This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/IEPEUKY4ypkI5czUw-7D3lVNpYU.roa File: IEPEUKY4ypkI5czUw-7D3lVNpYU.roa (raw, json) Hash identifier: UT1ZxTsCU7M0PXyb6IAXHjMFZ0pzwPHMcsChBp8nX6M= Subject key identifier: 20:43:C4:50:A6:38:CA:99:08:E5:CC:D4:C3:EE:C3:DE:55:4D:A5:85 Certificate issuer: /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Certificate serial: 019B7BA536FF7F3754E7EAE5934146544454 Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/IEPEUKY4ypkI5czUw-7D3lVNpYU.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31712 IP address blocks: 83.142.32.0/21 maxlen: 21 95.128.8.0/21 maxlen: 21 185.108.56.0/22 maxlen: 22 2a04:4100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:36:ff:7f:37:54:e7:ea:e5:93:41:46:54:44:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2043c450a638ca9908e5ccd4c3eec3de554da585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:d3:83:08:e9:b0:d3:22:ca:36:64:a0:40: dd:87:0f:e3:48:f0:7b:d6:12:0e:ab:85:69:ee:cd: 64:be:e9:63:55:c6:15:d4:a5:6d:3c:d7:9c:4c:5d: 8c:78:ac:54:88:72:d9:22:b3:b0:e4:c9:6c:f9:1b: 05:dc:f5:26:a6:77:a7:5a:27:de:cc:af:44:ef:3b: 42:ed:a5:6e:13:e7:e5:d1:bf:bd:e5:24:9e:33:26: bb:99:5d:e1:c5:cb:78:0b:94:06:01:e5:8c:64:e5: 03:65:83:8b:e1:fa:76:7a:1d:ea:3a:9e:50:2b:92: 9f:67:bd:bb:3a:08:e2:8b:67:13:ee:84:85:af:ac: a3:15:cd:cc:04:36:35:a1:26:cd:53:72:66:8b:68: 61:5a:61:1a:d3:ba:56:c2:17:fe:b3:2a:bb:b5:c4: 0d:13:bf:ed:9f:0b:48:56:df:3e:f0:66:86:5b:df: de:eb:9f:42:e0:61:67:fd:ab:b9:b5:b3:cf:cc:87: 54:00:54:5e:c6:7e:71:c4:73:65:7e:8c:ec:e4:04: 14:c4:89:33:84:96:6c:ff:5f:b2:62:70:2a:74:59: 00:d6:cd:16:06:08:13:f4:b1:a7:5f:4c:e5:3e:83: 1d:ed:67:63:70:26:9e:92:bc:99:63:7d:f3:86:7e: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:C4:50:A6:38:CA:99:08:E5:CC:D4:C3:EE:C3:DE:55:4D:A5:85 X509v3 Authority Key Identifier: keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/IEPEUKY4ypkI5czUw-7D3lVNpYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.142.32.0/21 95.128.8.0/21 185.108.56.0/22 IPv6: 2a04:4100::/29 Signature Algorithm: sha256WithRSAEncryption 13:06:f6:da:81:1c:d5:b3:a0:c7:28:08:30:c6:db:c7:7d:cc: 0f:a6:7d:eb:42:a8:77:32:7f:0c:73:90:06:70:1d:ec:cd:8c: 55:c1:fd:b7:96:40:20:37:ea:4a:0c:cd:53:41:0c:8d:8c:72: 9b:c1:2b:4a:e3:d7:5d:38:65:bc:6a:68:67:c8:8c:a2:72:da: f7:12:20:a3:e9:22:1b:5c:7b:31:9f:e2:47:28:7d:77:73:3e: bb:db:f6:58:f1:65:23:c4:69:7b:d5:ed:35:7e:75:76:73:05: 79:d1:8e:94:51:76:4a:94:89:73:97:99:55:64:12:ef:5b:97: 40:ae:8c:d9:5e:d9:7f:7f:36:4d:5b:1b:65:32:6e:ee:c8:e4: a5:cb:e9:9d:52:8b:86:a4:3d:9a:0c:d2:88:8c:ff:92:5a:4e: 68:43:e9:5a:bb:43:48:be:36:7c:51:3b:30:55:95:cc:1e:e3: e1:1e:3f:dd:2e:9c:69:eb:ee:d1:19:ed:fa:14:18:0a:fa:45: ad:69:15:bb:a0:b5:db:10:68:cc:7a:72:79:94:ce:82:df:b4: 08:03:a6:83:4d:3b:92:04:89:b9:99:49:06:da:f5:de:e4:16: 6f:2d:38:de:65:43:80:f4:2c:30:ae:ca:60:92:65:23:1f:84: 6c:6f:12:dd -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pTb/fzdU5+rlk0FGVERUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZGUxOWZjZWUyOWY3ZjEyZWYwNmM2MGY4NjYwZWQ3MDBm ZTkwYjkwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDQzYzQ1MGE2MzhjYTk5MDhlNWNjZDRjM2VlYzNkZTU1NGRhNTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKHTgwjpsNMiyjZkoEDdhw/jSPB7 1hIOq4Vp7s1kvuljVcYV1KVtPNecTF2MeKxUiHLZIrOw5Mls+RsF3PUmpnenWife zK9E7ztC7aVuE+fl0b+95SSeMya7mV3hxct4C5QGAeWMZOUDZYOL4fp2eh3qOp5Q K5KfZ727Ogjii2cT7oSFr6yjFc3MBDY1oSbNU3Jmi2hhWmEa07pWwhf+syq7tcQN E7/tnwtIVt8+8GaGW9/e659C4GFn/au5tbPPzIdUAFRexn5xxHNlfozs5AQUxIkz hJZs/1+yYnAqdFkA1s0WBggT9LGnX0zlPoMd7WdjcCaekryZY33zhn7cwQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCBDxFCmOMqZCOXM1MPuw95VTaWFMB8GA1UdIwQY MBaAFOTeGfzuKffxLvBsYPhmDtcA/pC5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODIt YjliNDQ3MzIwOGZkLzEvSUVQRVVLWTR5cGtJNWN6VXctN0QzbFZOcFlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi83YWUyNTctM2MxYS00ZDFiLWJkODItYjliNDQ3MzIwOGZk LzEvNU40Wl9PNHA5X0V1OEd4Zy1HWU8xd0Qta0xrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDU44gAwQD X4AIAwQCuWw4MA0EAgACMAcDBQMqBEEAMA0GCSqGSIb3DQEBCwUAA4IBAQATBvba gRzVs6DHKAgwxtvHfcwPpn3rQqh3Mn8Mc5AGcB3szYxVwf23lkAgN+pKDM1TQQyN jHKbwStK49ddOGW8amhnyIyictr3EiCj6SIbXHsxn+JHKH13cz672/ZY8WUjxGl7 1e01fnV2cwV50Y6UUXZKlIlzl5lVZBLvW5dArozZXtl/fzZNWxtlMm7uyOSly+md UouGpD2aDNKIjP+SWk5oQ+lau0NIvjZ8UTswVZXMHuPhHj/dLpxp6+7RGe36FBgK +kWtaRW7oLXbEGjMenJ5lM6C37QIA6aDTTuSBIm5mUkG2vXe5BZvLTjeZUOA9Cww rspgkmUjH4RsbxLd -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:32 2026 by rpki-client