This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa File: EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa (raw, json) Hash identifier: cbNaVlReRWd6gx/q6NH3r5/UXA7TpZqlkYS//LHJrhs= Subject key identifier: 10:FD:FF:63:FD:AB:22:A1:D3:38:CA:6D:8B:2C:CE:D2:E5:14:C7:0D Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Certificate serial: 019B7910ACC1967523D71CD7EF54D7D5C086 Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa Signing time: Thu 01 Jan 2026 10:18:14 +0000 ROA not before: Thu 01 Jan 2026 10:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8426 IP address blocks: 194.48.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ac:c1:96:75:23:d7:1c:d7:ef:54:d7:d5:c0:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7 Validity Not Before: Jan 1 10:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10fdff63fdab22a1d338ca6d8b2cced2e514c70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e9:c0:fb:d2:fb:5f:f1:a6:19:fc:88:c1:c2: de:bb:5a:bb:61:da:46:92:22:a0:bb:48:d3:e4:86: 64:de:e8:c4:66:62:6e:f4:d3:78:5d:3f:ad:f8:26: 3e:36:73:e2:a0:bc:b8:dc:dc:bf:07:9b:ec:52:65: f4:6b:92:4b:c3:f2:9f:32:61:84:7e:dd:31:34:bb: d4:0a:c8:17:32:f1:c8:1d:dd:d4:1a:ca:38:df:43: fa:bd:c8:f4:d6:21:f1:f5:98:90:e5:7e:71:1d:98: 66:f8:d7:3a:df:21:d1:d3:a3:ca:af:53:ec:54:25: 4c:ca:8c:57:2c:cf:54:e1:7e:ca:9e:b4:0c:6e:b5: e0:bb:61:86:38:10:dc:65:bb:4c:ef:01:6c:10:94: e8:3f:35:09:ad:fc:ff:06:92:57:8f:ad:43:cd:fd: fd:4a:7f:c9:18:c9:f2:82:f4:ec:68:0e:97:67:2c: d1:77:05:50:f1:c5:19:6f:2a:93:c3:39:16:60:a9: 0c:92:e2:35:9f:9c:86:5a:d8:5c:d0:be:32:cf:80: 46:fb:33:cd:df:62:41:fe:c5:aa:ba:8f:ad:56:a3: 8b:12:e2:9d:11:f2:aa:20:72:33:f2:41:d9:7e:a2: 88:d1:98:2b:e0:fa:2c:57:f0:70:5d:3c:77:50:52: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:FF:63:FD:AB:22:A1:D3:38:CA:6D:8B:2C:CE:D2:E5:14:C7:0D X509v3 Authority Key Identifier: keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/EP3_Y_2rIqHTOMptiyzO0uUUxw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.48.207.0/24 Signature Algorithm: sha256WithRSAEncryption 35:46:83:9d:fb:b5:81:75:c8:a4:db:8b:fd:32:c8:df:1b:8f: d7:d2:36:22:3e:a1:b9:78:f7:95:97:a0:18:d2:68:67:09:9d: d8:e4:f6:fd:18:ee:d4:11:c1:9d:b2:78:7c:b6:5f:b4:bd:1e: 12:81:17:ca:5c:09:6a:a2:c2:dc:f0:81:6a:86:fa:8e:82:ec: c3:0a:cb:5b:46:da:70:c7:f4:51:d1:c9:9c:d8:71:f6:0e:42: a5:7b:3e:55:36:86:d3:8a:9a:cd:a4:37:a1:27:c9:1a:fb:cd: 87:4b:28:6c:66:30:bc:d7:63:d2:45:19:01:14:50:e6:49:84: cd:a1:70:41:50:03:35:87:0b:31:0b:d6:18:f6:74:90:d5:d7: f1:f4:97:5d:5a:b2:33:13:4f:ff:aa:6c:46:28:52:ae:7f:8b: e2:64:90:ae:a9:2c:e9:e2:10:f6:0e:d9:cf:25:2a:7f:7c:d0: d5:44:37:32:68:e0:63:17:94:81:5e:13:02:1d:9e:c4:e2:35: 9a:de:65:19:20:1c:5e:44:fd:3d:d9:51:51:ca:05:bc:c4:aa: d2:a7:28:b4:b9:0c:43:19:b7:43:7a:db:71:d7:1e:b7:f2:3c: a6:b0:a9:6c:88:da:2a:1e:a7:2b:f4:ab:7f:3e:05:05:9f:94: 83:c6:6f:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKzBlnUj1xzX71TX1cCGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw ZTc1ZTcwHhcNMjYwMTAxMTAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGZkZmY2M2ZkYWIyMmExZDMzOGNhNmQ4YjJjY2VkMmU1MTRjNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlunA+9L7X/GmGfyIwcLeu1q7YdpG kiKgu0jT5IZk3ujEZmJu9NN4XT+t+CY+NnPioLy43Ny/B5vsUmX0a5JLw/KfMmGE ft0xNLvUCsgXMvHIHd3UGso430P6vcj01iHx9ZiQ5X5xHZhm+Nc63yHR06PKr1Ps VCVMyoxXLM9U4X7KnrQMbrXgu2GGOBDcZbtM7wFsEJToPzUJrfz/BpJXj61Dzf39 Sn/JGMnygvTsaA6XZyzRdwVQ8cUZbyqTwzkWYKkMkuI1n5yGWthc0L4yz4BG+zPN 32JB/sWquo+tVqOLEuKdEfKqIHIz8kHZfqKI0Zgr4PosV/BwXTx3UFLgBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBD9/2P9qyKh0zjKbYssztLlFMcNMB8GA1UdIwQY MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt YjljODliOWIxZjY1LzEvRVAzX1lfMnJJcUhUT01wdGl5ek8wdVVVeHcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1 LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjDPMA0G CSqGSIb3DQEBCwUAA4IBAQA1RoOd+7WBdcik24v9MsjfG4/X0jYiPqG5ePeVl6AY 0mhnCZ3Y5Pb9GO7UEcGdsnh8tl+0vR4SgRfKXAlqosLc8IFqhvqOguzDCstbRtpw x/RR0cmc2HH2DkKlez5VNobTiprNpDehJ8ka+82HSyhsZjC812PSRRkBFFDmSYTN oXBBUAM1hwsxC9YY9nSQ1dfx9JddWrIzE0//qmxGKFKuf4viZJCuqSzp4hD2DtnP JSp/fNDVRDcyaOBjF5SBXhMCHZ7E4jWa3mUZIBxeRP092VFRygW8xKrSpyi0uQxD GbdDettx1x638jymsKlsiNoqHqcr9Kt/PgUFn5SDxm+U -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:25 2026 by rpki-client