This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa File: EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa (raw, json) Hash identifier: 3iBYjsoElN4nFr95B9VrvRH80hKHxRpzggq/IbclLdo= Subject key identifier: 10:F2:4D:71:F6:FD:05:85:71:88:23:A5:E5:7C:6B:A5:03:9F:8B:27 Certificate issuer: /CN=0d333f72d9e294543825be63729f8034a4517090 Certificate serial: 019B797E35B8D8A8D88FD57C19BF456B20FE Authority key identifier: 0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208705 IP address blocks: 193.33.121.0/24 maxlen: 24 2a12:6dc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:35:b8:d8:a8:d8:8f:d5:7c:19:bf:45:6b:20:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d333f72d9e294543825be63729f8034a4517090 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10f24d71f6fd0585718823a5e57c6ba5039f8b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:33:d4:18:42:5c:09:3c:e7:99:a4:92:f5: 44:ad:3f:b5:6b:07:49:01:32:1a:f7:53:e3:11:43: 66:f8:70:b4:6f:ab:4c:2a:3c:f3:08:f4:b0:4f:e4: 4a:33:98:d4:cd:88:d3:af:f4:4c:71:57:b7:cf:8a: 3c:61:ac:e5:49:80:88:38:d6:07:78:d4:0e:5c:2b: 94:18:0d:39:e4:86:ae:d2:08:f5:7f:97:ae:be:8c: eb:62:2e:db:74:28:2f:f4:f3:43:23:56:c6:15:88: 2f:2f:f3:86:29:d9:8a:b9:00:69:93:e6:84:9f:fa: 69:5e:84:f5:17:74:77:44:41:85:96:3f:7a:3e:28: 60:a1:92:26:42:b1:5a:2b:88:f6:7e:76:c0:49:b3: 79:5c:63:cf:54:6a:1c:f0:61:ea:f7:12:c5:9e:f8: 06:6d:74:4c:81:96:ad:b7:0d:15:a4:7c:f8:4b:35: 9f:f9:28:21:3a:15:39:a4:a0:64:20:42:26:24:01: de:61:8d:b3:2a:2a:b7:ec:c4:a3:a8:01:a0:48:79: 96:5f:d1:a8:ba:94:45:5b:dc:af:67:56:b6:6f:b4: fe:f5:2a:91:f5:5b:44:d3:d4:89:17:72:1a:68:e8: 52:c8:07:a7:40:08:3c:ce:0d:c7:7e:16:33:86:45: 59:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F2:4D:71:F6:FD:05:85:71:88:23:A5:E5:7C:6B:A5:03:9F:8B:27 X509v3 Authority Key Identifier: keyid:0D:33:3F:72:D9:E2:94:54:38:25:BE:63:72:9F:80:34:A4:51:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/EPJNcfb9BYVxiCOl5XxrpQOfiyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/65fea2-a3d9-492f-8e44-894dfa5df017/1/DTM_ctnilFQ4Jb5jcp-ANKRRcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.33.121.0/24 IPv6: 2a12:6dc0::/29 Signature Algorithm: sha256WithRSAEncryption 42:63:03:c6:1c:34:77:3f:f9:a1:53:e9:74:7e:0b:b8:07:fa: 96:55:de:86:1e:03:67:24:3d:83:d4:d8:db:55:d1:8d:ba:c1: 23:6c:33:0e:d8:fd:2b:c0:58:46:45:58:7d:52:66:dd:07:d3: 8e:8b:8e:03:82:18:bb:54:db:24:6b:ba:9f:d0:37:bd:3b:5b: e0:a9:27:24:63:02:62:df:0c:ac:bb:87:84:a1:9d:f1:e5:44: 63:26:53:79:f9:f9:78:34:14:a9:e2:15:00:67:2a:e1:e5:19: ae:c2:b3:74:b0:91:89:9e:8f:be:b6:fc:99:ff:51:5c:7e:34: 7a:fa:57:8a:77:3f:21:69:dc:06:80:fe:6c:73:85:b4:b8:34: f8:51:3f:c6:00:2d:8b:21:9e:1c:1e:10:d5:51:98:93:af:fb: 00:b6:4f:17:df:e2:39:fb:54:32:93:df:df:93:0e:62:60:57: 03:02:b9:11:f2:06:62:02:28:bd:75:b9:f1:df:d0:49:71:cf: 96:16:ee:98:ae:d9:d3:cc:a5:d9:4f:ec:38:62:f9:d5:88:d4: 9c:d9:9f:eb:60:21:25:fb:82:ea:b1:7b:66:b7:13:07:04:75: 91:15:f5:5f:a3:23:79:e3:2f:95:ff:86:fb:27:06:80:61:9d: 02:80:67:47 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fjW42KjYj9V8Gb9FayD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMzMzZjcyZDllMjk0NTQzODI1YmU2MzcyOWY4MDM0YTQ1 MTcwOTAwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGYyNGQ3MWY2ZmQwNTg1NzE4ODIzYTVlNTdjNmJhNTAzOWY4YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Qz1BhCXAk855mkkvVErT+1awdJ ATIa91PjEUNm+HC0b6tMKjzzCPSwT+RKM5jUzYjTr/RMcVe3z4o8YazlSYCIONYH eNQOXCuUGA055Iau0gj1f5euvozrYi7bdCgv9PNDI1bGFYgvL/OGKdmKuQBpk+aE n/ppXoT1F3R3REGFlj96PihgoZImQrFaK4j2fnbASbN5XGPPVGoc8GHq9xLFnvgG bXRMgZattw0VpHz4SzWf+SghOhU5pKBkIEImJAHeYY2zKiq37MSjqAGgSHmWX9Go upRFW9yvZ1a2b7T+9SqR9VtE09SJF3IaaOhSyAenQAg8zg3HfhYzhkVZ9wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBDyTXH2/QWFcYgjpeV8a6UDn4snMB8GA1UdIwQY MBaAFA0zP3LZ4pRUOCW+Y3KfgDSkUXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NWZlYTItYTNkOS00OTJmLThlNDQt ODk0ZGZhNWRmMDE3LzEvRVBKTmNmYjlCWVZ4aUNPbDVYeHJwUU9maXljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NWZlYTItYTNkOS00OTJmLThlNDQtODk0ZGZhNWRmMDE3 LzEvRFRNX2N0bmlsRlE0SmI1amNwLUFOS1JSY0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSF5MA0E AgACMAcDBQMqEm3AMA0GCSqGSIb3DQEBCwUAA4IBAQBCYwPGHDR3P/mhU+l0fgu4 B/qWVd6GHgNnJD2D1NjbVdGNusEjbDMO2P0rwFhGRVh9UmbdB9OOi44Dghi7VNsk a7qf0De9O1vgqSckYwJi3wysu4eEoZ3x5URjJlN5+fl4NBSp4hUAZyrh5RmuwrN0 sJGJno++tvyZ/1FcfjR6+leKdz8hadwGgP5sc4W0uDT4UT/GAC2LIZ4cHhDVUZiT r/sAtk8X3+I5+1Qyk9/fkw5iYFcDArkR8gZiAii9dbnx39BJcc+WFu6YrtnTzKXZ T+w4YvnViNSc2Z/rYCEl+4LqsXtmtxMHBHWRFfVfoyN54y+V/4b7JwaAYZ0CgGdH -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:41 2026 by rpki-client