This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/Em7YVjvqvbtEz2iR4fFbPa6mxOs.roa File: Em7YVjvqvbtEz2iR4fFbPa6mxOs.roa (raw, json) Hash identifier: HwuD0bXIaPFzs425Ta6H1lnx+jZFDxE+2kf0k/e3Cqo= Subject key identifier: 12:6E:D8:56:3B:EA:BD:BB:44:CF:68:91:E1:F1:5B:3D:AE:A6:C4:EB Certificate issuer: /CN=1ad5d174cbb46aaf86555b80e1773331b870b568 Certificate serial: 019B7FF1853BEC6443834BEE3CB35C307781 Authority key identifier: 1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/Em7YVjvqvbtEz2iR4fFbPa6mxOs.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41476 IP address blocks: 79.171.4.0/24 maxlen: 24 79.171.5.0/24 maxlen: 24 193.164.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.mft rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:85:3b:ec:64:43:83:4b:ee:3c:b3:5c:30:77:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ad5d174cbb46aaf86555b80e1773331b870b568 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=126ed8563beabdbb44cf6891e1f15b3daea6c4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:12:c3:c5:4b:f2:1e:86:e9:e9:c1:17:eb:ed: a3:8a:88:5d:51:2b:59:c3:0e:a7:8a:c4:8c:73:18: d3:44:23:1c:75:0a:8b:80:ce:b0:6f:ef:33:10:45: 6c:72:64:82:eb:7d:ed:0c:2e:a9:94:15:60:23:52: a0:45:42:e7:5e:ae:c0:dd:c0:05:ed:9f:ef:c3:2e: e0:fd:65:1d:78:57:84:24:43:05:51:4e:4b:07:82: 1f:53:97:77:66:45:0a:b3:0e:56:62:2c:ae:d9:a9: 82:d9:dc:5b:a1:2d:6e:b5:63:5b:96:89:0f:12:f1: a9:d6:5f:28:cd:f8:86:58:fe:70:ad:73:fc:f9:c2: 9e:1e:55:6f:33:b9:17:b8:f8:a6:b7:76:af:78:c4: d3:64:e1:27:8a:38:0f:80:97:a4:51:03:79:2b:44: f9:fb:44:4d:9e:5a:11:b3:86:e3:c9:85:57:36:aa: 83:b5:a7:3c:21:46:57:ae:71:f0:e5:5f:10:a8:3d: 46:57:ae:4e:c4:3a:3c:92:0d:bd:92:92:fe:e3:4d: 78:8a:6d:d3:8d:c6:6a:bf:c2:b7:2d:5b:1a:03:f1: 2e:ef:9b:bd:3c:d9:45:41:5a:7f:69:dc:3c:af:64: f1:59:e6:9c:27:30:86:60:0f:a1:96:b1:3b:5b:53: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:D8:56:3B:EA:BD:BB:44:CF:68:91:E1:F1:5B:3D:AE:A6:C4:EB X509v3 Authority Key Identifier: keyid:1A:D5:D1:74:CB:B4:6A:AF:86:55:5B:80:E1:77:33:31:B8:70:B5:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtXRdMu0aq-GVVuA4XczMbhwtWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/Em7YVjvqvbtEz2iR4fFbPa6mxOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c6b906-9150-443d-ba30-739c198c513f/1/GtXRdMu0aq-GVVuA4XczMbhwtWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.4.0/23 193.164.142.0/24 Signature