This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/epeqMPB9UJIfdKcbYeHbsFiEVvQ.roa File: epeqMPB9UJIfdKcbYeHbsFiEVvQ.roa (raw, json) Hash identifier: FONj/9iwOb27HkV6gkk6+EN6Mk75i6+j9GhGsu25ka8= Subject key identifier: 7A:97:AA:30:F0:7D:50:92:1F:74:A7:1B:61:E1:DB:B0:58:84:56:F4 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB5AF628540E23F28943F8C5FE5D57 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/epeqMPB9UJIfdKcbYeHbsFiEVvQ.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34665 IP address blocks: 45.128.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5a:f6:28:54:0e:23:f2:89:43:f8:c5:fe:5d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a97aa30f07d50921f74a71b61e1dbb0588456f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3e:b5:d9:a4:68:fb:7a:e6:b7:ad:f2:94:ec: ce:83:39:12:2a:c2:1b:d6:4c:83:de:bc:6f:d3:27: ef:3b:eb:12:ef:bd:57:48:12:dc:5e:26:ac:8e:52: 35:8e:22:b3:c9:a1:f2:fa:4e:9b:4d:52:2a:0f:05: a8:c0:25:b5:c1:3d:66:ea:f9:7f:88:9a:e2:6b:87: f3:64:90:61:a3:92:92:70:7c:50:5b:56:07:bd:40: d3:df:e0:b9:16:13:e6:45:43:ed:3b:38:74:38:a0: d1:c6:72:cc:a2:04:3b:ae:9c:3f:c5:75:a7:95:d8: ac:e5:aa:ab:49:08:7c:c8:97:d2:2a:d6:9e:ac:33: 60:6b:fc:37:15:45:f3:74:8c:32:58:82:5e:c8:bf: 20:ab:67:a1:1e:bc:73:3b:4c:fe:6a:c4:f7:23:37: a2:ca:16:24:cb:d5:be:02:2c:88:2c:09:36:65:cb: d2:c5:29:2f:7f:05:e1:11:9e:43:5b:e5:35:00:e0: 14:81:ec:53:0c:a2:14:d0:ac:df:51:45:07:8e:c3: f0:7c:41:a2:1c:74:51:97:85:6c:d6:63:42:e3:8e: a7:64:e9:72:ba:c4:86:c7:68:3f:95:33:37:aa:c7: 3f:d7:3d:53:d6:83:71:b5:01:b1:9b:05:c1:73:d5: f0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:97:AA:30:F0:7D:50:92:1F:74:A7:1B:61:E1:DB:B0:58:84:56:F4 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/epeqMPB9UJIfdKcbYeHbsFiEVvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:3c:ae:9e:ab:65:b3:4d:c4:16:f5:8f:b3:aa:4a:30:63:e5: 23:0c:a3:c4:c7:1f:72:9a:e7:02:2d:96:6f:42:16:40:20:b1: 71:c6:4f:71:31:12:36:05:bc:c3:59:9f:6b:5b:cb:9a:d2:5e: 90:6a:3f:4f:57:51:46:b0:12:a1:7b:59:d5:0a:5d:6e:c7:71: 47:c7:53:3b:60:d0:4b:1f:a5:bd:db:a6:84:f1:d1:3a:76:36: 20:47:78:91:e7:5c:04:46:7a:e7:7f:c0:49:81:77:3f:61:82: a1:de:0b:1a:f3:60:d3:0b:00:38:c8:03:60:3f:f7:5d:9d:b5: 13:74:69:38:b6:0e:6e:01:f2:ba:f5:6b:29:c8:25:c6:56:d2: e9:0b:8c:4e:c9:1a:e9:75:98:c3:9d:ed:07:8a:e4:08:eb:3b: 48:db:65:fa:ea:53:e7:56:75:77:ea:bb:12:70:48:c7:c2:6d: 83:cc:d0:47:4b:4d:34:5d:6e:0a:71:db:ef:40:39:82:d3:33: dd:c5:7b:1e:b6:8f:5a:85:11:54:e5:8e:0b:d7:21:a9:70:3c: 9d:ec:dc:4b:12:9b:83:77:d9:e9:36:13:e4:fa:85:87:14:f6: 38:62:93:be:7e:7f:6f:3c:52:c4:55:01:58:d2:5f:8d:28:83: 6d:21:41:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1r2KFQOI/KJQ/jF/l1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk3YWEzMGYwN2Q1MDkyMWY3NGE3MWI2MWUxZGJiMDU4ODQ1NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6z612aRo+3rmt63ylOzOgzkSKsIb 1kyD3rxv0yfvO+sS771XSBLcXiasjlI1jiKzyaHy+k6bTVIqDwWowCW1wT1m6vl/ iJria4fzZJBho5KScHxQW1YHvUDT3+C5FhPmRUPtOzh0OKDRxnLMogQ7rpw/xXWn ldis5aqrSQh8yJfSKtaerDNga/w3FUXzdIwyWIJeyL8gq2ehHrxzO0z+asT3Izei yhYky9W+AiyILAk2ZcvSxSkvfwXhEZ5DW+U1AOAUgexTDKIU0KzfUUUHjsPwfEGi HHRRl4Vs1mNC446nZOlyusSGx2g/lTM3qsc/1z1T1oNxtQGxmwXBc9Xw9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqXqjDwfVCSH3SnG2Hh27BYhFb0MB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvZXBlcU1QQjlVSklmZEtjYlllSGJzRmlFVnZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYCAMA0G CSqGSIb3DQEBCwUAA4IBAQArPK6eq2WzTcQW9Y+zqkowY+UjDKPExx9ymucCLZZv QhZAILFxxk9xMRI2BbzDWZ9rW8ua0l6Qaj9PV1FGsBKhe1nVCl1ux3FHx1M7YNBL H6W926aE8dE6djYgR3iR51wERnrnf8BJgXc/YYKh3gsa82DTCwA4yANgP/ddnbUT dGk4tg5uAfK69WspyCXGVtLpC4xOyRrpdZjDne0HiuQI6ztI22X66lPnVnV36rsS cEjHwm2DzNBHS000XW4KcdvvQDmC0zPdxXseto9ahRFU5Y4L1yGpcDyd7NxLEpuD d9npNhPk+oWHFPY4YpO+fn9vPFLEVQFY0l+NKINtIUGD -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:58 2026 by rpki-client