This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/CeZNOwjANN4HMY30DhoMsqh7kc0.roa File: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (raw, json) Hash identifier: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg= Subject key identifier: 09:E6:4D:3B:08:C0:34:DE:07:31:8D:F4:0E:1A:0C:B2:A8:7B:91:CD Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Certificate serial: 019B7C7F12A08A509A5A7BEEA0BF6BF39533 Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/CeZNOwjANN4HMY30DhoMsqh7kc0.roa Signing time: Fri 02 Jan 2026 02:17:41 +0000 ROA not before: Fri 02 Jan 2026 02:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 2a02:f181:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:12:a0:8a:50:9a:5a:7b:ee:a0:bf:6b:f3:95:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639 Validity Not Before: Jan 2 02:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09e64d3b08c034de07318df40e1a0cb2a87b91cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:18:32:f1:ec:41:56:b5:af:ab:ec:31:0e: e1:d1:0d:01:5a:a5:fd:a1:cd:ae:3a:b9:f9:a5:c5: 07:db:77:db:b9:91:ca:3a:82:ef:60:45:6b:8e:01: 35:c1:31:33:bc:77:71:92:97:5f:fc:50:90:86:c1: 80:83:73:de:c1:ee:06:d1:34:d3:2e:6e:89:81:05: a3:a5:83:2e:21:71:a4:92:e5:9c:60:c0:51:1e:4a: d2:9b:d0:b4:43:94:56:cd:7b:d4:aa:91:85:58:6b: 9d:f7:0b:79:76:37:9d:a6:55:46:89:7a:ac:35:22: b9:a5:7b:b7:e3:8a:23:b9:4d:a9:68:a8:d5:b3:9f: af:ef:60:b5:20:34:b2:99:3c:1d:63:e6:5a:49:06: 11:79:aa:04:10:8c:ff:a3:21:c1:6f:c3:07:4a:4d: 3b:af:55:ff:f4:6c:00:2c:59:1b:2d:c4:53:2b:3a: 14:66:e1:5b:7b:29:27:f6:30:ea:78:16:15:67:6f: 04:a8:f1:41:88:da:aa:55:25:4a:fd:b7:5a:8a:6c: 54:56:e9:80:cd:6e:57:63:46:d1:20:06:b1:3d:b3: 84:f9:a9:7e:1d:71:19:2d:33:f1:8d:30:aa:99:2f: cd:95:29:fa:77:45:2f:eb:4e:b8:e7:62:2f:64:63: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:E6:4D:3B:08:C0:34:DE:07:31:8D:F4:0E:1A:0C:B2:A8:7B:91:CD X509v3 Authority Key Identifier: keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/CeZNOwjANN4HMY30DhoMsqh7kc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:f181:1000::/48 Signature Algorithm: sha256WithRSAEncryption 2a:2c:6c:47:07:18:4e:7c:6d:18:1a:a2:e1:8d:39:37:b4:49: 8d:d4:77:bf:66:9b:df:a8:a4:be:a8:25:ae:57:d4:a4:6a:49: b6:8a:d3:b9:e0:80:6e:d5:81:42:ee:74:ed:02:89:ec:bd:56: 63:12:c3:de:da:0f:bf:d0:33:86:c1:89:10:64:d2:e4:22:80: 78:2c:07:01:5d:d8:0d:28:15:fc:88:b9:2e:a5:f6:29:7c:f7: f1:83:5f:d2:c0:aa:32:dd:c1:78:d8:8d:a8:5f:b9:d0:00:06: 2f:14:94:d1:4a:5b:6b:74:00:d0:c1:19:96:99:f9:95:a4:6b: be:d9:3a:1d:86:45:ea:f3:32:53:c2:04:b1:3c:3d:47:93:c8: 5d:5b:1d:bb:04:e9:77:c8:e3:01:73:d9:60:fb:fd:35:2d:fb: c7:b4:db:da:09:d6:f5:6f:57:96:f3:fd:cd:4e:81:e0:56:57: 36:cf:13:86:75:69:e2:e2:64:56:8a:06:2a:1d:05:1a:92:b3: 04:52:fb:8d:48:89:31:b7:6e:d8:48:36:b0:8d:a4:2f:6b:2c: 2d:38:3f:ee:ce:86:75:b9:a4:78:7d:a5:dc:2c:54:9d:d5:bf: 9f:22:13:50:79:f7:9b:04:d2:38:a4:69:ab:9d:2e:db:4f:44: 5c:7e:a7:10 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8fxKgilCaWnvuoL9r85UzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2 YmQ2MzkwHhcNMjYwMTAyMDIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWU2NGQzYjA4YzAzNGRlMDczMThkZjQwZTFhMGNiMmE4N2I5MWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8cYMvHsQVa1r6vsMQ7h0Q0BWqX9 oc2uOrn5pcUH23fbuZHKOoLvYEVrjgE1wTEzvHdxkpdf/FCQhsGAg3Pewe4G0TTT Lm6JgQWjpYMuIXGkkuWcYMBRHkrSm9C0Q5RWzXvUqpGFWGud9wt5djedplVGiXqs NSK5pXu344ojuU2paKjVs5+v72C1IDSymTwdY+ZaSQYReaoEEIz/oyHBb8MHSk07 r1X/9GwALFkbLcRTKzoUZuFbeykn9jDqeBYVZ28EqPFBiNqqVSVK/bdaimxUVumA zW5XY0bRIAaxPbOE+al+HXEZLTPxjTCqmS/NlSn6d0Uv606452IvZGMuRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAnmTTsIwDTeBzGN9A4aDLKoe5HNMB8GA1UdIwQY MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt MDkxYzJkMzAzZmU4LzEvQ2VaTk93akFOTjRITVkzMERob01zcWg3a2MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4 LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLxgRAA MA0GCSqGSIb3DQEBCwUAA4IBAQAqLGxHBxhOfG0YGqLhjTk3tEmN1He/ZpvfqKS+ qCWuV9Skakm2itO54IBu1YFC7nTtAonsvVZjEsPe2g+/0DOGwYkQZNLkIoB4LAcB XdgNKBX8iLkupfYpfPfxg1/SwKoy3cF42I2oX7nQAAYvFJTRSltrdADQwRmWmfmV pGu+2TodhkXq8zJTwgSxPD1Hk8hdWx27BOl3yOMBc9lg+/01LfvHtNvaCdb1b1eW 8/3NToHgVlc2zxOGdWni4mRWigYqHQUakrMEUvuNSIkxt27YSDawjaQvaywtOD/u zoZ1uaR4faXcLFSd1b+fIhNQefebBNI4pGmrnS7bT0RcfqcQ -----END CERTIFICATE-----Generated at Sat Jan 3 01:32:36 2026 by rpki-client