This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EPfTPAXnbu3927gO8Jx9ELQThd0.roa File: EPfTPAXnbu3927gO8Jx9ELQThd0.roa (raw, json) Hash identifier: qha6YSPNDj0gItRG7RrYst6WHVXYR7QZk9F7TvhDa7w= Subject key identifier: 10:F7:D3:3C:05:E7:6E:ED:FD:DB:B8:0E:F0:9C:7D:10:B4:13:85:DD Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BC70654DF0A9196E6EDCDEC24134C2EEC Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EPfTPAXnbu3927gO8Jx9ELQThd0.roa Signing time: Fri 16 Jan 2026 13:37:19 +0000 ROA not before: Fri 16 Jan 2026 13:37:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33356 IP address blocks: 87.83.96.0/20 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:06:54:df:0a:91:96:e6:ed:cd:ec:24:13:4c:2e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 16 13:37:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10f7d33c05e76eedfddbb80ef09c7d10b41385dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:37:1b:58:6d:1d:93:b9:93:21:a9:eb:17:bd: ed:25:c3:e3:d9:95:a4:15:d7:9c:29:ae:9e:f9:b2: 8e:a2:72:eb:1b:2f:fe:8d:b9:c8:c3:9d:83:cb:78: d7:98:2a:30:85:99:6e:16:e9:93:07:5c:ea:38:0f: f6:f1:43:88:24:3f:bf:d2:ff:cd:bc:4b:9c:39:f1: da:f7:95:f1:2e:bc:7e:4e:06:0e:01:bf:be:e1:f8: 75:00:18:66:30:dd:b8:e2:a6:6e:de:09:4a:73:c0: e9:d8:35:d3:19:b2:7d:b0:98:bf:7b:35:e7:65:d6: 2d:97:a9:c5:ca:06:02:8f:cb:ee:d8:09:d4:54:ee: 34:70:dd:04:03:1e:22:40:27:40:13:23:8e:d8:c0: 1b:77:d9:15:4c:54:83:af:48:84:7f:50:c6:c6:71: f0:29:e3:c3:cb:fd:8f:fb:c7:8c:3f:3e:ef:b1:75: 44:33:19:9d:f7:7a:4c:31:0b:04:56:6b:87:03:dd: 2e:e5:7a:1f:4d:3b:f1:b0:60:d8:6e:03:ca:14:47: 9f:cd:06:7c:e6:69:7b:00:84:01:2e:b2:56:54:43: 65:50:91:fd:91:e7:0b:11:98:45:11:a5:24:7d:91: 06:d8:33:12:f4:5b:4f:a9:85:92:66:64:76:4a:07: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F7:D3:3C:05:E7:6E:ED:FD:DB:B8:0E:F0:9C:7D:10:B4:13:85:DD X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/EPfTPAXnbu3927gO8Jx9ELQThd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.83.96.0/20 Signature Algorithm: sha256WithRSAEncryption ba:ad:0d:67:c8:3b:1a:5e:f8:84:76:6d:cd:42:ac:ed:90:44: 75:3c:79:1e:7a:47:38:7d:e9:62:85:e6:82:1f:4d:1a:cc:0c: c1:2b:bd:0e:29:ec:92:e9:ae:59:ed:51:c2:d6:2e:64:14:13: 88:ed:77:90:d1:d4:37:d5:9c:fd:01:7b:05:a3:a4:cf:35:ff: 7e:8b:c7:d1:d4:86:57:4d:99:71:dc:ed:ef:49:b2:9c:60:b4: ab:6e:d3:bf:5c:45:94:2c:e7:95:14:3b:fa:4d:8a:aa:2d:77: 5e:fe:9a:d0:d7:12:7f:9b:bc:c0:3f:db:a2:1e:e5:17:1d:39: b2:a4:a1:8d:1c:d7:ce:d6:4b:25:24:9a:0c:fa:01:76:9d:c8: 67:d6:2a:21:3d:cc:9d:11:d4:4b:1c:67:b8:58:1c:1d:ce:e8: ae:e5:ba:85:26:15:8b:95:83:6f:5d:f6:39:37:a1:06:7c:2f: 4f:1c:ed:de:cc:d4:ea:12:44:5d:65:1b:ef:9c:9f:da:7b:f0: f4:70:7a:c7:71:c5:34:17:16:ce:d2:d4:51:97:45:4b:1c:9d: 03:41:37:98:65:ee:29:da:2c:3a:75:1f:1b:53:ca:67:ad:a2: 2b:fe:5a:a6:95:4c:e4:8e:27:70:8a:57:b7:c9:53:af:0b:f7: be:b1:c8:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHBlTfCpGW5u3N7CQTTC7sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTE2MTMzNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGY3ZDMzYzA1ZTc2ZWVkZmRkYmI4MGVmMDljN2QxMGI0MTM4NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTcbWG0dk7mTIanrF73tJcPj2ZWk FdecKa6e+bKOonLrGy/+jbnIw52Dy3jXmCowhZluFumTB1zqOA/28UOIJD+/0v/N vEucOfHa95XxLrx+TgYOAb++4fh1ABhmMN244qZu3glKc8Dp2DXTGbJ9sJi/ezXn ZdYtl6nFygYCj8vu2AnUVO40cN0EAx4iQCdAEyOO2MAbd9kVTFSDr0iEf1DGxnHw KePDy/2P+8eMPz7vsXVEMxmd93pMMQsEVmuHA90u5XofTTvxsGDYbgPKFEefzQZ8 5ml7AIQBLrJWVENlUJH9kecLEZhFEaUkfZEG2DMS9FtPqYWSZmR2Sge7BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBD30zwF527t/du4DvCcfRC0E4XdMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvRVBmVFBBWG5idTM5MjdnTzhKeDlFTFFUaGQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEV1NgMA0G CSqGSIb3DQEBCwUAA4IBAQC6rQ1nyDsaXviEdm3NQqztkER1PHkeekc4feliheaC H00azAzBK70OKeyS6a5Z7VHC1i5kFBOI7XeQ0dQ31Zz9AXsFo6TPNf9+i8fR1IZX TZlx3O3vSbKcYLSrbtO/XEWULOeVFDv6TYqqLXde/prQ1xJ/m7zAP9uiHuUXHTmy pKGNHNfO1kslJJoM+gF2nchn1iohPcydEdRLHGe4WBwdzuiu5bqFJhWLlYNvXfY5 N6EGfC9PHO3ezNTqEkRdZRvvnJ/ae/D0cHrHccU0FxbO0tRRl0VLHJ0DQTeYZe4p 2iw6dR8bU8pnraIr/lqmlUzkjidwile3yVOvC/e+schu -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:16 2026 by rpki-client