This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/Em6H44j6iihpO4fA0GysA5KFhow.roa File: Em6H44j6iihpO4fA0GysA5KFhow.roa (raw, json) Hash identifier: cCDm2T/ieWvHFIMXCp6aDYjKM7+qQdF6aF/yhfZ3+5U= Subject key identifier: 12:6E:87:E3:88:FA:8A:28:69:3B:87:C0:D0:6C:AC:03:92:85:86:8C Certificate issuer: /CN=03d8024188491a319c5276721f940efae7fc21af Certificate serial: 019B7CEDCB501DCA06193B76E26A16A46B25 Authority key identifier: 03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/Em6H44j6iihpO4fA0GysA5KFhow.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61397 IP address blocks: 45.12.156.0/22 maxlen: 22 185.9.4.0/22 maxlen: 22 185.105.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.mft rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cb:50:1d:ca:06:19:3b:76:e2:6a:16:a4:6b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d8024188491a319c5276721f940efae7fc21af Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=126e87e388fa8a28693b87c0d06cac039285868c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:e8:13:f5:b0:4e:48:b7:0a:72:bd:2d:d4: 85:57:74:28:83:37:d1:f7:66:5a:1f:a0:57:d2:33: 63:62:e9:1f:6a:02:63:37:3e:a9:83:46:14:da:10: 28:1b:74:2a:78:49:eb:04:d9:67:ef:41:53:ee:5f: a9:61:f8:48:e1:5d:99:1f:f2:8a:1f:eb:5a:79:17: 80:c1:f0:ff:5c:4e:49:5b:10:ea:16:3f:f7:fa:7a: c2:29:e5:94:e7:6a:78:0f:5e:4f:0f:ce:9e:9e:eb: 58:5f:de:b5:fa:8e:cd:7a:cd:1b:fa:a7:76:96:7f: 3b:22:43:76:36:43:d1:08:25:3b:3f:b9:17:95:33: e7:8e:c7:cf:be:dc:c0:66:6a:80:c4:81:37:f4:5b: 91:28:a8:dd:40:30:4d:ef:65:94:57:58:20:d3:f0: de:25:34:8b:35:33:d3:6a:df:47:d2:6c:27:7c:6e: 89:5c:47:23:a2:14:7e:2c:a0:75:de:36:5a:6d:4a: 9f:91:90:7b:09:10:52:84:e8:a0:0a:dc:e5:e1:20: 77:e7:d1:e2:f0:9b:0e:da:2c:70:ea:de:fc:7f:63: b7:bb:96:6a:29:df:6d:96:6e:ba:0e:ca:ee:71:17: 97:9f:54:13:0d:90:5d:7e:a5:b5:36:48:5d:bc:b3: ba:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:87:E3:88:FA:8A:28:69:3B:87:C0:D0:6C:AC:03:92:85:86:8C X509v3 Authority Key Identifier: keyid:03:D8:02:41:88:49:1A:31:9C:52:76:72:1F:94:0E:FA:E7:FC:21:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/Em6H44j6iihpO4fA0GysA5KFhow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2097dd-c396-48f6-be87-7bbac8cc2783/1/A9gCQYhJGjGcUnZyH5QO-uf8Ia8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.156.0/22 185.9.4.0/22 185.105.180.0/22 Signature Algorithm: sha256WithRSAEncryption 69:ee:77:68:86:64:c0:3e:ac:ff:23:ec:6f:a1:c2:b5:2d:af: 38:6a:5b:4e:68:3a:3c:4a:53:8e:b2:d9:a2:52:c9:e4:bd:62: 0d:c1:d2:6f:d2:34:b6:3a:64:6e:b0:5e:74:59:14:c7:21:b2: 91:a7:c9:75:7c:4f:95:b7:b9:68:4a:65:ad:4d:fa:9b:4a:2b: 6b:36:4c:4a:c5:c7:39:41:25:e3:cb:b5:67:de:d9:f0:ab:21: 4e:c1:59:fc:2b:b2:34:eb:9c:f4:fd:31:f4:cc:11:22:78:c7: 67:9c:46:68:f3:2a:0e:74:03:8c:40:d4:1f:9b:73:93:f4:6a: a9:1f:55:09:b7:1e:8f:e3:c0:fb:d3:74:1a:b1:ee:49:59:12: 13:44:2b:08:02:d6:ed:2c:8e:4f:27:de:5e:34:c4:c7:31:c8: c0:cd:77:2a:e9:31:bb:1f:39:fc:57:ce:8a:d8:5c:f6:a2:f2: 22:4b:7c:38:e7:f1:09:1e:14:d3:39:f3:d5:e5:d1:b1:6b:86: 63:db:cf:ff:c5:fc:c3:26:a7:0d:7f:cf:ca:f0:5f:d2:6b:ba: e1:26:fb:55:4e:05:cf:28:2c:3b:e7:ed:ec:e6:ca:bb:99:c7: 53:2a:9d:30:b4:58:a3:b6:69:31:b2:46:d1:4b:e4:b9:00:de: 84:fb:f0:4c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87ctQHcoGGTt24moWpGslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDgwMjQxODg0OTFhMzE5YzUyNzY3MjFmOTQwZWZhZTdm YzIxYWYwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjZlODdlMzg4ZmE4YTI4NjkzYjg3YzBkMDZjYWMwMzkyODU4NjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCPoE/WwTki3CnK9LdSFV3QogzfR 92ZaH6BX0jNjYukfagJjNz6pg0YU2hAoG3QqeEnrBNln70FT7l+pYfhI4V2ZH/KK H+taeReAwfD/XE5JWxDqFj/3+nrCKeWU52p4D15PD86enutYX961+o7Nes0b+qd2 ln87IkN2NkPRCCU7P7kXlTPnjsfPvtzAZmqAxIE39FuRKKjdQDBN72WUV1gg0/De JTSLNTPTat9H0mwnfG6JXEcjohR+LKB13jZabUqfkZB7CRBShOigCtzl4SB359Hi 8JsO2ixw6t78f2O3u5ZqKd9tlm66DsrucReXn1QTDZBdfqW1NkhdvLO6BQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBJuh+OI+oooaTuHwNBsrAOShYaMMB8GA1UdIwQY MBaAFAPYAkGISRoxnFJ2ch+UDvrn/CGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODct N2JiYWM4Y2MyNzgzLzEvRW02SDQ0ajZpaWhwTzRmQTBHeXNBNUtGaG93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMDk3ZGQtYzM5Ni00OGY2LWJlODctN2JiYWM4Y2MyNzgz LzEvQTlnQ1FZaEpHakdjVW5aeUg1UU8tdWY4SWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLQycAwQC uQkEAwQCuWm0MA0GCSqGSIb3DQEBCwUAA4IBAQBp7ndohmTAPqz/I+xvocK1La84 altOaDo8SlOOstmiUsnkvWINwdJv0jS2OmRusF50WRTHIbKRp8l1fE+Vt7loSmWt TfqbSitrNkxKxcc5QSXjy7Vn3tnwqyFOwVn8K7I065z0/TH0zBEieMdnnEZo8yoO dAOMQNQfm3OT9GqpH1UJtx6P48D703Qase5JWRITRCsIAtbtLI5PJ95eNMTHMcjA zXcq6TG7Hzn8V86K2Fz2ovIiS3w45/EJHhTTOfPV5dGxa4Zj28//xfzDJqcNf8/K 8F/Sa7rhJvtVTgXPKCw75+3s5sq7mcdTKp0wtFijtmkxskbRS+S5AN6E+/BM -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:11 2026 by rpki-client