This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/epQedJVwRBT94oycCSPj2YdU8Tw.roa File: epQedJVwRBT94oycCSPj2YdU8Tw.roa (raw, json) Hash identifier: zh7Uj6j3oKDWZJe0YH4R9IHGVwdwn+U1F6Ti2AwnjzM= Subject key identifier: 7A:94:1E:74:95:70:44:14:FD:E2:8C:9C:09:23:E3:D9:87:54:F1:3C Certificate issuer: /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b Certificate serial: 019B78A3349A2D30773C3983028002AEC996 Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/epQedJVwRBT94oycCSPj2YdU8Tw.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 37.17.232.0/21 maxlen: 21 45.80.136.0/22 maxlen: 24 77.74.80.0/21 maxlen: 21 77.109.128.0/18 maxlen: 18 77.109.128.0/19 maxlen: 19 77.109.160.0/19 maxlen: 19 80.253.88.0/21 maxlen: 21 81.6.32.0/20 maxlen: 20 82.197.160.0/19 maxlen: 19 82.197.160.0/20 maxlen: 20 82.197.176.0/20 maxlen: 20 85.195.192.0/18 maxlen: 18 85.195.192.0/20 maxlen: 20 85.195.208.0/20 maxlen: 20 85.195.224.0/19 maxlen: 19 85.195.224.0/20 maxlen: 20 85.195.240.0/20 maxlen: 20 109.202.192.0/19 maxlen: 19 141.195.80.0/20 maxlen: 20 185.72.64.0/22 maxlen: 22 185.137.172.0/22 maxlen: 22 185.183.192.0/22 maxlen: 22 185.201.248.0/22 maxlen: 22 185.246.104.0/22 maxlen: 22 193.47.153.0/24 maxlen: 24 193.223.80.0/20 maxlen: 20 195.134.128.0/19 maxlen: 19 212.51.128.0/19 maxlen: 19 212.51.128.0/20 maxlen: 20 212.51.144.0/20 maxlen: 20 213.144.128.0/19 maxlen: 19 213.144.128.0/20 maxlen: 20 213.144.144.0/20 maxlen: 20 217.118.192.0/21 maxlen: 21 217.118.200.0/22 maxlen: 22 2001:1620::/32 maxlen: 32 2a02:168::/30 maxlen: 30 2a02:168::/32 maxlen: 32 2a02:169::/32 maxlen: 32 2a07:600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:34:9a:2d:30:77:3c:39:83:02:80:02:ae:c9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a941e7495704414fde28c9c0923e3d98754f13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:46:a6:06:32:95:99:77:69:2f:98:b3:d5: 5f:8c:0a:85:c7:0a:96:76:cb:47:96:3c:e8:26:3f: de:c0:83:01:1d:46:1e:68:44:d1:47:1f:b5:38:38: a8:3f:cf:12:94:ca:0f:84:3a:42:5a:d8:af:fa:4b: 2c:ee:90:55:32:26:2f:78:ce:54:0e:d6:3d:8e:01: 1f:97:73:d8:49:34:82:3f:79:c7:64:74:34:f9:3c: 16:96:23:26:f9:1f:31:2a:7e:9b:1a:98:2a:eb:03: 73:b3:9c:6d:53:a8:bd:a9:41:47:11:93:82:4f:aa: 26:28:a3:ce:98:f4:02:74:69:e5:2f:9b:fd:86:4f: b7:7e:23:2f:13:2a:86:f3:7b:b9:17:60:99:5d:f7: 33:eb:7e:cb:d1:38:06:a0:7e:3a:da:6b:c6:bb:09: 90:8c:c7:a0:03:07:12:30:0b:49:ff:33:75:18:29: 8f:cf:bb:9e:5b:90:a5:02:03:84:ca:93:7b:bf:31: 08:2d:79:0f:f2:2f:f7:21:ce:86:6b:13:b5:45:c0: 88:fa:98:52:89:cb:3c:1f:c9:c2:b5:df:83:8d:a4: 19:b0:dd:3d:13:df:16:80:36:7b:63:40:a0:aa:39: 89:46:aa:29:13:dc:fd:64:cf:56:ff:3d:fe:8e:f9: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:1E:74:95:70:44:14:FD:E2:8C:9C:09:23:E3:D9:87:54:F1:3C X509v3 Authority Key Identifier: keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/epQedJVwRBT94oycCSPj2YdU8Tw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.17.232.0/21 45.80.136.0/22 77.74.80.0/21 77.109.128.0/18 