This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EP5iPRI-FfM7IYhJc-d9Y4Ahi04.roa File: EP5iPRI-FfM7IYhJc-d9Y4Ahi04.roa (raw, json) Hash identifier: c+P9AX0jUrMMqbBPZsy9mAZW/prh3kv2iKvYDvVXGPI= Subject key identifier: 10:FE:62:3D:12:3E:15:F3:3B:21:88:49:73:E7:7D:63:80:21:8B:4E Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DEE1378BB85D3799E512BAD471064 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EP5iPRI-FfM7IYhJc-d9Y4Ahi04.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 77.81.88.0/24 maxlen: 24 77.81.100.0/24 maxlen: 24 86.105.4.0/24 maxlen: 24 86.107.51.0/24 maxlen: 24 89.35.73.0/24 maxlen: 24 89.37.194.0/24 maxlen: 24 89.43.62.0/24 maxlen: 24 89.45.162.0/24 maxlen: 24 91.132.51.0/24 maxlen: 24 93.90.75.0/24 maxlen: 24 93.115.105.0/24 maxlen: 24 188.241.137.0/24 maxlen: 24 194.135.18.0/24 maxlen: 24 212.192.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ee:13:78:bb:85:d3:79:9e:51:2b:ad:47:10:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10fe623d123e15f33b21884973e77d6380218b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:30:a4:ef:b9:9d:ac:c3:39:94:8e:91:32:3a: 27:90:55:09:41:ee:0d:1c:83:f6:db:0c:86:3a:ac: 59:c3:6f:e6:cd:6e:04:8f:66:c7:13:26:40:20:e8: 01:76:16:15:02:df:4e:dd:94:d5:cd:fc:63:4e:16: 06:83:a3:6e:b3:bb:c8:1c:b7:5c:85:60:97:4d:4e: ba:05:5b:ac:72:28:da:b7:41:0d:25:76:c9:8d:bf: 47:f4:ce:0f:21:3e:c4:54:35:0d:72:2b:08:3c:c9: f6:28:3b:f6:1c:2b:e7:4f:8c:c1:3c:dc:40:19:fb: 56:9c:2b:97:56:96:8f:42:7e:fd:eb:a1:29:2a:00: c6:f6:26:ec:3b:98:a4:ac:27:f2:cd:2e:b7:4a:31: 95:3d:54:1b:c5:cc:e6:e6:35:ab:ff:ba:17:b3:ad: 77:f2:88:71:0b:45:47:74:e0:25:53:5b:5a:8f:9c: 9c:f6:f0:d2:0f:0d:d2:5a:a8:c9:79:cf:c3:f1:6a: 88:43:a8:bc:46:28:76:a4:9e:8d:a7:7a:a5:35:5b: b4:66:10:ae:10:01:3e:69:34:40:fb:e3:74:f3:b8: 9f:1f:c5:bf:66:e0:49:9b:56:44:e8:22:08:74:8b: 1b:f0:a3:76:bb:c7:87:af:f8:f4:07:4b:6b:0a:47: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FE:62:3D:12:3E:15:F3:3B:21:88:49:73:E7:7D:63:80:21:8B:4E X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EP5iPRI-FfM7IYhJc-d9Y4Ahi04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.88.0/24 77.81.100.0/24 86.105.4.0/24 86.107.51.0/24 89.35.73.0/24 89.37.194.0/24 89.43.62.0/24 89.45.162.0/24 91.132.51.0/24 93.90.75.0/24 93.115.105.0/24 188.241.137.0/24 194.135.18.0/24 212.192.5.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:5d:30:d6:c8:96:2d:82:a7:46:be:a8:b9:1e:37:54:80:e3: a1:8a:d5:09:4f:fd:d2:60:9a:86:e8:e7:c5:b9:0b:38:a5:8a: 93:c0:86:84:09:73:4c:8f:9e:9d:ac:d4:7e:80:22:c3:6e:e2: 6b:d3:ec:8e:78:75:d0:97:ec:28:c3:f0:a6:62:48:ff:79:42: d2:ba:62:bb:ef:3d:09:9a:f8:c1:82:e0:54:d8:31:ea:f4:57: 98:97:7c:c8:fe:0e:43:b5:65:88:16:d0:18:7f:46:9e:51:c7: da:27:ef:8e:d6:2e:1b:96:0c:be:0f:8b:c0:f9:58:f1:08:c3: d9:5d:5b:ee:8f:ed:bc:7c:c6:78:81:04:a9:cc:99:d1:ba:e5: 4a:81:95:1d:41:52:48:31:1b:5d:5f:38:34:86:9a:f1:0c:8d: f2:b8:dc:2d:7e:c0:02:39:28:07:d4:a8:a9:16:0a:58:67:d2: 6d:93:75:24:da:26:8c:82:82:f2:5e:7b:15:e5:80:84:f6:f1: 2e:72:6f:53:1e:e6:46:bc:e5:1b:a4:37:c2:85:24:71:99:f5: df:d0:d4:d9:18:0c:7b:52:be:06:78:d9:97:64:e2:a4:cc:c4: ab:f4:cd:e8:d8:ef:92:98:9a:ef:2f:8e:33:24:81:bc:0d:0f: ec:e0:b1:70 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt5fe4TeLuF03meUSutRxBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGZlNjIzZDEyM2UxNWYzM2IyMTg4NDk3M2U3N2Q2MzgwMjE4YjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzCk77mdrMM5lI6RMjonkFUJQe4N HIP22wyGOqxZw2/mzW4Ej2bHEyZAIOgBdhYVAt9O3ZTVzfxjThYGg6Nus7vIHLdc hWCXTU66BVuscijat0ENJXbJjb9H9M4PIT7EVDUNcisIPMn2KDv2HCvnT4zBPNxA GftWnCuXVpaPQn7966EpKgDG9ibsO5ikrCfyzS63SjGVPVQbxczm5jWr/7oXs613 8ohxC0VHdOAlU1taj5yc9vDSDw3SWqjJec/D8WqIQ6i8Rih2pJ6Np3qlNVu0ZhCu EAE+aTRA++N087ifH8W/ZuBJm1ZE6CIIdIsb8KN2u8eHr/j0B0trCkduFQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFBD+Yj0SPhXzOyGISXPnfWOAIYtOMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvRVA1aVBSSS1GZk03SVloSmMtZDlZNEFoaTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQATVFYAwQA TVFkAwQAVmkEAwQAVmszAwQAWSNJAwQAWSXCAwQAWSs+AwQAWS2iAwQAW4QzAwQA XVpLAwQAXXNpAwQAvPGJAwQAwocSAwQA1MAFMA0GCSqGSIb3DQEBCwUAA4IBAQA/ XTDWyJYtgqdGvqi5HjdUgOOhitUJT/3SYJqG6OfFuQs4pYqTwIaECXNMj56drNR+ gCLDbuJr0+yOeHXQl+wow/CmYkj/eULSumK77z0JmvjBguBU2DHq9FeYl3zI/g5D tWWIFtAYf0aeUcfaJ++O1i4blgy+D4vA+VjxCMPZXVvuj+28fMZ4gQSpzJnRuuVK gZUdQVJIMRtdXzg0hprxDI3yuNwtfsACOSgH1KipFgpYZ9Jtk3Uk2iaMgoLyXnsV 5YCE9vEucm9THuZGvOUbpDfChSRxmfXf0NTZGAx7Ur4GeNmXZOKkzMSr9M3o2O+S mJrvL44zJIG8DQ/s4LFw -----END CERTIFICATE-----Generated at Mon Jan 19 14:40:14 2026 by rpki-client