This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa File: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (raw, json) Hash identifier: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY= Subject key identifier: 10:FF:84:02:0A:A2:0E:2D:54:C5:CD:66:2C:FE:37:46:BB:E8:59:ED Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Certificate serial: 019B76EB39C679428BEE1B2465495AC40F4C Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa Signing time: Thu 01 Jan 2026 00:18:05 +0000 ROA not before: Thu 01 Jan 2026 00:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29319 IP address blocks: 84.23.32.0/20 maxlen: 32 84.23.46.0/23 maxlen: 32 217.70.16.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:39:c6:79:42:8b:ee:1b:24:65:49:5a:c4:0f:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Validity Not Before: Jan 1 00:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ff84020aa20e2d54c5cd662cfe3746bbe859ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:9e:58:c0:5d:22:49:c3:10:88:2b:cb:a7: 71:69:7d:30:2a:eb:39:82:30:3b:18:3a:4d:bb:f1: d0:4f:fb:60:06:c1:5c:9c:c8:f7:5e:6d:2c:e0:44: 78:33:f0:89:b2:11:fb:15:d4:e1:7e:fd:e5:36:65: 01:0b:3a:80:21:d8:3a:46:6e:84:03:95:85:2d:7d: d0:79:28:46:2c:3b:82:e6:0e:b3:87:37:4d:79:d6: 8e:28:1d:b5:47:c9:43:65:2a:18:00:55:16:f8:af: c9:7e:10:4c:e9:0f:48:79:02:2e:e7:0d:9b:2f:b2: a7:ed:7f:b5:80:8d:2d:3f:92:58:b4:a6:e6:b0:de: 32:d0:e2:f9:19:cc:a3:a3:6d:20:43:ca:a2:d8:fe: 1e:db:74:62:79:f5:d2:98:36:97:6a:91:09:49:1f: d6:c8:18:46:96:ad:da:1c:8b:63:57:2a:bb:ee:f0: 4d:72:05:91:13:0c:de:df:23:78:a2:4c:e9:1a:25: 64:67:73:c1:31:f3:b5:ce:c0:23:0b:a4:7f:15:02: a4:b7:4e:b3:7f:fb:29:65:d9:de:af:29:77:8c:ed: e7:60:e8:b2:63:47:90:da:6f:56:b5:94:09:bc:b9: cd:d0:c2:a0:54:9b:9c:4d:c7:93:00:7d:ef:d8:cd: 40:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FF:84:02:0A:A2:0E:2D:54:C5:CD:66:2C:FE:37:46:BB:E8:59:ED X509v3 Authority Key Identifier: keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.23.32.0/20 217.70.16.0/20 Signature Algorithm: sha256WithRSAEncryption b0:19:7e:e0:39:65:4c:07:0b:33:1f:26:8e:db:82:6c:e3:a8: ad:c5:21:68:3a:c9:4e:a5:1d:87:fa:92:a4:a4:d8:f2:56:af: a1:68:1c:83:a1:4a:ff:7e:df:4a:52:a8:e8:b3:38:fe:1f:10: 21:b1:55:2c:7f:90:0c:0b:c1:25:ac:1d:46:25:d9:b6:e3:db: 09:ed:0b:97:93:eb:0f:1e:c1:37:08:5c:b0:ac:6a:7a:6d:ee: f2:01:f6:fa:e7:d5:78:05:fc:5a:e5:0c:b7:80:4c:c3:b6:e3: db:a8:49:ef:ef:e9:ef:2a:66:ea:fc:93:78:06:fb:43:b5:3c: 6d:de:5c:9e:17:36:58:d9:68:c2:9f:14:d6:f3:03:00:bf:33: 2a:8a:5a:fe:97:c5:a3:ea:d6:e5:9c:63:b3:17:f0:0c:67:95: b0:aa:78:ec:e7:e3:2f:4d:d5:ba:12:02:a0:d0:88:44:b8:bf: 7a:14:7c:21:60:f2:fe:5f:32:11:da:7c:23:90:7e:47:89:28: c1:3f:65:d1:13:5a:61:eb:35:5c:41:4c:26:24:3f:58:8e:5d: 72:09:1b:b0:f4:99:f0:a5:e5:ca:5e:a5:1e:d4:9d:15:96:7d: 6d:75:03:e8:8c:ad:99:be:a8:97:e1:bb:52:ec:d6:c6:e2:d3: ca:00:7b:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26znGeUKL7hskZUlaxA9MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm ZGM2MGEwHhcNMjYwMTAxMDAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGZmODQwMjBhYTIwZTJkNTRjNWNkNjYyY2ZlMzc0NmJiZTg1OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iWeWMBdIknDEIgry6dxaX0wKus5 gjA7GDpNu/HQT/tgBsFcnMj3Xm0s4ER4M/CJshH7FdThfv3lNmUBCzqAIdg6Rm6E A5WFLX3QeShGLDuC5g6zhzdNedaOKB21R8lDZSoYAFUW+K/JfhBM6Q9IeQIu5w2b L7Kn7X+1gI0tP5JYtKbmsN4y0OL5Gcyjo20gQ8qi2P4e23RiefXSmDaXapEJSR/W yBhGlq3aHItjVyq77vBNcgWREwze3yN4okzpGiVkZ3PBMfO1zsAjC6R/FQKkt06z f/spZdneryl3jO3nYOiyY0eQ2m9WtZQJvLnN0MKgVJucTceTAH3v2M1AHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBD/hAIKog4tVMXNZiz+N0a76FntMB8GA1UdIwQY MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt NGRlZjU3MzY1MTY5LzEvRVAtRUFncWlEaTFVeGMxbUxQNDNScnZvV2UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5 LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEVBcgAwQE 2UYQMA0GCSqGSIb3DQEBCwUAA4IBAQCwGX7gOWVMBwszHyaO24Js46itxSFoOslO pR2H+pKkpNjyVq+haByDoUr/ft9KUqjoszj+HxAhsVUsf5AMC8ElrB1GJdm249sJ 7QuXk+sPHsE3CFywrGp6be7yAfb659V4Bfxa5Qy3gEzDtuPbqEnv7+nvKmbq/JN4 BvtDtTxt3lyeFzZY2WjCnxTW8wMAvzMqilr+l8Wj6tblnGOzF/AMZ5Wwqnjs5+Mv TdW6EgKg0IhEuL96FHwhYPL+XzIR2nwjkH5HiSjBP2XRE1ph6zVcQUwmJD9Yjl1y CRuw9JnwpeXKXqUe1J0Vln1tdQPojK2ZvqiX4btS7NbG4tPKAHuM -----END CERTIFICATE-----Generated at Thu Jan 1 12:46:57 2026 by rpki-client