This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/eMKt2DWZjokC0ieIU1oM30l3M2M.roa File: eMKt2DWZjokC0ieIU1oM30l3M2M.roa (raw, json) Hash identifier: L8Kfu464KFJxNJalzdL9bOwXAKJk3f1Ymgq59SssnCA= Subject key identifier: 78:C2:AD:D8:35:99:8E:89:02:D2:27:88:53:5A:0C:DF:49:77:33:63 Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Certificate serial: 019B77C6B2F7A02D1C99ADFB0AB2BB79EE7C Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/eMKt2DWZjokC0ieIU1oM30l3M2M.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8376 IP address blocks: 37.202.64.0/18 maxlen: 24 46.185.128.0/17 maxlen: 24 79.173.192.0/18 maxlen: 24 86.108.0.0/17 maxlen: 24 92.253.0.0/17 maxlen: 24 94.249.0.0/17 maxlen: 24 149.200.128.0/17 maxlen: 24 149.200.136.0/24 maxlen: 24 185.98.220.0/22 maxlen: 24 194.165.128.0/19 maxlen: 24 213.186.160.0/19 maxlen: 24 217.23.32.0/20 maxlen: 24 2a01:9700::/29 maxlen: 48 2a01:9700::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b2:f7:a0:2d:1c:99:ad:fb:0a:b2:bb:79:ee:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78c2add835998e8902d22788535a0cdf49773363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:f5:4e:4d:ae:51:94:a8:e0:90:18:82:2d: f3:6b:35:b1:15:10:32:1d:dc:57:4c:56:04:d4:db: 29:a3:86:2b:48:49:1b:04:3b:c9:f2:66:48:9e:ad: 7b:dc:8c:38:46:c4:12:ca:3a:62:d1:81:9c:b7:91: 55:13:63:4a:21:40:87:12:cc:0c:e8:9b:aa:b3:d9: 15:aa:e4:ec:00:15:48:53:d1:0d:7c:af:3e:bc:2f: d1:be:dd:17:16:a6:8d:9b:4f:9a:3b:37:5f:32:64: 57:13:b3:cd:fc:c0:94:6c:7c:b7:4a:41:21:b1:5d: b3:45:50:2a:6c:94:a6:7d:a3:f7:94:56:2a:45:31: de:68:d5:44:57:60:56:72:8f:c0:5b:6d:d1:11:42: c6:04:b7:58:14:68:b3:dc:14:3a:b0:1e:9e:39:e0: ba:3a:7f:bc:32:16:68:f9:51:50:4c:05:8e:9a:4a: 6c:a8:9e:16:4e:e1:4b:7e:78:f5:f3:fc:92:ac:d3: c3:d1:93:ea:a9:b8:de:88:71:1c:2b:53:ff:33:09: bf:39:82:0f:86:04:64:48:26:45:6a:bd:d8:bf:74: c1:6c:22:9f:f1:3c:b8:7b:33:b4:7f:3f:17:54:c6: e8:f9:8f:3e:4a:fb:15:58:99:c8:b2:9b:0d:39:a6: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C2:AD:D8:35:99:8E:89:02:D2:27:88:53:5A:0C:DF:49:77:33:63 X509v3 Authority Key Identifier: keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/eMKt2DWZjokC0ieIU1oM30l3M2M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.64.0/18 46.185.128.0/17 79.173.192.0/18 86.108.0.0/17 92.253.0.0/17 94.249.0.0/17 149.200.128.0/17 185.98.220.0/22 194.165.128.0/19 213.186.160.0/19 217.23.32.0/20 IPv6: 2a01:9700::/29 Signature Algorithm: sha256WithRSAEncryption 