This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/epbrSMH-SUdz881xHjrFWBLUM0I.roa File: epbrSMH-SUdz881xHjrFWBLUM0I.roa (raw, json) Hash identifier: DemzvWRRUYGCK/bGtJiqPfkLK7W/2Q2RB2aeNbl55xw= Subject key identifier: 7A:96:EB:48:C1:FE:49:47:73:F3:CD:71:1E:3A:C5:58:12:D4:33:42 Certificate issuer: /CN=3f0289affaaf080e252718e3f4489da29d9fa55a Certificate serial: 019B77C75542FF1D508F097BA6EA860DB4A0 Authority key identifier: 3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/epbrSMH-SUdz881xHjrFWBLUM0I.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198167 IP address blocks: 185.119.216.0/22 maxlen: 23 185.119.218.0/24 maxlen: 24 2a03:78c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.mft rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:55:42:ff:1d:50:8f:09:7b:a6:ea:86:0d:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f0289affaaf080e252718e3f4489da29d9fa55a Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a96eb48c1fe494773f3cd711e3ac55812d43342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:f3:f7:ee:3c:87:ed:81:3c:0c:6c:7b:58: 6f:2b:28:21:34:8a:e0:f2:e2:c4:db:c7:f3:f2:54: bb:fb:5c:7f:e8:ae:7e:1f:ec:f7:1d:45:9b:60:f4: a1:5d:1b:c1:4e:28:b7:d8:13:f8:cb:80:f2:05:84: e2:51:e7:5f:5a:10:b7:00:33:65:bc:bf:31:ee:a9: 34:7b:ad:66:55:2e:80:6b:00:9c:64:4f:93:78:24: 6e:64:d8:94:b8:72:24:0d:a3:b5:52:fc:66:7d:97: 20:f4:01:78:50:65:0a:e9:04:52:ad:2e:f9:40:0c: 5d:4c:e0:a2:03:7d:17:8b:60:84:ca:c3:9a:a0:50: 2f:6b:99:24:5c:5f:0e:4e:ac:4a:e1:24:4c:b0:68: d7:09:f5:a7:be:f8:65:f4:c3:05:61:74:0a:ba:fd: 1a:10:31:3e:92:65:77:08:34:48:0b:22:6b:30:63: 11:45:f0:4d:0b:1d:bf:5e:71:f7:d7:77:ce:fe:d0: 1e:27:1f:89:fd:ef:6f:c8:1c:83:13:68:a7:4a:85: 30:4c:a4:04:e4:5e:44:d2:ea:cb:8d:19:52:1b:86: 87:a8:f9:5a:0f:c0:f8:6e:23:c0:3f:f3:78:7f:7e: e2:de:8a:92:47:4a:1a:7f:03:31:2c:02:0c:9f:62: be:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:96:EB:48:C1:FE:49:47:73:F3:CD:71:1E:3A:C5:58:12:D4:33:42 X509v3 Authority Key Identifier: keyid:3F:02:89:AF:FA:AF:08:0E:25:27:18:E3:F4:48:9D:A2:9D:9F:A5:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwKJr_qvCA4lJxjj9Eidop2fpVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/epbrSMH-SUdz881xHjrFWBLUM0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9fcccf-e7aa-4c44-9590-1cf0feaaa3ea/1/PwKJr_qvCA4lJxjj9Eidop2fpVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.216.0/22 IPv6: 2a03:78c0::/32 Signature