This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa File: Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa (raw, json) Hash identifier: hoiisfSpISgCVFz1VXlgIuAWQt8MugVbvtDs45VkzlE= Subject key identifier: 12:9D:D7:54:9F:BF:B7:6D:E9:CD:AD:9F:CE:95:04:3F:A1:03:3F:DC Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Certificate serial: 019B7DCB28FAACA8CEF8A89ECA5FC2666767 Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34210 IP address blocks: 217.170.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:28:fa:ac:a8:ce:f8:a8:9e:ca:5f:c2:66:67:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129dd7549fbfb76de9cdad9fce95043fa1033fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:2c:0f:db:6d:c4:b0:c1:cc:58:12:c3:33: 3a:a9:ff:05:14:a8:29:06:cf:2a:11:c4:c4:76:d6: 99:2e:ad:8b:cd:40:c8:86:71:9e:9c:33:8a:10:c7: f6:16:2f:0d:ee:6a:58:fb:2b:48:fe:35:52:6d:df: 78:fc:d7:c9:3a:e2:cc:2b:62:7c:01:6b:69:92:a4: 7d:ff:16:2e:47:bd:a2:10:df:92:71:17:c5:d5:d7: 2b:2f:56:0d:1c:8c:bc:f3:44:f0:e7:ec:06:8f:1a: 28:cc:25:e9:94:ab:33:8a:bd:95:bd:07:b0:a9:12: ac:f3:c9:a9:6b:a8:81:2d:42:2a:57:30:fb:8e:df: eb:92:90:fc:34:54:2a:c2:8d:bd:67:4a:f2:3b:f7: 08:21:41:ad:73:a0:2e:bd:5c:0e:6b:d2:eb:e7:5e: 9c:98:1a:5a:52:fd:df:bf:c3:5b:78:b4:d4:dd:4c: 15:cc:fc:a2:95:43:7e:24:a9:e9:f5:74:a1:a5:f4: c2:e7:6f:41:00:b0:d2:e0:8e:e3:29:fc:c7:b3:01: 75:9b:d7:a0:3d:e7:31:01:8a:ee:93:a5:23:c9:13: b4:9d:0c:d6:74:0f:c3:b5:c5:fe:8f:83:84:6a:bd: 45:12:27:f4:1b:aa:0c:db:8b:cb:7c:0f:42:bf:15: db:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:D7:54:9F:BF:B7:6D:E9:CD:AD:9F:CE:95:04:3F:A1:03:3F:DC X509v3 Authority Key Identifier: keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/Ep3XVJ-_t23pza2fzpUEP6EDP9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.170.8.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:5d:0d:e6:a4:61:27:6a:39:9b:14:44:bd:fd:f4:b1:29:15: 16:46:48:4f:59:2b:b2:23:de:de:fc:eb:f5:c7:46:3b:80:f5: 6a:43:0e:66:b9:5a:26:14:34:95:76:8f:6b:73:f8:38:9a:0f: e3:48:b8:ba:2c:b8:96:18:54:bf:a1:5c:16:d2:fa:03:e2:e9: 37:85:2c:5e:03:12:4b:64:c4:93:3a:5d:eb:0c:3e:14:79:da: f0:81:23:f4:01:5e:8a:a6:e3:01:66:9b:24:5b:c7:97:a5:3c: 90:a4:2f:51:3b:65:29:67:1e:3a:2f:fe:d4:27:b0:2b:dc:9e: 88:5f:18:bb:b9:f5:24:77:64:ff:21:80:b5:a0:8f:bf:bd:a2: 11:7e:19:7d:c3:c6:d8:46:15:e7:39:17:b1:91:e9:b7:e8:9a: f0:2d:6f:31:94:8b:1f:c3:d1:b2:f4:90:dc:f9:01:73:9e:66: de:7b:cb:94:2c:5b:70:57:4e:42:54:a4:b4:9e:6d:8d:08:87: e4:4e:b6:fa:6f:74:a7:d6:79:6a:09:70:ea:99:91:3b:a5:ad: 8b:0d:f5:f8:61:39:45:f2:21:17:f0:e9:31:ab:1a:25:45:a8: 74:03:dc:4a:d0:fc:9e:51:67:65:61:6f:37:5d:74:27:89:c7: 5d:46:3c:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyj6rKjO+Kieyl/CZmdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj YTU3NWMwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjlkZDc1NDlmYmZiNzZkZTljZGFkOWZjZTk1MDQzZmExMDMzZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs20sD9ttxLDBzFgSwzM6qf8FFKgp Bs8qEcTEdtaZLq2LzUDIhnGenDOKEMf2Fi8N7mpY+ytI/jVSbd94/NfJOuLMK2J8 AWtpkqR9/xYuR72iEN+ScRfF1dcrL1YNHIy880Tw5+wGjxoozCXplKszir2VvQew qRKs88mpa6iBLUIqVzD7jt/rkpD8NFQqwo29Z0ryO/cIIUGtc6AuvVwOa9Lr516c mBpaUv3fv8NbeLTU3UwVzPyilUN+JKnp9XShpfTC529BALDS4I7jKfzHswF1m9eg PecxAYruk6UjyRO0nQzWdA/DtcX+j4OEar1FEif0G6oM24vLfA9CvxXb1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKd11Sfv7dt6c2tn86VBD+hAz/cMB8GA1UdIwQY MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt ZmMxMjFjODAwYjMwLzEvRXAzWFZKLV90MjNwemEyZnpwVUVQNkVEUDl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2aoIMA0G CSqGSIb3DQEBCwUAA4IBAQAPXQ3mpGEnajmbFES9/fSxKRUWRkhPWSuyI97e/Ov1 x0Y7gPVqQw5muVomFDSVdo9rc/g4mg/jSLi6LLiWGFS/oVwW0voD4uk3hSxeAxJL ZMSTOl3rDD4UedrwgSP0AV6KpuMBZpskW8eXpTyQpC9RO2UpZx46L/7UJ7Ar3J6I Xxi7ufUkd2T/IYC1oI+/vaIRfhl9w8bYRhXnORexkem36JrwLW8xlIsfw9Gy9JDc +QFznmbee8uULFtwV05CVKS0nm2NCIfkTrb6b3Sn1nlqCXDqmZE7pa2LDfX4YTlF 8iEX8OkxqxolRah0A9xK0PyeUWdlYW83XXQnicddRjzJ -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:26 2026 by rpki-client