This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/EpL_oh2EWdoB_f9aOct9Dy3dSMw.roa File: EpL_oh2EWdoB_f9aOct9Dy3dSMw.roa (raw, json) Hash identifier: LpY5EPsv2X+e0sa7ZSc6g1d0ZscYKla/mER1nNs/+BQ= Subject key identifier: 12:92:FF:A2:1D:84:59:DA:01:FD:FF:5A:39:CB:7D:0F:2D:DD:48:CC Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B163FBA9E3850D4DE1ADFA03810F637 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/EpL_oh2EWdoB_f9aOct9Dy3dSMw.roa Signing time: Wed 19 Nov 2025 07:48:37 +0000 ROA not before: Wed 19 Nov 2025 07:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35196 IP address blocks: 185.105.117.240/32 maxlen: 32 193.109.85.20/32 maxlen: 32 193.124.176.10/32 maxlen: 32 193.124.176.104/32 maxlen: 32 193.124.176.142/32 maxlen: 32 195.47.250.0/24 maxlen: 24 2a09:5302::/32 maxlen: 32 2a09:5302:ffff::/48 maxlen: 48 2a0a:9300:2::/48 maxlen: 48 2a0a:9300:d0::/48 maxlen: 48 2a0a:9300:d1::/48 maxlen: 48 2a0a:9300:d2::/48 maxlen: 48 2a0a:9300:1000::/48 maxlen: 48 2a0a:9302:1::/48 maxlen: 48 2a0e:d603::/32 maxlen: 32 2a0f:7b82::/32 maxlen: 32 2a0f:7b83::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:16:3f:ba:9e:38:50:d4:de:1a:df:a0:38:10:f6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1292ffa21d8459da01fdff5a39cb7d0f2ddd48cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:44:db:95:e6:cf:ab:db:dd:34:ab:e9:db:a1: 60:65:ed:7f:5c:cd:90:07:6c:d2:6c:a2:f6:0d:6c: f1:01:ce:05:e1:a3:a0:a7:86:43:a5:74:fe:9a:0c: 60:6f:5c:ea:dc:99:54:c8:36:77:d0:82:b6:55:12: 60:cb:9e:94:b6:75:90:9e:74:79:cb:c0:c2:df:10: fd:ee:c9:cd:df:38:96:87:5c:9e:63:54:81:1c:88: 34:3f:0f:2d:50:6d:ac:07:8c:1b:eb:b2:44:0c:a7: 61:06:88:03:d0:75:7e:ea:73:c0:a8:26:ae:79:06: 2f:82:b5:f4:bd:30:16:77:cc:31:be:f3:bc:6a:4c: 5e:49:cb:d3:09:43:36:c2:59:3b:8b:77:6d:76:b5: e8:3b:ac:bc:45:f3:75:67:f4:03:82:d1:61:f0:a2: e7:d1:f7:dc:5a:0f:42:5b:2a:66:4a:dd:84:a2:ce: a6:e4:0c:bd:68:cd:74:43:e3:d4:db:e1:ab:6b:ae: f5:3e:88:e0:e5:51:da:de:cd:de:8c:98:e0:07:23: c7:c0:47:8b:83:0d:55:97:be:59:f7:28:9a:26:2d: 8c:fd:b6:82:07:50:aa:75:7c:c5:a4:06:51:0e:34: e2:c4:a3:78:20:c3:1b:fe:52:bf:7d:5d:79:41:42: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:92:FF:A2:1D:84:59:DA:01:FD:FF:5A:39:CB:7D:0F:2D:DD:48:CC X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/EpL_oh2EWdoB_f9aOct9Dy3dSMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.117.240/32 193.109.85.20/32 193.124.176.10/32 193.124.176.104/32 193.124.176.142/32 