This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/EmX6XyNl91Tm8cirnJelJMWv5jw.roa File: EmX6XyNl91Tm8cirnJelJMWv5jw.roa (raw, json) Hash identifier: ecaOyMml05HDIHHtJ4OiOiljQ7sD0n4R4TT3SS/C9pQ= Subject key identifier: 12:65:FA:5F:23:65:F7:54:E6:F1:C8:AB:9C:97:A5:24:C5:AF:E6:3C Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019AD329E06AB1B20F47B417B9816B0857AA Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/EmX6XyNl91Tm8cirnJelJMWv5jw.roa Signing time: Sun 30 Nov 2025 05:08:48 +0000 ROA not before: Sun 30 Nov 2025 05:08:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 213.137.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:29:e0:6a:b1:b2:0f:47:b4:17:b9:81:6b:08:57:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Nov 30 05:08:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1265fa5f2365f754e6f1c8ab9c97a524c5afe63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:93:5b:48:f9:34:c2:9e:d8:9d:62:cd:ef:bc: 72:43:e8:7e:e2:55:ed:49:fc:05:82:bd:a7:f6:5c: be:4f:94:e9:1c:11:7c:ed:ee:02:a6:ac:5c:22:03: d3:c3:50:5c:ab:23:6e:7e:73:e9:66:50:57:d4:64: 24:6c:24:c3:9d:b6:d4:ba:c7:95:87:34:9b:6f:9c: 98:99:e4:d5:54:f9:af:3c:9f:e0:1e:1b:52:80:c1: 60:4b:de:47:e7:42:68:d7:67:92:21:eb:db:2a:18: 5b:50:a0:c3:c9:e2:a6:f4:9f:6e:4d:5d:ae:48:4e: a4:69:c1:d7:85:8c:05:2c:69:40:70:56:2f:94:a9: bd:fc:41:7c:03:76:13:1e:03:17:c9:a0:00:a0:48: 59:1a:f8:8f:4e:9c:69:da:7f:77:ff:e9:4c:7d:ff: 10:c4:6c:ac:cd:71:45:ba:95:49:1e:c5:18:be:4e: 19:56:4d:3b:26:37:9c:b4:d2:28:f4:34:b2:b0:59: c0:0c:2a:16:97:3c:64:72:fe:29:27:2c:ef:5d:95: 4a:d8:1f:bf:99:8d:67:64:00:e6:49:34:12:db:f5: 8c:62:41:77:00:fa:d6:25:d9:0e:24:81:57:6a:b1: 1d:db:8b:c2:dd:ef:dc:b0:d4:bb:83:e2:07:14:42: bf:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:FA:5F:23:65:F7:54:E6:F1:C8:AB:9C:97:A5:24:C5:AF:E6:3C X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/EmX6XyNl91Tm8cirnJelJMWv5jw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.137.83.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:da:82:e8:e2:2b:52:de:57:25:66:8b:44:90:db:46:a9:c0: c6:7c:63:4f:74:ea:d2:cb:be:97:0c:aa:ca:c0:21:d1:2f:a6: ff:f1:4e:d1:eb:90:57:37:fa:16:31:38:87:a6:df:ee:75:f1: cd:08:c5:b7:ac:d3:5a:46:94:1f:95:0e:75:20:cc:62:25:d2: 5b:66:26:1d:01:6d:ec:86:df:19:c0:b0:2a:75:20:59:97:78: cb:45:3f:13:9a:08:db:33:24:bb:76:ef:14:e4:ef:63:2e:9d: 99:2a:80:b7:4b:79:64:72:99:15:cf:e2:fe:0c:a7:ea:41:8f: 4c:ce:e6:0d:b8:10:15:fa:50:8c:ba:5a:40:35:ee:30:29:81: 96:bf:56:05:b4:93:fd:6a:db:2a:a2:7e:d8:de:0d:d3:1c:f3: 83:fa:e5:3b:6f:af:d8:49:a6:ec:96:38:46:27:22:47:31:d8: 2a:32:aa:53:a4:63:0b:f9:71:21:06:d2:84:5e:02:0c:51:9e: 84:b4:93:b4:24:71:58:05:8c:a6:26:53:78:0b:24:af:d8:71: 67:06:7b:9f:98:3e:e8:a2:c9:fa:79:7e:5b:35:1c:0f:e5:a6: 4b:64:2e:cf:a9:8c:0e:63:2c:35:e3:77:b9:3a:f6:ff:16:71: bc:43:47:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrTKeBqsbIPR7QXuYFrCFeqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjUxMTMwMDUwODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjY1ZmE1ZjIzNjVmNzU0ZTZmMWM4YWI5Yzk3YTUyNGM1YWZlNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZNbSPk0wp7YnWLN77xyQ+h+4lXt SfwFgr2n9ly+T5TpHBF87e4CpqxcIgPTw1BcqyNufnPpZlBX1GQkbCTDnbbUuseV hzSbb5yYmeTVVPmvPJ/gHhtSgMFgS95H50Jo12eSIevbKhhbUKDDyeKm9J9uTV2u SE6kacHXhYwFLGlAcFYvlKm9/EF8A3YTHgMXyaAAoEhZGviPTpxp2n93/+lMff8Q xGyszXFFupVJHsUYvk4ZVk07JjectNIo9DSysFnADCoWlzxkcv4pJyzvXZVK2B+/ mY1nZADmSTQS2/WMYkF3APrWJdkOJIFXarEd24vC3e/csNS7g+IHFEK/SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJl+l8jZfdU5vHIq5yXpSTFr+Y8MB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvRW1YNlh5Tmw5MVRtOGNpcm5KZWxKTVd2NWp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YlTMA0G CSqGSIb3DQEBCwUAA4IBAQCP2oLo4itS3lclZotEkNtGqcDGfGNPdOrSy76XDKrK wCHRL6b/8U7R65BXN/oWMTiHpt/udfHNCMW3rNNaRpQflQ51IMxiJdJbZiYdAW3s ht8ZwLAqdSBZl3jLRT8TmgjbMyS7du8U5O9jLp2ZKoC3S3lkcpkVz+L+DKfqQY9M zuYNuBAV+lCMulpANe4wKYGWv1YFtJP9atsqon7Y3g3THPOD+uU7b6/YSabsljhG JyJHMdgqMqpTpGML+XEhBtKEXgIMUZ6EtJO0JHFYBYymJlN4CySv2HFnBnufmD7o osn6eX5bNRwP5aZLZC7PqYwOYyw143e5Ovb/FnG8Q0co -----END CERTIFICATE-----Generated at Fri Dec 5 17:19:34 2025 by rpki-client