This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/Ep5ktzb7jazkCqqKIA1eaooWA3A.roa File: Ep5ktzb7jazkCqqKIA1eaooWA3A.roa (raw, json) Hash identifier: V0HuBh1yvdXINaO+p6RF/CkRfffpWDmrMD6p3MKWJhs= Subject key identifier: 12:9E:64:B7:36:FB:8D:AC:E4:0A:AA:8A:20:0D:5E:6A:8A:16:03:70 Certificate issuer: /CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Certificate serial: 019B7FF1FFB6D403BCA9E0DA897F3D983CAA Authority key identifier: 49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/Ep5ktzb7jazkCqqKIA1eaooWA3A.roa Signing time: Fri 02 Jan 2026 18:22:04 +0000 ROA not before: Fri 02 Jan 2026 18:22:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 185.204.180.0/22 maxlen: 22 185.204.180.0/24 maxlen: 24 185.204.181.0/24 maxlen: 24 185.204.182.0/24 maxlen: 24 185.204.183.0/24 maxlen: 24 2a0a:fbc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.mft rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:ff:b6:d4:03:bc:a9:e0:da:89:7f:3d:98:3c:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49179e7cf60488c3ef5b770d21aeb147da4c7cee Validity Not Before: Jan 2 18:22:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129e64b736fb8dace40aaa8a200d5e6a8a160370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:29:e1:f4:15:35:c2:4a:29:c9:b6:0e:d5: 68:30:98:3c:70:48:ee:70:83:f1:47:7e:af:70:2b: 81:b1:bf:f4:c6:5d:58:19:d3:ed:fc:2d:0e:67:ed: bb:36:51:01:0b:a5:4b:dc:b4:c2:24:c0:6e:cc:9a: 6c:3c:83:93:0b:17:a9:93:b3:f5:53:69:9b:22:5d: 4b:9f:af:91:31:c1:6a:83:06:6b:7f:89:cf:8d:e0: c5:d7:0a:e5:da:7d:b3:60:ba:8f:af:f2:65:5b:8b: 72:ee:a3:2d:dd:9f:ce:74:cd:67:36:f3:9a:85:af: 29:86:cb:a3:d2:df:ac:f5:37:b1:b1:52:5c:72:bf: 05:19:2d:13:5b:f0:a6:5c:92:b9:fd:86:39:79:38: a8:6e:02:40:93:59:2a:59:55:cf:c0:b2:c8:d6:30: 79:7b:2f:f1:99:20:70:6b:67:ae:b5:ed:0b:34:af: 74:81:c8:1f:18:76:82:48:4c:b9:10:64:6f:05:35: 24:28:a2:4f:ee:ea:c7:7f:99:f0:93:41:8a:45:5c: 0c:5e:37:1e:65:ce:9b:a8:42:17:08:81:02:c9:18: 73:e6:b4:3b:c3:5b:28:78:86:54:94:a1:c8:f1:04: 81:58:8d:85:a2:5c:aa:f8:5f:15:60:ee:f5:fa:89: 85:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:64:B7:36:FB:8D:AC:E4:0A:AA:8A:20:0D:5E:6A:8A:16:03:70 X509v3 Authority Key Identifier: keyid:49:17:9E:7C:F6:04:88:C3:EF:5B:77:0D:21:AE:B1:47:DA:4C:7C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SReefPYEiMPvW3cNIa6xR9pMfO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/Ep5ktzb7jazkCqqKIA1eaooWA3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d52eac-c7e2-4881-88e3-471d42c2d806/1/SReefPYEiMPvW3cNIa6xR9pMfO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.180.0/22 