80.253.88.0/21 81.6.32.0/20 82.197.160.0/19 85.195.192.0/18 109.202.192.0/19 141.195.80.0/20 185.72.64.0/22 185.137.172.0/22 185.183.192.0/22 185.201.248.0/22 185.246.104.0/22 193.47.153.0/24 193.223.80.0/20 195.134.128.0/19 212.51.128.0/19 213.144.128.0/19 217.118.192.0-217.118.203.255 IPv6: 2001:1620::/32 2a02:168::/30 2a07:600::/29 Signature Algorithm: sha256WithRSAEncryption 9a:a5:56:da:9d:3d:e5:61:2c:c5:77:cd:a7:0d:6c:87:a9:d9: f3:12:f7:75:0d:fd:80:55:f6:e8:17:1b:b4:14:9e:cf:03:e5: 84:7b:52:b3:bd:9e:1f:33:c8:9e:96:37:81:23:a5:5b:ec:16: 66:68:43:d4:4b:1b:79:ab:87:f2:88:6a:20:c3:32:ae:cd:3b: 4d:6c:52:49:d8:d2:5a:26:17:25:d1:8b:44:82:87:89:66:2d: 0a:44:b7:b6:b1:15:b5:65:9d:88:5a:da:e0:82:e0:a5:c1:5b: a9:2c:d6:cc:fa:bc:40:6b:b9:89:41:e4:ff:35:b0:45:b0:65: 8f:35:54:ea:83:de:5b:b8:18:f9:97:3c:9b:33:64:47:fa:63: 6f:84:27:d9:e3:f5:e2:29:74:e9:e7:12:28:90:37:35:3b:57: 80:d3:c2:49:d5:af:95:76:ac:44:78:ec:fc:21:52:b4:bb:e1: 59:15:05:37:e1:a2:d5:a4:c6:f0:8b:df:63:45:d0:f2:d5:7f: 4d:5f:77:b0:35:59:32:c3:51:f2:c0:e6:e0:f4:89:fb:d8:63: 98:91:83:65:69:3b:05:e7:ee:d7:05:e5:30:5a:b9:8f:53:a2: 4f:91:85:98:30:62:b1:eb:2e:bd:54:20:f6:b9:65:bd:9a:dc: f0:51:96:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgISAZt4ozSaLTB3PDmDAoACrsmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNDc5NTE0OTU5Mzk3YzVlM2ZhNzZlMWVhNDk1ZThlMWY2 YzMxOWIwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk0MWU3NDk1NzA0NDE0ZmRlMjhjOWMwOTIzZTNkOTg3NTRmMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kVGpgYylZl3aS+Ys9VfjAqFxwqW dstHljzoJj/ewIMBHUYeaETRRx+1ODioP88SlMoPhDpCWtiv+kss7pBVMiYveM5U DtY9jgEfl3PYSTSCP3nHZHQ0+TwWliMm+R8xKn6bGpgq6wNzs5xtU6i9qUFHEZOC T6omKKPOmPQCdGnlL5v9hk+3fiMvEyqG83u5F2CZXfcz637L0TgGoH462mvGuwmQ jMegAwcSMAtJ/zN1GCmPz7ueW5ClAgOEypN7vzEILXkP8i/3Ic6GaxO1RcCI+phS ics8H8nCtd+DjaQZsN09E98WgDZ7Y0CgqjmJRqopE9z9ZM9W/z3+jvlc2QIDAQAB o4ICqzCCAqcwHQYDVR0OBBYEFHqUHnSVcEQU/eKMnAkj49mHVPE8MB8GA1UdIwQY MBaAFINHlRSVk5fF4/p24epJXo4fbDGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUt MWU1ZTQzMGRkNzExLzEvZXBRZWRKVndSQlQ5NG95Y0NTUGoyWWRVOFR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lMDkxODEtMjY0My00MTRjLThmYmUtMWU1ZTQzMGRkNzEx LzEvZzBlVkZKV1RsOFhqLW5iaDZrbGVqaDlzTVpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHABggrBgEFBQcBBwEB/wSBsDCBrTCBjQQCAAEwgYYDBAMl EegDBAItUIgDBANNSlADBAZNbYADBANQ/VgDBARRBiADBAVSxaADBAZVw8ADBAVt ysADBASNw1ADBAK5SEADBAK5iawDBAK5t8ADBAK5yfgDBAK59mgDBADBL5kDBATB 31ADBAXDhoADBAXUM4ADBAXVkIAwDAMEBtl2wAMEAtl2yDAbBAIAAjAVAwUAIAEW IAMFAioCAWgDBQMqBwYAMA0GCSqGSIb3DQEBCwUAA4IBAQCapVbanT3lYSzFd82n DWyHqdnzEvd1Df2AVfboFxu0FJ7PA+WEe1KzvZ4fM8ieljeBI6Vb7BZmaEPUSxt5 q4fyiGogwzKuzTtNbFJJ2NJaJhcl0YtEgoeJZi0KRLe2sRW1ZZ2IWtrgguClwVup LNbM+rxAa7mJQeT/NbBFsGWPNVTqg95buBj5lzybM2RH+mNvhCfZ4/XiKXTp5xIo kDc1O1eA08JJ1a+VdqxEeOz8IVK0u+FZFQU34aLVpMbwi99jRdDy1X9NX3ewNVky w1HywObg9In72GOYkYNlaTsF5+7XBeUwWrmPU6JPkYWYMGKx6y69VCD2uWW9mtzw UZaR -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:09 2026 by rpki-client