This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/epRr3ot_tO1I-RC0EsosxizeUW8.roa File: epRr3ot_tO1I-RC0EsosxizeUW8.roa (raw, json) Hash identifier: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo= Subject key identifier: 7A:94:6B:DE:8B:7F:B4:ED:48:F9:10:B4:12:CA:2C:C6:2C:DE:51:6F Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B7C12B60D5A8B4B199F688A92E53C99F2 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/epRr3ot_tO1I-RC0EsosxizeUW8.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12444 IP address blocks: 84.17.66.0/24 maxlen: 24 84.17.67.0/24 maxlen: 24 84.17.68.0/24 maxlen: 24 84.17.70.0/24 maxlen: 24 84.17.71.0/24 maxlen: 24 84.17.75.0/24 maxlen: 24 84.17.83.0/24 maxlen: 24 84.17.84.0/24 maxlen: 24 84.17.86.0/24 maxlen: 24 84.17.87.0/24 maxlen: 24 84.17.89.0/24 maxlen: 24 84.17.90.0/24 maxlen: 24 84.17.91.0/24 maxlen: 24 84.17.93.0/24 maxlen: 24 185.118.176.0/24 maxlen: 24 185.118.177.0/24 maxlen: 24 185.118.178.0/24 maxlen: 24 185.118.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b6:0d:5a:8b:4b:19:9f:68:8a:92:e5:3c:99:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a946bde8b7fb4ed48f910b412ca2cc62cde516f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:57:ef:5f:c7:cb:6a:93:be:d5:81:cb:1d: 60:c5:19:a9:e8:ae:eb:fd:17:4e:88:52:aa:52:bc: 26:d0:ac:7e:71:21:0d:84:0e:65:ac:1f:6a:10:e2: fd:45:96:e2:0c:56:a5:fc:ef:bc:61:94:8b:94:f8: 0f:fa:a5:75:7f:26:d2:d1:5f:1e:e8:fe:ba:df:d4: ff:06:7c:d4:ef:a3:f5:f4:dc:f9:fc:28:84:6e:98: 27:9d:ef:e9:db:2a:3b:5f:c5:cb:db:60:94:0b:e5: 62:84:62:59:00:e9:7a:02:da:00:0a:01:48:c6:45: 7d:bc:12:5d:39:7f:09:05:ba:09:db:d0:6a:6c:b8: 88:1d:f0:d3:55:f1:f4:a3:39:e0:f9:03:b1:cb:e1: 52:70:da:f3:1e:23:31:59:bc:b4:75:cd:75:24:2b: e6:b3:b6:eb:0a:93:41:0a:af:66:be:b0:a5:3e:d5: 91:d8:7f:da:4d:9d:4f:ff:ec:da:52:22:bd:50:1d: 86:99:a0:8b:0f:f1:42:7f:36:83:69:ee:26:0b:a3: 94:02:40:d2:c5:b9:0e:b2:7b:bd:e0:85:e8:3e:7e: 7e:6a:a8:89:98:a7:b3:d6:89:be:40:28:42:ad:db: e3:0f:69:6c:5d:f5:68:f0:9b:ad:ec:b3:5c:af:32: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:6B:DE:8B:7F:B4:ED:48:F9:10:B4:12:CA:2C:C6:2C:DE:51:6F X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/epRr3ot_tO1I-RC0EsosxizeUW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.17.66.0-84.17.68.255 84.17.70.0/23 84.17.75.0/24 84.17.83.0-84.17.84.255 84.17.86.0/23 84.17.89.0-84.17.91.255 84.17.93.0/24 185.118.176.0/22 Signature Algorithm: sha256WithRSAEncryption 07:fe:64:6b:c8:28:52:0b:db:c1:8f:04:8a:9e:e4:0d:ed:51: 6a:a8:42:74:5a:a9:81:f2:38:74:bb:ba:25:e7:7b:57:c9:b3: a2:a6:aa:31:e3:7b:3e:18:a6:f4:03:63:8f:ba:ea:f4:9b:60: 1a:87:2c:ff:5f:f8:21:9c:e7:89:a5:84:d8:40:8f:b9:81:84: 53:69:28:6c:82:48:4a:c9:ff:f0:20:f7:ae:ce:01:0f:4d:9a: 17:91:d6:02:eb:5c:e7:7a:09:80:ab:df:e1:46:21:28:45:6f: 7b:2b:88:d4:cc:4e:b7:59:ca:9d:86:fc:97:45:b3:ce:0f:e4: 8b:45:3e:3a:dc:51:95:40:39:1f:b4:f3:09:68:5b:e6:7f:ad: 4d:4d:9c:59:9a:ff:6a:7e:00:6c:84:6a:82:76:84:24:f6:35: 2b:d1:21:be:31:e5:1f:d5:2b:9b:e2:2e:f6:2c:ce:98:ea:fb: 33:b5:bb:8a:1d:dd:05:f3:fb:7a:f1:e7:03:9d:0d:77:96:2a: 34:3a:35:9b:f4:3a:a0:a4:dd:80:39:8d:78:51:95:70:0f:82: 03:34:45:23:05:e6:13:88:b0:26:1a:c4:a2:e7:3d:d2:1f:40: 10:ac:91:5a:f7:ca:a0:b8:08:16:20:3c:0a:5e:aa:9a:e0:bb: 5a:1d:3e:ab -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt8ErYNWotLGZ9oipLlPJnyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk0NmJkZThiN2ZiNGVkNDhmOTEwYjQxMmNhMmNjNjJjZGU1MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydhX71/Hy2qTvtWByx1gxRmp6K7r /RdOiFKqUrwm0Kx+cSENhA5lrB9qEOL9RZbiDFal/O+8YZSLlPgP+qV1fybS0V8e 6P6639T/BnzU76P19Nz5/CiEbpgnne/p2yo7X8XL22CUC+VihGJZAOl6AtoACgFI xkV9vBJdOX8JBboJ29BqbLiIHfDTVfH0ozng+QOxy+FScNrzHiMxWby0dc11JCvm s7brCpNBCq9mvrClPtWR2H/aTZ1P/+zaUiK9UB2GmaCLD/FCfzaDae4mC6OUAkDS xbkOsnu94IXoPn5+aqiJmKez1om+QChCrdvjD2lsXfVo8Jut7LNcrzLHCQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHqUa96Lf7TtSPkQtBLKLMYs3lFvMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvZXBScjNvdF90TzFJLVJDMEVzb3N4aXplVVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAFUEUID BABUEUQDBAFUEUYDBABUEUswDAMEAFQRUwMEAFQRVAMEAVQRVjAMAwQAVBFZAwQC VBFYAwQAVBFdAwQCuXawMA0GCSqGSIb3DQEBCwUAA4IBAQAH/mRryChSC9vBjwSK nuQN7VFqqEJ0WqmB8jh0u7ol53tXybOipqox43s+GKb0A2OPuur0m2Aahyz/X/gh nOeJpYTYQI+5gYRTaShsgkhKyf/wIPeuzgEPTZoXkdYC61znegmAq9/hRiEoRW97 K4jUzE63WcqdhvyXRbPOD+SLRT463FGVQDkftPMJaFvmf61NTZxZmv9qfgBshGqC doQk9jUr0SG+MeUf1Sub4i72LM6Y6vsztbuKHd0F8/t68ecDnQ13lio0OjWb9Dqg pN2AOY14UZVwD4IDNEUjBeYTiLAmGsSi5z3SH0AQrJFa98qguAgWIDwKXqqa4Lta HT6r -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:28 2026 by rpki-client