This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/EpqjPfGx4XvZiqccEUxeYCRErUg.roa File: EpqjPfGx4XvZiqccEUxeYCRErUg.roa (raw, json) Hash identifier: VHJJMXa7LkECXQG0ooVUHTsvX4ENBzYOHc8JmBbNcAE= Subject key identifier: 12:9A:A3:3D:F1:B1:E1:7B:D9:8A:A7:1C:11:4C:5E:60:24:44:AD:48 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52D655F47552C20D82EB1BD3254FD Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/EpqjPfGx4XvZiqccEUxeYCRErUg.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25407 IP address blocks: 213.91.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2d:65:5f:47:55:2c:20:d8:2e:b1:bd:32:54:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129aa33df1b1e17bd98aa71c114c5e602444ad48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:63:95:a2:36:04:d4:b3:a9:12:97:87:3b: c8:28:da:2e:23:10:5d:2f:3c:47:15:32:d9:61:68: a3:92:19:ac:49:19:5e:0b:d0:4a:ca:d4:79:ee:27: 41:bd:f0:0a:77:09:e3:b9:51:ff:3b:06:01:5a:90: f9:d4:a1:10:62:83:1a:f7:5d:3f:98:15:49:64:59: 41:b6:c3:f6:56:76:f5:58:1e:f6:26:1e:6d:9f:98: 15:d5:ac:c7:72:bc:83:86:b1:c8:ce:3c:1b:87:af: df:74:96:24:23:26:5a:82:7b:89:37:e5:09:6c:c5: ad:5f:80:68:cf:3e:a0:d9:c3:00:ce:a1:93:85:35: 39:ad:4b:68:d2:aa:d5:05:94:89:5a:48:d6:b6:8b: a3:83:09:08:61:97:be:03:fe:0a:ee:2e:16:6a:a1: d3:9b:2c:4f:e8:74:1d:4d:69:33:eb:79:92:d3:6c: 8d:50:2e:86:e4:9f:ca:44:06:bf:b9:9e:63:f9:db: 56:e5:90:ac:ec:01:60:8d:b7:8f:49:e0:5e:a7:24: ec:ad:da:60:f8:03:45:f9:d4:70:0a:23:f8:cf:a3: c6:69:97:cf:3d:5d:16:67:e3:5f:9e:97:34:a5:6f: 2e:52:e0:3a:14:23:de:76:ed:72:a9:c5:3a:9b:d1: d3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9A:A3:3D:F1:B1:E1:7B:D9:8A:A7:1C:11:4C:5E:60:24:44:AD:48 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/EpqjPfGx4XvZiqccEUxeYCRErUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.91.163.0/24 Signature Algorithm: sha256WithRSAEncryption a2:83:6d:b9:4c:56:37:d5:bf:a1:7d:19:3c:b8:c5:ea:cc:f6: 56:be:f2:dc:3f:29:24:e0:8a:a3:d6:60:b8:a4:f7:67:d0:4c: 9e:93:6b:35:d6:a0:d0:79:d0:38:9c:de:fe:61:38:01:1b:19: 55:f3:a2:31:16:32:d0:77:e7:1a:34:9a:b0:c2:03:97:15:eb: 8e:f2:e3:00:69:d2:31:f2:76:38:c0:f7:c6:d6:8c:57:d6:c3: b0:77:be:c7:5b:50:ab:41:bb:94:cc:51:a6:bf:56:14:23:d6: d5:88:8e:45:80:5a:b1:87:7a:f7:de:cc:9c:a1:3e:10:f7:44: 6f:e2:70:2a:60:ef:0e:17:e2:57:b1:a9:fa:34:3b:e6:bb:62: b1:fc:47:1f:a1:19:23:02:80:6e:97:75:cd:4c:be:94:b8:52: df:fd:f3:e5:27:06:eb:14:f5:7b:89:e8:ef:af:00:a1:c3:ba: 60:91:45:d3:b3:d1:da:cf:4a:ae:90:07:e6:0b:ed:26:b2:26: 46:7d:b4:01:bc:11:24:59:7f:1c:fb:64:83:a7:c5:c3:be:c3: 76:49:92:6b:dd:5f:e2:a3:9c:90:c5:4f:d5:dc:ff:8d:d8:71: eb:f3:82:13:2f:f1:6e:bd:2a:b5:2d:c7:87:99:6e:07:10:33: 8c:6f:08:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pS1lX0dVLCDYLrG9MlT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjlhYTMzZGYxYjFlMTdiZDk4YWE3MWMxMTRjNWU2MDI0NDRhZDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtohjlaI2BNSzqRKXhzvIKNouIxBd LzxHFTLZYWijkhmsSRleC9BKytR57idBvfAKdwnjuVH/OwYBWpD51KEQYoMa910/ mBVJZFlBtsP2Vnb1WB72Jh5tn5gV1azHcryDhrHIzjwbh6/fdJYkIyZagnuJN+UJ bMWtX4Bozz6g2cMAzqGThTU5rUto0qrVBZSJWkjWtoujgwkIYZe+A/4K7i4WaqHT myxP6HQdTWkz63mS02yNUC6G5J/KRAa/uZ5j+dtW5ZCs7AFgjbePSeBepyTsrdpg +ANF+dRwCiP4z6PGaZfPPV0WZ+Nfnpc0pW8uUuA6FCPedu1yqcU6m9HT4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKaoz3xseF72YqnHBFMXmAkRK1IMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvRXBxalBmR3g0WHZaaXFjY0VVeGVZQ1JFclVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VujMA0G CSqGSIb3DQEBCwUAA4IBAQCig225TFY31b+hfRk8uMXqzPZWvvLcPykk4Iqj1mC4 pPdn0Eyek2s11qDQedA4nN7+YTgBGxlV86IxFjLQd+caNJqwwgOXFeuO8uMAadIx 8nY4wPfG1oxX1sOwd77HW1CrQbuUzFGmv1YUI9bViI5FgFqxh3r33sycoT4Q90Rv 4nAqYO8OF+JXsan6NDvmu2Kx/EcfoRkjAoBul3XNTL6UuFLf/fPlJwbrFPV7iejv rwChw7pgkUXTs9Haz0qukAfmC+0msiZGfbQBvBEkWX8c+2SDp8XDvsN2SZJr3V/i o5yQxU/V3P+N2HHr84ITL/FuvSq1LceHmW4HEDOMbwhY -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:55 2026 by rpki-client