This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/_CEmsC4UiHqApydJzbUZBc7R6NQ.roa File: _CEmsC4UiHqApydJzbUZBc7R6NQ.roa (raw, json) Hash identifier: vfzSEuZYMvCj8YzTMGqCrHcIY9lBEEmbZs/MO3EHCRQ= Subject key identifier: FC:21:26:B0:2E:14:88:7A:80:A7:27:49:CD:B5:19:05:CE:D1:E8:D4 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019C1D714CED14D12337BB7E84ED7089B95E Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/_CEmsC4UiHqApydJzbUZBc7R6NQ.roa Signing time: Mon 02 Feb 2026 08:21:30 +0000 ROA not before: Mon 02 Feb 2026 08:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 185.23.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:71:4c:ed:14:d1:23:37:bb:7e:84:ed:70:89:b9:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Feb 2 08:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc2126b02e14887a80a72749cdb51905ced1e8d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2c:c2:dd:68:06:6d:68:58:f8:6c:4f:96:02: 48:bc:b1:70:84:8b:a8:ad:c1:33:a8:6b:6c:f1:71: d4:dd:92:55:af:bf:09:71:38:96:2a:bf:df:65:e5: 0a:81:97:8b:ee:f5:e9:29:2f:57:a6:79:8f:31:27: 99:54:34:37:73:91:c1:66:55:de:b8:8a:c2:ac:50: 42:13:1c:14:be:9a:6e:97:ee:0e:84:ef:38:26:17: 45:b3:8c:04:95:4b:42:8f:ef:55:90:08:82:42:31: 71:58:64:26:58:d7:d6:33:66:d4:78:75:4f:a5:65: f8:99:0f:a7:32:6d:c9:67:49:8e:c4:39:e5:81:bd: 0e:c8:be:a1:97:0c:06:26:3c:3d:3a:2b:8a:ec:04: 94:1e:73:e9:94:7e:d2:bb:7b:db:f5:4c:d6:ca:fa: a4:c2:74:53:24:41:65:77:b9:5b:f9:ea:2d:e2:35: 4e:a8:e9:87:65:b7:db:4c:c3:a5:7e:7f:3c:5c:10: 65:86:cd:92:99:a0:0c:aa:c0:d5:13:29:6a:24:85: f2:a9:09:8d:39:01:59:04:65:46:91:15:5c:31:01: b4:23:75:ec:d0:21:7e:7d:1e:f5:cb:ac:80:6c:1b: 52:df:a9:5c:34:27:f2:44:2e:53:b1:d1:0e:22:4e: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:21:26:B0:2E:14:88:7A:80:A7:27:49:CD:B5:19:05:CE:D1:E8:D4 X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/_CEmsC4UiHqApydJzbUZBc7R6NQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.19.0/24 Signature Algorithm: sha256WithRSAEncryption 33:b3:7b:f4:e3:7b:a0:5b:ab:88:76:5c:43:72:65:b7:c3:6b: c4:85:f6:06:c2:e5:d0:de:9c:6f:ee:33:71:f9:36:b3:14:96: 90:df:a6:53:76:eb:4b:aa:e5:64:09:d1:5d:fe:66:77:e1:d0: 21:2d:ef:2d:22:46:24:93:6b:40:a6:34:55:91:1e:16:4b:80: 48:cf:cd:ae:1a:25:b6:f2:6f:72:31:c9:90:85:0b:6d:dc:29: de:da:87:8b:af:90:1f:a2:11:7d:3e:2c:39:18:83:ce:89:4f: 02:33:2e:24:54:16:31:42:66:d2:b0:22:6e:8e:3d:e1:16:46: 15:f5:6f:12:5b:c8:13:5a:6c:91:d6:ba:b8:e0:96:3b:f1:4d: 99:f5:30:53:54:7f:30:ba:b3:ec:c2:24:2f:9a:ab:a0:03:3e: 77:37:0e:10:7f:bc:5f:27:af:e8:2b:d6:55:b9:c4:d3:cc:43: 73:80:07:f1:74:57:5d:b2:ea:cc:d8:90:e3:b8:a6:fd:e9:d8: 8d:b2:2e:94:c7:98:e3:e0:82:85:6b:fd:62:b5:70:15:5d:74: 88:6e:c1:f4:bd:15:4d:36:c2:5c:7e:bf:7b:55:44:f9:8a:3c: 02:2f:cd:b1:f4:07:0c:0c:9d:0e:cb:71:92:15:28:c6:3c:03: b3:97:69:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwdcUztFNEjN7t+hO1wibleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjYwMjAyMDgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzIxMjZiMDJlMTQ4ODdhODBhNzI3NDljZGI1MTkwNWNlZDFlOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSzC3WgGbWhY+GxPlgJIvLFwhIuo rcEzqGts8XHU3ZJVr78JcTiWKr/fZeUKgZeL7vXpKS9XpnmPMSeZVDQ3c5HBZlXe uIrCrFBCExwUvppul+4OhO84JhdFs4wElUtCj+9VkAiCQjFxWGQmWNfWM2bUeHVP pWX4mQ+nMm3JZ0mOxDnlgb0OyL6hlwwGJjw9OiuK7ASUHnPplH7Su3vb9UzWyvqk wnRTJEFld7lb+eot4jVOqOmHZbfbTMOlfn88XBBlhs2SmaAMqsDVEylqJIXyqQmN OQFZBGVGkRVcMQG0I3Xs0CF+fR71y6yAbBtS36lcNCfyRC5TsdEOIk69vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPwhJrAuFIh6gKcnSc21GQXO0ejUMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvX0NFbXNDNFVpSHFBcHlkSnpiVVpCYzdSNk5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRcTMA0G CSqGSIb3DQEBCwUAA4IBAQAzs3v043ugW6uIdlxDcmW3w2vEhfYGwuXQ3pxv7jNx +TazFJaQ36ZTdutLquVkCdFd/mZ34dAhLe8tIkYkk2tApjRVkR4WS4BIz82uGiW2 8m9yMcmQhQtt3Cne2oeLr5AfohF9Piw5GIPOiU8CMy4kVBYxQmbSsCJujj3hFkYV 9W8SW8gTWmyR1rq44JY78U2Z9TBTVH8wurPswiQvmqugAz53Nw4Qf7xfJ6/oK9ZV ucTTzENzgAfxdFddsurM2JDjuKb96diNsi6Ux5jj4IKFa/1itXAVXXSIbsH0vRVN NsJcfr97VUT5ijwCL82x9AcMDJ0Oy3GSFSjGPAOzl2ky -----END CERTIFICATE-----Generated at Tue Feb 3 00:04:34 2026 by rpki-client