This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa
File: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (raw, json)
Hash identifier: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=
Subject key identifier: 71:EF:41:D3:18:AA:1A:FD:FE:E9:75:6C:A2:15:4F:FF:89:90:DA:77
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 019B79111290045E6D5CB80635E4E5358A99
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa
Signing time: Thu 01 Jan 2026 10:18:40 +0000
ROA not before: Thu 01 Jan 2026 10:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15404
IP address blocks: 62.85.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Jan 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:12:90:04:5e:6d:5c:b8:06:35:e4:e5:35:8a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Jan 1 10:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ef41d318aa1afdfee9756ca2154fff8990da77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:16:7a:37:05:c7:1b:ef:f9:54:77:6f:9f:3c:
05:28:d2:b5:24:16:0b:fd:c5:e5:83:9c:88:c7:88:
dc:8c:2d:29:30:47:27:74:82:1f:da:12:f8:f6:22:
f7:41:32:fe:40:ae:b2:8f:76:f4:5f:59:51:9a:7e:
0f:42:49:09:3b:92:e8:47:e9:1c:e9:21:4f:27:8b:
15:cd:52:bd:6a:a1:47:af:ec:5c:fe:5c:b5:79:fb:
40:4c:b7:95:69:02:57:ca:9e:c7:3c:2f:6f:31:6d:
f6:99:32:15:eb:06:95:d4:91:5f:37:ca:5d:3c:cc:
36:5a:57:6b:aa:f4:9f:69:35:64:0b:f5:4a:34:44:
84:38:19:03:bf:7b:33:4c:1a:54:39:30:4b:94:24:
2c:f5:43:ab:fe:8e:84:e4:6c:33:10:65:41:07:35:
14:97:04:8f:83:ca:9f:59:60:2a:98:6e:e4:2f:66:
6b:ef:97:d4:a5:b5:ed:e3:3d:0e:ba:dd:7a:74:14:
c2:ac:fe:92:75:ea:67:2d:39:66:e9:e4:44:6c:5b:
65:01:a1:c8:38:75:b1:89:c2:f1:69:ab:a3:8e:2c:
b3:25:bd:b0:7a:31:04:c0:55:58:7f:13:43:14:b0:
36:73:68:0d:45:b4:43:5e:7c:df:18:df:bf:74:90:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:41:D3:18:AA:1A:FD:FE:E9:75:6C:A2:15:4F:FF:89:90:DA:77
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.160.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:72:df:00:ad:eb:58:60:a2:7e:27:d3:b7:a6:1a:d9:2c:24:
e5:5d:4e:18:ad:a5:cb:0c:a4:a7:ad:80:7e:66:20:69:30:a2:
38:47:21:eb:19:7e:5d:28:e9:07:53:5a:eb:df:c6:4d:c9:f1:
79:28:a7:35:3a:fe:59:9d:23:17:05:ec:28:bc:0f:88:0c:ad:
ae:14:d7:50:98:80:70:7b:a8:0a:da:eb:c1:79:7e:95:f5:59:
b1:da:24:79:8b:ab:9c:0e:b0:bc:15:e1:c1:bb:56:a4:f8:96:
8e:b5:4e:c1:aa:10:1d:2e:91:87:e8:15:5f:72:5e:bb:bf:04:
a8:37:5c:93:c9:2e:16:fb:a1:fd:bf:7c:b7:a7:ac:c5:63:8b:
ec:41:d0:b3:37:03:15:da:e0:76:35:3f:95:74:88:99:5e:48:
ac:6f:aa:6d:13:ed:ab:ee:70:a3:b7:d1:5e:7d:6f:23:08:0b:
57:28:9c:fb:d9:49:d0:b5:d6:70:be:cd:8c:57:d4:1e:7f:28:
4b:4d:8e:38:ad:78:2c:f4:4e:7b:02:c4:e9:ae:c5:1c:3c:39:
1c:50:a2:cc:12:f5:4a:84:7d:88:33:4c:31:af:b3:77:f0:ed:
3a:36:c2:b1:28:dc:45:ad:aa:a2:e1:f2:80:c8:91:e6:75:8c:
61:07:d8:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5ERKQBF5tXLgGNeTlNYqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk
MzUxNDUwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWVmNDFkMzE4YWExYWZkZmVlOTc1NmNhMjE1NGZmZjg5OTBkYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphZ6NwXHG+/5VHdvnzwFKNK1JBYL
/cXlg5yIx4jcjC0pMEcndIIf2hL49iL3QTL+QK6yj3b0X1lRmn4PQkkJO5LoR+kc
6SFPJ4sVzVK9aqFHr+xc/ly1eftATLeVaQJXyp7HPC9vMW32mTIV6waV1JFfN8pd
PMw2WldrqvSfaTVkC/VKNESEOBkDv3szTBpUOTBLlCQs9UOr/o6E5GwzEGVBBzUU
lwSPg8qfWWAqmG7kL2Zr75fUpbXt4z0Out16dBTCrP6SdepnLTlm6eREbFtlAaHI
OHWxicLxaaujjiyzJb2wejEEwFVYfxNDFLA2c2gNRbRDXnzfGN+/dJBANQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHvQdMYqhr9/ul1bKIVT/+JkNp3MB8GA1UdIwQY
MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct
ZGVjNjgwODNmOGY2LzEvY2U5QjB4aXFHdjMtNlhWc29oVlBfNG1RMm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2
LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPlWgMA0G
CSqGSIb3DQEBCwUAA4IBAQCuct8AretYYKJ+J9O3phrZLCTlXU4YraXLDKSnrYB+
ZiBpMKI4RyHrGX5dKOkHU1rr38ZNyfF5KKc1Ov5ZnSMXBewovA+IDK2uFNdQmIBw
e6gK2uvBeX6V9Vmx2iR5i6ucDrC8FeHBu1ak+JaOtU7BqhAdLpGH6BVfcl67vwSo
N1yTyS4W+6H9v3y3p6zFY4vsQdCzNwMV2uB2NT+VdIiZXkisb6ptE+2r7nCjt9Fe
fW8jCAtXKJz72UnQtdZwvs2MV9QefyhLTY44rXgs9E57AsTprsUcPDkcUKLMEvVK
hH2IM0wxr7N38O06NsKxKNxFraqi4fKAyJHmdYxhB9g3
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:17:03 2026 by rpki-client