This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/epxl9L9HWnrGUI5XuexvyGVngTU.roa File: epxl9L9HWnrGUI5XuexvyGVngTU.roa (raw, json) Hash identifier: 6h181ow5CoYXxR4oepREBM0W4TQFaDLQ6AfqnnaQ+Lg= Subject key identifier: 7A:9C:65:F4:BF:47:5A:7A:C6:50:8E:57:B9:EC:6F:C8:65:67:81:35 Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07 Certificate serial: 019B7A5B4EE7FAEEFBBD1AC91C0FD1F4D794 Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/epxl9L9HWnrGUI5XuexvyGVngTU.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 79.171.222.0/23 maxlen: 24 152.89.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.mft rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4e:e7:fa:ee:fb:bd:1a:c9:1c:0f:d1:f4:d7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07 Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a9c65f4bf475a7ac6508e57b9ec6fc865678135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0a:77:1b:12:e2:8a:23:70:99:de:53:3a:61: 63:48:92:99:8b:9e:9c:50:64:dd:e0:b2:4a:82:48: 1d:69:ff:56:03:f4:53:cf:8d:cf:44:b9:e0:25:a8: 5c:6c:ca:6d:48:6b:ee:e8:e7:7e:38:39:32:4f:34: 36:bb:9b:49:7c:99:48:9f:8c:d7:f6:0b:33:1c:e9: d7:bc:9a:d3:a4:a8:57:e3:ce:e5:3b:eb:70:d5:88: f8:51:f6:9b:62:84:44:65:4f:30:2b:11:0c:86:05: 7c:f4:09:f4:05:1b:ea:d2:be:d3:12:57:d2:73:71: 74:4c:a5:40:c2:14:64:63:4f:24:b7:46:1f:03:52: ba:06:04:ee:40:46:34:46:ec:9f:b7:1b:cb:83:f4: ba:95:8a:90:22:85:14:43:5a:ae:7d:6a:23:b9:44: bf:d9:6b:27:3d:02:61:5d:0a:50:1f:c7:fb:22:40: 59:bd:01:be:18:f8:4b:7a:87:ae:a4:a8:31:1e:dd: cb:8b:d2:e2:46:00:6d:b5:ac:cf:2b:dc:26:b5:ac: 9a:0b:fd:13:f9:e1:01:03:fb:27:90:7b:01:ec:d3: b9:68:3e:fa:72:35:6a:3b:47:86:4f:32:2b:2b:99: 60:31:a1:26:87:d1:ea:72:5b:de:7c:3e:2e:d0:51: 04:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9C:65:F4:BF:47:5A:7A:C6:50:8E:57:B9:EC:6F:C8:65:67:81:35 X509v3 Authority Key Identifier: keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/epxl9L9HWnrGUI5XuexvyGVngTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.222.0/23 152.89.164.0/22 Signature Algorithm: sha256WithRSAEncryption 84:0e:b0:c0:7c:73:38:02:56:ac:82:e1:36:0f:7a:82:49:32: 4c:5e:9f:8e:17:33:5e:df:34:35:27:9d:cc:04:f8:4f:da:c1: 0e:0d:6f:f7:2f:0b:39:76:97:12:87:26:66:30:3a:68:21:24: 8b:c0:81:c8:7c:90:c9:ab:e3:f5:ff:af:74:41:43:79:9c:d2: 5a:dd:fd:68:57:a2:8f:30:73:02:d7:e0:aa:1e:04:54:36:11: b5:b0:99:00:ff:c9:ee:f4:d8:4f:ec:d0:73:d3:67:ee:da:0f: 7c:4a:83:f1:58:5a:9a:27:ac:7c:b2:4f:e4:2e:07:23:db:04: db:3c:2d:4a:3a:eb:00:8a:f5:83:9d:f1:c3:74:fe:01:0a:cd: f2:f9:ee:da:21:9a:83:ab:e4:a7:e9:60:ae:46:bf:d3:89:0b: 89:65:ad:8b:7b:ff:fb:db:8a:d0:51:f4:4a:42:14:9e:29:ed: 0e:75:35:61:f4:4e:43:5d:0c:19:26:b7:48:5c:04:df:0c:98: 7b:bf:a5:8f:a2:e1:30:aa:25:48:59:b4:4f:62:8c:a3:c3:a0: 93:23:59:73:e7:1f:4c:52:02:2f:6d:c1:87:ae:a4:03:64:e0: e0:c3:86:b8:34:31:21:c8:bc:13:e2:f7:4b:ca:44:61:81:5e: f8:3a:81:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W07n+u77vRrJHA/R9NeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWIzOTRhYWUwODM2ZDM0MzQxZjdhZDMxOTQ5NDc2NWFi NTZiMDcwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTljNjVmNGJmNDc1YTdhYzY1MDhlNTdiOWVjNmZjODY1Njc4MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQp3GxLiiiNwmd5TOmFjSJKZi56c UGTd4LJKgkgdaf9WA/RTz43PRLngJahcbMptSGvu6Od+ODkyTzQ2u5tJfJlIn4zX 9gszHOnXvJrTpKhX487lO+tw1Yj4UfabYoREZU8wKxEMhgV89An0BRvq0r7TElfS c3F0TKVAwhRkY08kt0YfA1K6BgTuQEY0RuyftxvLg/S6lYqQIoUUQ1qufWojuUS/ 2WsnPQJhXQpQH8f7IkBZvQG+GPhLeoeupKgxHt3Li9LiRgBttazPK9wmtayaC/0T +eEBA/snkHsB7NO5aD76cjVqO0eGTzIrK5lgMaEmh9HqclvefD4u0FEEOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHqcZfS/R1p6xlCOV7nsb8hlZ4E1MB8GA1UdIwQY MBaAFNzrOUquCDbTQ0H3rTGUlHZatWsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEt NDBjODZiMzJlYjIyLzEvZXB4bDlMOUhXbnJHVUk1WHVleHZ5R1ZuZ1RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjA2NGYtYjAxYS00MzcxLWE0NGEtNDBjODZiMzJlYjIy LzEvM09zNVNxNElOdE5EUWZldE1aU1VkbHExYXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBT6veAwQC mFmkMA0GCSqGSIb3DQEBCwUAA4IBAQCEDrDAfHM4AlasguE2D3qCSTJMXp+OFzNe 3zQ1J53MBPhP2sEODW/3Lws5dpcShyZmMDpoISSLwIHIfJDJq+P1/690QUN5nNJa 3f1oV6KPMHMC1+CqHgRUNhG1sJkA/8nu9NhP7NBz02fu2g98SoPxWFqaJ6x8sk/k Lgcj2wTbPC1KOusAivWDnfHDdP4BCs3y+e7aIZqDq+Sn6WCuRr/TiQuJZa2Le//7 24rQUfRKQhSeKe0OdTVh9E5DXQwZJrdIXATfDJh7v6WPouEwqiVIWbRPYoyjw6CT I1lz5x9MUgIvbcGHrqQDZODgw4a4NDEhyLwT4vdLykRhgV74OoGg -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:30 2026 by rpki-client