This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa File: epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa (raw, json) Hash identifier: Aa6u3inS9dGYjD1jBcsF2Mf4ginAblBytDS0JIhmA9M= Subject key identifier: 7A:96:BF:29:DC:7E:2D:56:8C:F0:2B:A1:00:E5:3D:A9:B5:00:FC:43 Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Certificate serial: 019B79ECC8138F121AF112C31518541D0772 Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa Signing time: Thu 01 Jan 2026 14:18:39 +0000 ROA not before: Thu 01 Jan 2026 14:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21263 IP address blocks: 185.159.244.0/24 maxlen: 24 2a13:780::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c8:13:8f:12:1a:f1:12:c3:15:18:54:1d:07:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673 Validity Not Before: Jan 1 14:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a96bf29dc7e2d568cf02ba100e53da9b500fc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:95:21:32:55:cd:e6:12:e6:9d:48:88:2a: 10:2d:b9:84:e8:ac:e4:a0:53:96:1e:28:86:2c:ee: 4e:4d:e9:3d:1a:70:b8:fa:ec:47:ad:4a:eb:20:e1: 45:1c:a3:38:35:72:13:96:56:e2:d5:b2:1d:3c:8c: 69:02:f2:d2:c1:91:5c:da:ae:8b:99:47:30:44:e6: 4b:01:87:25:df:c4:20:c9:09:0d:ee:f1:0c:60:32: 2d:55:f9:b0:d9:98:93:a5:c2:55:94:95:40:d0:9f: 23:ff:51:31:a8:98:8a:b8:f2:fe:0e:36:cd:95:37: 48:7d:b5:06:37:b2:50:1d:86:43:37:03:6d:5d:49: d1:25:ac:66:47:67:ff:b5:a4:41:5f:62:08:e9:cb: 4d:4d:4d:26:ac:84:9e:dc:0e:6e:c7:fe:3f:e7:ff: 04:c1:58:33:41:72:e7:0d:92:8d:07:fd:39:0d:b6: ed:86:b9:de:c0:cf:67:ea:0c:d4:e0:22:8b:48:90: 50:c8:f2:5c:eb:72:a7:97:9c:bc:11:ca:b2:97:a6: 52:86:8e:45:4a:3c:f0:2d:69:6a:71:00:0b:ee:3f: 2c:c8:cf:63:94:d3:c1:57:e7:96:56:4e:60:58:0a: d3:46:a4:0a:6c:07:1f:fb:d4:ec:ce:92:67:81:39: 17:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:96:BF:29:DC:7E:2D:56:8C:F0:2B:A1:00:E5:3D:A9:B5:00:FC:43 X509v3 Authority Key Identifier: keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.244.0/24 IPv6: 2a13:780::/29 Signature Algorithm: sha256WithRSAEncryption 27:5f:f2:d7:1e:88:5e:28:d2:16:2f:bd:75:3d:c6:3d:6f:1c: 56:60:c4:73:09:b7:2f:d2:97:b0:5c:7d:cb:57:8f:bc:47:3f: f3:94:7d:59:40:be:ee:e1:f9:8a:8e:1e:8f:ff:3b:84:c1:1c: 79:62:f9:b7:33:b8:50:48:26:25:a2:12:4c:15:7e:ed:bf:2b: 59:64:f1:bb:84:a0:23:3c:55:27:e9:36:c9:17:b9:a4:87:e7: 73:19:88:25:a9:66:97:fd:97:fc:53:3a:65:74:f6:9a:3f:8f: 60:c3:c5:bf:ee:0e:45:d7:f9:c5:51:97:21:16:26:07:56:3b: c9:9d:e9:99:83:c2:c1:66:58:d3:8f:f4:66:34:24:38:74:52: ca:3f:12:ad:26:74:5a:a1:fc:c4:6e:68:a3:90:73:50:cd:48: 61:0c:a8:6c:f8:97:2e:8f:e4:de:25:2c:3f:24:b0:18:eb:25: 3d:4e:b7:90:2f:97:3a:be:84:48:fc:b0:e3:95:6c:75:17:8d: 88:c8:fc:6f:aa:f9:0a:d6:98:88:70:5f:39:e8:a9:88:c5:0b: 20:4a:b0:c0:a9:75:5e:ec:fa:57:6f:ff:6d:40:b5:21:42:3d: 36:3c:f2:bc:f8:6f:aa:0f:81:73:81:f6:92:b1:e9:f1:c9:84: 59:cd:4f:45 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57MgTjxIa8RLDFRhUHQdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzNDdjZWQ5YTBlZDdmOTQ0YjlmNGVmYzM4NTc3YjM4ZTZk MWM2NzMwHhcNMjYwMTAxMTQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTk2YmYyOWRjN2UyZDU2OGNmMDJiYTEwMGU1M2RhOWI1MDBmYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9eVITJVzeYS5p1IiCoQLbmE6Kzk oFOWHiiGLO5OTek9GnC4+uxHrUrrIOFFHKM4NXITllbi1bIdPIxpAvLSwZFc2q6L mUcwROZLAYcl38QgyQkN7vEMYDItVfmw2ZiTpcJVlJVA0J8j/1ExqJiKuPL+DjbN lTdIfbUGN7JQHYZDNwNtXUnRJaxmR2f/taRBX2II6ctNTU0mrISe3A5ux/4/5/8E wVgzQXLnDZKNB/05DbbthrnewM9n6gzU4CKLSJBQyPJc63Knl5y8Ecqyl6ZSho5F SjzwLWlqcQAL7j8syM9jlNPBV+eWVk5gWArTRqQKbAcf+9TszpJngTkXiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHqWvyncfi1WjPAroQDlPam1APxDMB8GA1UdIwQY MBaAFPNHztmg7X+US59O/DhXezjm0cZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjIt MjMyYjRiNDY1N2U5LzEvZXBhX0tkeC1MVmFNOEN1aEFPVTlxYlVBX0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wODk2MDMtYjViZS00ZmZhLWEyYjItMjMyYjRiNDY1N2U5 LzEvODBmTzJhRHRmNVJMbjA3OE9GZDdPT2JSeG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZ/0MA0E AgACMAcDBQMqEweAMA0GCSqGSIb3DQEBCwUAA4IBAQAnX/LXHoheKNIWL711PcY9 bxxWYMRzCbcv0pewXH3LV4+8Rz/zlH1ZQL7u4fmKjh6P/zuEwRx5Yvm3M7hQSCYl ohJMFX7tvytZZPG7hKAjPFUn6TbJF7mkh+dzGYglqWaX/Zf8UzpldPaaP49gw8W/ 7g5F1/nFUZchFiYHVjvJnemZg8LBZljTj/RmNCQ4dFLKPxKtJnRaofzEbmijkHNQ zUhhDKhs+Jcuj+TeJSw/JLAY6yU9TreQL5c6voRI/LDjlWx1F42IyPxvqvkK1piI cF856KmIxQsgSrDAqXVe7PpXb/9tQLUhQj02PPK8+G+qD4FzgfaSsenxyYRZzU9F -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:45 2026 by rpki-client