This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/celudLIkwqQs5BVcabVek4AUA_8.roa File: celudLIkwqQs5BVcabVek4AUA_8.roa (raw, json) Hash identifier: Z6ja4JJYaOm0UOAS7DT4QbK0buCK6md62bjvBxBcr0o= Subject key identifier: 71:E9:6E:74:B2:24:C2:A4:2C:E4:15:5C:69:B5:5E:93:80:14:03:FF Certificate issuer: /CN=98845584ac8094c1806b73a6f53e46b9a28e812b Certificate serial: 019B78A24D6AD62CFC59D38CFD7B8C6700DB Authority key identifier: 98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/celudLIkwqQs5BVcabVek4AUA_8.roa Signing time: Thu 01 Jan 2026 08:17:41 +0000 ROA not before: Thu 01 Jan 2026 08:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59497 IP address blocks: 176.110.102.0/23 maxlen: 23 176.110.102.0/24 maxlen: 24 176.110.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.mft rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:4d:6a:d6:2c:fc:59:d3:8c:fd:7b:8c:67:00:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98845584ac8094c1806b73a6f53e46b9a28e812b Validity Not Before: Jan 1 08:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71e96e74b224c2a42ce4155c69b55e93801403ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:b7:08:8a:cf:80:87:33:96:bc:9d:59:5c: 28:d4:6b:e7:fc:05:3b:28:71:23:44:3c:c2:f6:3e: 09:e2:f7:66:be:75:c6:cf:4f:da:6f:8c:58:0f:23: eb:21:8b:52:c4:7c:fd:c7:8b:6c:21:b2:df:09:5e: 5f:52:f5:7f:81:97:35:35:8f:0e:1a:62:4f:4b:fa: 99:70:f4:04:b8:00:0a:e5:88:de:02:a1:63:b6:a2: 47:57:9b:00:cc:b8:6f:82:b3:79:f7:93:03:1a:c0: 86:01:12:2a:6c:e1:5e:2d:cd:5e:1f:cf:14:c3:0f: 4a:e8:f2:dc:8c:23:48:58:e8:06:6d:6b:86:d2:3f: 70:b2:52:81:c6:49:9a:ce:57:ec:d3:68:a3:d5:14: 3b:a3:1c:6b:8a:52:d9:c3:08:85:36:bf:e9:d8:cc: 44:40:33:4f:48:16:3f:57:f2:96:00:2f:6f:32:04: 69:03:30:78:e7:13:c7:da:1a:e5:db:43:3e:f7:7b: 9b:47:0b:1e:ad:7b:10:2b:c9:c5:69:53:c7:74:73: 05:02:bd:01:18:17:a1:86:0a:97:76:15:8a:4e:05: 74:a2:01:af:68:97:8b:c4:76:38:2c:86:e7:6c:d5: 42:63:1d:32:2d:29:11:18:6f:c4:00:12:28:64:4d: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E9:6E:74:B2:24:C2:A4:2C:E4:15:5C:69:B5:5E:93:80:14:03:FF X509v3 Authority Key Identifier: keyid:98:84:55:84:AC:80:94:C1:80:6B:73:A6:F5:3E:46:B9:A2:8E:81:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIRVhKyAlMGAa3Om9T5GuaKOgSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/celudLIkwqQs5BVcabVek4AUA_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/813010-a96f-4510-9dbc-21f7751ca76c/1/mIRVhKyAlMGAa3Om9T5GuaKOgSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.110.102.