This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ceEv1t749F4uxJkZjXzVLrcY0W4.roa File: ceEv1t749F4uxJkZjXzVLrcY0W4.roa (raw, json) Hash identifier: CPEu9mzzQjkaDfnSXyi14ADFRqiihJHheO6fccq1E38= Subject key identifier: 71:E1:2F:D6:DE:F8:F4:5E:2E:C4:99:19:8D:7C:D5:2E:B7:18:D1:6E Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019B7EA73C231320F255E2FBE3DE1211E671 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ceEv1t749F4uxJkZjXzVLrcY0W4.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47376 IP address blocks: 91.222.196.0/24 maxlen: 24 91.222.197.0/24 maxlen: 24 103.215.220.0/22 maxlen: 22 103.215.220.0/24 maxlen: 24 103.215.221.0/24 maxlen: 24 103.215.223.0/24 maxlen: 24 185.221.239.0/24 maxlen: 24 195.28.11.0/24 maxlen: 24 195.234.191.0/24 maxlen: 24 195.238.231.0/24 maxlen: 24 195.238.240.0/24 maxlen: 24 195.238.247.0/24 maxlen: 24 2a05:63c0::/29 maxlen: 29 2a05:63c0::/30 maxlen: 30 2a05:63c0::/48 maxlen: 48 2a0f:c040::/29 maxlen: 29 2a10:ef04:1001::/48 maxlen: 48 2a10:ef04:1002::/48 maxlen: 48 2a10:ef04:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3c:23:13:20:f2:55:e2:fb:e3:de:12:11:e6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71e12fd6def8f45e2ec499198d7cd52eb718d16e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:7e:51:a8:2d:05:0b:67:ce:e5:79:70:23: bf:34:68:e3:f0:9b:df:51:df:6a:29:1a:85:f7:fc: 22:82:5d:2f:73:e2:01:7e:77:34:8e:6e:72:da:63: dd:89:a8:a2:35:e6:3b:c2:94:bd:d5:97:95:2c:a4: 0d:2e:cd:43:2c:80:ea:00:f1:25:ce:b0:ce:dc:c4: ca:38:d0:6e:b3:26:43:09:bc:ec:45:40:ef:f3:d5: 7a:47:9d:09:23:b7:41:3d:a9:3d:b2:78:5b:5f:99: a0:e4:4b:39:cc:f6:3e:71:13:f5:44:a6:b1:fd:0d: 61:86:c2:3c:99:86:bb:3f:7a:a2:95:f7:b1:72:7e: 48:3f:f4:bd:2d:90:96:04:7b:ec:95:1a:d2:b9:f8: 55:3c:07:64:74:f0:7d:ac:12:4b:52:40:9d:80:74: ef:6d:fa:89:58:75:59:38:05:26:83:53:65:18:12: d4:04:aa:f3:1e:a4:1e:e4:17:e8:f3:9b:11:b8:fc: 43:ba:aa:d5:25:d8:33:40:a8:04:98:d2:e5:6c:3b: 80:3c:a2:3e:ff:39:9f:54:e5:ec:b8:c3:38:e0:50: d6:15:da:b7:19:e2:c5:65:da:5b:a5:28:2e:4a:ae: 47:80:69:08:a5:0d:f4:43:a8:6c:84:be:0c:22:fc: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E1:2F:D6:DE:F8:F4:5E:2E:C4:99:19:8D:7C:D5:2E:B7:18:D1:6E X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ceEv1t749F4uxJkZjXzVLrcY0W4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.196.0/23 103.215.220.0/22 185.221.239.0/24 195.28.11.0/24 