Algorithm: sha256WithRSAEncryption 73:c4:95:0c:82:9d:89:5c:5e:4d:e7:53:a5:e1:a4:e0:39:c7: b2:56:24:19:04:17:93:a7:dc:dd:0e:bd:4f:58:6d:98:9f:d5: 65:fd:7a:82:8f:4d:39:5b:97:31:fb:22:07:46:69:51:8b:4f: cb:03:4c:5b:af:39:cb:a3:6a:fe:64:26:fa:cb:46:fc:8b:34: ba:8f:c6:cd:57:3f:38:81:f1:f7:af:47:30:0c:7a:99:d6:f0: 7e:dc:a6:83:1c:e9:69:2e:f0:c4:80:56:9d:60:ad:77:db:ce: f2:98:1d:31:2c:0b:64:43:ec:8f:49:75:22:d9:02:e7:6f:56: 77:c3:0c:39:1b:48:30:2d:1f:26:4d:0b:7b:58:fa:4e:76:5a: 71:ac:b6:5d:d4:89:f2:a2:bb:28:e6:f6:49:5f:15:02:0f:52: 1a:de:95:b3:74:a8:52:0e:d7:3c:c8:86:36:be:1b:62:d6:6c: 6c:a3:b3:79:06:1c:2a:a2:fd:e2:32:c4:77:49:cd:28:9d:55: c3:15:89:33:f5:2f:e0:b4:ce:59:0c:14:04:8c:4f:13:d2:cf: e4:25:78:91:fd:fd:b4:1c:16:03:ef:24:7c:87:f2:d9:ad:0a: ee:ad:22:e3:67:4b:ff:32:6c:80:eb:23:e1:1e:a0:95:12:98: 8c:00:a3:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8YU77GRDg0vuPLNcMHeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZDVkMTc0Y2JiNDZhYWY4NjU1NWI4MGUxNzczMzMxYjg3 MGI1NjgwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjZlZDg1NjNiZWFiZGJiNDRjZjY4OTFlMWYxNWIzZGFlYTZjNGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BLDxUvyHobp6cEX6+2jiohdUStZ ww6nisSMcxjTRCMcdQqLgM6wb+8zEEVscmSC633tDC6plBVgI1KgRULnXq7A3cAF 7Z/vwy7g/WUdeFeEJEMFUU5LB4IfU5d3ZkUKsw5WYiyu2amC2dxboS1utWNblokP EvGp1l8ozfiGWP5wrXP8+cKeHlVvM7kXuPimt3aveMTTZOEnijgPgJekUQN5K0T5 +0RNnloRs4bjyYVXNqqDtac8IUZXrnHw5V8QqD1GV65OxDo8kg29kpL+4014im3T jcZqv8K3LVsaA/Eu75u9PNlFQVp/adw8r2TxWeacJzCGYA+hlrE7W1MJ8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBJu2FY76r27RM9okeHxWz2upsTrMB8GA1UdIwQY MBaAFBrV0XTLtGqvhlVbgOF3MzG4cLVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAt NzM5YzE5OGM1MTNmLzEvRW03WVZqdnF2YnRFejJpUjRmRmJQYTZteE9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jNmI5MDYtOTE1MC00NDNkLWJhMzAtNzM5YzE5OGM1MTNm LzEvR3RYUmRNdTBhcS1HVlZ1QTRYY3pNYmh3dFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBT6sEAwQA waSOMA0GCSqGSIb3DQEBCwUAA4IBAQBzxJUMgp2JXF5N51Ol4aTgOceyViQZBBeT p9zdDr1PWG2Yn9Vl/XqCj005W5cx+yIHRmlRi0/LA0xbrznLo2r+ZCb6y0b8izS6 j8bNVz84gfH3r0cwDHqZ1vB+3KaDHOlpLvDEgFadYK13287ymB0xLAtkQ+yPSXUi 2QLnb1Z3www5G0gwLR8mTQt7WPpOdlpxrLZd1Inyorso5vZJXxUCD1Ia3pWzdKhS Dtc8yIY2vhti1mxso7N5Bhwqov3iMsR3Sc0onVXDFYkz9S/gtM5ZDBQEjE8T0s/k JXiR/f20HBYD7yR8h/LZrQrurSLjZ0v/MmyA6yPhHqCVEpiMAKMW -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:39 2026 by rpki-client