This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/dx_EmdaCtCk3lPgY9GHpXyywHN4.roa
File: dx_EmdaCtCk3lPgY9GHpXyywHN4.roa (raw, json)
Hash identifier: A9UJpCPfL7hO2rNlUxE5iQopLk2eq6WPtVOcMxT85dU=
Subject key identifier: 77:1F:C4:99:D6:82:B4:29:37:94:F8:18:F4:61:E9:5F:2C:B0:1C:DE
Certificate issuer: /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Certificate serial: 019B797E5BF423F8D6561668D28EDD97F4CA
Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/dx_EmdaCtCk3lPgY9GHpXyywHN4.roa
Signing time: Thu 01 Jan 2026 12:18:02 +0000
ROA not before: Thu 01 Jan 2026 12:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 195.225.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Jan 2026 15:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:5b:f4:23:f8:d6:56:16:68:d2:8e:dd:97:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba
Validity
Not Before: Jan 1 12:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=771fc499d682b4293794f818f461e95f2cb01cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:0c:4d:61:e9:30:b6:26:72:d8:de:28:c4:
e8:91:fb:3a:0f:c9:91:5c:73:ce:1e:e2:e6:3a:47:
59:6c:40:69:51:c2:83:ef:d8:45:35:0f:77:b2:a0:
50:33:69:d6:73:69:28:ee:0d:94:b1:3a:f8:cc:77:
f3:96:77:24:2b:8b:e5:e9:43:eb:9e:a0:17:09:01:
46:70:91:fa:9c:e9:13:cb:2e:2f:fa:af:6a:f2:7b:
46:18:72:8c:52:6e:ae:53:ee:ce:70:20:06:cf:25:
36:ea:d4:fc:26:7c:bf:7c:56:d3:f3:94:8d:76:d9:
17:9d:74:c2:38:7c:81:b7:40:39:ce:64:1c:6f:37:
a7:de:6d:fb:bb:38:6d:31:f3:bb:cd:fa:43:90:d2:
87:46:f0:c6:d3:7d:ba:e7:a7:14:70:c2:b8:fa:08:
d8:f2:15:df:45:f0:07:91:c3:ac:ec:4b:b6:85:4f:
26:3b:ed:fe:9d:db:1b:af:7d:d9:c1:b3:71:d2:d5:
07:65:04:dc:a6:85:48:ae:b1:e2:c5:32:59:e2:a0:
17:63:47:a2:38:56:de:98:7b:9d:8e:49:7f:ac:fb:
e9:46:ae:5b:7f:66:ba:46:98:f0:45:00:3a:fc:b3:
c5:f9:b2:2f:93:6f:f8:87:8d:96:a6:22:bb:f2:31:
ae:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1F:C4:99:D6:82:B4:29:37:94:F8:18:F4:61:E9:5F:2C:B0:1C:DE
X509v3 Authority Key Identifier:
keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/dx_EmdaCtCk3lPgY9GHpXyywHN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.128.0/23
Signature Algorithm: sha256WithRSAEncryption
77:84:87:b3:bd:9a:0c:ac:ad:15:dd:fe:15:ea:ad:e4:26:ca:
b5:37:8f:3b:b9:d6:f9:ca:94:76:f3:5e:99:66:69:be:78:c9:
a2:da:00:01:5e:23:3c:df:27:33:99:73:3a:1a:91:4f:bb:35:
d9:8d:83:11:d3:ac:1e:5d:78:13:35:63:fb:a2:43:c2:7a:18:
11:28:9f:18:2e:d2:4f:c5:e8:bd:e2:aa:f8:00:72:a1:dd:25:
4a:2f:3f:66:7c:85:82:c5:b3:00:b4:38:66:84:d0:36:b7:f0:
18:c7:43:85:39:3a:2a:f3:1f:9a:fe:27:b8:9e:e0:e1:0e:e4:
3d:f7:64:a6:23:61:83:fc:5c:38:71:45:1c:cb:e3:7e:fd:c5:
60:14:5f:72:26:ee:bf:f2:76:4b:62:5e:8e:90:4b:4b:a0:be:
33:e4:33:9b:6d:ec:ca:cd:55:10:14:0c:f2:21:30:e8:4a:6c:
b6:fb:1e:6b:01:bd:e9:66:6a:25:f5:8f:0d:b4:01:5d:f1:28:
56:73:16:57:4b:67:ef:97:e7:2b:d2:bc:16:27:9e:96:b9:a5:
16:ae:7d:2a:0e:8e:50:0a:87:e4:5f:ce:81:c2:a8:b4:7c:ee:
e8:2f:44:5e:3b:3c:7f:03:f9:be:9f:6a:6f:c4:f8:e5:17:69:
63:0b:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 00:16:37 2026 by rpki-client