195.234.191.0/24 195.238.231.0/24 195.238.240.0/24 195.238.247.0/24 IPv6: 2a05:63c0::/29 2a0f:c040::/29 2a10:ef04:1001::-2a10:ef04:1003:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8e:80:64:7e:68:8d:21:d9:3f:30:ab:22:d0:f4:c7:41:32:9d: 60:89:6d:15:11:95:19:25:fe:9f:3c:4a:8d:c0:03:16:18:9e: c8:18:a2:aa:f4:c6:a2:fb:56:5e:f2:b2:bc:3c:87:e0:76:ae: a5:c3:41:f5:f5:1f:00:60:19:cc:b7:86:b9:2a:5f:e0:71:12: 22:37:2f:1c:a0:ec:ee:7d:51:14:84:5d:ad:70:88:f8:df:dc: d3:7e:52:81:9d:83:96:15:16:59:43:b7:98:02:02:b2:b6:61: 17:f1:a5:49:e1:5b:61:b9:c2:66:16:6a:9b:81:d6:97:61:79: d4:24:e4:61:23:3a:be:a8:1b:27:5c:1d:98:fc:8b:bf:5f:cb: 94:95:4c:fa:6e:05:f7:35:49:d0:c0:74:f1:b1:27:ed:3a:6f: fc:07:e1:27:5c:5b:39:5f:40:1a:8a:e4:2a:4d:2a:b8:9a:3a: ed:1f:42:ef:9b:49:62:cb:e5:b6:38:99:2f:0d:a4:4e:27:af: ac:2a:d0:d0:bd:8e:c8:3b:f7:17:63:e7:20:d3:f3:11:43:ae: b2:71:3b:f5:46:ea:63:f1:00:21:b9:2e:84:a0:34:87:2b:b1: af:34:64:2e:f3:4c:1e:e0:64:2a:f5:59:37:dd:a5:2e:cf:29: c0:1f:71:7f -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt+pzwjEyDyVeL7494SEeZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWUxMmZkNmRlZjhmNDVlMmVjNDk5MTk4ZDdjZDUyZWI3MThkMTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprp+UagtBQtnzuV5cCO/NGjj8Jvf Ud9qKRqF9/wigl0vc+IBfnc0jm5y2mPdiaiiNeY7wpS91ZeVLKQNLs1DLIDqAPEl zrDO3MTKONBusyZDCbzsRUDv89V6R50JI7dBPak9snhbX5mg5Es5zPY+cRP1RKax /Q1hhsI8mYa7P3qilfexcn5IP/S9LZCWBHvslRrSufhVPAdkdPB9rBJLUkCdgHTv bfqJWHVZOAUmg1NlGBLUBKrzHqQe5Bfo85sRuPxDuqrVJdgzQKgEmNLlbDuAPKI+ /zmfVOXsuMM44FDWFdq3GeLFZdpbpSguSq5HgGkIpQ30Q6hshL4MIvxKqQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFHHhL9be+PReLsSZGY181S63GNFuMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvY2VFdjF0NzQ5RjR1eEprWmpYelZMcmNZMFc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA2BAIAATAwAwQBW97EAwQC Z9fcAwQAud3vAwQAwxwLAwQAw+q/AwQAw+7nAwQAw+7wAwQAw+73MCgEAgACMCID BQMqBWPAAwUDKg/AQDASAwcAKhDvBBABAwcCKhDvBBAAMA0GCSqGSIb3DQEBCwUA A4IBAQCOgGR+aI0h2T8wqyLQ9MdBMp1giW0VEZUZJf6fPEqNwAMWGJ7IGKKq9Mai +1Ze8rK8PIfgdq6lw0H19R8AYBnMt4a5Kl/gcRIiNy8coOzufVEUhF2tcIj439zT flKBnYOWFRZZQ7eYAgKytmEX8aVJ4VthucJmFmqbgdaXYXnUJORhIzq+qBsnXB2Y /Iu/X8uUlUz6bgX3NUnQwHTxsSftOm/8B+EnXFs5X0AaiuQqTSq4mjrtH0Lvm0li y+W2OJkvDaROJ6+sKtDQvY7IO/cXY+cg0/MRQ66ycTv1Rupj8QAhuS6EoDSHK7Gv NGQu80we4GQq9Vk33aUuzynAH3F/ -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:41 2026 by rpki-client