195.47.250.0/24 IPv6: 2a09:5302::/32 2a0a:9300:2::/48 2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff 2a0a:9300:1000::/48 2a0a:9302:1::/48 2a0e:d603::/32 2a0f:7b82::/31 Signature Algorithm: sha256WithRSAEncryption 7c:00:6c:fd:f0:72:8f:2a:98:4f:8f:98:79:e9:c8:c5:c9:4e: 5d:0c:c4:4d:16:22:00:3d:de:c3:69:40:47:e3:e1:df:3d:37: e0:9a:4d:66:d2:51:c2:79:4d:e2:9b:53:ee:9d:45:bb:96:10: 62:0a:2a:ad:ce:42:60:f5:d4:86:a5:37:2a:c3:a4:d5:13:fd: 54:8f:7d:ac:2e:ba:2b:54:6f:5a:c0:68:b1:92:f1:fa:89:08: 0f:c7:ea:b4:0a:b1:25:a0:20:e7:c4:18:e4:c8:aa:51:64:c4: 6d:70:a8:ed:f9:f2:b0:0e:d0:e1:7a:b1:14:d1:df:0a:3c:75: 3b:ea:36:e2:3e:16:96:ea:e7:21:c6:a3:1a:12:0c:b5:97:52: b1:45:a9:e0:c2:1e:fa:ec:6d:2e:f5:20:82:8c:a8:a2:98:fe: 2b:77:4a:33:e2:42:29:ff:95:1e:f3:c4:de:63:5f:87:d2:e3: 56:d9:29:7b:63:06:fc:5f:11:32:18:d0:c0:a2:59:11:9e:f5: 79:a9:d5:1b:b9:57:be:c1:8b:e6:d7:f2:54:3e:f0:b5:e9:39: e3:b5:87:2d:eb:f6:10:b2:aa:3f:94:97:cd:38:96:8f:ce:e4: 8b:4f:7e:28:a7:de:ae:40:9e:24:65:67:27:3b:eb:94:ea:97: 03:21:c7:8b -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZqbFj+6njhQ1N4a36A4EPY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjkyZmZhMjFkODQ1OWRhMDFmZGZmNWEzOWNiN2QwZjJkZGQ0OGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UTblebPq9vdNKvp26FgZe1/XM2Q B2zSbKL2DWzxAc4F4aOgp4ZDpXT+mgxgb1zq3JlUyDZ30IK2VRJgy56UtnWQnnR5 y8DC3xD97snN3ziWh1yeY1SBHIg0Pw8tUG2sB4wb67JEDKdhBogD0HV+6nPAqCau eQYvgrX0vTAWd8wxvvO8akxeScvTCUM2wlk7i3dtdrXoO6y8RfN1Z/QDgtFh8KLn 0ffcWg9CWypmSt2Eos6m5Ay9aM10Q+PU2+Gra671Pojg5VHa3s3ejJjgByPHwEeL gw1Vl75Z9yiaJi2M/baCB1CqdXzFpAZRDjTixKN4IMMb/lK/fV15QUL4vQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFBKS/6IdhFnaAf3/WjnLfQ8t3UjMMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvRXBMX29oMkVXZG9CX2Y5YU9jdDlEeTNkU013LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wLwQCAAEwKQMFALlpdfAD BQDBbVUUAwUAwXywCgMFAMF8sGgDBQDBfLCOAwQAwy/6MEoEAgACMEQDBQAqCVMC AwcAKgqTAAACMBIDBwQqCpMAANADBwAqCpMAANIDBwAqCpMAEAADBwAqCpMCAAED BQAqDtYDAwUBKg97gjANBgkqhkiG9w0BAQsFAAOCAQEAfABs/fByjyqYT4+YeenI xclOXQzETRYiAD3ew2lAR+Ph3z034JpNZtJRwnlN4ptT7p1Fu5YQYgoqrc5CYPXU hqU3KsOk1RP9VI99rC66K1RvWsBosZLx+okID8fqtAqxJaAg58QY5MiqUWTEbXCo 7fnysA7Q4XqxFNHfCjx1O+o24j4WlurnIcajGhIMtZdSsUWp4MIe+uxtLvUggoyo opj+K3dKM+JCKf+VHvPE3mNfh9LjVtkpe2MG/F8RMhjQwKJZEZ71eanVG7lXvsGL 5tfyVD7wtek547WHLev2ELKqP5SXzTiWj87ki09+KKferkCeJGVnJzvrlOqXAyHH iw== -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:04 2025 by rpki-client