This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/ceyOuOPjIFLM94nq_gIZQX5eqOk.roa File: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (raw, json) Hash identifier: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8= Subject key identifier: 71:EC:8E:B8:E3:E3:20:52:CC:F7:89:EA:FE:02:19:41:7E:5E:A8:E9 Certificate issuer: /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Certificate serial: 019B7B35593BDA989913FA1131EC9C5EDCD9 Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/ceyOuOPjIFLM94nq_gIZQX5eqOk.roa Signing time: Thu 01 Jan 2026 20:17:32 +0000 ROA not before: Thu 01 Jan 2026 20:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 193.17.68.0/24 maxlen: 24 193.30.161.0/24 maxlen: 24 193.200.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 05:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:59:3b:da:98:99:13:fa:11:31:ec:9c:5e:dc:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97 Validity Not Before: Jan 1 20:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71ec8eb8e3e32052ccf789eafe0219417e5ea8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:a5:78:bd:75:e6:8d:f5:ad:55:32:06:f7: fb:7b:04:db:cf:d7:a6:d3:df:5d:9c:62:66:d2:45: df:b1:14:8d:d0:53:9a:cb:a7:1d:db:98:a1:9c:32: c6:73:50:7d:e0:30:1e:2d:64:a8:12:03:b6:15:33: 22:f3:fa:e6:c9:04:22:a6:9b:8d:2e:4e:d8:ae:5e: 4a:ac:5e:66:6f:5b:21:d7:63:f8:52:4d:39:83:3d: 7b:9d:8d:d0:ab:29:d4:11:46:b0:9d:8b:ec:41:07: aa:1e:62:c2:2c:38:fe:4b:5f:d1:b6:61:4e:e0:1c: 36:85:6c:a6:86:97:24:72:7e:dd:57:dc:d4:96:8f: a3:b7:44:32:b2:0a:4c:4e:68:e1:83:25:75:f9:07: f9:c1:34:0b:dc:e7:f8:ce:b2:d9:3a:76:da:b3:f8: aa:7d:39:cd:06:c9:a9:59:42:74:37:0e:69:68:e5: 0e:5a:36:42:38:88:c3:3c:3d:2d:33:e7:8e:3d:03: 14:c7:8e:9c:68:97:f0:9f:d5:65:ad:e7:75:26:68: a1:a0:62:dd:e1:21:d6:8a:12:eb:05:d1:0f:a7:68: ba:68:d8:68:0c:e8:74:30:e8:6b:01:c3:97:41:1c: 0f:b9:59:ce:82:ef:65:f0:c8:32:80:59:2e:4a:9a: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EC:8E:B8:E3:E3:20:52:CC:F7:89:EA:FE:02:19:41:7E:5E:A8:E9 X509v3 Authority Key Identifier: keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/ceyOuOPjIFLM94nq_gIZQX5eqOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.17.68.0/24 193.30.161.0/24 193.200.30.0/24 Signature Algorithm: sha256WithRSAEncryption ce:24:5d:7c:da:12:05:d2:1d:33:18:e6:6b:bf:a4:87:7d:c1: 10:1a:4f:5a:65:74:19:6f:ce:53:65:8e:be:80:31:ad:b6:a2: 25:40:2f:66:ab:5c:b1:6e:89:de:ba:3d:9a:3f:17:c5:f3:d1: b9:7c:57:5e:13:c0:79:75:4e:78:8c:be:4d:75:ce:cf:e1:b6: 9b:bf:4d:32:32:9d:74:65:cf:20:b8:d2:ad:8f:46:69:9b:75: 7c:21:9d:b6:e8:7c:15:30:d3:b8:41:7b:58:3e:29:d6:8c:17: b1:d4:44:1b:c4:27:38:88:7f:b0:7b:59:f6:81:81:da:82:ea: cd:c5:00:8c:14:78:c1:1c:b9:7e:c6:4d:55:20:fe:57:2c:a7: d5:38:8c:d0:95:86:7b:d3:0d:a3:69:67:37:91:e7:c8:0e:05: 4f:13:23:ce:03:2e:24:b0:c1:11:b5:d3:64:33:07:21:3e:2d: 62:32:77:4f:4e:1c:6d:29:47:3b:de:6f:7d:ef:54:ff:af:58: 0f:24:fe:68:14:f4:44:b0:cd:b9:17:5e:5e:80:f9:af:90:48: e2:89:b2:95:7f:df:56:3c:64:25:8c:e1:ca:3a:35:c5:e7:67: 7e:c8:36:eb:7e:aa:8b:6a:fa:aa:dd:15:d3:13:1f:8f:da:cc: 85:73:19:de -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NVk72piZE/oRMeycXtzZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YTcxNGZmYzU5OGIxNTY0N2JiYWZlMmM2NDYwYTg3ZWFm YmNmOTcwHhcNMjYwMTAxMjAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWVjOGViOGUzZTMyMDUyY2NmNzg5ZWFmZTAyMTk0MTdlNWVhOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvuleL115o31rVUyBvf7ewTbz9em 099dnGJm0kXfsRSN0FOay6cd25ihnDLGc1B94DAeLWSoEgO2FTMi8/rmyQQippuN Lk7Yrl5KrF5mb1sh12P4Uk05gz17nY3QqynUEUawnYvsQQeqHmLCLDj+S1/RtmFO 4Bw2hWymhpckcn7dV9zUlo+jt0QysgpMTmjhgyV1+Qf5wTQL3Of4zrLZOnbas/iq fTnNBsmpWUJ0Nw5paOUOWjZCOIjDPD0tM+eOPQMUx46caJfwn9Vlred1JmihoGLd 4SHWihLrBdEPp2i6aNhoDOh0MOhrAcOXQRwPuVnOgu9l8MgygFkuSppwtQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHHsjrjj4yBSzPeJ6v4CGUF+XqjpMB8GA1UdIwQY MBaAFOSnFP/FmLFWR7uv4sZGCofq+8+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTkt N2NiMzQ1ZTg1NDFhLzEvY2V5T3VPUGpJRkxNOTRucV9nSVpRWDVlcU9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kOTZkYTYtMTJiMi00NDZlLThkOTktN2NiMzQ1ZTg1NDFh LzEvNUtjVV84V1lzVlpIdTZfaXhrWUtoLXI3ejVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwRFEAwQA wR6hAwQAwcgeMA0GCSqGSIb3DQEBCwUAA4IBAQDOJF182hIF0h0zGOZrv6SHfcEQ Gk9aZXQZb85TZY6+gDGttqIlQC9mq1yxboneuj2aPxfF89G5fFdeE8B5dU54jL5N dc7P4babv00yMp10Zc8guNKtj0Zpm3V8IZ226HwVMNO4QXtYPinWjBex1EQbxCc4 iH+we1n2gYHagurNxQCMFHjBHLl+xk1VIP5XLKfVOIzQlYZ70w2jaWc3kefIDgVP EyPOAy4ksMERtdNkMwchPi1iMndPThxtKUc73m9971T/r1gPJP5oFPREsM25F15e gPmvkEjiibKVf99WPGQljOHKOjXF52d+yDbrfqqLavqq3RXTEx+P2syFcxne -----END CERTIFICATE-----Generated at Fri Jan 2 14:22:13 2026 by rpki-client