IPv6: 2a0a:fbc0::/29 Signature Algorithm: sha256WithRSAEncryption 65:bf:82:03:23:94:d9:4c:71:40:e9:56:15:c8:3b:8a:ac:99: 35:f0:89:0e:96:4b:35:5c:c8:3d:e2:27:dc:b9:09:c8:00:6b: e9:07:f3:90:c9:99:c6:51:34:1d:be:3e:8f:13:13:d8:00:96: 96:f7:ab:1f:c5:6c:0b:59:10:8e:5a:92:e2:e6:9c:16:77:b0: e0:50:41:47:d2:1a:21:0f:44:5f:9f:12:9c:87:2a:51:9f:56: a7:34:e4:9c:20:e7:aa:e5:79:69:15:4f:e3:c0:34:10:23:98: bc:56:06:89:b2:ec:fe:60:81:e9:02:44:57:32:3e:3a:7f:f2: 90:4d:61:49:16:5a:3b:bd:2f:14:47:fc:d8:d4:77:4a:7a:18: 8b:f3:e8:7e:0e:4f:83:25:3f:f3:17:67:0e:46:b7:56:d2:b2: 99:90:10:af:86:1b:ff:85:db:e0:e3:93:bc:17:51:31:a5:e8: 20:0e:e7:5e:e5:79:ea:c6:95:ed:1e:63:96:95:8a:fa:3b:45: a1:d9:7b:18:9d:7b:d3:97:ed:3a:2e:5b:78:0a:dc:38:ad:60: c3:6e:ba:96:cf:9f:c8:7c:6c:23:ff:b1:80:7c:45:ed:e6:9d: a2:82:d0:aa:96:05:5e:83:09:24:bc:3b:f6:2f:66:a9:34:36: 77:0c:fd:80 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8f+21AO8qeDaiX89mDyqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MTc5ZTdjZjYwNDg4YzNlZjViNzcwZDIxYWViMTQ3ZGE0 YzdjZWUwHhcNMjYwMTAyMTgyMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjllNjRiNzM2ZmI4ZGFjZTQwYWFhOGEyMDBkNWU2YThhMTYwMzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAungp4fQVNcJKKcm2DtVoMJg8cEju cIPxR36vcCuBsb/0xl1YGdPt/C0OZ+27NlEBC6VL3LTCJMBuzJpsPIOTCxepk7P1 U2mbIl1Ln6+RMcFqgwZrf4nPjeDF1wrl2n2zYLqPr/JlW4ty7qMt3Z/OdM1nNvOa ha8phsuj0t+s9TexsVJccr8FGS0TW/CmXJK5/YY5eTiobgJAk1kqWVXPwLLI1jB5 ey/xmSBwa2eute0LNK90gcgfGHaCSEy5EGRvBTUkKKJP7urHf5nwk0GKRVwMXjce Zc6bqEIXCIECyRhz5rQ7w1soeIZUlKHI8QSBWI2Folyq+F8VYO71+omFGQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBKeZLc2+42s5AqqiiANXmqKFgNwMB8GA1UdIwQY MBaAFEkXnnz2BIjD71t3DSGusUfaTHzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMt NDcxZDQyYzJkODA2LzEvRXA1a3R6YjdqYXprQ3FxS0lBMWVhb29XQTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kNTJlYWMtYzdlMi00ODgxLTg4ZTMtNDcxZDQyYzJkODA2 LzEvU1JlZWZQWUVpTVB2VzNjTklhNnhSOXBNZk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucy0MA0E AgACMAcDBQMqCvvAMA0GCSqGSIb3DQEBCwUAA4IBAQBlv4IDI5TZTHFA6VYVyDuK rJk18IkOlks1XMg94ifcuQnIAGvpB/OQyZnGUTQdvj6PExPYAJaW96sfxWwLWRCO WpLi5pwWd7DgUEFH0hohD0RfnxKchypRn1anNOScIOeq5XlpFU/jwDQQI5i8VgaJ suz+YIHpAkRXMj46f/KQTWFJFlo7vS8UR/zY1HdKehiL8+h+Dk+DJT/zF2cORrdW 0rKZkBCvhhv/hdvg45O8F1ExpeggDude5XnqxpXtHmOWlYr6O0Wh2XsYnXvTl+06 Llt4Ctw4rWDDbrqWz5/IfGwj/7GAfEXt5p2igtCqlgVegwkkvDv2L2apNDZ3DP2A -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:53 2026 by rpki-client