06:7c:df:6e:62:f5:a6:72:27:a6:4c:4b:98:07:a8:96:a3:f9: 41:8c:4a:4a:b0:fc:0d:f1:6f:d9:f4:d2:9e:9d:52:f2:96:25: 84:72:43:29:51:cb:8c:eb:b9:e2:92:b3:37:77:16:54:37:9b: 5a:43:97:b2:ab:14:26:cc:83:22:c8:5b:65:29:55:0b:a2:73: 11:28:30:e0:a4:9f:fd:ff:42:36:e2:52:7d:fe:04:e0:da:10: 69:af:6b:3e:45:0c:d0:21:43:92:23:28:b1:f7:48:dd:1c:1b: 9a:50:85:69:67:2a:9d:0a:09:86:83:7e:ff:87:df:bb:fb:92: 2d:98:c8:4b:5c:ba:b2:67:b1:c2:d6:8a:b9:60:26:c3:dd:42: 36:9a:b6:64:62:36:56:6c:36:07:8f:12:3b:b3:c7:94:46:ae: 85:b8:34:08:bd:66:e4:78:1e:1e:7d:6b:2d:79:e7:d3:95:c7: 22:23:b9:39:08:57:00:31:21:0b:7f:2c:2f:44:cc:df:38:90: a1:94:98:25:28:f1:68:55:7e:8a:27:05:4f:9f:99:24:c1:bb: d8:2e:9f:fe:35:92:7b:67:a2:8f:ed:37:ed:e7:02:23:eb:76: 21:29:ef:fc:8d:64:c0:94:f0:bf:b3:30:84:77:e5:09:56:47: c4:1e:04:8f -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISAZt3xrL3oC0cma37CrK7ee58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDBlM2IyOGYyYmUzM2VjNWE5ZDJjYTAwYWM2NDE1NTUz NmNiYzYwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGMyYWRkODM1OTk4ZTg5MDJkMjI3ODg1MzVhMGNkZjQ5NzczMzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs71Tk2uUZSo4JAYgi3zazWxFRAy HdxXTFYE1Nspo4YrSEkbBDvJ8mZInq173Iw4RsQSyjpi0YGct5FVE2NKIUCHEswM 6Juqs9kVquTsABVIU9ENfK8+vC/Rvt0XFqaNm0+aOzdfMmRXE7PN/MCUbHy3SkEh sV2zRVAqbJSmfaP3lFYqRTHeaNVEV2BWco/AW23REULGBLdYFGiz3BQ6sB6eOeC6 On+8MhZo+VFQTAWOmkpsqJ4WTuFLfnj18/ySrNPD0ZPqqbjeiHEcK1P/Mwm/OYIP hgRkSCZFar3Yv3TBbCKf8Ty4ezO0fz8XVMbo+Y8+SvsVWJnIspsNOaaFcwIDAQAB o4ICVDCCAlAwHQYDVR0OBBYEFHjCrdg1mY6JAtIniFNaDN9JdzNjMB8GA1UdIwQY MBaAFFbQ47KPK+M+xanSygCsZBVVNsvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMt OGI4ZDcyMTcyMDkwLzEvZU1LdDJEV1pqb2tDMGllSVUxb00zMGwzTTJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZmJmNmEtNzJmMC00MDFmLWIyYzMtOGI4ZDcyMTcyMDkw LzEvVnREanNvOHI0ejdGcWRMS0FLeGtGVlUyeThZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQGJcpAAwQH LrmAAwQGT63AAwQHVmwAAwQHXP0AAwQHXvkAAwQHlciAAwQCuWLcAwQFwqWAAwQF 1bqgAwQE2RcgMA0EAgACMAcDBQMqAZcAMA0GCSqGSIb3DQEBCwUAA4IBAQAGfN9u YvWmciemTEuYB6iWo/lBjEpKsPwN8W/Z9NKenVLyliWEckMpUcuM67nikrM3dxZU N5taQ5eyqxQmzIMiyFtlKVULonMRKDDgpJ/9/0I24lJ9/gTg2hBpr2s+RQzQIUOS Iyix90jdHBuaUIVpZyqdCgmGg37/h9+7+5ItmMhLXLqyZ7HC1oq5YCbD3UI2mrZk YjZWbDYHjxI7s8eURq6FuDQIvWbkeB4efWsteefTlcciI7k5CFcAMSELfywvRMzf OJChlJglKPFoVX6KJwVPn5kkwbvYLp/+NZJ7Z6KP7Tft5wIj63YhKe/8jWTAlPC/ szCEd+UJVkfEHgSP -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:39 2026 by rpki-client