This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/ePJZJNhpApp5V_50Q_hot0iS_wU.roa File: ePJZJNhpApp5V_50Q_hot0iS_wU.roa (raw, json) Hash identifier: QR4bO1N17271c13+CycjZX16iUUkNqGxGT5DNiVyLsU= Subject key identifier: 78:F2:59:24:D8:69:02:9A:79:57:FE:74:43:F8:68:B7:48:92:FF:05 Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Certificate serial: 019B7E3760FBEE7849EFF0A5AC3A61924F5A Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/ePJZJNhpApp5V_50Q_hot0iS_wU.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199408 IP address blocks: 91.194.0.0/23 maxlen: 23 91.194.14.0/23 maxlen: 23 91.194.14.0/24 maxlen: 24 91.194.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:60:fb:ee:78:49:ef:f0:a5:ac:3a:61:92:4f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78f25924d869029a7957fe7443f868b74892ff05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:55:ee:c3:25:22:d1:ce:d6:11:17:b1:f7:73: 27:27:31:c0:91:c4:b7:77:08:8e:79:20:8e:9e:da: c9:2b:e0:3f:3d:f3:e9:6a:62:5d:f2:7b:b2:b0:b0: d9:56:1c:47:0b:9f:6e:87:5f:40:e2:23:fe:20:87: 4d:23:db:45:31:ed:40:40:fa:a7:6c:f7:83:a5:6e: f6:f3:fa:d9:3a:63:0f:75:28:c1:b7:cf:8c:23:ad: 97:af:03:1b:46:98:98:31:87:a2:9a:e9:35:e7:db: 0c:54:80:f9:fa:2e:24:d9:aa:25:e9:74:c7:93:7a: 62:14:b1:c4:d4:07:4b:97:34:9f:a7:e2:f5:c1:73: 3e:94:f5:77:7e:98:d0:d7:5d:b7:9e:81:a0:66:a8: a6:67:ec:31:1d:6d:fa:4b:58:c0:3c:77:1b:6a:72: 50:70:e2:69:ad:8a:8e:9b:f3:f7:e7:e1:73:44:7b: 77:73:c8:27:3d:71:ac:f5:5e:9a:78:7c:5b:8b:a6: dc:31:50:03:91:d3:9f:ca:07:96:bd:3c:f1:5a:73: b2:a5:ee:b6:6f:91:97:d1:e4:54:64:c3:dd:d4:fb: 98:ad:56:eb:4f:62:fc:b9:cd:36:7a:04:fc:43:25: 93:36:6f:6b:8b:61:39:b2:64:6d:d0:4e:af:ef:1c: 49:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F2:59:24:D8:69:02:9A:79:57:FE:74:43:F8:68:B7:48:92:FF:05 X509v3 Authority Key Identifier: keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/ePJZJNhpApp5V_50Q_hot0iS_wU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.194.0.0/23 91.194.14.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:c8:3f:a3:ec:6c:c1:25:9d:14:61:e8:12:b1:be:bd:69:80: 7b:cf:7d:0e:dd:90:cf:69:95:9b:89:98:3b:fd:88:26:97:97: c3:05:63:25:03:d9:5e:93:c2:ad:18:f3:78:bf:76:71:09:b7: 3d:12:46:51:50:0d:8f:1a:07:18:43:92:6b:4c:7c:fb:08:35: 9b:de:2c:a1:ff:2c:20:1b:00:e4:82:e3:6b:3c:a2:82:52:31: f4:39:fc:7c:0f:b8:0b:99:b7:dc:21:fa:7f:3f:0a:44:59:bd: 78:bb:60:d9:49:75:2c:74:87:4d:cf:03:4f:c4:9f:4c:f4:a8: 39:ca:9c:68:70:65:d9:98:a8:c7:a2:04:5d:f6:c4:7f:ec:e8: 75:87:57:37:1e:e2:fc:89:b4:fa:00:af:60:aa:3b:d5:f6:28: d2:a7:e5:58:49:7c:33:0d:1b:90:f5:fb:4d:a7:fd:5a:6e:74: 6f:c6:de:f8:77:9a:34:9b:c7:08:42:c6:02:91:80:a5:20:a5: 48:2b:d5:6c:b4:11:d2:a5:f0:a6:12:0c:61:6f:34:7c:08:52: f5:88:32:3b:37:f1:ab:50:ae:3b:dc:57:dd:df:d7:61:40:0a: 4b:11:ce:69:38:44:0f:cf:ca:21:4e:69:8e:35:c7:94:dc:16: ef:18:9f:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N2D77nhJ7/ClrDphkk9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDBmOGI0MjA0NWM3Mzg3MDIxNmNlMDM2OWNiZDFhODBi Yzg5OTUwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGYyNTkyNGQ4NjkwMjlhNzk1N2ZlNzQ0M2Y4NjhiNzQ4OTJmZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1XuwyUi0c7WERex93MnJzHAkcS3 dwiOeSCOntrJK+A/PfPpamJd8nuysLDZVhxHC59uh19A4iP+IIdNI9tFMe1AQPqn bPeDpW728/rZOmMPdSjBt8+MI62XrwMbRpiYMYeimuk159sMVID5+i4k2aol6XTH k3piFLHE1AdLlzSfp+L1wXM+lPV3fpjQ1123noGgZqimZ+wxHW36S1jAPHcbanJQ cOJprYqOm/P35+FzRHt3c8gnPXGs9V6aeHxbi6bcMVADkdOfygeWvTzxWnOype62 b5GX0eRUZMPd1PuYrVbrT2L8uc02egT8QyWTNm9ri2E5smRt0E6v7xxJkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHjyWSTYaQKaeVf+dEP4aLdIkv8FMB8GA1UdIwQY MBaAFJvQ+LQgRcc4cCFs4DacvRqAvImVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEt OTJmMWQ3ZGZjODE3LzEvZVBKWkpOaHBBcHA1Vl81MFFfaG90MGlTX3dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEtOTJmMWQ3ZGZjODE3 LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8IAAwQB W8IOMA0GCSqGSIb3DQEBCwUAA4IBAQBuyD+j7GzBJZ0UYegSsb69aYB7z30O3ZDP aZWbiZg7/Ygml5fDBWMlA9lek8KtGPN4v3ZxCbc9EkZRUA2PGgcYQ5JrTHz7CDWb 3iyh/ywgGwDkguNrPKKCUjH0Ofx8D7gLmbfcIfp/PwpEWb14u2DZSXUsdIdNzwNP xJ9M9Kg5ypxocGXZmKjHogRd9sR/7Oh1h1c3HuL8ibT6AK9gqjvV9ijSp+VYSXwz DRuQ9ftNp/1abnRvxt74d5o0m8cIQsYCkYClIKVIK9VstBHSpfCmEgxhbzR8CFL1 iDI7N/GrUK473Ffd39dhQApLEc5pOEQPz8ohTmmONceU3BbvGJ/F -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:47 2026 by rpki-client