Certificate ID: EUCC-3110-2026-2500100-01 TrustCB B.V. | www.trustcb.com | eucc@trustcb.com | Van den Berghlaan 48, 2132 AT Hoofddorp | The Netherlands TrustCB B.V certifies that ICT Product Cisco ASR 9000 Series Aggregation Services Routers running IOS-XR 7.11 of Certificate holder and developer Cisco Systems, Inc. 170 West Tasman Drive, 95134 San Jose, CA, USA Certificate contact: certteam@cisco.com Website link https://www.cisco.com/c/en/us/solutions/industries/government/global-government- certifications/common-criteria.html Complies to the requirements described in the Standard: ISO/IEC 15408-1 :2009, -2 :2008, -3 :2008, Common Criteria for Information Technology Security Evaluation (CC) version 3.1 revision 5 and ISO/IEC 18045 :2008, Common Criteria Evaluation Methodology for Information Security Evaluation (CEM) version 3.1 revision 5 Summarised as: Certification Report EUCC-3110-2026-2500100-01 Certification Report TOE type Generic software and network products Assurance EUCC Level: Substantial Protection Profile: collaborative Protection Profile for Network Devices, version 3.0e dated 06 December 2023, validated under NIAP 25 April 2024, with Functional Package for Secure Shell (SSH), v1.0, 13 May, 2021 Specific assurance package conformance: ASE_INT.1, ASE_CCL.1, ASE_SPD.1, ASE_OBJ.1, ASE_ECD.1, ASE.REQ.1, ASE.TSS.1, ADV_FSP.1, AGD_OPE.1, AGD_PRE.1, ALC_CMC.1, ALC_CMS.1, ATE_IND.1, AVA_VAN.1 and ALC_FLR.2 As evaluated by: Applus+ Laboratories located in Madrid, Spain Under scheme: European Cybersecurity Certification Scheme (EUCC), (EU) 2024/482 of 31-01- 2024, amended by (EU) 2024/3144 of 18-12-2024 and (EU) 2025/2462 of 8-12-2025 Authorised by: The Dutch Authority for Digital Infrastructure (RDI) This certificate is valid for five years from the latest stated issue date until, and including, the stated certificate expiry date unless otherwise suspended or withdrawn. Date of 1st issue: 28-04-2026 Certificate expiry: 28-04-2031 Wouter Slegers, CEO