This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Emgi9uVA0K2U8udhhuN-5E2ED9I.roa
File: Emgi9uVA0K2U8udhhuN-5E2ED9I.roa (raw, json)
Hash identifier: aaqGCp3412X3YAMCyWJ0qF8Viw0cR9UGWglvjgQK4do=
Subject key identifier: 12:68:22:F6:E5:40:D0:AD:94:F2:E7:61:86:E3:7E:E4:4D:84:0F:D2
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019B7B356F1BA6FC54F56A2A0A6A30E7D974
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Emgi9uVA0K2U8udhhuN-5E2ED9I.roa
Signing time: Thu 01 Jan 2026 20:17:37 +0000
ROA not before: Thu 01 Jan 2026 20:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42280
IP address blocks: 194.102.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:6f:1b:a6:fc:54:f5:6a:2a:0a:6a:30:e7:d9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=126822f6e540d0ad94f2e76186e37ee44d840fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:cc:05:a5:39:84:ec:a0:a8:d3:56:42:35:
27:b6:f5:0c:b5:05:d6:b4:25:fa:4e:82:48:d0:93:
02:65:c1:35:2a:4a:a3:37:a3:fc:2d:46:2a:e1:1b:
22:dc:12:8f:e4:e4:54:ac:16:b4:2a:d7:fc:31:86:
c0:69:77:0c:ca:d7:17:70:ee:4a:3b:da:99:d0:57:
6c:50:d3:e3:1b:1e:ca:09:78:6d:d8:22:69:02:f7:
6d:8b:45:c3:20:ca:89:3e:a3:dc:98:4e:81:74:ac:
42:1e:75:51:a3:55:e0:7e:d0:64:99:d7:89:8f:a3:
c3:e9:4d:65:f5:2d:00:33:fd:d9:4a:3f:d1:51:71:
9f:b9:f3:f5:d6:c5:b4:b1:fc:f9:9a:9f:3b:61:36:
6c:60:36:bf:21:6a:96:f4:6e:b8:bf:03:d0:39:10:
84:fe:c5:76:4c:ca:08:67:bc:dc:9c:7e:50:1b:8f:
5b:f0:a3:9b:bd:9a:e7:d5:fe:ae:34:d6:75:ea:f4:
0e:39:14:90:12:ac:88:ae:3b:e9:8c:9c:d3:3f:9d:
c2:41:77:63:60:f7:7b:a8:d7:38:72:70:55:22:1c:
d6:42:78:77:85:51:44:38:61:b4:19:ff:32:1b:a4:
aa:59:0a:71:d5:56:9a:b7:0c:a1:30:7f:b1:5b:be:
b8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:22:F6:E5:40:D0:AD:94:F2:E7:61:86:E3:7E:E4:4D:84:0F:D2
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Emgi9uVA0K2U8udhhuN-5E2ED9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.193.0/24
Signature Algorithm: sha256WithRSAEncryption
66:0a:c3:52:4b:c4:0d:18:8f:80:63:24:59:41:e0:d3:05:d8:
3b:58:c7:6d:ff:67:d9:5b:0e:46:51:9c:0e:58:87:da:0e:c0:
69:33:de:e1:38:72:37:60:b1:6c:d7:b0:e7:7d:90:0f:de:bd:
43:8e:1e:42:52:5c:3b:9e:2a:3e:d9:97:10:e4:8f:ad:d3:e9:
f6:cb:ff:58:60:9e:44:47:8a:f3:55:ea:9b:50:c5:65:86:d3:
5a:0e:76:5a:f6:b8:66:00:b4:27:da:07:3d:b9:0a:f3:29:55:
c7:a2:1c:69:5c:d3:6e:af:e8:25:8d:8a:20:68:99:65:d3:81:
20:f6:92:b4:7a:6a:47:44:46:3c:f2:16:d5:16:89:9c:98:ae:
ca:a9:62:b4:b1:7c:58:3a:83:13:73:a4:82:8c:9c:8b:36:fe:
53:2b:98:71:e0:74:56:da:3c:c6:91:7f:ca:80:cc:ec:75:a8:
1c:ec:d6:85:78:6f:12:d1:34:28:bd:d2:35:48:b3:d4:82:04:
f6:e4:9f:be:ee:62:15:e0:56:8c:5d:2e:37:5e:7c:91:78:f5:
6b:7a:96:73:ad:7f:06:3f:64:1f:da:2b:ec:a4:9b:69:2c:de:
3a:6b:13:9c:c9:ba:0b:10:68:c0:3f:51:03:3b:3f:3b:d3:0f:
05:d9:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 02:48:00 2026 by rpki-client