This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa File: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (raw, json) Hash identifier: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk= Subject key identifier: 10:CA:0F:91:7F:DA:F9:7D:58:EB:1D:A1:DD:2A:9D:B0:F5:79:AE:AE Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E37A0EC8D27939C0945467D3EFCAB29 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa Signing time: Fri 02 Jan 2026 10:18:53 +0000 ROA not before: Fri 02 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203120 IP address blocks: 89.34.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a0:ec:8d:27:93:9c:09:45:46:7d:3e:fc:ab:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ca0f917fdaf97d58eb1da1dd2a9db0f579aeae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d8:23:25:12:a0:2a:4a:b7:9e:65:17:04:2c: c3:8d:27:4a:d9:59:d7:db:42:ec:4f:f3:d3:08:1c: d5:78:8f:a8:f6:39:4f:d9:07:f5:23:de:92:32:7f: 2c:14:81:46:54:5a:97:ca:cc:8a:19:70:17:9e:25: 40:41:4e:83:d5:f2:e6:53:02:2a:d8:83:ee:76:b6: bf:5d:d0:4a:ed:6d:1d:f6:69:0e:f8:7e:c8:ee:6c: 03:41:9f:af:6e:98:c3:6d:b2:89:5a:ab:10:70:73: d5:b8:0d:63:ce:a5:d8:e2:a9:3c:ec:2a:53:96:43: d8:e0:44:0c:ec:36:b9:bb:6e:d5:bf:be:09:1c:06: ce:35:e2:15:6e:f2:a5:e4:79:02:ee:22:0e:ae:d7: 34:1d:8c:a4:b0:3e:03:9a:81:95:81:7d:69:64:89: b9:24:e5:fb:9e:56:e8:10:14:1d:19:33:33:ca:a8: c5:78:64:62:c8:b1:ff:81:47:3e:0e:00:78:50:62: b6:c6:39:2b:6c:07:ba:53:5e:d8:1b:c7:48:f1:e4: 79:c5:55:18:68:04:36:af:91:69:9a:c7:22:50:36: 09:e0:2a:ee:80:d2:f8:85:4e:5c:85:11:23:a2:c2: 40:16:67:54:61:5d:b2:a4:e3:c0:58:1f:cb:dd:1f: bd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CA:0F:91:7F:DA:F9:7D:58:EB:1D:A1:DD:2A:9D:B0:F5:79:AE:AE X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.74.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:24:30:d3:52:81:86:cf:00:ff:b1:ad:b6:61:11:14:62:fe: 12:72:41:35:73:d7:4b:a3:11:d1:8d:81:20:23:0c:5b:25:db: 4a:b5:ad:c3:14:65:07:bd:9c:40:79:18:31:24:16:a9:0a:85: 0a:da:5e:a8:f1:d8:53:18:00:50:13:a4:f8:13:9f:78:86:b9: 7a:54:83:05:ab:b3:11:69:40:47:7e:66:58:19:14:ab:e3:02: e2:ee:05:af:dd:92:9c:b3:0a:87:12:58:35:bd:b9:4a:df:35: fe:6f:bd:5b:35:5f:34:85:70:e2:52:d0:63:7b:55:fe:71:6a: 60:84:44:0b:7a:65:9d:48:21:27:d4:00:4a:d8:d2:3b:dd:1c: 52:fc:9c:58:b7:db:f4:25:d2:6b:2e:6b:25:52:68:73:88:52: f2:31:7c:0b:0e:07:57:9d:c1:02:ec:59:6a:3a:c1:fb:b6:7f: ca:dd:70:5e:91:0b:9b:0a:bf:24:10:19:56:98:77:b0:95:95: b9:a8:9a:68:39:8a:7e:ef:be:5b:98:cb:db:1c:8d:45:97:da: 20:ff:96:09:38:65:83:d2:fb:ec:85:c0:d3:bd:af:6d:a6:ba: 39:61:1d:b1:42:db:4e:fa:a7:de:68:24:bc:62:c6:d7:cf:76: a3:53:bd:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6DsjSeTnAlFRn0+/KspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGNhMGY5MTdmZGFmOTdkNThlYjFkYTFkZDJhOWRiMGY1NzlhZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdgjJRKgKkq3nmUXBCzDjSdK2VnX 20LsT/PTCBzVeI+o9jlP2Qf1I96SMn8sFIFGVFqXysyKGXAXniVAQU6D1fLmUwIq 2IPudra/XdBK7W0d9mkO+H7I7mwDQZ+vbpjDbbKJWqsQcHPVuA1jzqXY4qk87CpT lkPY4EQM7Da5u27Vv74JHAbONeIVbvKl5HkC7iIOrtc0HYyksD4DmoGVgX1pZIm5 JOX7nlboEBQdGTMzyqjFeGRiyLH/gUc+DgB4UGK2xjkrbAe6U17YG8dI8eR5xVUY aAQ2r5FpmsciUDYJ4CrugNL4hU5chREjosJAFmdUYV2ypOPAWB/L3R+9zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDKD5F/2vl9WOsdod0qnbD1ea6uMB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvRU1vUGtYX2EtWDFZNngyaDNTcWRzUFY1cnE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSJKMA0G CSqGSIb3DQEBCwUAA4IBAQCOJDDTUoGGzwD/sa22YREUYv4SckE1c9dLoxHRjYEg IwxbJdtKta3DFGUHvZxAeRgxJBapCoUK2l6o8dhTGABQE6T4E594hrl6VIMFq7MR aUBHfmZYGRSr4wLi7gWv3ZKcswqHElg1vblK3zX+b71bNV80hXDiUtBje1X+cWpg hEQLemWdSCEn1ABK2NI73RxS/JxYt9v0JdJrLmslUmhziFLyMXwLDgdXncEC7Flq OsH7tn/K3XBekQubCr8kEBlWmHewlZW5qJpoOYp+775bmMvbHI1Fl9og/5YJOGWD 0vvshcDTva9tpro5YR2xQttO+qfeaCS8YsbXz3ajU72C -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:15 2026 by rpki-client