This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/Ce4JyywtGautS3Mm-3lISrYaav8.roa File: Ce4JyywtGautS3Mm-3lISrYaav8.roa (raw, json) Hash identifier: DFy+SIFzF79vZYLgz25dFA2syP1C5Krxgn24PEVhiiA= Subject key identifier: 09:EE:09:CB:2C:2D:19:AB:AD:4B:73:26:FB:79:48:4A:B6:1A:6A:FF Certificate issuer: /CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5 Certificate serial: 019B7835150BC5E12202111D7580C6BD4F2C Authority key identifier: E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/Ce4JyywtGautS3Mm-3lISrYaav8.roa Signing time: Thu 01 Jan 2026 06:18:23 +0000 ROA not before: Thu 01 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51548 IP address blocks: 45.13.96.0/22 maxlen: 22 2a0e:e300::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.mft rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:15:0b:c5:e1:22:02:11:1d:75:80:c6:bd:4f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e51f3efed57f85c0717ba586386bcd92ddc5c7b5 Validity Not Before: Jan 1 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ee09cb2c2d19abad4b7326fb79484ab61a6aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a7:1a:61:b6:b1:83:8f:15:75:64:47:31:02: f3:8e:76:3d:97:6c:c5:a5:c5:31:be:28:58:8b:a1: fa:88:19:3d:8f:c4:3c:f3:b0:af:ed:c0:cf:16:5c: 94:86:f3:32:87:68:01:ee:e5:06:51:6f:14:b1:f3: 5e:e7:8e:eb:cd:98:08:7a:58:6c:f3:d2:01:bb:f7: 92:b9:b2:88:5c:f4:c0:8d:ad:52:b2:31:5a:17:d4: 08:c0:75:c3:45:e7:ef:37:7b:06:d5:c3:ab:c6:9e: 69:19:33:35:17:94:4b:00:7a:13:fa:b9:be:97:1f: 6b:2f:b8:a7:43:14:70:80:11:17:ca:4d:4d:2e:62: d8:b1:43:56:e2:51:70:ac:10:ff:15:c7:e3:d5:1a: b6:e0:70:44:55:94:cb:fb:35:94:4a:f7:5c:f3:d6: 7d:50:70:a6:1c:b5:5e:8f:cc:d0:a5:7b:35:52:a9: 58:b0:77:eb:04:ec:67:e9:d0:07:58:0a:4f:90:96: f6:8c:06:2d:dd:62:31:34:44:02:c6:26:a0:eb:04: 43:de:fb:ce:57:6b:88:0c:01:df:6c:d9:8c:94:0c: ff:e9:0c:1d:6d:d8:34:a3:d9:bc:b0:52:12:9f:1f: 12:f9:83:cc:e3:6c:f1:50:e1:c7:e7:1e:a2:87:f2: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EE:09:CB:2C:2D:19:AB:AD:4B:73:26:FB:79:48:4A:B6:1A:6A:FF X509v3 Authority Key Identifier: keyid:E5:1F:3E:FE:D5:7F:85:C0:71:7B:A5:86:38:6B:CD:92:DD:C5:C7:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/Ce4JyywtGautS3Mm-3lISrYaav8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b955fd-39e8-42e6-ac54-af69480080ce/1/5R8-_tV_hcBxe6WGOGvNkt3Fx7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.96.0/22 IPv6: 2a0e:e300::/29 Signature Algorithm: