:3f:dd:22: c5:26:4c:e1:02:29:2f:96:c4:ed:75:ce:05:39:a8:7c:25:dd: 13:71:e9:c0:22:30:d9:2f:d1:8c:7f:b4:fe:f9:6a:9a:83:ee: a1:8a:15:84:27:69:b5:a1:d7:8d:d9:15:a8:2c:a7:81:b7:35: 12:71:21:a9:0e:13:f2:58:47:d1:bb:e0:90:04:3b:2f:08:99: 86:56:8a:85:b6:9e:1e:99:a9:5f:b5:58:7f:15:a8:fc:4b:1e: b3:52:1a:6a:2b:df:24:08:b0:0d:d3:0a:38:bd:1d:1b:0f:11: 32:3c:34:aa:c4:8f:48:4a:2e:d2:f6:cb:ff:34:93:ef:6d:67: cc:81:67:3e:ae:32:8e:72:1d:4e:ec:eb:ae:3e:18:bf:28:88: 56:8e:42:e0:7f:4c:f6:e2:b9:46:db:c1:17:2b:9f:e5:df:9d: 65:47:f0:6d:5a:0d:b9:6b:52:4d:9e:d1:83:5e:51:05:95:43: e9:63:eb:c6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+OLaB8kOVS/mUiZOAIMzFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NDFlYzE3ZGMwMzA5YjEzZDg4YTY3ZWEyMmRjYmJiMjZh NGUzYTEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGM3MWRjMzUzZTFmODk5NjExZWZiYzc4NTU0YTM0YjEzZjEzNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOWv2LzWvWGdPfQbB76Ke3mMEd6E gC8scJYRe8ofd4EBeBtAYbQJt7UTiFKgDCs8ic9OtN8ZeZ8Ze0he7NX58nm9OtYg tjmt0uwV6mAPifg3QLZT8zH1CAFx7Jf9rXT2AJh8LjslKj7M4ybP/633lab/HLlg T5m6YYr4pZW8hIAkLbc6MOaIapkLBGwgNOWuIbi2o3IevaLAcf4iLpCrMJRq3Ucy wpeUziKvaST4hUVb5heWPcrDMHbHzQpNysK1qc0aYbQB5YZyQLTDh7FKMyZ44fxi C+6OcT4L0W4LN9C+jRlYQRlSSw1iIoah+b7EnRanTNKtTJuo469MhkTY4wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBDHHcNT4fiZYR77x4VUo0sT8TUoMB8GA1UdIwQY MBaAFIdB7BfcAwmxPYimfqIty7smpOOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYt MWFjNGE0MDA3ZGI0LzEvRU1jZHcxUGgtSmxoSHZ2SGhWU2pTeFB4TlNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8zMjY2ZjEtN2M4OC00ZjU5LWI1NjYtMWFjNGE0MDA3ZGI0 LzEvaDBIc0Y5d0RDYkU5aUtaLW9pM0x1eWFrNDZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQAinywAwMA k1cDBAPBBVAwDQQCAAIwBwMFAyoHa0AwDQYJKoZIhvcNAQELBQADggEBAGm7kXht giBeMBwoQXzm/IRs1RgSdNVdotxEajNepdk0fAOD+80E+uOBeebXW/cOGqhOVbvh 4QEgtnoNrFZ+v4e+jdih9T/dIsUmTOECKS+WxO11zgU5qHwl3RNx6cAiMNkv0Yx/ tP75apqD7qGKFYQnabWh143ZFagsp4G3NRJxIakOE/JYR9G74JAEOy8ImYZWioW2 nh6ZqV+1WH8VqPxLHrNSGmor3yQIsA3TCji9HRsPETI8NKrEj0hKLtL2y/80k+9t Z8yBZz6uMo5yHU7s664+GL8oiFaOQuB/TPbiuUbbwRcrn+XfnWVH8G1aDblrUk2e 0YNeUQWVQ+lj68Y= -----END CERTIFICATE-----Generated at Mon Jan 26 06:57:15 2026 by rpki-client