This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ep5McDs5t7WeZmyAgeWWCFiI58c.roa File: Ep5McDs5t7WeZmyAgeWWCFiI58c.roa (raw, json) Hash identifier: AOP9n/jwx2AwUV0sR9UZXO55UJCsgwtWlFLKT4Mnfww= Subject key identifier: 12:9E:4C:70:3B:39:B7:B5:9E:66:6C:80:81:E5:96:08:58:88:E7:C7 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F1598846F2F01C12EC0A933A304D85E Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ep5McDs5t7WeZmyAgeWWCFiI58c.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42303 IP address blocks: 5.35.184.0/21 maxlen: 21 46.182.200.0/24 maxlen: 24 46.182.201.0/24 maxlen: 24 46.182.202.0/24 maxlen: 24 46.182.203.0/24 maxlen: 24 46.182.204.0/24 maxlen: 24 46.182.205.0/24 maxlen: 24 46.182.206.0/24 maxlen: 24 77.72.96.0/21 maxlen: 21 94.127.32.0/21 maxlen: 21 151.236.200.0/21 maxlen: 24 185.55.8.0/22 maxlen: 22 185.104.14.0/23 maxlen: 24 185.153.212.0/22 maxlen: 24 193.149.178.0/24 maxlen: 24 2a02:470::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:98:84:6f:2f:01:c1:2e:c0:a9:33:a3:04:d8:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129e4c703b39b7b59e666c8081e596085888e7c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:86:54:96:b9:77:7d:08:67:7e:c0:d8:2a: 76:e7:0a:53:29:c6:09:c9:1f:cb:60:ec:32:44:33: 3d:8b:22:c9:d3:4a:74:e5:16:5a:6a:89:2a:fc:96: 51:88:5c:0b:b6:db:10:5a:1a:3d:d4:7d:71:d9:ea: 1b:db:96:38:0a:92:c6:eb:8c:3f:41:b6:f1:8b:7c: b4:d6:82:cd:e0:2b:af:cb:34:83:83:05:41:b4:22: be:66:ad:ab:4f:f5:37:11:7c:2e:e0:51:85:bb:c7: af:9f:53:09:6f:16:0e:e9:76:f4:71:fa:69:ac:83: 72:a5:eb:27:97:c6:53:99:16:8c:6c:53:41:a0:55: a0:3c:dc:e2:09:6c:a2:04:72:a6:ac:a0:cb:41:bf: 6d:48:15:71:a5:67:77:f7:36:8f:40:68:99:10:24: bc:64:d9:ca:b6:86:fb:dd:a9:e2:35:7c:5e:88:3d: c4:a7:c0:cc:d3:76:cc:2d:0b:a9:ae:7c:41:dc:d8: 60:71:e7:f0:27:50:e1:b1:75:bf:83:f2:94:a1:5a: 57:f1:b4:ee:99:53:b6:2f:9c:95:23:db:58:0f:c3: 87:38:54:da:16:e9:b0:92:a1:3b:91:9f:d0:ab:af: 15:8b:24:90:be:7a:de:74:35:21:41:42:c0:0d:a3: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:4C:70:3B:39:B7:B5:9E:66:6C:80:81:E5:96:08:58:88:E7:C7 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ep5McDs5t7WeZmyAgeWWCFiI58c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.35.184.0/21 46.182.200.0-46.182.206.255 77.72.96.0/21 94.127.32.0/21 151.236.200.0/21 185.55.8.0/22 185.104.14.0/23 185.153.212.0/22 193.149.178.0/24 IPv6: 2a02:470::/32 Signature Algorithm: sha256WithRSAEncryption 1f:3a:44:92:db:0b:b4:62:50:4b:2a:ad:88:64:55:4c:77:ba: 5c:79:2c:dc:37:80:4b:42:f1:17:52:7a:7b:21:a4:bc:6c:21: 4b:f6:4c:9e:2c:5c:4a:e6:94:22:60:95:54:83:29:c5:81:15: 56:9c:c4:68:1b:d9:a7:1d:46:1b:65:4e:bb:25:72:bb:4c:44: 4f:67:1d:23:07:56:29:16:aa:40:7e:3d:e2:54:33:73:44:72: a1:e7:c8:68:e9:9f:00:34:66:60:d2:87:98:88:5d:7c:2c:7d: 75:0a:32:93:76:a0:b4:7a:25:96:fb:4d:fb:99:70:38:5b:a4: cb:bf:f8:51:c5:cd:c4:d1:ac:07:d9:9e:9a:87:f2:1b:ba:21: 2f:05:8e:c6:d8:f5:4a:a0:3a:da:a2:1f:8c:48:ac:7b:f4:68: 2e:44:51:8c:27:2a:e5:67:6b:b3:69:c5:bc:fa:48:79:e1:3b: 2c:bc:4d:60:03:fb:b7:95:e1:05:8a:bf:5f:35:ec:f1:5c:f0: fd:19:f6:c3:af:2a:46:83:d4:65:41:56:e7:75:4c:cf:94:eb: 84:68:36:a4:55:9a:cd:c7:88:a0:51:ca:12:4b:3d:54:14:ee: 98:b1:f4:6a:13:35:f7:18:6c:47:ec:ba:9f:20:d4:4a:27:cc: aa:8c:c4:e8 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZt/FZiEby8BwS7AqTOjBNheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjllNGM3MDNiMzliN2I1OWU2NjZjODA4MWU1OTYwODU4ODhlN2M3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKyGVJa5d30IZ37A2Cp25wpTKcYJ yR/LYOwyRDM9iyLJ00p05RZaaokq/JZRiFwLttsQWho91H1x2eob25Y4CpLG64w/ Qbbxi3y01oLN4CuvyzSDgwVBtCK+Zq2rT/U3EXwu4FGFu8evn1MJbxYO6Xb0cfpp rINypesnl8ZTmRaMbFNBoFWgPNziCWyiBHKmrKDLQb9tSBVxpWd39zaPQGiZECS8 ZNnKtob73aniNXxeiD3Ep8DM03bMLQuprnxB3NhgcefwJ1DhsXW/g/KUoVpX8bTu mVO2L5yVI9tYD8OHOFTaFumwkqE7kZ/Qq68ViySQvnredDUhQULADaND9wIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFBKeTHA7Obe1nmZsgIHllghYiOfHMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvRXA1TWNEczV0N1dlWm15QWdlV1dDRmlJNThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQDBSO4MAwD BAMutsgDBAAuts4DBANNSGADBANefyADBAOX7MgDBAK5NwgDBAG5aA4DBAK5mdQD BADBlbIwDQQCAAIwBwMFACoCBHAwDQYJKoZIhvcNAQELBQADggEBAB86RJLbC7Ri UEsqrYhkVUx3ulx5LNw3gEtC8RdSenshpLxsIUv2TJ4sXErmlCJglVSDKcWBFVac xGgb2acdRhtlTrslcrtMRE9nHSMHVikWqkB+PeJUM3NEcqHnyGjpnwA0ZmDSh5iI XXwsfXUKMpN2oLR6JZb7TfuZcDhbpMu/+FHFzcTRrAfZnpqH8hu6IS8FjsbY9Uqg OtqiH4xIrHv0aC5EUYwnKuVna7Npxbz6SHnhOyy8TWAD+7eV4QWKv1817PFc8P0Z 9sOvKkaD1GVBVud1TM+U64RoNqRVms3HiKBRyhJLPVQU7pix9GoTNfcYbEfsup8g 1EonzKqMxOg= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:26 2026 by rpki-client