This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/CE6rRh7gwkNwQsNCEV_5-qvby8o.roa File: CE6rRh7gwkNwQsNCEV_5-qvby8o.roa (raw, json) Hash identifier: +C6crj3tlveY40cfyaDLAmJKc2kjvGSJAnx+Tun2pBQ= Subject key identifier: 08:4E:AB:46:1E:E0:C2:43:70:42:C3:42:11:5F:F9:FA:AB:DB:CB:CA Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019B77C7372A30CD3D6D55CF1C85B88D52B8 Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/CE6rRh7gwkNwQsNCEV_5-qvby8o.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206264 IP address blocks: 2a00:1ca8:2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:37:2a:30:cd:3d:6d:55:cf:1c:85:b8:8d:52:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=084eab461ee0c2437042c342115ff9faabdbcbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:ac:7e:3d:ca:61:bc:37:3f:22:f0:37:03: 12:9e:d5:c7:bc:83:2e:a0:9e:e1:d5:1c:14:b9:74: 40:c5:f3:ac:c4:60:c2:b4:14:0a:0d:35:4f:e8:08: 25:e5:c6:fa:b4:50:d6:5e:d1:b1:55:96:2b:2e:1a: c8:68:a8:a4:d2:66:ca:4b:4f:69:83:19:74:77:62: 0f:cb:b0:e3:f1:6c:27:ff:b1:3d:d1:4f:fd:62:63: bf:ef:f6:83:53:9f:34:b5:4d:60:aa:bc:41:9c:02: 1e:70:c8:5a:d3:49:d0:ed:ae:5b:61:69:6d:07:c5: f1:48:32:df:8e:24:c8:a4:67:5c:54:04:3c:0d:6f: 58:03:72:2c:94:e9:51:eb:bb:7c:05:0e:a8:0d:e8: b5:54:53:f9:e5:9a:76:79:ac:87:fd:da:0c:50:04: 5e:d9:4e:26:d2:25:24:0b:fb:de:73:56:b4:ab:7a: 0d:f4:41:8c:de:9d:2b:02:ad:9c:48:6a:d6:20:45: d5:47:cc:39:59:f8:1f:bd:02:8e:ed:d7:09:f4:cf: b1:e6:93:53:64:b4:1e:a6:90:51:0e:11:c1:d1:29: 67:99:95:c0:df:ea:f6:5b:9e:09:7e:ba:f2:c0:7a: 09:f2:cf:fe:d9:ed:57:68:24:ba:cb:0e:f4:cd:31: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4E:AB:46:1E:E0:C2:43:70:42:C3:42:11:5F:F9:FA:AB:DB:CB:CA X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/CE6rRh7gwkNwQsNCEV_5-qvby8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:1ca8:2c::/48 Signature Algorithm: sha256WithRSAEncryption 79:62:8b:71:be:f6:60:5e:54:a3:10:22:5b:03:4b:15:f4:51: c7:58:ca:c4:46:3c:4e:9c:2a:44:7f:34:43:20:04:81:37:95: f4:e0:ac:e7:0b:0d:c0:75:ee:ba:a8:d6:47:ec:1f:11:c2:dc: 58:36:e1:73:c1:ef:51:3f:00:30:75:1c:f7:06:be:e7:46:bb: 1b:73:e3:b6:5f:e9:ea:02:69:68:ee:e9:3c:e1:79:36:a6:ec: a8:8b:58:51:a8:3a:89:fc:b5:be:cc:56:55:e8:81:14:4b:14: 81:02:34:3e:4e:8a:c2:6e:c2:43:35:ed:fd:8e:e4:04:e9:da: 41:c9:ac:1d:81:12:ff:6f:20:b9:3b:f2:73:fd:5d:21:25:7e: 8b:6c:36:5d:14:d3:8e:30:1c:3f:3d:f4:6f:60:f8:dc:b4:04: 0f:e3:cd:46:4a:b5:22:29:be:82:b5:58:a5:77:e3:03:92:da: 00:5d:6b:9b:ee:94:96:d1:32:ab:a1:11:b6:47:98:ab:5f:8f: 40:2f:04:b3:c2:61:dd:96:3b:b1:fa:cd:db:0a:e1:98:ef:26: 99:76:b1:dd:22:81:f4:f7:f5:c6:2d:c3:56:3c:e8:0e:0b:bf: bb:38:28:0a:59:d3:f7:09:61:aa:2f:cd:d7:a3:ba:1b:f6:32: 63:bc:4f:e7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xzcqMM09bVXPHIW4jVK4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODRlYWI0NjFlZTBjMjQzNzA0MmMzNDIxMTVmZjlmYWFiZGJjYmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowKsfj3KYbw3PyLwNwMSntXHvIMu oJ7h1RwUuXRAxfOsxGDCtBQKDTVP6Agl5cb6tFDWXtGxVZYrLhrIaKik0mbKS09p gxl0d2IPy7Dj8Wwn/7E90U/9YmO/7/aDU580tU1gqrxBnAIecMha00nQ7a5bYWlt B8XxSDLfjiTIpGdcVAQ8DW9YA3IslOlR67t8BQ6oDei1VFP55Zp2eayH/doMUARe 2U4m0iUkC/vec1a0q3oN9EGM3p0rAq2cSGrWIEXVR8w5WfgfvQKO7dcJ9M+x5pNT ZLQeppBRDhHB0SlnmZXA3+r2W54JfrrywHoJ8s/+2e1XaCS6yw70zTHN7QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAhOq0Ye4MJDcELDQhFf+fqr28vKMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvQ0U2clJoN2d3a053UXNOQ0VWXzUtcXZieThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAcqAAs MA0GCSqGSIb3DQEBCwUAA4IBAQB5YotxvvZgXlSjECJbA0sV9FHHWMrERjxOnCpE fzRDIASBN5X04KznCw3Ade66qNZH7B8RwtxYNuFzwe9RPwAwdRz3Br7nRrsbc+O2 X+nqAmlo7uk84Xk2puyoi1hRqDqJ/LW+zFZV6IEUSxSBAjQ+TorCbsJDNe39juQE 6dpByawdgRL/byC5O/Jz/V0hJX6LbDZdFNOOMBw/PfRvYPjctAQP481GSrUiKb6C tVild+MDktoAXWub7pSW0TKroRG2R5irX49ALwSzwmHdljux+s3bCuGY7yaZdrHd IoH09/XGLcNWPOgOC7+7OCgKWdP3CWGqL83Xo7ob9jJjvE/n -----END CERTIFICATE-----Generated at Wed Jan 21 12:45:50 2026 by rpki-client