This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa File: emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa (raw, json) Hash identifier: UslOLiX4wEz1eptieEOecWhikavAl/mlrbTGzuC2lHU= Subject key identifier: 7A:61:18:3B:A5:E6:DB:30:77:B8:ED:20:63:89:48:8C:D1:D6:38:FB Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173 Certificate serial: 019BFE685B2076A78E848EFE13AA116E9871 Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa Signing time: Tue 27 Jan 2026 07:43:30 +0000 ROA not before: Tue 27 Jan 2026 07:43:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 402139 IP address blocks: 188.64.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.mft rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:68:5b:20:76:a7:8e:84:8e:fe:13:aa:11:6e:98:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18101772248996b87d90840c2d27d62549458173 Validity Not Before: Jan 27 07:43:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a61183ba5e6db3077b8ed206389488cd1d638fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:6b:89:eb:82:92:1e:c5:c2:6f:5b:37:4f: 43:29:c6:13:31:3b:42:55:67:40:2e:37:87:48:be: ea:69:26:11:aa:f0:92:96:8b:10:12:69:1b:fc:60: 53:9b:1b:8d:c1:b7:0d:b8:f7:3e:aa:c9:96:ea:a4: 06:1f:da:7e:ec:d3:4e:e7:ea:64:63:48:23:3d:b4: 3e:b0:c3:cc:e0:6d:40:e1:6e:46:af:a0:56:e9:d1: ad:e1:49:15:6b:9e:43:66:5f:c3:7e:8e:fd:c2:99: ed:9a:6c:9f:a8:4e:c3:d1:35:c3:ba:e1:55:7f:40: 8a:f7:b2:45:e7:1f:1f:05:48:1b:9a:5a:59:bc:95: b3:11:4c:08:e8:d6:a3:a5:74:9b:66:2b:64:ee:34: 5f:18:cb:cd:e0:49:6c:8c:7a:2a:1e:8c:2d:91:01: a4:09:f7:c6:80:c9:96:d5:3b:1f:d3:9a:df:9f:e2: 43:1c:5a:6d:a5:a0:c7:c3:a6:27:05:bf:f2:d8:33: 9d:f2:65:a0:a0:88:16:35:07:7f:72:06:13:da:86: 30:81:16:7d:57:0f:36:13:2d:de:b1:fa:92:76:62: 36:18:91:aa:9a:cb:08:5e:49:f8:f8:a3:8a:d9:41: 04:e0:fd:65:1b:24:98:66:50:eb:8b:91:07:91:0c: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:61:18:3B:A5:E6:DB:30:77:B8:ED:20:63:89:48:8C:D1:D6:38:FB X509v3 Authority Key Identifier: keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/emEYO6Xm2zB3uO0gY4lIjNHWOPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.64.108.0/22 Signature Algorithm: sha256WithRSAEncryption a2:ef:4d:b4:90:f4:17:69:e5:1e:92:f1:93:c9:ec:e7:31:7c: 61:a1:87:a6:ff:de:5e:1f:99:2c:bc:f4:7f:57:b3:25:a8:e2: c8:89:25:69:07:95:9d:4d:85:79:ca:5d:14:c0:74:b0:1b:33: 66:d3:ac:8f:ec:fe:b2:82:b7:f1:8b:23:ed:ed:dd:e4:92:c6: d9:22:01:00:05:52:8f:91:b1:e7:7b:4e:25:49:6c:bf:75:e6: 25:82:1a:c4:63:9a:b4:fc:3c:85:5a:58:c1:a9:d1:65:9b:d1: f6:cc:e3:00:f9:4e:1d:0e:56:5f:bf:48:99:b9:66:48:5b:8f: 32:fc:92:6d:44:6b:ba:43:93:30:30:c3:09:d7:43:57:53:40: 98:16:c7:41:8b:c5:70:6f:55:94:2c:3b:1f:10:07:2c:37:30: 2d:e8:36:41:47:f6:25:a9:34:df:14:a4:ea:ee:02:da:13:16: a2:20:78:65:d6:c4:9e:20:fd:80:bc:a3:c8:98:36:17:8a:1e: bd:d3:32:80:94:ae:fb:bb:bc:e9:b8:65:cf:20:f3:fa:ab:93: 65:3a:bc:3a:c4:20:d9:c8:af:4a:88:21:aa:ef:67:75:3c:e2: c4:51:1f:89:72:30:9f:e3:91:71:96:89:72:71:81:42:e0:c8: 9b:2a:3a:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv+aFsgdqeOhI7+E6oRbphxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0 NTgxNzMwHhcNMjYwMTI3MDc0MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTYxMTgzYmE1ZTZkYjMwNzdiOGVkMjA2Mzg5NDg4Y2QxZDYzOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQNrieuCkh7Fwm9bN09DKcYTMTtC VWdALjeHSL7qaSYRqvCSlosQEmkb/GBTmxuNwbcNuPc+qsmW6qQGH9p+7NNO5+pk Y0gjPbQ+sMPM4G1A4W5Gr6BW6dGt4UkVa55DZl/Dfo79wpntmmyfqE7D0TXDuuFV f0CK97JF5x8fBUgbmlpZvJWzEUwI6NajpXSbZitk7jRfGMvN4ElsjHoqHowtkQGk CffGgMmW1Tsf05rfn+JDHFptpaDHw6YnBb/y2DOd8mWgoIgWNQd/cgYT2oYwgRZ9 Vw82Ey3esfqSdmI2GJGqmssIXkn4+KOK2UEE4P1lGySYZlDri5EHkQxH5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHphGDul5tswd7jtIGOJSIzR1jj7MB8GA1UdIwQY MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt M2NjODVhZDNjMTkwLzEvZW1FWU82WG0yekIzdU8wZ1k0bElqTkhXT1BzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvEBsMA0G CSqGSIb3DQEBCwUAA4IBAQCi7020kPQXaeUekvGTyeznMXxhoYem/95eH5ksvPR/ V7MlqOLIiSVpB5WdTYV5yl0UwHSwGzNm06yP7P6ygrfxiyPt7d3kksbZIgEABVKP kbHne04lSWy/deYlghrEY5q0/DyFWljBqdFlm9H2zOMA+U4dDlZfv0iZuWZIW48y /JJtRGu6Q5MwMMMJ10NXU0CYFsdBi8Vwb1WULDsfEAcsNzAt6DZBR/YlqTTfFKTq 7gLaExaiIHhl1sSeIP2AvKPImDYXih690zKAlK77u7zpuGXPIPP6q5NlOrw6xCDZ yK9KiCGq72d1POLEUR+JcjCf45FxlolycYFC4MibKjrf -----END CERTIFICATE-----Generated at Sat Jan 31 04:53:16 2026 by rpki-client