This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/EpAV40Ub4Qhm2LrtJvF107eivE0.roa File: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (raw, json) Hash identifier: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU= Subject key identifier: 12:90:15:E3:45:1B:E1:08:66:D8:BA:ED:26:F1:75:D3:B7:A2:BC:4D Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7 Certificate serial: 019B7C1104FD158DD97DFDC841F9BD2400D0 Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/EpAV40Ub4Qhm2LrtJvF107eivE0.roa Signing time: Fri 02 Jan 2026 00:17:28 +0000 ROA not before: Fri 02 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204653 IP address blocks: 194.102.215.0/24 maxlen: 24 2001:678:110c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:04:fd:15:8d:d9:7d:fd:c8:41:f9:bd:24:00:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7 Validity Not Before: Jan 2 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129015e3451be10866d8baed26f175d3b7a2bc4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:84:f7:9f:a6:09:97:0d:c4:29:ce:97:bc:a9: a3:44:c9:d1:74:8d:a9:f5:a4:b3:1c:32:41:31:55: 25:47:04:47:ec:95:0e:e3:94:80:36:d7:7b:af:bf: 28:dd:df:dd:0a:bc:cd:a7:01:e2:00:6b:7d:5f:8e: 78:85:7e:4f:a1:ea:d3:2b:45:90:d0:28:e3:3b:b4: d9:50:dd:90:5e:fa:d0:64:72:42:41:1e:ab:88:38: 66:7e:63:f8:8d:1f:54:bb:32:ee:d6:34:42:aa:1f: 61:38:cd:18:d1:dc:2a:7e:ee:1e:a9:be:88:7f:92: 3c:2b:37:1b:18:19:35:7c:e5:95:33:a7:03:83:a2: 4e:52:1b:ab:a8:d9:85:3d:50:5a:9e:2b:26:5e:3e: bb:ae:a5:24:c9:e1:d5:45:cd:c4:1c:d9:d1:fd:7a: 00:f3:c6:f5:ee:7b:64:ce:10:d8:b5:da:a9:34:b8: 90:d9:91:72:7b:71:c0:ac:12:af:6b:d5:79:2d:78: e5:e0:96:b8:30:f5:c8:29:c5:1d:a9:38:b7:b4:5e: 7e:23:80:2f:2b:5b:70:5f:b5:06:07:fe:60:bb:ac: 36:37:59:2f:ae:71:fe:ea:0a:af:33:66:15:55:4e: 5b:f7:6f:71:7f:9a:1a:61:3a:c6:4f:3b:47:38:d2: e4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:90:15:E3:45:1B:E1:08:66:D8:BA:ED:26:F1:75:D3:B7:A2:BC:4D X509v3 Authority Key Identifier: keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/EpAV40Ub4Qhm2LrtJvF107eivE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.102.215.0/24 IPv6: 2001:678:110c::/48 Signature Algorithm: sha256WithRSAEncryption 93:b2:63:71:44:f3:25:c0:ba:c2:99:d3:96:67:f9:9d:5d:b8: a4:5c:2e:9c:80:c9:0a:be:e5:5a:04:d4:31:b8:9b:15:60:7c: 54:11:34:80:53:36:d7:d5:97:42:ef:55:92:e6:ab:8c:fc:db: 4a:50:ab:40:ed:8a:e4:b2:f5:69:9b:86:db:86:75:f1:ad:75: d4:46:12:94:fa:01:33:70:c0:ec:1a:49:7e:03:1f:d0:0e:6d: b7:5e:27:21:1c:2b:4c:35:9e:bd:aa:43:23:a9:ae:58:be:e6: 59:68:62:6b:61:21:fc:fd:c0:84:2d:93:fa:ea:de:b5:5c:24: b7:30:70:1e:0e:2f:18:40:32:fe:d6:18:d2:67:91:d6:4d:6a: 45:37:50:86:06:f7:0f:67:75:1e:e0:44:39:99:c7:39:5d:cd: 90:7a:99:f8:4a:52:21:29:d8:5d:29:79:a7:39:8d:9f:6b:47: 21:f6:f9:92:63:9a:4f:0c:6d:8a:63:47:76:59:8a:b7:17:a5: e6:03:11:98:4c:3a:57:b3:db:0c:8a:a8:60:a3:67:1b:32:d4: cc:22:cc:fd:5f:a8:52:ab:cc:3c:7d:f0:f5:8b:7c:21:5a:6a: 65:b2:8e:2e:e4:9f:e6:5a:2a:ae:14:58:f9:bb:23:4b:29:93: 4a:54:68:e6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EQT9FY3Zff3IQfm9JADQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDE1YmVlMjIyNTg1ZjJkMWFhZmJmZmJhNzk1MDMxYTQ1 MTI5YzcwHhcNMjYwMTAyMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjkwMTVlMzQ1MWJlMTA4NjZkOGJhZWQyNmYxNzVkM2I3YTJiYzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIT3n6YJlw3EKc6XvKmjRMnRdI2p 9aSzHDJBMVUlRwRH7JUO45SANtd7r78o3d/dCrzNpwHiAGt9X454hX5PoerTK0WQ 0CjjO7TZUN2QXvrQZHJCQR6riDhmfmP4jR9UuzLu1jRCqh9hOM0Y0dwqfu4eqb6I f5I8KzcbGBk1fOWVM6cDg6JOUhurqNmFPVBanismXj67rqUkyeHVRc3EHNnR/XoA 88b17ntkzhDYtdqpNLiQ2ZFye3HArBKva9V5LXjl4Ja4MPXIKcUdqTi3tF5+I4Av K1twX7UGB/5gu6w2N1kvrnH+6gqvM2YVVU5b929xf5oaYTrGTztHONLkMQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBKQFeNFG+EIZti67SbxddO3orxNMB8GA1UdIwQY MBaAFH1BW+4iJYXy0ar7/7p5UDGkUSnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQt MmNkNGJmMjdiNjdkLzEvRXBBVjQwVWI0UWhtMkxydEp2RjEwN2VpdkUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQtMmNkNGJmMjdiNjdk LzEvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwmbXMA8E AgACMAkDBwAgAQZ4EQwwDQYJKoZIhvcNAQELBQADggEBAJOyY3FE8yXAusKZ05Zn +Z1duKRcLpyAyQq+5VoE1DG4mxVgfFQRNIBTNtfVl0LvVZLmq4z820pQq0DtiuSy 9WmbhtuGdfGtddRGEpT6ATNwwOwaSX4DH9AObbdeJyEcK0w1nr2qQyOprli+5llo YmthIfz9wIQtk/rq3rVcJLcwcB4OLxhAMv7WGNJnkdZNakU3UIYG9w9ndR7gRDmZ xzldzZB6mfhKUiEp2F0peac5jZ9rRyH2+ZJjmk8MbYpjR3ZZircXpeYDEZhMOlez 2wyKqGCjZxsy1MwizP1fqFKrzDx98PWLfCFaamWyji7kn+ZaKq4UWPm7I0spk0pU aOY= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:12 2026 by rpki-client