This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/emRrp9WNoGwNWTE42KjaGBodz9Q.roa
File: emRrp9WNoGwNWTE42KjaGBodz9Q.roa (raw, json)
Hash identifier: /m0KM5Ha3jFihjS9wP96Kp6B9UK3CcGPoMjG9EV+eYY=
Subject key identifier: 7A:64:6B:A7:D5:8D:A0:6C:0D:59:31:38:D8:A8:DA:18:1A:1D:CF:D4
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019B797F4810132AF1949301EC08561B3A0A
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/emRrp9WNoGwNWTE42KjaGBodz9Q.roa
Signing time: Thu 01 Jan 2026 12:19:03 +0000
ROA not before: Thu 01 Jan 2026 12:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200456
IP address blocks: 213.238.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:48:10:13:2a:f1:94:93:01:ec:08:56:1b:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 12:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a646ba7d58da06c0d593138d8a8da181a1dcfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:a3:6b:36:a7:3f:1a:0f:a6:e6:c6:f8:31:
da:63:83:a4:04:27:a7:44:00:f1:ae:70:62:f7:e0:
49:74:e5:33:da:92:a7:bf:e9:14:b8:55:2d:f7:61:
f5:4d:49:57:ae:ae:e6:c0:df:77:1f:a3:ff:dd:16:
83:21:d6:3c:af:25:a5:64:f5:c7:ed:03:79:cf:8c:
ce:5f:19:a2:7f:1b:e4:c2:19:90:58:ef:4f:58:3c:
80:fa:4b:57:bf:a4:21:89:a6:d7:57:12:23:b2:b4:
1b:21:ba:c6:75:ed:57:1a:e6:8e:0e:21:27:ab:d8:
ef:70:45:d4:45:85:36:64:4f:b7:13:f2:74:af:f6:
14:40:dc:5d:d0:83:25:62:ff:ce:30:e7:4c:cc:7e:
0d:6f:db:9f:05:e0:35:4b:57:47:34:f0:6c:86:0a:
3f:46:6f:3b:1a:72:8e:e3:9a:b6:64:50:8d:4a:88:
6f:e9:a3:56:5e:32:70:f8:d3:66:a7:43:ef:2a:11:
94:9b:4f:0f:c0:d0:e5:37:62:ad:43:77:40:5a:3a:
6f:77:1f:ba:6b:2b:63:b8:26:ba:bb:bf:81:a9:7d:
54:53:79:f2:66:c3:fe:0d:71:b4:e9:08:9f:75:40:
0b:f8:cc:3f:b7:04:f4:a6:87:24:ad:60:fe:02:bc:
76:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:6B:A7:D5:8D:A0:6C:0D:59:31:38:D8:A8:DA:18:1A:1D:CF:D4
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/emRrp9WNoGwNWTE42KjaGBodz9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.171.0/24
Signature Algorithm: sha256WithRSAEncryption
03:26:b1:9c:ae:e2:c4:83:db:e7:95:33:86:c2:1f:40:48:03:
49:f0:d6:68:24:ef:ac:c9:99:cf:c9:a3:7c:46:75:25:12:65:
40:df:21:4a:b1:7d:80:6d:86:ea:c2:bf:18:fa:7d:c8:99:8d:
06:2c:74:e7:49:8f:24:57:f0:ed:ff:8e:e0:0c:59:65:ba:a6:
74:9e:43:fb:ef:39:c2:20:96:6b:cd:15:1d:d3:c2:e6:bf:70:
c8:95:47:a7:f9:9d:c7:d0:c7:c6:fb:9c:77:81:83:4b:79:8d:
78:c7:0e:c8:b9:13:b1:96:a1:a6:68:da:a3:61:96:37:05:46:
7e:f8:02:c3:ed:ec:fe:c5:91:1e:c9:20:61:5f:b7:7d:6a:84:
64:43:1e:2a:c5:88:c3:3c:4b:3d:eb:b6:1c:66:a9:87:2b:2b:
6c:86:c0:38:29:28:ae:2a:3d:90:c0:38:c2:ff:5d:48:41:e1:
59:72:a3:30:b5:62:b5:1f:dc:cf:c2:22:6f:96:41:83:b2:53:
3c:f0:32:85:63:0e:cd:cc:84:b9:ae:35:52:ca:a5:6f:95:9e:
e8:f6:81:31:c4:8f:27:5d:61:d3:da:d7:18:be:00:dd:8a:0f:
a7:d4:a2:f4:2e:58:14:f9:3b:de:93:10:83:10:3b:3f:f9:ff:
60:6c:d0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:56:29 2026 by rpki-client