This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/CE_wAiqEaLlY4PiPuIL18YIWuwM.roa File: CE_wAiqEaLlY4PiPuIL18YIWuwM.roa (raw, json) Hash identifier: OlnxplWWb8DevOWdDae7qGSmPCkkY07nIKLwN62bMGw= Subject key identifier: 08:4F:F0:02:2A:84:68:B9:58:E0:F8:8F:B8:82:F5:F1:82:16:BB:03 Certificate issuer: /CN=01d02680691389402b3eb335e5c9c8be3e9930a0 Certificate serial: 019B7AC7CCBAC32C7864654E5F772F940081 Authority key identifier: 01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/CE_wAiqEaLlY4PiPuIL18YIWuwM.roa Signing time: Thu 01 Jan 2026 18:17:52 +0000 ROA not before: Thu 01 Jan 2026 18:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209608 IP address blocks: 193.186.200.0/22 maxlen: 22 193.186.200.0/24 maxlen: 24 193.186.201.0/24 maxlen: 24 193.186.202.0/24 maxlen: 24 193.186.203.0/24 maxlen: 24 2a0d:76c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.mft rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:cc:ba:c3:2c:78:64:65:4e:5f:77:2f:94:00:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01d02680691389402b3eb335e5c9c8be3e9930a0 Validity Not Before: Jan 1 18:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=084ff0022a8468b958e0f88fb882f5f18216bb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9e:b5:63:77:d5:06:f5:14:be:f6:3d:48:85: e0:bc:f7:5a:fc:72:a3:90:4c:19:d1:85:08:d9:4d: e0:a4:8f:c3:85:8d:21:ff:71:d9:5d:7d:91:e7:5d: 94:e9:4d:8e:4e:34:eb:3f:ca:b5:66:9b:f0:0a:60: 1f:f2:48:25:a7:94:74:21:16:13:f1:03:31:51:00: 49:97:c8:f2:cd:68:6c:31:c9:5c:31:63:07:dc:80: 0e:8a:46:16:d3:80:5c:5b:87:ed:02:fb:12:26:5a: 32:4e:1b:0f:16:b8:12:4f:af:25:a0:bf:44:0a:37: f9:5e:4a:bb:f7:c0:ca:a3:f3:f8:e1:60:de:33:28: 6a:32:69:35:a3:31:e5:8b:36:2f:9f:95:08:4c:10: 6d:7e:67:08:29:78:f5:69:e6:d7:b3:c7:01:e2:08: 4a:b0:8e:30:c2:b4:ea:66:a5:2e:94:05:be:22:bd: 53:00:04:46:12:70:2f:68:05:32:88:6f:83:1b:39: e8:87:05:d7:a2:a7:fa:4a:75:59:f8:3f:b5:3d:87: e7:03:6d:10:5c:ad:18:8c:94:50:85:8d:e3:fc:9c: 5d:52:c6:a5:28:8e:62:bb:53:a8:99:06:89:9b:4b: dc:8a:95:4b:2e:38:66:4e:b3:33:74:05:5f:1d:00: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4F:F0:02:2A:84:68:B9:58:E0:F8:8F:B8:82:F5:F1:82:16:BB:03 X509v3 Authority Key Identifier: keyid:01:D0:26:80:69:13:89:40:2B:3E:B3:35:E5:C9:C8:BE:3E:99:30:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdAmgGkTiUArPrM15cnIvj6ZMKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/CE_wAiqEaLlY4PiPuIL18YIWuwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b9f905-cd6b-4c7e-9f4e-bc29b21d3ce7/1/AdAmgGkTiUArPrM15cnIvj6ZMKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.200.0/22 