This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/emLmQgXpK-2V0P7RxlwATm2cgsE.roa
File: emLmQgXpK-2V0P7RxlwATm2cgsE.roa (raw, json)
Hash identifier: y7YHumD5ofocDgLu4M9yjBrcWzYn0C6LCqvJb4d6xqA=
Subject key identifier: 7A:62:E6:42:05:E9:2B:ED:95:D0:FE:D1:C6:5C:00:4E:6D:9C:82:C1
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019B79EBDFBCE2931D2E205E154E00E6BFCB
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/emLmQgXpK-2V0P7RxlwATm2cgsE.roa
Signing time: Thu 01 Jan 2026 14:17:39 +0000
ROA not before: Thu 01 Jan 2026 14:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51187
IP address blocks: 80.120.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:eb:df:bc:e2:93:1d:2e:20:5e:15:4e:00:e6:bf:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 14:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a62e64205e92bed95d0fed1c65c004e6d9c82c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:a0:97:10:3f:e6:ed:85:d5:16:1f:91:d9:
d4:a7:81:11:7c:71:6f:c1:9c:dc:05:db:94:da:de:
84:3f:3e:9b:33:2e:cd:cd:e4:ae:1c:c6:f8:c6:31:
9c:ae:7d:be:5f:65:63:e7:ec:81:5e:f2:30:b9:b2:
c7:73:89:bc:33:20:e5:cc:80:f6:d3:9c:65:4c:dc:
77:86:39:bf:e1:8e:1f:78:84:e1:ec:76:f6:7e:7d:
4c:04:87:32:d4:85:98:d2:38:52:77:ee:b4:9f:1c:
96:0a:33:a0:ee:2c:df:fb:24:4c:5b:14:42:02:bb:
93:ad:f5:53:25:c6:0c:83:d6:dc:79:be:56:45:75:
ca:43:f5:77:4f:5a:37:32:df:8d:75:dc:9e:85:02:
c7:ae:54:f0:0c:1e:cc:a1:06:83:1a:29:43:7c:18:
86:25:cf:41:7f:63:9e:a6:d1:73:0c:a7:fb:fd:26:
ba:a4:a7:00:61:8d:cf:05:97:6c:6e:56:b3:9f:e8:
82:08:39:16:1d:de:bf:2b:f7:7d:fd:4d:34:7b:20:
48:25:11:3c:53:36:60:86:37:cf:01:59:05:34:a1:
e5:24:7d:f7:83:54:c6:35:3c:69:38:ed:ac:fc:bf:
5c:11:5b:77:41:09:cb:9f:79:09:7b:e4:39:a0:14:
d6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:E6:42:05:E9:2B:ED:95:D0:FE:D1:C6:5C:00:4E:6D:9C:82:C1
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/emLmQgXpK-2V0P7RxlwATm2cgsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.120.18.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d5:e4:66:ee:77:11:cc:d6:4b:00:20:33:dd:fe:07:d7:98:
6e:cd:7a:0e:8e:fe:88:25:89:04:cc:6f:32:09:3f:76:1b:8b:
2e:4d:8b:f6:eb:c1:d5:3d:5d:62:68:d0:1d:a4:d7:8a:7f:34:
19:a6:40:98:e7:95:80:15:da:9f:1f:1a:dd:18:a4:95:af:5a:
ec:ca:d0:bd:f9:1c:a8:9b:4a:3d:53:2f:e1:b3:73:a3:8d:6c:
d0:de:be:91:a3:00:86:53:d5:dc:fb:c1:70:30:1b:b6:1b:e4:
e4:8e:c0:66:7d:59:3e:72:73:e1:f5:61:03:bf:22:1a:9b:bb:
12:e8:0c:65:ac:9e:9d:c6:a4:02:1f:7f:5c:5d:c2:38:fa:2d:
70:25:75:c6:6f:ea:ec:59:57:ec:3b:84:85:24:7b:d1:53:d0:
d8:1e:2d:36:3d:e5:f1:ac:43:65:ff:90:8e:36:66:d4:ea:bf:
17:ed:28:ae:eb:2c:d6:57:e2:b5:b2:15:38:96:34:b8:ce:bc:
3f:6d:d7:8d:f0:c0:9e:4a:c1:3d:77:14:ee:74:ff:90:d1:34:
4f:48:af:ec:30:67:85:c8:92:cb:1b:66:7f:d6:8d:51:71:7d:
7a:e4:ab:d1:7d:8f:57:ca:c1:03:34:6a:20:8f:38:ac:78:2c:
84:b3:1b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:50:16 2026 by rpki-client