This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eemFnrFi3FTd3YyMwBZEzBIbg04.roa File: eemFnrFi3FTd3YyMwBZEzBIbg04.roa (raw, json) Hash identifier: +5L3qkCSUqv0kjd+pXbTLZWrAQYU0acTMdwPqoNjgTE= Subject key identifier: 79:E9:85:9E:B1:62:DC:54:DD:DD:8C:8C:C0:16:44:CC:12:1B:83:4E Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019A7322E383F3C4CF47E8E03D5BDBD3D17B Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eemFnrFi3FTd3YyMwBZEzBIbg04.roa Signing time: Tue 11 Nov 2025 13:37:37 +0000 ROA not before: Tue 11 Nov 2025 13:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25184 IP address blocks: 46.38.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:22:e3:83:f3:c4:cf:47:e8:e0:3d:5b:db:d3:d1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Nov 11 13:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=79e9859eb162dc54dddd8c8cc01644cc121b834e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:74:0e:fb:cb:67:b0:ca:d4:23:0f:c1:57: 95:72:46:b1:0d:91:32:ae:28:70:42:6f:ec:c5:8a: 3a:76:16:1a:b9:7e:56:1e:f6:94:3f:72:f2:ba:0b: 1a:8e:e3:42:ef:d3:12:17:8d:2b:8f:f0:9f:ca:e3: 53:36:cf:b5:17:de:c1:84:6d:59:04:57:c8:23:65: 5c:b2:62:24:f7:fa:91:fb:f6:5d:52:91:fd:97:bc: 5d:db:f2:dd:06:9b:54:bc:78:d3:44:80:d0:72:3a: 83:e0:dc:d9:62:00:2b:f6:d2:9e:ae:13:b1:2c:ed: 21:cf:23:57:7c:ec:9b:e4:0a:e1:1b:ed:55:6f:20: 24:da:be:05:1b:3b:c2:38:9a:9f:ad:37:a5:65:c1: c8:e0:ba:5b:d0:c4:7d:3f:8e:37:9d:7b:2c:ec:64: 57:d3:55:c3:00:77:5d:43:07:85:fb:5d:ba:a9:bb: 29:ae:d1:f5:36:3e:49:5d:66:a5:c9:24:2c:04:79: 6e:e6:49:e4:d8:77:96:b8:c2:c5:00:ca:c0:82:bc: b1:fe:28:93:a9:43:eb:7a:de:99:c2:18:04:e8:d1: 0d:62:76:ca:9c:5e:6b:96:13:59:6b:8a:d2:d8:16: 4a:37:33:1d:42:b5:ca:21:de:6d:9c:c5:96:92:fa: 19:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E9:85:9E:B1:62:DC:54:DD:DD:8C:8C:C0:16:44:CC:12:1B:83:4E X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/eemFnrFi3FTd3YyMwBZEzBIbg04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.144.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:bb:5c:4f:64:76:6c:2a:c4:8e:f6:bf:4c:87:32:7e:03:20: ca:98:9c:a2:59:0a:94:90:15:6e:95:f4:1c:90:af:05:a6:51: fd:19:16:42:90:c9:de:68:e9:51:0a:37:cd:ee:ad:9f:01:99: d3:01:e0:c8:8f:a1:d0:59:59:a9:eb:6b:f9:41:27:fd:06:46: d8:8b:d0:08:3d:5a:a3:a1:d1:87:4f:60:b9:89:5e:5c:f8:92: e6:1a:ae:ae:e3:9e:24:a2:16:6d:d4:9d:e7:4a:7d:1d:a1:fa: 7f:0e:e6:8c:f1:32:dc:ab:30:3c:35:ce:d7:63:82:5a:4c:d4: f1:d0:f8:0d:43:68:b1:b6:6e:e2:4f:9e:7f:9f:1f:c2:5c:d2: c8:fa:89:8c:c7:41:a2:ea:94:5e:29:4d:ed:f5:1b:12:bd:1a: e2:55:f3:fd:df:07:0a:8c:a3:23:05:a4:ee:76:c9:d0:a7:e7: 6c:99:99:ff:23:c7:97:e0:53:8d:28:41:19:e5:05:e3:b7:b5: 5e:77:0c:bf:45:f0:0c:cb:f5:f3:ab:9f:b0:a6:f8:51:25:d1: 07:e8:eb:9a:0c:6a:dd:7b:43:87:6d:4e:6a:52:eb:06:a6:19: 1a:9f:11:1a:02:7b:74:ca:18:a1:0e:9a:b6:c1:5d:06:85:42: 27:81:65:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpzIuOD88TPR+jgPVvb09F7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMTExMTMzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWU5ODU5ZWIxNjJkYzU0ZGRkZDhjOGNjMDE2NDRjYzEyMWI4MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvt0DvvLZ7DK1CMPwVeVckaxDZEy rihwQm/sxYo6dhYauX5WHvaUP3LyugsajuNC79MSF40rj/CfyuNTNs+1F97BhG1Z BFfII2VcsmIk9/qR+/ZdUpH9l7xd2/LdBptUvHjTRIDQcjqD4NzZYgAr9tKerhOx LO0hzyNXfOyb5ArhG+1VbyAk2r4FGzvCOJqfrTelZcHI4Lpb0MR9P443nXss7GRX 01XDAHddQweF+126qbsprtH1Nj5JXWalySQsBHlu5knk2HeWuMLFAMrAgryx/iiT qUPret6ZwhgE6NENYnbKnF5rlhNZa4rS2BZKNzMdQrXKId5tnMWWkvoZyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnphZ6xYtxU3d2MjMAWRMwSG4NOMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvZWVtRm5yRmkzRlRkM1l5TXdCWkV6QkliZzA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiaQMA0G CSqGSIb3DQEBCwUAA4IBAQAtu1xPZHZsKsSO9r9MhzJ+AyDKmJyiWQqUkBVulfQc kK8FplH9GRZCkMneaOlRCjfN7q2fAZnTAeDIj6HQWVmp62v5QSf9BkbYi9AIPVqj odGHT2C5iV5c+JLmGq6u454kohZt1J3nSn0dofp/DuaM8TLcqzA8Nc7XY4JaTNTx 0PgNQ2ixtm7iT55/nx/CXNLI+omMx0Gi6pReKU3t9RsSvRriVfP93wcKjKMjBaTu dsnQp+dsmZn/I8eX4FONKEEZ5QXjt7Vedwy/RfAMy/Xzq5+wpvhRJdEH6OuaDGrd e0OHbU5qUusGphkanxEaAnt0yhihDpq2wV0GhUIngWXY -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:38 2025 by rpki-client