IPv6: 2a0d:76c0::/48 Signature Algorithm: sha256WithRSAEncryption 02:bd:4c:57:b8:88:a5:e5:24:22:cd:28:42:ce:8a:1b:52:11: 8e:ed:d8:39:63:16:dd:bd:73:85:41:6d:2e:76:24:8a:fd:e6: e1:be:f1:43:ab:de:6f:8d:bb:21:2a:8d:1c:02:3f:c6:f9:dd: 67:e4:3d:f0:c5:d4:05:37:27:4a:72:04:92:23:54:d1:e5:c9: ab:d3:ed:e0:10:1d:37:d4:fc:73:5d:8b:24:a8:e9:4e:d8:64: f3:7a:88:b7:d8:f1:3b:d8:e7:c4:0e:2e:4f:ad:a9:9c:ff:1e: 87:70:0d:40:5c:bb:8b:a7:9a:2b:03:7b:2c:95:18:7a:25:12: 68:52:cf:d8:a7:09:e6:84:e0:fc:42:44:3c:18:b3:63:ed:30: 4e:85:9e:c5:c5:15:36:7e:67:6a:40:0d:cc:f4:a7:d2:d0:f8: 00:48:f0:15:42:b8:77:72:65:85:78:f5:e5:15:c0:24:0d:45: 35:09:bf:85:0e:8a:e6:77:66:5d:0d:31:84:cb:fc:07:44:cf: 36:65:1b:59:fc:e0:a2:db:ab:8c:ce:e2:73:cf:61:15:8a:95: 56:37:b4:5e:74:33:1d:68:db:04:8b:d1:ec:ca:3c:ab:e6:85: 51:b1:83:fe:19:7b:2f:63:35:a3:b5:c9:91:ac:21:ed:d1:39: 09:87:9c:c5 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x8y6wyx4ZGVOX3cvlACBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZDAyNjgwNjkxMzg5NDAyYjNlYjMzNWU1YzljOGJlM2U5 OTMwYTAwHhcNMjYwMTAxMTgxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODRmZjAwMjJhODQ2OGI5NThlMGY4OGZiODgyZjVmMTgyMTZiYjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z61Y3fVBvUUvvY9SIXgvPda/HKj kEwZ0YUI2U3gpI/DhY0h/3HZXX2R512U6U2OTjTrP8q1ZpvwCmAf8kglp5R0IRYT 8QMxUQBJl8jyzWhsMclcMWMH3IAOikYW04BcW4ftAvsSJloyThsPFrgST68loL9E Cjf5Xkq798DKo/P44WDeMyhqMmk1ozHlizYvn5UITBBtfmcIKXj1aebXs8cB4ghK sI4wwrTqZqUulAW+Ir1TAARGEnAvaAUyiG+DGznohwXXoqf6SnVZ+D+1PYfnA20Q XK0YjJRQhY3j/JxdUsalKI5iu1OomQaJm0vcipVLLjhmTrMzdAVfHQAkxQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAhP8AIqhGi5WOD4j7iC9fGCFrsDMB8GA1UdIwQY MBaAFAHQJoBpE4lAKz6zNeXJyL4+mTCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWRBbWdHa1RpVUFyUHJNMTVjbkl2ajZaTUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iOWY5MDUtY2Q2Yi00YzdlLTlmNGUt YmMyOWIyMWQzY2U3LzEvQ0Vfd0FpcUVhTGxZNFBpUHVJTDE4WUlXdXdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iOWY5MDUtY2Q2Yi00YzdlLTlmNGUtYmMyOWIyMWQzY2U3 LzEvQWRBbWdHa1RpVUFyUHJNMTVjbkl2ajZaTUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwbrIMA8E AgACMAkDBwAqDXbAAAAwDQYJKoZIhvcNAQELBQADggEBAAK9TFe4iKXlJCLNKELO ihtSEY7t2DljFt29c4VBbS52JIr95uG+8UOr3m+NuyEqjRwCP8b53WfkPfDF1AU3 J0pyBJIjVNHlyavT7eAQHTfU/HNdiySo6U7YZPN6iLfY8TvY58QOLk+tqZz/Hodw DUBcu4unmisDeyyVGHolEmhSz9inCeaE4PxCRDwYs2PtME6FnsXFFTZ+Z2pADcz0 p9LQ+ABI8BVCuHdyZYV49eUVwCQNRTUJv4UOiuZ3Zl0NMYTL/AdEzzZlG1n84KLb q4zO4nPPYRWKlVY3tF50Mx1o2wSL0ezKPKvmhVGxg/4Zey9jNaO1yZGsIe3ROQmH nMU= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:38 2026 by rpki-client