This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CPEL-SA4oq3RiH3CAaOpHF7VFyw.roa File: CPEL-SA4oq3RiH3CAaOpHF7VFyw.roa (raw, json) Hash identifier: zst5XjyF5nWs74CD0cMvZd/wvOhOu5kedwe/j4vylnE= Subject key identifier: 08:F1:0B:F9:20:38:A2:AD:D1:88:7D:C2:01:A3:A9:1C:5E:D5:17:2C Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019B7E3931BB610365813767A7FE1667FF9B Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CPEL-SA4oq3RiH3CAaOpHF7VFyw.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 163.5.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:31:bb:61:03:65:81:37:67:a7:fe:16:67:ff:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08f10bf92038a2add1887dc201a3a91c5ed5172c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:77:d2:9b:5c:12:99:26:83:b8:4e:27:a9: ae:12:c6:cb:d6:9c:47:ea:bb:41:fd:b0:e0:31:6f: bb:12:13:c7:6e:66:40:87:6a:10:0b:19:84:f7:7f: e5:da:ec:76:70:a0:73:af:ff:17:34:ae:97:90:3c: 67:a4:07:c1:0c:cb:d9:d0:43:8d:eb:30:38:da:32: 61:57:04:4c:46:19:86:2c:63:f7:cc:91:5f:7b:35: a7:72:73:dd:fe:48:e9:97:57:0f:fa:fc:10:7a:11: 0f:7c:ae:79:18:19:b0:10:59:d5:fc:eb:cc:9b:c4: 7e:af:ea:81:71:a6:1a:e1:d9:8e:14:07:48:0e:c7: a3:b8:e7:57:61:cb:46:7d:80:c0:74:19:6f:10:87: 0d:9b:f9:f9:74:12:84:ca:9b:24:07:55:dc:05:1a: 03:75:72:96:b0:81:b2:96:71:3d:c6:42:12:35:f1: 5c:5e:cf:eb:2a:41:8a:2b:5c:87:ee:2c:50:c8:d6: 10:df:1d:b8:f4:10:be:23:6a:fc:b8:11:8e:51:92: b6:45:07:22:92:e6:d7:2a:ad:03:0f:37:16:e0:a7: d1:40:c2:0e:34:8f:1e:10:66:5b:40:34:ac:aa:10: fa:51:a8:86:7f:1b:f8:c8:1d:66:d0:8c:60:84:74: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F1:0B:F9:20:38:A2:AD:D1:88:7D:C2:01:A3:A9:1C:5E:D5:17:2C X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CPEL-SA4oq3RiH3CAaOpHF7VFyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.207.0/24 Signature Algorithm: sha256WithRSAEncryption 46:a2:d3:4e:9a:5e:19:3a:ea:f2:6c:79:1b:62:50:4d:0b:c5: 1a:13:79:02:16:eb:cb:97:c4:70:98:62:03:dc:98:4f:58:62: f5:10:7f:ec:18:b4:1b:1a:e4:58:6c:2d:47:e6:ec:14:76:2d: 29:b2:0c:b7:c4:44:a6:3a:a3:c5:e2:cf:9b:a2:c9:93:1d:dc: dc:c4:f6:0e:a0:79:9d:0c:5b:23:2a:6c:3b:26:3e:38:a4:ab: 09:1c:d5:b3:eb:06:37:78:fa:30:75:be:82:4a:7a:fb:19:c4: 0f:0d:1a:8a:6e:05:ac:88:ac:ab:a2:bd:27:86:c3:b6:92:83: 7c:6c:1b:5e:e4:d2:cd:58:13:e5:87:b5:1f:ec:eb:2e:c9:1a: 5d:19:19:3d:3a:52:8d:c2:f8:8d:62:10:f3:93:be:fa:72:c0: f0:85:2a:f2:9a:5a:35:a0:97:4b:83:88:a7:e4:6d:cf:39:79: d9:a7:67:69:75:89:e2:bd:89:23:82:f1:dc:5a:95:5b:17:94: 9c:b0:2f:4d:d1:7d:4c:29:16:a3:b8:94:8c:da:28:f8:84:0f: aa:d8:9f:d7:c8:59:2e:b7:f6:ae:f9:ed:40:b5:42:ee:d0:7e: 4a:45:28:e2:42:d6:b0:7c:92:9f:cb:d2:5f:ce:7f:b8:58:be: 77:37:6d:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OTG7YQNlgTdnp/4WZ/+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGYxMGJmOTIwMzhhMmFkZDE4ODdkYzIwMWEzYTkxYzVlZDUxNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fl30ptcEpkmg7hOJ6muEsbL1pxH 6rtB/bDgMW+7EhPHbmZAh2oQCxmE93/l2ux2cKBzr/8XNK6XkDxnpAfBDMvZ0EON 6zA42jJhVwRMRhmGLGP3zJFfezWncnPd/kjpl1cP+vwQehEPfK55GBmwEFnV/OvM m8R+r+qBcaYa4dmOFAdIDsejuOdXYctGfYDAdBlvEIcNm/n5dBKEypskB1XcBRoD dXKWsIGylnE9xkISNfFcXs/rKkGKK1yH7ixQyNYQ3x249BC+I2r8uBGOUZK2RQci kubXKq0DDzcW4KfRQMIONI8eEGZbQDSsqhD6UaiGfxv4yB1m0IxghHSdDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjxC/kgOKKt0Yh9wgGjqRxe1RcsMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvQ1BFTC1TQTRvcTNSaUgzQ0FhT3BIRjdWRnl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXPMA0G CSqGSIb3DQEBCwUAA4IBAQBGotNOml4ZOurybHkbYlBNC8UaE3kCFuvLl8RwmGID 3JhPWGL1EH/sGLQbGuRYbC1H5uwUdi0psgy3xESmOqPF4s+bosmTHdzcxPYOoHmd DFsjKmw7Jj44pKsJHNWz6wY3ePowdb6CSnr7GcQPDRqKbgWsiKyror0nhsO2koN8 bBte5NLNWBPlh7Uf7OsuyRpdGRk9OlKNwviNYhDzk776csDwhSrymlo1oJdLg4in 5G3POXnZp2dpdYnivYkjgvHcWpVbF5ScsC9N0X1MKRajuJSM2ij4hA+q2J/XyFku t/au+e1AtULu0H5KRSjiQtawfJKfy9Jfzn+4WL53N21S -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:14 2026 by rpki-client