Algorithm: sha256WithRSAEncryption 5d:de:db:e3:3e:fc:72:3a:cc:d7:e1:34:b1:66:1b:18:27:0e: 83:71:c6:d7:c2:08:d1:58:c3:ee:34:c9:be:43:c4:ac:52:0b: 04:68:9d:17:93:a1:9a:54:a6:a7:6d:84:50:f2:b2:97:00:31: 4f:af:97:93:2f:42:a5:c5:cc:f9:aa:c5:78:06:dd:71:3e:2a: d1:07:fc:09:e7:c4:8d:52:a7:20:24:67:01:d3:68:58:af:3b: d4:5d:70:39:8a:93:4d:cd:9b:74:b3:4f:ce:00:39:62:9a:c1: 19:87:a5:bd:60:0f:44:69:d4:0d:81:19:b1:9d:1b:48:16:5d: 46:6d:04:b4:87:c4:73:27:d5:31:49:0a:ff:ae:76:12:13:e8: 2c:d9:1d:3a:85:78:cd:6d:ad:a9:28:e0:6f:4d:3c:11:1a:50: 96:a2:34:0d:82:14:2c:1f:50:98:ed:8d:1f:f1:76:6d:84:db: 05:a0:99:b7:7d:c1:d3:d6:93:9d:0a:87:04:6c:27:85:92:20: 2b:a6:3c:93:6f:22:ff:eb:44:d0:7e:f6:36:f5:58:92:b7:d8: b3:e0:23:e2:ea:05:08:b7:01:f1:f7:a7:86:28:b0:06:d2:17: 32:12:20:ed:ef:2b:a6:25:cf:df:2c:c4:6f:0c:3f:a0:63:f8: 28:f9:3c:2b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1VC/x1Qjwl7puqGDbSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMDI4OWFmZmFhZjA4MGUyNTI3MThlM2Y0NDg5ZGEyOWQ5 ZmE1NWEwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk2ZWI0OGMxZmU0OTQ3NzNmM2NkNzExZTNhYzU1ODEyZDQzMzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40zz9+48h+2BPAxse1hvKyghNIrg 8uLE28fz8lS7+1x/6K5+H+z3HUWbYPShXRvBTii32BP4y4DyBYTiUedfWhC3ADNl vL8x7qk0e61mVS6AawCcZE+TeCRuZNiUuHIkDaO1UvxmfZcg9AF4UGUK6QRSrS75 QAxdTOCiA30Xi2CEysOaoFAva5kkXF8OTqxK4SRMsGjXCfWnvvhl9MMFYXQKuv0a EDE+kmV3CDRICyJrMGMRRfBNCx2/XnH313fO/tAeJx+J/e9vyByDE2inSoUwTKQE 5F5E0urLjRlSG4aHqPlaD8D4biPAP/N4f37i3oqSR0oafwMxLAIMn2K+HQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHqW60jB/klHc/PNcR46xVgS1DNCMB8GA1UdIwQY MBaAFD8Cia/6rwgOJScY4/RInaKdn6VaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAt MWNmMGZlYWFhM2VhLzEvZXBiclNNSC1TVWR6ODgxeEhqckZXQkxVTTBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85ZmNjY2YtZTdhYS00YzQ0LTk1OTAtMWNmMGZlYWFhM2Vh LzEvUHdLSnJfcXZDQTRsSnhqajlFaWRvcDJmcFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXfYMA0E AgACMAcDBQAqA3jAMA0GCSqGSIb3DQEBCwUAA4IBAQBd3tvjPvxyOszX4TSxZhsY Jw6DccbXwgjRWMPuNMm+Q8SsUgsEaJ0Xk6GaVKanbYRQ8rKXADFPr5eTL0Klxcz5 qsV4Bt1xPirRB/wJ58SNUqcgJGcB02hYrzvUXXA5ipNNzZt0s0/OADlimsEZh6W9 YA9EadQNgRmxnRtIFl1GbQS0h8RzJ9UxSQr/rnYSE+gs2R06hXjNba2pKOBvTTwR GlCWojQNghQsH1CY7Y0f8XZthNsFoJm3fcHT1pOdCocEbCeFkiArpjyTbyL/60TQ fvY29ViSt9iz4CPi6gUItwHx96eGKLAG0hcyEiDt7yumJc/fLMRvDD+gY/go+Twr -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:03 2026 by rpki-client