This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa File: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (raw, json) Hash identifier: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM= Subject key identifier: F9:C7:86:21:A4:47:24:06:97:04:B3:C9:46:B3:A0:0D:79:BC:41:89 Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193 Certificate serial: 019B76EAED2B330FC34E878560E2EF3059C7 Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21060 IP address blocks: 80.82.96.0/20 maxlen: 20 80.89.16.0/20 maxlen: 20 80.89.18.0/23 maxlen: 23 80.89.30.0/24 maxlen: 24 91.195.58.0/23 maxlen: 23 91.213.70.0/24 maxlen: 24 92.43.232.0/21 maxlen: 21 185.134.252.0/22 maxlen: 22 185.155.36.0/22 maxlen: 22 188.244.64.0/20 maxlen: 20 194.8.244.0/23 maxlen: 23 2a02:7c00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:2b:33:0f:c3:4e:87:85:60:e2:ef:30:59:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c78621a44724069704b3c946b3a00d79bc4189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7e:ef:2d:3e:4e:98:ee:73:7a:0e:87:78:00: d3:d8:f5:37:15:36:07:79:4f:8d:a2:61:83:f8:ae: e1:50:c2:9f:09:cb:0c:cc:e7:ff:95:d8:d3:0e:67: dc:26:e7:e1:2c:3f:52:7e:36:e0:e0:6b:9b:a0:05: e6:81:7c:da:bc:43:b7:7f:54:55:ee:d3:29:20:d6: 64:eb:09:b3:c9:3b:de:ec:fd:9a:06:43:97:eb:a7: e5:03:23:b0:eb:41:8d:72:08:79:47:b9:97:09:fc: 34:9a:7b:2b:e0:b2:ca:38:9b:fb:ff:cd:9a:f4:ac: 10:2d:93:bb:56:f0:d8:e3:51:35:c5:50:3e:01:5b: f3:a0:4d:13:fc:fd:ab:ad:e4:9f:c7:c0:30:bf:59: 25:ff:9b:83:0d:09:45:c8:dc:db:4b:ac:23:9f:86: 0e:75:d6:35:7e:61:c5:ad:82:f4:a3:80:4d:12:3d: 72:9a:2e:33:1a:63:cc:6f:7f:d1:27:ae:e4:2c:dd: 86:f1:ad:a1:1b:09:f9:98:de:ba:50:51:cb:80:a7: 2f:b7:7f:7a:bc:01:96:a3:cf:8e:63:8e:54:5e:41: c8:31:cc:a8:cd:09:9d:91:81:47:39:31:4d:5d:5b: 9b:e2:f0:e9:b0:fc:76:3a:40:3d:27:91:a5:de:ab: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:86:21:A4:47:24:06:97:04:B3:C9:46:B3:A0:0D:79:BC:41:89 X509v3 Authority Key Identifier: keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.82.96.0/20 80.89.16.0/20 91.195.58.0/23 91.213.70.0/24 92.43.232.0/21 185.134.252.0/22 185.155.36.0/22 188.244.64.0/20 194.8.244.0/23 IPv6: 2a02:7c00::/32 Signature Algorithm: sha256WithRSAEncryption 2d:8f:46:6d:04:3d:1e:97:2c:8e:a4:43:e2:56:b4:d7:f4:d0: 1b:59:a5:68:87:3d:f1:e2:bb:11:ad:e1:5d:cf:37:f7:9e:07: 70:7a:88:ab:f1:c5:ff:88:2b:55:89:0f:82:e6:98:71:96:8e: 12:2f:58:bf:02:c0:69:02:32:9f:62:0c:1c:dc:13:83:48:42: 77:e4:2e:5d:21:0e:f5:92:4f:e2:ba:07:10:3e:25:7f:8d:8f: ba:9e:43:25:2b:40:b8:92:4e:ff:f9:39:a5:bd:68:e0:de:79: 33:2f:62:cf:02:62:92:00:0b:b2:6e:e2:e9:f9:48:44:0f:75: b9:0c:49:32:38:27:d9:13:d9:3e:81:49:2a:91:69:43:a8:94: 58:ab:20:64:2c:53:4b:53:66:c6:32:7d:bf:c1:63:4c:05:89: d3:8e:aa:e5:60:90:0c:b0:ba:b2:24:b8:a8:c4:54:94:d6:ab: 23:30:69:e4:24:fa:b4:e2:2d:83:27:db:7c:95:80:4d:a0:a5: 17:10:44:8a:b8:f8:ff:d4:a8:db:28:68:d9:62:fc:10:32:5b: 37:3e:93:25:33:fe:9b:1e:7b:bc:8b:64:a8:ed:1d:62:0c:a4: 83:66:dd:86:0f:4d:c0:d7:8d:20:00:2d:b1:ef:c2:ab:2d:82: a9:57:85:79 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt26u0rMw/DToeFYOLvMFnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm YjYxOTMwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWM3ODYyMWE0NDcyNDA2OTcwNGIzYzk0NmIzYTAwZDc5YmM0MTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX7vLT5OmO5zeg6HeADT2PU3FTYH eU+NomGD+K7hUMKfCcsMzOf/ldjTDmfcJufhLD9Sfjbg4GuboAXmgXzavEO3f1RV 7tMpINZk6wmzyTve7P2aBkOX66flAyOw60GNcgh5R7mXCfw0mnsr4LLKOJv7/82a 9KwQLZO7VvDY41E1xVA+AVvzoE0T/P2rreSfx8Awv1kl/5uDDQlFyNzbS6wjn4YO ddY1fmHFrYL0o4BNEj1ymi4zGmPMb3/RJ67kLN2G8a2hGwn5mN66UFHLgKcvt396 vAGWo8+OY45UXkHIMcyozQmdkYFHOTFNXVub4vDpsPx2OkA9J5Gl3qtJVwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFPnHhiGkRyQGlwSzyUazoA15vEGJMB8GA1UdIwQY MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt ZGU3ZDNiYmZlZTg4LzEvMS1jZUdJYVJISkFhWEJMUEpSck9nRFhtOFFZay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTgvNWNmYmYzLWU3ODItNDAxMy04ZWVlLWRlN2QzYmJmZWU4 OC8xL3RIaEJBaVNRUkpUcHdQZlRWbENpWU9YN1laTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBeBggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEBFBSYAME BFBZEAMEAVvDOgMEAFvVRgMEA1wr6AMEArmG/AMEArmbJAMEBLz0QAMEAcII9DAN BAIAAjAHAwUAKgJ8ADANBgkqhkiG9w0BAQsFAAOCAQEALY9GbQQ9HpcsjqRD4la0 1/TQG1mlaIc98eK7Ea3hXc83954HcHqIq/HF/4grVYkPguaYcZaOEi9YvwLAaQIy n2IMHNwTg0hCd+QuXSEO9ZJP4roHED4lf42Pup5DJStAuJJO//k5pb1o4N55My9i zwJikgALsm7i6flIRA91uQxJMjgn2RPZPoFJKpFpQ6iUWKsgZCxTS1NmxjJ9v8Fj TAWJ046q5WCQDLC6siS4qMRUlNarIzBp5CT6tOItgyfbfJWATaClFxBEirj4/9So 2yho2WL8EDJbNz6TJTP+mx57vItkqO0dYgykg2bdhg9NwNeNIAAtse/Cqy2CqVeF eQ== -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:24 2026 by rpki-client