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:d2:05:ed:26:ca:8d:87:22:64:84:6b:09:64:76:d4:45:5c: 31:d9:7b:3a:61:d0:b7:c9:6a:b9:d6:4e:d6:81:87:23:2c:b9: ab:92:65:37:59:a5:47:a4:f0:15:49:77:11:d3:4f:83:c6:e1: b7:cd:21:77:19:46:43:79:ce:8b:fa:37:fd:7c:6d:14:f4:9a: ac:9b:41:3f:b9:d6:5e:29:60:64:a7:9d:d7:da:6d:24:5e:46: 30:ac:d1:ad:2b:fb:d6:6d:6c:ce:69:b7:7c:d2:75:2b:85:19: 7a:d3:ec:c4:f5:9e:c6:4c:33:77:69:66:e6:ce:17:42:d3:cf: af:c0:41:51:a1:a2:ca:01:5b:6b:b7:d2:0b:98:fd:87:b2:b7: 5f:48:0b:a0:ac:74:0f:fc:f6:54:b0:65:9e:9c:b1:fd:95:c8: fd:02:98:72:58:98:04:d0:50:48:3f:4d:75:7c:a0:61:3c:59: b0:9c:3c:91:40:2d:25:38:0f:7c:f7:35:81:66:d4:74:e6:76: 12:b1:f4:6a:e1:90:5c:93:0d:eb:0d:d4:d4:42:0f:40:a3:f9: be:64:d2:5a:6a:1f:45:c8:15:82:8c:2d:eb:fa:ea:89:4e:70: 81:8b:2f:06:dc:5b:7e:1c:3b:1e:88:8b:36:9e:15:6b:ab:84: 82:35:19:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ok1q1iz8WdOM/XuMZwDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODQ1NTg0YWM4MDk0YzE4MDZiNzNhNmY1M2U0NmI5YTI4 ZTgxMmIwHhcNMjYwMTAxMDgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWU5NmU3NGIyMjRjMmE0MmNlNDE1NWM2OWI1NWU5MzgwMTQwM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo23CIrPgIczlrydWVwo1Gvn/AU7 KHEjRDzC9j4J4vdmvnXGz0/ab4xYDyPrIYtSxHz9x4tsIbLfCV5fUvV/gZc1NY8O GmJPS/qZcPQEuAAK5YjeAqFjtqJHV5sAzLhvgrN595MDGsCGARIqbOFeLc1eH88U ww9K6PLcjCNIWOgGbWuG0j9wslKBxkmazlfs02ij1RQ7oxxrilLZwwiFNr/p2MxE QDNPSBY/V/KWAC9vMgRpAzB45xPH2hrl20M+93ubRwserXsQK8nFaVPHdHMFAr0B GBehhgqXdhWKTgV0ogGvaJeLxHY4LIbnbNVCYx0yLSkRGG/EABIoZE3sEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHHpbnSyJMKkLOQVXGm1XpOAFAP/MB8GA1UdIwQY MBaAFJiEVYSsgJTBgGtzpvU+RrmijoErMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMt MjFmNzc1MWNhNzZjLzEvY2VsdWRMSWt3cVFzNUJWY2FiVmVrNEFVQV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi84MTMwMTAtYTk2Zi00NTEwLTlkYmMtMjFmNzc1MWNhNzZj LzEvbUlSVmhLeUFsTUdBYTNPbTlUNUd1YUtPZ1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsG5mMA0G CSqGSIb3DQEBCwUAA4IBAQBO0gXtJsqNhyJkhGsJZHbURVwx2Xs6YdC3yWq51k7W gYcjLLmrkmU3WaVHpPAVSXcR00+DxuG3zSF3GUZDec6L+jf9fG0U9Jqsm0E/udZe KWBkp53X2m0kXkYwrNGtK/vWbWzOabd80nUrhRl60+zE9Z7GTDN3aWbmzhdC08+v wEFRoaLKAVtrt9ILmP2HsrdfSAugrHQP/PZUsGWenLH9lcj9AphyWJgE0FBIP011 fKBhPFmwnDyRQC0lOA989zWBZtR05nYSsfRq4ZBckw3rDdTUQg9Ao/m+ZNJaah9F yBWCjC3r+uqJTnCBiy8G3Ft+HDseiIs2nhVrq4SCNRkS -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:31 2026 by rpki-client