This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/epkM5me6VO4WBfsP3OBY0X-ejFw.roa File: epkM5me6VO4WBfsP3OBY0X-ejFw.roa (raw, json) Hash identifier: zpYuo9uFqGN49lIwpVPfYA+YcKIr1TU6tf2Nb7fQdzM= Subject key identifier: 7A:99:0C:E6:67:BA:54:EE:16:05:FB:0F:DC:E0:58:D1:7F:9E:8C:5C Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62 Certificate serial: 019B7BA3510BF8CFE8A367CC622FD55932E4 Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/epkM5me6VO4WBfsP3OBY0X-ejFw.roa Signing time: Thu 01 Jan 2026 22:17:39 +0000 ROA not before: Thu 01 Jan 2026 22:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34953 IP address blocks: 185.166.4.0/22 maxlen: 22 2a13:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:51:0b:f8:cf:e8:a3:67:cc:62:2f:d5:59:32:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62 Validity Not Before: Jan 1 22:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a990ce667ba54ee1605fb0fdce058d17f9e8c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:f6:7f:72:fd:5e:a3:e7:0e:f5:7c:89:20: a4:4c:e4:75:88:95:dd:85:4a:35:e4:6f:0b:3b:86: 1c:09:92:18:42:60:a8:9a:c0:17:d2:fd:36:02:a5: ab:13:a2:8f:5b:92:1c:8a:fc:83:4e:95:6f:fa:75: 07:7c:84:f9:e9:63:84:98:a1:c4:c0:f8:fe:f0:75: 6e:ca:4d:30:8c:0f:38:98:17:10:7b:35:7a:e0:13: cc:e1:16:a6:83:7e:b8:24:7d:e4:8f:25:54:92:46: 4e:ba:bc:8a:45:2a:17:65:b4:60:ab:f4:fa:71:ec: b9:d8:0a:7a:c0:ae:2b:12:89:5b:7e:33:7e:17:96: 89:a0:44:a1:5a:67:ad:97:52:a5:3d:52:3c:e1:5d: 59:9f:5f:5b:5a:51:f2:eb:63:5b:ed:1c:c0:db:34: 38:92:25:b7:43:5d:31:76:ed:6d:ce:8d:11:99:56: 31:5a:fe:d9:97:47:71:c8:36:11:52:dd:71:db:14: af:78:cf:65:31:3b:47:fb:15:66:cc:38:d6:36:e2: f6:96:1a:e8:c9:f5:c6:13:fd:c9:72:b5:68:72:d7: df:dc:d7:0a:1f:81:58:86:d0:a9:29:01:78:9b:d6: 4e:20:ab:d1:cb:9d:ac:13:aa:9a:87:63:28:43:37: ac:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:99:0C:E6:67:BA:54:EE:16:05:FB:0F:DC:E0:58:D1:7F:9E:8C:5C X509v3 Authority Key Identifier: keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/epkM5me6VO4WBfsP3OBY0X-ejFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.4.0/22 IPv6: 2a13:700::/32 Signature Algorithm: sha256WithRSAEncryption 84:2e:55:ee:91:31:8e:97:22:f4:df:41:5f:0e:d4:5d:bf:30: 10:86:8a:8b:8c:13:a2:df:d0:5b:04:21:85:4b:cb:4e:6a:7b: c5:b4:35:bb:92:97:8b:07:2a:27:ae:a2:e4:55:78:ef:17:17: 5d:c7:47:d4:26:c4:4f:83:b6:85:68:91:d2:8d:09:96:d3:6a: 15:65:b0:d0:57:5b:e4:d2:30:a6:6d:05:8f:6f:71:31:ae:61: 45:75:c3:2c:ce:ed:63:af:f6:f6:81:2f:80:a2:00:9e:56:6f: 37:f6:2f:10:e6:e8:fd:c6:48:b8:13:35:90:90:b8:78:3d:61: 74:a8:e4:cc:b2:e6:58:84:3b:7b:8f:8e:1a:e5:63:3e:75:45: a8:2f:f6:7a:e1:4b:24:fc:32:6a:9a:24:90:d9:c8:93:e8:cf: 3c:ac:ec:7f:b8:e7:11:14:2a:3a:c5:80:17:34:cc:f3:f3:00: af:ed:dc:22:fd:3b:36:82:ac:6f:8d:9c:87:f4:6f:d6:dd:e7: fc:e8:4b:38:47:43:b1:20:bd:71:e1:ec:6c:05:5a:ed:5d:a7: 2a:fa:94:f2:54:72:bc:b7:f7:1a:44:61:c3:2f:78:a0:93:0f: 0b:34:5f:45:fc:36:b0:ed:21:69:59:d7:0d:58:f9:6b:a6:66: be:9a:64:cb -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7o1EL+M/oo2fMYi/VWTLkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZjhmYWZjZjdjNDQxYWU0OWMxY2VmOTVjNTE4YjI4MjI4 YzdjNjIwHhcNMjYwMTAxMjIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk5MGNlNjY3YmE1NGVlMTYwNWZiMGZkY2UwNThkMTdmOWU4YzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP/2f3L9XqPnDvV8iSCkTOR1iJXd hUo15G8LO4YcCZIYQmComsAX0v02AqWrE6KPW5IcivyDTpVv+nUHfIT56WOEmKHE wPj+8HVuyk0wjA84mBcQezV64BPM4Ramg364JH3kjyVUkkZOuryKRSoXZbRgq/T6 cey52Ap6wK4rEolbfjN+F5aJoEShWmetl1KlPVI84V1Zn19bWlHy62Nb7RzA2zQ4 kiW3Q10xdu1tzo0RmVYxWv7Zl0dxyDYRUt1x2xSveM9lMTtH+xVmzDjWNuL2lhro yfXGE/3JcrVoctff3NcKH4FYhtCpKQF4m9ZOIKvRy52sE6qah2MoQzesYwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHqZDOZnulTuFgX7D9zgWNF/noxcMB8GA1UdIwQY MBaAFJD4+vz3xEGuScHO+VxRiygijHxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDct OGFhNGViYWQ0ZTY1LzEvZXBrTTVtZTZWTzRXQmZzUDNPQlkwWC1lakZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9iNzhlNjktMjlkYy00ZTVjLWFjNDctOGFhNGViYWQ0ZTY1 LzEva1BqNl9QZkVRYTVKd2M3NVhGR0xLQ0tNZkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaYEMA0E AgACMAcDBQAqEwcAMA0GCSqGSIb3DQEBCwUAA4IBAQCELlXukTGOlyL030FfDtRd vzAQhoqLjBOi39BbBCGFS8tOanvFtDW7kpeLByonrqLkVXjvFxddx0fUJsRPg7aF aJHSjQmW02oVZbDQV1vk0jCmbQWPb3ExrmFFdcMszu1jr/b2gS+AogCeVm839i8Q 5uj9xki4EzWQkLh4PWF0qOTMsuZYhDt7j44a5WM+dUWoL/Z64Usk/DJqmiSQ2ciT 6M88rOx/uOcRFCo6xYAXNMzz8wCv7dwi/Ts2gqxvjZyH9G/W3ef86Es4R0OxIL1x 4exsBVrtXacq+pTyVHK8t/caRGHDL3igkw8LNF9F/Daw7SFpWdcNWPlrpma+mmTL -----END CERTIFICATE-----Generated at Tue Jan 27 10:17:50 2026 by rpki-client