sha256WithRSAEncryption 52:b0:b6:8e:8a:44:57:8e:9e:76:0f:04:d7:03:37:1e:12:7e: fe:38:99:5e:0f:48:14:02:68:29:58:19:37:b4:9b:66:fb:cd: c0:5d:db:b5:09:cd:45:e9:11:b5:b9:ff:2d:22:0f:83:39:a0: 78:40:66:80:d5:80:e8:ed:62:9f:83:b7:89:8d:66:70:7d:a8: bd:9f:cf:57:4d:e2:95:a8:9a:7d:5e:ad:41:be:44:ec:29:b6: e7:51:c6:27:4d:3c:1a:58:af:63:0c:9c:6d:ea:5f:3c:88:62: 89:f7:19:25:8b:e8:69:78:9d:a5:90:15:01:e3:26:9c:1f:27: d4:e3:02:da:06:9a:13:ce:43:f3:30:3d:2d:23:ed:26:f7:87: 17:0b:95:d4:bf:b9:27:19:c7:d3:29:e6:28:e7:f0:ad:3a:48: d0:eb:9e:24:79:2b:71:16:4d:b6:09:c9:f6:87:d5:b6:77:5b: 70:ff:43:21:ae:df:51:db:db:97:00:7c:12:a5:29:b8:8e:b7: 33:7c:4c:b6:e8:ba:b5:86:0c:ab:b0:19:e9:61:88:05:40:d7: 4f:fb:9e:c6:ee:cb:c5:17:d6:40:5f:c3:ca:d0:e5:0f:b1:c2: 3a:87:a9:78:be:7b:4b:4e:4a:4c:94:5e:c2:d4:78:27:f5:12: 1a:8f:1b:7b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NRULxeEiAhEddYDGvU8sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MWYzZWZlZDU3Zjg1YzA3MTdiYTU4NjM4NmJjZDkyZGRj NWM3YjUwHhcNMjYwMTAxMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWVlMDljYjJjMmQxOWFiYWQ0YjczMjZmYjc5NDg0YWI2MWE2YWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6caYbaxg48VdWRHMQLzjnY9l2zF pcUxvihYi6H6iBk9j8Q887Cv7cDPFlyUhvMyh2gB7uUGUW8UsfNe547rzZgIelhs 89IBu/eSubKIXPTAja1SsjFaF9QIwHXDRefvN3sG1cOrxp5pGTM1F5RLAHoT+rm+ lx9rL7inQxRwgBEXyk1NLmLYsUNW4lFwrBD/Fcfj1Rq24HBEVZTL+zWUSvdc89Z9 UHCmHLVej8zQpXs1UqlYsHfrBOxn6dAHWApPkJb2jAYt3WIxNEQCxiag6wRD3vvO V2uIDAHfbNmMlAz/6Qwdbdg0o9m8sFISnx8S+YPM42zxUOHH5x6ih/JVEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAnuCcssLRmrrUtzJvt5SEq2Gmr/MB8GA1UdIwQY MBaAFOUfPv7Vf4XAcXulhjhrzZLdxce1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iOTU1ZmQtMzllOC00MmU2LWFjNTQt YWY2OTQ4MDA4MGNlLzEvQ2U0Snl5d3RHYXV0UzNNbS0zbElTcllhYXY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iOTU1ZmQtMzllOC00MmU2LWFjNTQtYWY2OTQ4MDA4MGNl LzEvNVI4LV90Vl9oY0J4ZTZXR09Hdk5rdDNGeDdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQ1gMA0E AgACMAcDBQMqDuMAMA0GCSqGSIb3DQEBCwUAA4IBAQBSsLaOikRXjp52DwTXAzce En7+OJleD0gUAmgpWBk3tJtm+83AXdu1Cc1F6RG1uf8tIg+DOaB4QGaA1YDo7WKf g7eJjWZwfai9n89XTeKVqJp9Xq1BvkTsKbbnUcYnTTwaWK9jDJxt6l88iGKJ9xkl i+hpeJ2lkBUB4yacHyfU4wLaBpoTzkPzMD0tI+0m94cXC5XUv7knGcfTKeYo5/Ct OkjQ654keStxFk22Ccn2h9W2d1tw/0Mhrt9R29uXAHwSpSm4jrczfEy26Lq1hgyr sBnpYYgFQNdP+57G7svFF9ZAX8PK0OUPscI6h6l4vntLTkpMlF7C1Hgn9RIajxt7 -----END CERTIFICATE-----Generated at Tue Feb 3 00:01:29 2026 by rpki-client