This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/epJ5NtfvH1g3tuK4xd9nscSiEoA.roa File: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (raw, json) Hash identifier: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8= Subject key identifier: 7A:92:79:36:D7:EF:1F:58:37:B6:E2:B8:C5:DF:67:B1:C4:A2:12:80 Certificate issuer: /CN=69b01927a1a177d4261221d94628514a525a96e0 Certificate serial: 019B7F83F3D80619D08BCD08FA0EF01C6614 Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/epJ5NtfvH1g3tuK4xd9nscSiEoA.roa Signing time: Fri 02 Jan 2026 16:21:52 +0000 ROA not before: Fri 02 Jan 2026 16:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16267 IP address blocks: 213.146.0.0/19 maxlen: 19 2a01:4960::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f3:d8:06:19:d0:8b:cd:08:fa:0e:f0:1c:66:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0 Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a927936d7ef1f5837b6e2b8c5df67b1c4a21280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:d3:d1:c6:c8:43:06:a4:b6:cd:d0:67:fa: 71:28:2b:9b:8c:fe:03:11:f6:c6:a4:f9:e8:15:23: 6d:b0:71:1b:2c:d5:53:c7:0c:e9:c4:91:40:a8:b9: 27:c4:65:84:5f:dd:c9:d7:4f:f4:ae:28:6b:30:05: 61:7a:9e:0b:96:d0:4d:6d:99:4b:c8:25:e8:10:d0: 3e:fd:0b:5f:8d:28:32:50:6c:97:cf:ef:03:31:d2: 89:67:71:b5:5f:c2:16:f9:72:11:7f:dc:27:d3:16: d6:f7:b3:44:c3:1e:0e:21:fb:71:e1:33:99:8e:60: 99:d9:21:51:24:6c:f6:72:9b:81:bd:f7:dd:1f:b3: 93:b6:69:f9:c0:24:da:ea:f4:d4:ef:bb:2d:53:a7: f7:fa:7f:6e:c7:70:49:12:59:d1:1b:c5:00:e2:45: bc:e2:00:5e:4c:c5:3a:d1:7d:d2:ee:2d:37:30:8e: 8c:51:ec:7a:eb:84:21:74:a0:7f:e4:69:3f:bf:e8: c7:e9:84:14:20:3f:7e:27:24:6d:1e:c8:ad:e7:4b: 3e:89:36:ef:c9:fb:1d:f2:7e:23:eb:5a:7e:10:f9: 09:da:ee:8d:e8:64:f3:c1:2a:df:58:27:f8:60:59: f0:b1:76:23:e7:e2:de:ae:7b:e4:a7:52:f0:f0:a6: c6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:92:79:36:D7:EF:1F:58:37:B6:E2:B8:C5:DF:67:B1:C4:A2:12:80 X509v3 Authority Key Identifier: keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/epJ5NtfvH1g3tuK4xd9nscSiEoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.146.0.0/19 IPv6: 2a01:4960::/32 Signature Algorithm: sha256WithRSAEncryption 93:ae:42:f8:d2:11:f9:1f:88:78:9a:fa:27:0c:56:d6:73:f6: 84:a6:25:c8:e4:40:73:6e:de:80:bd:a2:63:a3:fa:b0:13:ac: 23:54:1f:61:40:d5:e0:31:40:4d:01:2d:dd:b9:73:59:67:b8: 25:7d:b2:f2:8c:0a:15:d7:8d:00:da:e5:dc:e7:3d:17:db:3f: f9:1c:2a:52:70:f0:11:cf:fd:7d:94:b1:f9:22:8c:c3:65:6d: 14:7c:14:e3:06:df:f4:2d:e9:bf:30:aa:08:2a:a0:82:5d:cf: ec:9a:9f:ac:76:68:db:52:84:78:fa:1b:40:25:92:40:2a:fc: 0a:07:29:52:e0:fa:b7:4c:ae:29:2f:32:0d:b0:b0:8f:22:0a: 61:4d:8c:8a:88:f7:c6:a8:c0:90:6b:0a:fb:45:09:0c:f7:de: 31:8d:f7:60:c1:6a:a7:25:35:a9:48:99:15:ee:cd:8a:65:1c: 8b:9b:24:17:54:1c:2d:a6:6c:0e:f7:8a:8b:74:37:31:fa:74: 23:fc:fe:6f:52:d5:d2:f0:3f:75:df:85:07:e5:af:8e:54:57: 50:13:3e:ec:58:a2:b1:0b:89:a4:dc:f2:28:57:87:0f:9d:10: e9:72:54:5a:26:4d:d9:7b:45:0d:3f:44:bd:32:d5:05:55:cb: 59:76:33:fc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g/PYBhnQi80I+g7wHGYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YjAxOTI3YTFhMTc3ZDQyNjEyMjFkOTQ2Mjg1MTRhNTI1 YTk2ZTAwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTkyNzkzNmQ3ZWYxZjU4MzdiNmUyYjhjNWRmNjdiMWM0YTIxMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOnT0cbIQwakts3QZ/pxKCubjP4D EfbGpPnoFSNtsHEbLNVTxwzpxJFAqLknxGWEX93J10/0rihrMAVhep4LltBNbZlL yCXoENA+/QtfjSgyUGyXz+8DMdKJZ3G1X8IW+XIRf9wn0xbW97NEwx4OIftx4TOZ jmCZ2SFRJGz2cpuBvffdH7OTtmn5wCTa6vTU77stU6f3+n9ux3BJElnRG8UA4kW8 4gBeTMU60X3S7i03MI6MUex664QhdKB/5Gk/v+jH6YQUID9+JyRtHsit50s+iTbv yfsd8n4j61p+EPkJ2u6N6GTzwSrfWCf4YFnwsXYj5+Lernvkp1Lw8KbGlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHqSeTbX7x9YN7biuMXfZ7HEohKAMB8GA1UdIwQY MBaAFGmwGSehoXfUJhIh2UYoUUpSWpbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTIt MjI1MmJjY2ZkYmY5LzEvZXBKNU50ZnZIMWczdHVLNHhkOW5zY1NpRW9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8zMjhlYjMtNTYwMy00OTU1LWFhOTItMjI1MmJjY2ZkYmY5 LzEvYWJBWko2R2hkOVFtRWlIWlJpaFJTbEphbHVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQF1ZIAMA0E AgACMAcDBQAqAUlgMA0GCSqGSIb3DQEBCwUAA4IBAQCTrkL40hH5H4h4mvonDFbW c/aEpiXI5EBzbt6AvaJjo/qwE6wjVB9hQNXgMUBNAS3duXNZZ7glfbLyjAoV140A 2uXc5z0X2z/5HCpScPARz/19lLH5IozDZW0UfBTjBt/0Lem/MKoIKqCCXc/smp+s dmjbUoR4+htAJZJAKvwKBylS4Pq3TK4pLzINsLCPIgphTYyKiPfGqMCQawr7RQkM 994xjfdgwWqnJTWpSJkV7s2KZRyLmyQXVBwtpmwO94qLdDcx+nQj/P5vUtXS8D91 34UH5a+OVFdQEz7sWKKxC4mk3PIoV4cPnRDpclRaJk3Ze0UNP0S9MtUFVctZdjP8 -----END CERTIFICATE-----Generated at Fri Jan 9 16:28:20 2026 by rpki-client