This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/CELtx_w2YKvhcshbAzy_KtHwb-o.roa File: CELtx_w2YKvhcshbAzy_KtHwb-o.roa (raw, json) Hash identifier: oxCcj5etuo7lkmx7jOopiUeSNDyskGwkVPCCmA0veRY= Subject key identifier: 08:42:ED:C7:FC:36:60:AB:E1:72:C8:5B:03:3C:BF:2A:D1:F0:6F:EA Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee Certificate serial: 019B7EA7353CCF07D02E36BEC1BB5A88C41B Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/CELtx_w2YKvhcshbAzy_KtHwb-o.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204818 IP address blocks: 46.182.4.0/22 maxlen: 22 185.158.4.0/22 maxlen: 22 217.16.0.0/20 maxlen: 20 2a05:36c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:35:3c:cf:07:d0:2e:36:be:c1:bb:5a:88:c4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0842edc7fc3660abe172c85b033cbf2ad1f06fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:cb:1f:a4:44:50:92:a8:dc:f6:0e:b1:50: ca:d1:95:59:7d:fc:f0:ab:6b:f7:2e:25:ba:75:10: 78:f5:12:cd:35:8a:23:51:67:3d:4e:85:59:81:95: ca:e7:0a:c2:57:8a:35:52:e7:18:06:ea:5c:49:92: 38:55:22:ad:da:0a:2b:f1:b7:84:f6:22:75:b6:38: 61:06:3a:26:de:8c:39:a6:81:7e:3e:d0:6c:0f:97: 91:79:df:3a:8a:45:f4:2e:4b:85:92:69:fd:f7:93: 2f:27:8b:13:d6:7e:e0:02:68:6c:9b:b3:71:18:8d: 72:87:cf:22:a5:65:db:e0:21:d8:32:56:b0:73:a5: 15:75:28:51:be:1e:9c:ee:14:42:c5:3d:06:c8:5c: 38:fb:9c:10:83:7f:97:86:cb:72:e3:af:0d:b5:0e: 63:2d:4c:3f:f1:ff:14:4c:cb:cf:9c:d9:3a:ec:41: 62:a2:63:60:12:7f:12:60:5e:e9:67:8a:18:06:c2: 2f:97:bb:ed:4b:fa:8d:4d:60:89:3b:65:85:51:e3: 16:ea:81:d2:fb:df:b9:30:1c:3a:5a:0a:08:49:47: 90:31:f0:96:26:d0:c8:36:f2:eb:fe:f2:21:2e:49: 8d:5b:22:ac:b5:a0:19:76:fa:0a:5e:ab:9a:a8:f3: 79:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:42:ED:C7:FC:36:60:AB:E1:72:C8:5B:03:3C:BF:2A:D1:F0:6F:EA X509v3 Authority Key Identifier: keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/CELtx_w2YKvhcshbAzy_KtHwb-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.4.0/22 185.158.4.0/22 217.16.0.0/20 IPv6: 2a05:36c0::/29 Signature Algorithm: sha256WithRSAEncryption 42:70:f9:4b:99:eb:45:a3:5f:a5:44:cf:59:a9:ec:db:0d:18: 49:65:20:64:ea:16:01:66:4a:94:0c:3e:3b:fa:32:d9:ad:40: c3:0f:e5:d9:0b:85:3e:a5:86:f4:c3:9f:fe:38:63:ab:1d:f3: 20:0a:93:4b:33:6a:6e:91:14:83:4c:56:6d:9f:e3:4f:ec:cd: 2e:7b:44:4b:91:a2:94:82:7e:38:5b:68:7f:cd:9a:2c:f6:fb: 6d:08:38:a9:0d:66:87:dc:13:cd:af:e5:e3:25:69:ed:c7:22: a0:f5:0b:8f:84:cc:b9:02:a8:46:0d:f2:dd:09:58:7a:50:ac: 49:44:77:f9:47:b1:e9:28:47:c3:50:27:3c:d7:13:af:aa:4c: 6b:72:57:d3:e5:f5:54:32:7f:af:fe:35:b1:f0:ff:c9:69:fc: 6c:6f:c6:00:fa:9a:80:cd:bb:94:33:2d:89:60:e5:ca:b5:27: af:ed:ec:8f:13:4f:7a:2a:c6:38:72:5a:ff:86:5c:08:7d:62: e1:c6:ad:a8:36:2f:91:36:c5:14:01:fe:12:20:ce:44:ed:8c: 8a:e6:b3:c3:13:fc:2d:32:26:ed:57:e5:f0:0d:33:b7:52:98: 79:98:8e:0d:df:d7:d0:ed:cd:28:81:eb:d6:fd:de:6d:37:80: 3d:04:2d:fd -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+pzU8zwfQLja+wbtaiMQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYWZjMTRkY2U0NTBiMDVlYzg2YzdjNTMwNzBjZDZiYjZk YmM3ZWUwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODQyZWRjN2ZjMzY2MGFiZTE3MmM4NWIwMzNjYmYyYWQxZjA2ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9vLH6REUJKo3PYOsVDK0ZVZffzw q2v3LiW6dRB49RLNNYojUWc9ToVZgZXK5wrCV4o1UucYBupcSZI4VSKt2gor8beE 9iJ1tjhhBjom3ow5poF+PtBsD5eRed86ikX0LkuFkmn995MvJ4sT1n7gAmhsm7Nx GI1yh88ipWXb4CHYMlawc6UVdShRvh6c7hRCxT0GyFw4+5wQg3+Xhsty468NtQ5j LUw/8f8UTMvPnNk67EFiomNgEn8SYF7pZ4oYBsIvl7vtS/qNTWCJO2WFUeMW6oHS +9+5MBw6WgoISUeQMfCWJtDINvLr/vIhLkmNWyKstaAZdvoKXquaqPN5DwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAhC7cf8NmCr4XLIWwM8vyrR8G/qMB8GA1UdIwQY MBaAFMKvwU3ORQsF7IbHxTBwzWu228fuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYzMyODQtMzU3Ni00ZWU0LTkzYjgt MTg0N2NiODhlODNhLzEvQ0VMdHhfdzJZS3ZoY3NoYkF6eV9LdEh3Yi1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYzMyODQtMzU3Ni00ZWU0LTkzYjgtMTg0N2NiODhlODNh LzEvd3FfQlRjNUZDd1hzaHNmRk1IRE5hN2JieC00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLrYEAwQC uZ4EAwQE2RAAMA0EAgACMAcDBQMqBTbAMA0GCSqGSIb3DQEBCwUAA4IBAQBCcPlL metFo1+lRM9ZqezbDRhJZSBk6hYBZkqUDD47+jLZrUDDD+XZC4U+pYb0w5/+OGOr HfMgCpNLM2pukRSDTFZtn+NP7M0ue0RLkaKUgn44W2h/zZos9vttCDipDWaH3BPN r+XjJWntxyKg9QuPhMy5AqhGDfLdCVh6UKxJRHf5R7HpKEfDUCc81xOvqkxrclfT 5fVUMn+v/jWx8P/Jafxsb8YA+pqAzbuUMy2JYOXKtSev7eyPE096KsY4clr/hlwI fWLhxq2oNi+RNsUUAf4SIM5E7YyK5rPDE/wtMibtV+XwDTO3Uph5mI4N39fQ7c0o gevW/d5tN4A9BC39 -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:27 2026 by rpki-client