This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EMxXgdotl2wHLWs-mvtzGPfaoA0.roa File: EMxXgdotl2wHLWs-mvtzGPfaoA0.roa (raw, json) Hash identifier: 1Y6uh4fx1dTX/XhW1JVnP1F7I6nyxgDUVzu6Nmrpqx0= Subject key identifier: 10:CC:57:81:DA:2D:97:6C:07:2D:6B:3E:9A:FB:73:18:F7:DA:A0:0D Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019AA66CB9E76A52BB11796DFC38F4819552 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EMxXgdotl2wHLWs-mvtzGPfaoA0.roa Signing time: Fri 21 Nov 2025 12:38:54 +0000 ROA not before: Fri 21 Nov 2025 12:38:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 158.173.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:6c:b9:e7:6a:52:bb:11:79:6d:fc:38:f4:81:95:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Nov 21 12:38:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=10cc5781da2d976c072d6b3e9afb7318f7daa00d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:55:0b:24:60:d2:0b:52:74:ff:84:b0:d7:53: a6:d6:ec:5f:29:f1:d3:90:9d:b2:3b:f8:09:19:1e: 73:0c:7d:cc:dd:ac:1c:1b:8c:fa:fc:5e:70:31:19: 54:a3:39:85:96:77:de:a1:e6:9e:8b:0e:3e:84:a0: 2c:5e:09:14:5c:1f:29:0c:cd:30:55:3a:0c:e6:c6: 2e:4b:ae:00:92:d0:95:65:ad:c8:fe:18:cb:59:8d: a1:9f:b6:4a:29:79:7d:21:13:6b:47:05:41:33:a4: 5e:9a:41:a0:16:68:b0:eb:0b:bc:05:60:13:7c:27: 35:84:1e:03:a6:d6:15:85:d5:75:fb:a4:c6:9d:31: 55:8a:44:6f:6a:a3:19:e2:3f:54:30:bc:1a:d9:39: 6f:fe:d2:b7:3e:14:fe:12:15:46:38:77:ec:6d:60: fd:f4:0a:2d:b3:73:49:2b:67:07:3a:cb:96:49:46: 45:a7:4a:70:b2:52:99:72:31:53:14:76:4c:c1:32: 84:bd:25:e4:5a:51:5d:31:77:1e:6b:1b:a0:ff:7e: a2:79:3d:16:c0:07:19:b5:8a:35:23:42:9f:91:8a: 72:79:ca:e4:d4:a6:35:5b:79:4b:b3:46:5a:50:b9: f7:cc:6f:51:0d:1d:26:84:8e:aa:d5:0b:80:a0:f3: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:CC:57:81:DA:2D:97:6C:07:2D:6B:3E:9A:FB:73:18:F7:DA:A0:0D X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/EMxXgdotl2wHLWs-mvtzGPfaoA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.173.200.0/24 Signature Algorithm: sha256WithRSAEncryption 94:ca:af:2a:c1:1a:ef:48:32:23:70:ff:b0:6e:83:4c:51:8e: b2:5b:3d:31:b1:a8:14:07:c9:02:20:87:b7:c4:ae:34:16:f3: 18:c9:75:30:8a:b5:20:dd:4e:4c:db:80:8d:9a:74:3c:2f:b4: a2:93:e3:5f:aa:84:98:a7:3c:4e:e5:74:54:0f:54:98:99:13: 2f:07:e8:b6:52:70:d3:a8:58:f9:4a:ba:e9:02:40:f0:60:72: 3e:c2:be:b7:94:8e:85:b7:9b:2d:1c:a0:a2:f1:d1:b7:36:a7: 2c:4a:35:24:5f:e0:d4:c5:83:ca:05:e5:de:d4:38:79:45:d6: 37:04:a9:cb:aa:09:86:18:45:9b:28:9f:18:46:6d:a5:eb:23: e9:e7:fb:b7:74:67:a2:ea:72:67:37:b8:11:76:05:61:62:7a: 86:64:6f:73:ef:3e:b3:70:1a:bd:83:b5:87:23:18:3b:4a:0c: 31:f3:c0:63:96:e0:76:28:8d:e3:2e:10:ef:7d:88:9e:ef:0f: 36:93:0a:8b:72:aa:7e:9c:59:30:88:44:2a:5f:7a:6b:d8:84: 6c:d4:74:b0:b7:ec:30:a1:b6:e5:fd:9c:a9:ca:c3:13:1c:34: 2e:29:d0:b1:6c:d3:ab:3e:67:f6:10:9b:85:f7:21:f7:e9:90: b7:9d:6d:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqmbLnnalK7EXlt/Dj0gZVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjUxMTIxMTIzODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGNjNTc4MWRhMmQ5NzZjMDcyZDZiM2U5YWZiNzMxOGY3ZGFhMDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglULJGDSC1J0/4Sw11Om1uxfKfHT kJ2yO/gJGR5zDH3M3awcG4z6/F5wMRlUozmFlnfeoeaeiw4+hKAsXgkUXB8pDM0w VToM5sYuS64AktCVZa3I/hjLWY2hn7ZKKXl9IRNrRwVBM6RemkGgFmiw6wu8BWAT fCc1hB4DptYVhdV1+6TGnTFVikRvaqMZ4j9UMLwa2Tlv/tK3PhT+EhVGOHfsbWD9 9Aots3NJK2cHOsuWSUZFp0pwslKZcjFTFHZMwTKEvSXkWlFdMXceaxug/36ieT0W wAcZtYo1I0KfkYpyecrk1KY1W3lLs0ZaULn3zG9RDR0mhI6q1QuAoPM/fQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDMV4HaLZdsBy1rPpr7cxj32qANMB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvRU14WGdkb3RsMndITFdzLW12dHpHUGZhb0EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3IMA0G CSqGSIb3DQEBCwUAA4IBAQCUyq8qwRrvSDIjcP+wboNMUY6yWz0xsagUB8kCIIe3 xK40FvMYyXUwirUg3U5M24CNmnQ8L7Sik+NfqoSYpzxO5XRUD1SYmRMvB+i2UnDT qFj5SrrpAkDwYHI+wr63lI6Ft5stHKCi8dG3NqcsSjUkX+DUxYPKBeXe1Dh5RdY3 BKnLqgmGGEWbKJ8YRm2l6yPp5/u3dGei6nJnN7gRdgVhYnqGZG9z7z6zcBq9g7WH Ixg7Sgwx88BjluB2KI3jLhDvfYie7w82kwqLcqp+nFkwiEQqX3pr2IRs1HSwt+ww obbl/ZypysMTHDQuKdCxbNOrPmf2EJuF9yH36ZC3nW1+ -----END CERTIFICATE-----Generated at Fri Dec 5 09:27:18 2025 by rpki-client