This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/Eem6lQDzbWDlak-nZB_Bf8He75M.roa
File: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (raw, json)
Hash identifier: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=
Subject key identifier: 11:E9:BA:95:00:F3:6D:60:E5:6A:4F:A7:64:1F:C1:7F:C1:DE:EF:93
Certificate issuer: /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial: 019B7AC7FD40EEC14F54E9C80F40D15695E3
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/Eem6lQDzbWDlak-nZB_Bf8He75M.roa
Signing time: Thu 01 Jan 2026 18:18:05 +0000
ROA not before: Thu 01 Jan 2026 18:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47607
IP address blocks: 91.208.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c7:fd:40:ee:c1:4f:54:e9:c8:0f:40:d1:56:95:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Validity
Not Before: Jan 1 18:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11e9ba9500f36d60e56a4fa7641fc17fc1deef93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:ca:b7:0c:30:ef:9f:e9:0a:a1:dc:0c:4a:
6f:3e:2f:5e:b1:08:9b:b1:3c:d3:e1:06:55:b8:93:
21:d8:d6:48:5d:95:d3:1c:55:60:74:da:30:b6:30:
79:bc:e9:39:63:c9:d3:b6:4f:cf:b9:8b:4c:cb:e7:
8c:fa:0e:a2:a4:ae:cd:92:06:fe:87:63:01:97:69:
19:a4:76:56:a9:f7:98:64:2a:02:b9:cd:8b:89:9f:
97:fe:46:7b:14:56:ec:75:8f:4a:b2:a8:a4:01:92:
99:53:87:96:74:80:b6:17:ad:2c:11:c8:a8:4e:5b:
b3:f8:0c:3a:e1:fb:d9:b8:15:54:29:4c:4b:f6:2a:
19:10:1a:fc:25:2d:84:3c:6b:91:99:7a:69:f9:ae:
62:b2:46:eb:27:a7:74:b8:0a:24:58:bf:99:c9:9f:
79:5a:61:14:da:83:56:7c:6f:93:ad:46:68:4c:5b:
67:59:fc:00:65:b9:68:29:33:89:87:32:68:75:1e:
c8:f1:96:4f:50:fc:0b:06:ee:c8:ee:49:09:60:09:
6b:9f:c4:e0:6e:31:0a:03:4a:31:b5:be:84:d2:31:
36:d5:6b:30:4b:d4:19:9d:27:2e:1c:c7:01:5e:9a:
29:1c:a6:f2:a9:63:10:33:ac:4d:cf:81:92:8e:83:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:BA:95:00:F3:6D:60:E5:6A:4F:A7:64:1F:C1:7F:C1:DE:EF:93
X509v3 Authority Key Identifier:
keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/Eem6lQDzbWDlak-nZB_Bf8He75M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.70.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:2e:23:37:bb:2a:af:f0:29:30:2b:67:e3:97:3e:9d:4b:99:
d2:2c:79:f3:8a:70:a9:73:e8:1b:df:14:92:0c:7d:3d:f5:d6:
40:91:fc:23:c8:d7:3c:f3:5b:64:a5:3c:cf:1b:a2:ca:40:b4:
1a:b4:60:b9:6e:8a:c5:43:49:4f:57:ea:30:87:24:0d:9f:3e:
11:6c:be:b0:dd:90:ee:8a:82:32:4c:1b:14:f6:1d:54:4c:e3:
cf:3d:c6:31:34:64:92:11:01:8b:60:41:ae:e0:c0:6b:2c:d7:
e1:b7:62:78:5a:db:76:45:e6:84:b6:ca:18:62:5e:90:4c:dd:
91:fd:f0:ab:f8:22:9e:66:d9:03:b9:dd:4f:1c:b7:2c:31:4d:
9f:53:3f:eb:bd:c2:61:88:23:35:b5:43:a4:87:96:89:c3:c2:
a6:a8:b8:15:c2:d1:e4:3d:bc:6c:f4:67:43:df:81:83:b1:4a:
b5:8d:38:6b:29:3f:3b:ab:b8:6c:dd:3f:8a:a8:4c:dd:ea:43:
da:27:b3:11:07:40:8d:29:ce:99:0c:7a:56:26:4a:e0:ca:26:
04:cc:b1:de:ab:09:24:5a:61:5a:bc:41:b5:40:3a:66:3d:0e:
bb:eb:d0:a9:49:d0:b2:0d:41:99:68:2d:02:be:63:64:1b:dd:
f8:d4:0f:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6x/1A7sFPVOnID0DRVpXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTYyMDVjMmEyMTBmNTdmYjcxZjI3ZjNjNGJhYWViNTNk
ZDVlMzMwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWU5YmE5NTAwZjM2ZDYwZTU2YTRmYTc2NDFmYzE3ZmMxZGVlZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU/Ktwww75/pCqHcDEpvPi9esQib
sTzT4QZVuJMh2NZIXZXTHFVgdNowtjB5vOk5Y8nTtk/PuYtMy+eM+g6ipK7Nkgb+
h2MBl2kZpHZWqfeYZCoCuc2LiZ+X/kZ7FFbsdY9KsqikAZKZU4eWdIC2F60sEcio
Tluz+Aw64fvZuBVUKUxL9ioZEBr8JS2EPGuRmXpp+a5iskbrJ6d0uAokWL+ZyZ95
WmEU2oNWfG+TrUZoTFtnWfwAZbloKTOJhzJodR7I8ZZPUPwLBu7I7kkJYAlrn8Tg
bjEKA0oxtb6E0jE21WswS9QZnScuHMcBXpopHKbyqWMQM6xNz4GSjoPzvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBHpupUA821g5WpPp2QfwX/B3u+TMB8GA1UdIwQY
MBaAFIDmIFwqIQ9X+3HyfzxLqutT3V4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEt
N2I4ZDdlZTlmNDExLzEvRWVtNmxRRHpiV0RsYWstblpCX0JmOEhlNzVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEtN2I4ZDdlZTlmNDEx
LzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9BGMA0G
CSqGSIb3DQEBCwUAA4IBAQBuLiM3uyqv8CkwK2fjlz6dS5nSLHnzinCpc+gb3xSS
DH099dZAkfwjyNc881tkpTzPG6LKQLQatGC5borFQ0lPV+owhyQNnz4RbL6w3ZDu
ioIyTBsU9h1UTOPPPcYxNGSSEQGLYEGu4MBrLNfht2J4Wtt2ReaEtsoYYl6QTN2R
/fCr+CKeZtkDud1PHLcsMU2fUz/rvcJhiCM1tUOkh5aJw8KmqLgVwtHkPbxs9GdD
34GDsUq1jThrKT87q7hs3T+KqEzd6kPaJ7MRB0CNKc6ZDHpWJkrgyiYEzLHeqwkk
WmFavEG1QDpmPQ6769CpSdCyDUGZaC0CvmNkG9341A/J
-----END CERTIFICATE-----
Generated at Mon Feb 9 23:41:50 2026 by rpki-client