This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa File: eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa (raw, json) Hash identifier: j9M/fnlNW/6tDg+Ea3qW22DPN5/BiegIfG702h57st4= Subject key identifier: 78:CA:5C:64:4A:4E:83:63:74:18:D8:E5:23:7B:0E:F4:19:9A:67:A0 Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a Certificate serial: 019B7D5D31AE0F84BB9814547C908BD6E776 Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa Signing time: Fri 02 Jan 2026 06:20:18 +0000 ROA not before: Fri 02 Jan 2026 06:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42009 IP address blocks: 91.103.176.0/21 maxlen: 24 176.98.44.0/22 maxlen: 24 2a01:308::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:31:ae:0f:84:bb:98:14:54:7c:90:8b:d6:e7:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a Validity Not Before: Jan 2 06:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78ca5c644a4e83637418d8e5237b0ef4199a67a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:ed:1b:87:fb:d8:9b:ea:ac:9a:58:d8:15: 7e:e1:0a:4c:24:44:ef:7a:2f:86:6a:3c:61:d9:b0: 2a:f9:32:84:45:e3:cc:5a:1c:d7:77:4d:37:a3:ff: a0:23:44:ed:bc:0c:6f:e9:64:d0:d9:0d:bf:15:0f: a1:51:36:ac:d0:aa:32:1c:18:fe:49:ba:40:6d:7e: 09:bb:db:7a:a1:82:0e:18:33:bd:11:70:1a:d9:f8: 33:91:c3:9a:b2:8e:40:1a:0d:a7:9c:2b:1c:f1:9d: 64:a9:bc:4b:a6:6e:a0:77:e5:21:e8:a0:03:c4:8a: 82:8a:14:9e:f2:6a:b8:32:90:1e:31:61:1a:fd:45: 16:39:bd:3d:6d:01:29:39:ba:ed:f7:18:0e:0e:84: 11:a3:b4:29:77:e2:c8:62:8d:00:e4:b2:3e:7a:09: 7b:4b:fb:e4:2f:ad:55:22:4d:a8:4d:d7:3c:d0:4b: 57:c6:7b:b5:e6:11:b0:39:e2:4b:61:dc:5c:62:01: 18:cf:e9:64:c3:42:a1:6d:31:96:e5:c4:90:37:e9: e6:73:55:e8:68:82:36:44:29:3b:b0:f7:c0:db:96: ae:6a:b7:aa:93:76:83:56:b5:4e:ca:d7:38:5c:92: b0:a3:3f:cd:2c:c4:ad:0d:de:33:bf:2e:41:16:08: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CA:5C:64:4A:4E:83:63:74:18:D8:E5:23:7B:0E:F4:19:9A:67:A0 X509v3 Authority Key Identifier: keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/eMpcZEpOg2N0GNjlI3sO9BmaZ6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.103.176.0/21 176.98.44.0/22 IPv6: 2a01:308::/32 Signature Algorithm: sha256WithRSAEncryption 4a:9e:b4:ed:b0:94:bf:09:a1:a1:58:d5:92:a8:57:cd:b9:45: 2f:7e:ac:a8:43:8b:8d:f9:3c:2e:bd:53:7f:fd:b0:28:ba:94: 1d:ee:d1:01:af:71:27:38:fc:b8:6b:af:c4:18:b3:a6:46:1c: 6d:5b:30:05:ab:bb:f3:8a:78:95:02:7a:42:19:8d:e5:16:87: 8f:76:22:2e:e6:34:4d:e3:83:1b:6e:61:12:eb:ca:89:13:c3: b4:6e:ff:b1:ed:b4:9d:be:cc:18:bd:bc:4e:d7:0b:b2:c9:fa: 57:25:00:39:f0:44:a7:e9:f3:1b:ec:8f:f3:0a:ff:87:f4:a1: c1:4f:bb:be:30:a1:ac:bd:41:4b:ed:79:60:5f:ea:d1:82:a6: ef:ce:b1:a0:52:a6:5d:69:ee:5d:15:a1:ef:7d:ce:1d:82:0d: e4:57:a8:c5:39:ab:5d:a3:a8:39:6b:4e:0f:c0:a5:bc:aa:38: 3d:ef:07:d7:29:6d:5c:88:5e:e4:9b:ae:13:df:d9:ea:cf:e4: c3:2f:2b:7e:5c:a6:03:b1:1b:ec:d6:91:7c:5d:ed:b7:98:23: c2:1e:f0:05:6b:6a:f6:3e:4d:14:96:74:93:d4:f0:be:5d:06: b9:1b:0d:71:c2:2e:40:d1:4d:e0:04:64:f5:33:b2:a7:5e:d1: 98:1b:8f:9d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XTGuD4S7mBRUfJCL1ud2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmU2N2Y0YmY0ZGQyNmFlMzE1YjMxYTdiNDcyY2U0ZDVj MWFlNmEwHhcNMjYwMTAyMDYyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGNhNWM2NDRhNGU4MzYzNzQxOGQ4ZTUyMzdiMGVmNDE5OWE2N2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AXtG4f72JvqrJpY2BV+4QpMJETv ei+Gajxh2bAq+TKERePMWhzXd003o/+gI0TtvAxv6WTQ2Q2/FQ+hUTas0KoyHBj+ SbpAbX4Ju9t6oYIOGDO9EXAa2fgzkcOaso5AGg2nnCsc8Z1kqbxLpm6gd+Uh6KAD xIqCihSe8mq4MpAeMWEa/UUWOb09bQEpObrt9xgODoQRo7Qpd+LIYo0A5LI+egl7 S/vkL61VIk2oTdc80EtXxnu15hGwOeJLYdxcYgEYz+lkw0KhbTGW5cSQN+nmc1Xo aII2RCk7sPfA25auareqk3aDVrVOytc4XJKwoz/NLMStDd4zvy5BFgi/8QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHjKXGRKToNjdBjY5SN7DvQZmmegMB8GA1UdIwQY MBaAFJn+Z/S/TdJq4xWzGntHLOTVwa5qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzIt YTA1YmQyMjgzMzdjLzEvZU1wY1pFcE9nMk4wR05qbEkzc085Qm1hWjZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzItYTA1YmQyMjgzMzdj LzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDW2ewAwQC sGIsMA0EAgACMAcDBQAqAQMIMA0GCSqGSIb3DQEBCwUAA4IBAQBKnrTtsJS/CaGh WNWSqFfNuUUvfqyoQ4uN+TwuvVN//bAoupQd7tEBr3EnOPy4a6/EGLOmRhxtWzAF q7vziniVAnpCGY3lFoePdiIu5jRN44MbbmES68qJE8O0bv+x7bSdvswYvbxO1wuy yfpXJQA58ESn6fMb7I/zCv+H9KHBT7u+MKGsvUFL7XlgX+rRgqbvzrGgUqZdae5d FaHvfc4dgg3kV6jFOatdo6g5a04PwKW8qjg97wfXKW1ciF7km64T39nqz+TDLyt+ XKYDsRvs1pF8Xe23mCPCHvAFa2r2Pk0UlnST1PC+XQa5Gw1xwi5A0U3gBGT1M7Kn XtGYG4+d -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:31 2026 by rpki-client