This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa File: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (raw, json) Hash identifier: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s= Subject key identifier: 12:9F:A6:40:1D:85:02:CA:7C:C5:5C:1F:A8:75:96:4C:55:93:95:83 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDBB7078F464480EDDBB134A601707 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21219 IP address blocks: 5.1.0.0/19 maxlen: 24 31.3.192.0/20 maxlen: 24 31.128.64.0/23 maxlen: 24 31.128.68.0/22 maxlen: 24 31.128.72.0/21 maxlen: 24 31.128.80.0/20 maxlen: 24 46.164.128.0/18 maxlen: 24 77.88.200.0/21 maxlen: 24 77.88.208.0/20 maxlen: 24 77.88.214.0/23 maxlen: 23 77.88.240.0/20 maxlen: 24 77.222.128.0/19 maxlen: 24 80.77.32.0/20 maxlen: 24 80.91.160.0/20 maxlen: 24 80.91.176.0/20 maxlen: 24 80.249.224.0/20 maxlen: 24 85.159.0.0/21 maxlen: 24 88.81.224.0/19 maxlen: 24 91.193.68.0/22 maxlen: 24 91.197.220.0/22 maxlen: 24 91.204.92.0/22 maxlen: 24 91.237.152.0/24 maxlen: 24 93.183.192.0/18 maxlen: 24 94.232.72.0/21 maxlen: 24 109.206.32.0/19 maxlen: 24 176.102.32.0/19 maxlen: 24 176.112.0.0/19 maxlen: 24 176.241.104.0/21 maxlen: 24 176.241.128.0/19 maxlen: 24 178.213.168.0/21 maxlen: 24 185.8.40.0/22 maxlen: 24 185.46.248.0/22 maxlen: 24 188.0.64.0/19 maxlen: 24 188.247.96.0/19 maxlen: 24 193.41.48.0/22 maxlen: 24 193.108.48.0/22 maxlen: 24 193.108.128.0/23 maxlen: 24 193.109.80.0/24 maxlen: 24 193.109.164.0/22 maxlen: 24 193.238.96.0/22 maxlen: 24 194.29.60.0/22 maxlen: 24 194.110.79.0/24 maxlen: 24 194.146.196.0/22 maxlen: 24 195.69.176.0/22 maxlen: 24 195.114.128.0/19 maxlen: 24 195.114.133.0/24 maxlen: 24 195.225.52.0/23 maxlen: 24 213.111.192.0/18 maxlen: 24 217.112.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:bb:70:78:f4:64:48:0e:dd:bb:13:4a:60:17:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129fa6401d8502ca7cc55c1fa875964c55939583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:85:c3:65:f0:2a:df:8d:7b:35:7b:c2:dd: b9:bb:ce:e7:a9:a9:83:9f:91:1a:6e:f2:79:30:50: e8:a4:b0:ab:d0:ea:e5:31:7e:3b:61:5d:20:0f:b6: af:17:fa:d6:c6:9e:a5:30:b1:22:75:59:dc:a6:ba: a5:81:59:29:b1:e9:f6:9f:50:c7:8e:8f:0f:8a:97: 42:d6:b1:98:18:d4:81:66:72:34:37:3c:f8:75:56: 87:02:c5:e7:4d:96:6f:49:50:2c:5c:f4:53:5e:44: c6:7f:a9:c2:3f:80:e5:bb:bb:81:da:06:4e:c4:40: 82:69:53:33:37:17:db:ed:aa:2c:9b:af:ea:de:d6: 67:ac:5c:f9:46:47:b7:6a:94:a2:19:d4:08:26:45: f7:63:cc:4b:1f:2e:42:89:e3:42:c3:60:36:4d:fc: 70:8a:9d:e3:97:38:42:e3:c5:d5:11:c9:fd:d4:77: 2c:0a:d9:93:91:b8:aa:b4:55:3d:d9:38:af:14:33: 0d:3f:6d:0d:b3:ee:fa:09:fd:73:2f:58:dd:31:12: d3:54:af:0c:97:69:10:0d:97:54:de:e4:5d:9c:07: 2e:a0:a9:23:2f:5c:51:ef:14:b2:3f:d6:1d:1a:6f: 0d:51:ef:22:5e:d7:e9:80:90:41:14:e1:b2:5b:3f: 70:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9F:A6:40:1D:85:02:CA:7C:C5:5C:1F:A8:75:96:4C:55:93:95:83 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.0.0/19 31.3.192.0/20 31.128.64.0/23 31.128.68.0-31.128.95.255 46.164.128.0/18 77.88.200.0-77.88.223.255 77.88.240.0/20 77.222.128.0/19 