This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/cCEk2ZBKCpMVhF8SRJgY9iNKU4U.roa File: cCEk2ZBKCpMVhF8SRJgY9iNKU4U.roa (raw, json) Hash identifier: mXYq5QS9xnl4sRFedgWj9pBtcqZFgiaHE6J/4WbD9rw= Subject key identifier: 70:21:24:D9:90:4A:0A:93:15:84:5F:12:44:98:18:F6:23:4A:53:85 Certificate issuer: /CN=99ce77f7d916513b84914849950fe43f55694fda Certificate serial: 019B7910905380C8EB261A77412B751001EC Authority key identifier: 99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/cCEk2ZBKCpMVhF8SRJgY9iNKU4U.roa Signing time: Thu 01 Jan 2026 10:18:07 +0000 ROA not before: Thu 01 Jan 2026 10:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208423 IP address blocks: 5.102.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:90:53:80:c8:eb:26:1a:77:41:2b:75:10:01:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce77f7d916513b84914849950fe43f55694fda Validity Not Before: Jan 1 10:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=702124d9904a0a9315845f12449818f6234a5385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0b:a7:93:21:17:83:0c:eb:a6:9f:80:2e:07: 3a:20:23:e3:86:f1:89:d6:59:d0:66:a3:fc:33:89: ce:4e:f4:73:4d:b3:da:51:4d:b1:aa:8f:90:3e:37: c4:07:1e:77:e7:9a:d7:37:c1:ff:90:2d:2c:31:0a: 72:1a:c9:f7:2b:e8:d4:8f:d2:b9:ca:fa:e0:18:83: dc:f3:91:af:88:47:6a:31:cd:6f:14:49:7e:4e:4d: 3e:08:4b:91:77:01:6a:34:24:27:b9:a3:1a:2f:6f: 84:d0:6d:ea:51:c5:d2:51:eb:19:4f:59:90:10:ba: 9c:29:74:b0:70:7d:19:cc:87:5d:52:7b:17:01:94: e4:d8:cc:7b:cd:72:bf:b3:0e:18:d9:fc:c0:b0:70: 28:d5:9f:59:80:ed:1b:ab:83:de:0f:df:c2:6e:47: 63:bb:23:49:2b:20:64:47:3b:61:a2:ad:30:79:93: ab:c9:2a:de:95:6f:88:fd:3f:f6:cb:3e:22:a5:71: c6:d1:a2:7e:ed:8d:76:d2:c2:8c:1a:84:4b:e9:0a: b7:5f:3b:cb:c0:3c:bc:b9:1b:83:90:95:35:89:d9: 1e:a6:f0:6a:29:3d:ee:86:42:73:f7:08:e8:17:75: d1:98:b3:02:83:ab:e1:65:47:81:ce:38:6b:1c:6e: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:24:D9:90:4A:0A:93:15:84:5F:12:44:98:18:F6:23:4A:53:85 X509v3 Authority Key Identifier: keyid:99:CE:77:F7:D9:16:51:3B:84:91:48:49:95:0F:E4:3F:55:69:4F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5399kWUTuEkUhJlQ_kP1VpT9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/cCEk2ZBKCpMVhF8SRJgY9iNKU4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5cc337-bc56-4766-a450-f35373da7deb/1/mc5399kWUTuEkUhJlQ_kP1VpT9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.46.0/24 Signature Algorithm: sha256WithRSAEncryption 48:6b:f2:a9:0d:b8:28:44:1f:d1:4c:13:b0:9b:75:56:90:42: 88:a2:73:13:ef:84:47:60:d7:e7:3c:80:47:5c:bb:51:cb:66: 73:e3:a4:d2:2b:4d:be:62:e8:db:10:3d:9c:6e:97:1d:12:2a: ef:af:17:41:20:1a:4e:f4:66:34:c6:4f:c1:e9:d5:6f:41:32: 34:6a:92:a4:41:07:22:14:c3:6d:a7:e5:a5:dc:3e:18:3a:66: fd:ec:f5:78:4e:ec:79:db:ad:be:7d:01:35:08:4b:01:b8:00: f7:97:17:f5:ce:77:5b:86:a9:7e:d8:d4:1d:ac:8e:2c:4e:7c: 37:67:11:a8:56:ca:2e:f3:89:4e:eb:26:ef:aa:7a:c6:a5:36: df:64:51:a6:3b:39:0a:aa:97:a9:84:05:64:af:ae:7c:18:86: 65:69:c6:cf:da:74:ab:11:1e:22:9c:1f:83:82:26:72:f4:75: fd:c8:31:3d:d1:f2:cf:99:8b:cc:bc:fc:c6:87:a7:44:b7:b7: 96:d4:9d:d6:61:4d:82:8b:16:af:0b:e0:dc:40:a1:4c:5a:59: 28:94:04:3e:8c:9b:87:f6:51:ab:cf:16:95:ac:44:14:09:6f: ca:ba:d3:c1:1d:08:bd:71:66:c1:09:b5:4f:34:0b:08:49:0c: 6b:1e:ee:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EJBTgMjrJhp3QSt1EAHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U3N2Y3ZDkxNjUxM2I4NDkxNDg0OTk1MGZlNDNmNTU2 OTRmZGEwHhcNMjYwMTAxMTAxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDIxMjRkOTkwNGEwYTkzMTU4NDVmMTI0NDk4MThmNjIzNGE1Mzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AunkyEXgwzrpp+ALgc6ICPjhvGJ 1lnQZqP8M4nOTvRzTbPaUU2xqo+QPjfEBx5355rXN8H/kC0sMQpyGsn3K+jUj9K5 yvrgGIPc85GviEdqMc1vFEl+Tk0+CEuRdwFqNCQnuaMaL2+E0G3qUcXSUesZT1mQ ELqcKXSwcH0ZzIddUnsXAZTk2Mx7zXK/sw4Y2fzAsHAo1Z9ZgO0bq4PeD9/Cbkdj uyNJKyBkRzthoq0weZOrySrelW+I/T/2yz4ipXHG0aJ+7Y120sKMGoRL6Qq3XzvL wDy8uRuDkJU1idkepvBqKT3uhkJz9wjoF3XRmLMCg6vhZUeBzjhrHG7OzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAhJNmQSgqTFYRfEkSYGPYjSlOFMB8GA1UdIwQY MBaAFJnOd/fZFlE7hJFISZUP5D9VaU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAt ZjM1MzczZGE3ZGViLzEvY0NFazJaQktDcE1WaEY4U1JKZ1k5aU5LVTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS81Y2MzMzctYmM1Ni00NzY2LWE0NTAtZjM1MzczZGE3ZGVi LzEvbWM1Mzk5a1dVVHVFa1VoSmxRX2tQMVZwVDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYuMA0G CSqGSIb3DQEBCwUAA4IBAQBIa/KpDbgoRB/RTBOwm3VWkEKIonMT74RHYNfnPIBH XLtRy2Zz46TSK02+YujbED2cbpcdEirvrxdBIBpO9GY0xk/B6dVvQTI0apKkQQci FMNtp+Wl3D4YOmb97PV4Tux5262+fQE1CEsBuAD3lxf1zndbhql+2NQdrI4sTnw3 ZxGoVsou84lO6ybvqnrGpTbfZFGmOzkKqpephAVkr658GIZlacbP2nSrER4inB+D giZy9HX9yDE90fLPmYvMvPzGh6dEt7eW1J3WYU2CixavC+DcQKFMWlkolAQ+jJuH 9lGrzxaVrEQUCW/KutPBHQi9cWbBCbVPNAsISQxrHu5+ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:25 2026 by rpki-client