80.77.32.0/20 80.91.160.0/19 80.249.224.0/20 85.159.0.0/21 88.81.224.0/19 91.193.68.0/22 91.197.220.0/22 91.204.92.0/22 91.237.152.0/24 93.183.192.0/18 94.232.72.0/21 109.206.32.0/19 176.102.32.0/19 176.112.0.0/19 176.241.104.0/21 176.241.128.0/19 178.213.168.0/21 185.8.40.0/22 185.46.248.0/22 188.0.64.0/19 188.247.96.0/19 193.41.48.0/22 193.108.48.0/22 193.108.128.0/23 193.109.80.0/24 193.109.164.0/22 193.238.96.0/22 194.29.60.0/22 194.110.79.0/24 194.146.196.0/22 195.69.176.0/22 195.114.128.0/19 195.225.52.0/23 213.111.192.0/18 217.112.208.0/20 Signature Algorithm: sha256WithRSAEncryption 5e:6f:2a:42:2e:97:8e:63:a2:33:6d:87:d2:51:9d:ed:0c:61: 47:a7:19:aa:dc:fa:43:6b:c2:bd:3a:64:5d:d6:63:5f:48:8d: c9:6c:0a:0b:47:3d:1f:62:25:22:4c:ae:2b:27:5c:69:e9:75: df:62:b7:98:65:f3:51:f0:7b:89:bb:4e:74:c6:b9:90:d1:98: 2b:85:d8:46:ad:42:4d:f7:84:31:4f:b6:fd:28:da:de:2a:03: 7a:da:64:d2:81:d3:23:08:8c:44:ed:b4:51:29:b7:b6:19:94: 70:47:8f:49:5a:12:89:e5:e3:f8:2f:7b:0a:4a:1f:e3:4a:cd: d1:4b:bc:7e:f3:53:1f:cd:50:b6:26:3c:ad:ad:fd:1f:1a:a6: 23:37:07:10:4d:95:85:d1:ce:f1:d0:61:79:33:46:7c:24:75: f9:18:fd:8e:f7:26:22:fa:c5:ef:98:7d:78:8b:9b:f7:bb:8b: 23:23:5d:b2:53:eb:94:64:0b:79:d6:07:4a:2b:cf:a9:65:98: 7f:b5:8b:fa:44:a5:17:64:59:36:80:d4:d3:69:87:dc:9b:a5: d7:be:f6:f0:ba:13:37:b1:3a:e5:05:a6:3e:8a:ae:31:36:53: 00:0a:44:18:c8:2f:cc:a4:80:ad:ef:4d:09:5c:8e:2b:c6:42: b8:6b:d7:c3 -----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISAZt87btwePRkSA7duxNKYBcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjlmYTY0MDFkODUwMmNhN2NjNTVjMWZhODc1OTY0YzU1OTM5NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTaFw2XwKt+NezV7wt25u87nqamD n5EabvJ5MFDopLCr0OrlMX47YV0gD7avF/rWxp6lMLEidVncprqlgVkpsen2n1DH jo8PipdC1rGYGNSBZnI0Nzz4dVaHAsXnTZZvSVAsXPRTXkTGf6nCP4Dlu7uB2gZO xECCaVMzNxfb7aosm6/q3tZnrFz5Rke3apSiGdQIJkX3Y8xLHy5CieNCw2A2Tfxw ip3jlzhC48XVEcn91HcsCtmTkbiqtFU92TivFDMNP20Ns+76Cf1zL1jdMRLTVK8M l2kQDZdU3uRdnAcuoKkjL1xR7xSyP9YdGm8NUe8iXtfpgJBBFOGyWz9wfQIDAQAB o4IDHzCCAxswHQYDVR0OBBYEFBKfpkAdhQLKfMVcH6h1lkxVk5WDMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvRXAtbVFCMkZBc3A4eFZ3ZnFIV1dURldUbFlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBMwYIKwYBBQUHAQcBAf8EggEiMIIBHjCCARoEAgABMIIB EgMEBQUBAAMEBB8DwAMEAR+AQDAMAwQCH4BEAwQFH4BAAwQGLqSAMAwDBANNWMgD BAVNWMADBARNWPADBAVN3oADBARQTSADBAVQW6ADBARQ+eADBANVnwADBAVYUeAD BAJbwUQDBAJbxdwDBAJbzFwDBABb7ZgDBAZdt8ADBANe6EgDBAVtziADBAWwZiAD BAWwcAADBAOw8WgDBAWw8YADBAOy1agDBAK5CCgDBAK5LvgDBAW8AEADBAW892AD BALBKTADBALBbDADBAHBbIADBADBbVADBALBbaQDBALB7mADBALCHTwDBADCbk8D BALCksQDBALDRbADBAXDcoADBAHD4TQDBAbVb8ADBATZcNAwDQYJKoZIhvcNAQEL BQADggEBAF5vKkIul45jojNth9JRne0MYUenGarc+kNrwr06ZF3WY19IjclsCgtH PR9iJSJMrisnXGnpdd9it5hl81Hwe4m7TnTGuZDRmCuF2EatQk33hDFPtv0o2t4q A3raZNKB0yMIjETttFEpt7YZlHBHj0laEonl4/gvewpKH+NKzdFLvH7zUx/NULYm PK2t/R8apiM3BxBNlYXRzvHQYXkzRnwkdfkY/Y73JiL6xe+YfXiLm/e7iyMjXbJT 65RkC3nWB0orz6llmH+1i/pEpRdkWTaA1NNph9ybpde+9vC6EzexOuUFpj6KrjE2 UwAKRBjIL8ykgK3vTQlcjivGQrhr18M= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:11 2026 by rpki-client