This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CwEJEkChVeT5ByriMeWvHMii5Kc.roa File: CwEJEkChVeT5ByriMeWvHMii5Kc.roa (raw, json) Hash identifier: +buHsgpQk2jvmt0OGhHOlWMDX6OUOHB42I6FSxQelZE= Subject key identifier: 0B:01:09:12:40:A1:55:E4:F9:07:2A:E2:31:E5:AF:1C:C8:A2:E4:A7 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597CE03ED7D2EF5D15F0649F9CA08E Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CwEJEkChVeT5ByriMeWvHMii5Kc.roa Signing time: Thu 01 Jan 2026 02:18:31 +0000 ROA not before: Thu 01 Jan 2026 02:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212326 IP address blocks: 193.38.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:7c:e0:3e:d7:d2:ef:5d:15:f0:64:9f:9c:a0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b01091240a155e4f9072ae231e5af1cc8a2e4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e1:8d:d2:8c:da:34:d3:74:a3:74:c1:67:59: 86:b4:80:df:e9:1e:07:87:5e:ec:49:0f:81:a3:df: 89:64:82:ff:c5:0e:2a:4e:86:61:c3:b6:8c:98:d3: 48:bd:fe:68:60:1a:9b:8f:fd:25:c6:c0:6e:ec:1b: 92:e6:a2:fb:b6:1e:1f:ed:6c:ba:66:6a:74:ff:7f: 1d:9e:ab:ce:5f:b2:5a:1b:49:b1:b1:4f:52:c6:88: 5b:9f:53:36:03:b5:77:61:11:b4:2f:40:89:11:2e: e8:45:04:21:6d:4f:43:b5:75:6c:93:f9:2a:23:b3: 94:e9:38:1e:55:7f:ee:da:9f:a1:ac:8b:83:3e:0a: 94:51:7c:a3:c3:25:34:0e:8b:b9:e4:d8:e8:fe:fc: 64:f8:02:e8:8a:f1:34:24:e3:26:d4:f3:c3:6c:8c: 46:b5:20:52:e3:d6:ff:3f:a7:5f:a8:b9:9b:b4:5d: 2c:73:eb:a3:cc:42:1c:dc:55:0b:d2:6d:b1:71:9a: 85:57:62:41:aa:83:95:8b:42:94:44:0f:71:8d:50: 3a:56:f0:81:0c:59:88:24:00:18:92:a1:69:e0:2a: aa:2e:6b:5c:3d:3a:6a:87:55:1b:6d:90:3c:3c:22: 8b:0b:c3:8e:1c:18:b9:11:94:86:c9:4f:3a:02:cc: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:01:09:12:40:A1:55:E4:F9:07:2A:E2:31:E5:AF:1C:C8:A2:E4:A7 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/CwEJEkChVeT5ByriMeWvHMii5Kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.38.253.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:82:f2:da:4c:e3:96:21:a8:4c:d3:26:b4:9c:bc:13:97:56: 55:95:d3:ae:85:42:34:0b:92:a1:1c:bb:02:d6:7e:fb:9b:3c: 81:a4:00:7d:22:68:e7:2c:85:02:b1:cd:21:d8:de:47:4c:21: e2:3c:05:ed:4b:63:c4:ef:ea:04:51:87:cf:87:c7:92:5e:73: d3:da:c5:34:b3:46:5e:a4:f3:99:5d:a2:de:bd:78:93:52:83: 97:17:5f:4e:c2:7a:48:14:c9:9b:f3:9f:d6:77:ad:63:88:54: 2f:70:48:f3:ea:d5:7c:b5:10:56:e2:3e:61:b8:f2:80:19:d8: 88:af:9d:31:5c:58:b0:9a:bc:61:cd:cd:45:4c:ca:66:ca:d3: 34:9d:05:ca:47:6f:ab:1b:7e:ca:a3:26:8a:52:1e:32:fc:29: e4:f3:a3:fc:63:31:e0:b1:23:8e:23:ef:12:73:1f:3d:8c:c2: c6:c5:65:ae:d4:e9:d0:dc:c3:19:c7:be:56:cf:bf:09:50:25: 02:cf:37:ec:b9:f9:a3:4d:65:f1:fe:e1:5e:69:c2:fd:88:15: 26:03:cd:50:6e:64:8c:c1:e3:19:3f:ac:9d:b3:87:99:5a:7c: 35:45:2d:4d:84:88:80:3c:04:7c:9f:30:2b:b3:c7:2f:d9:2e: 09:f2:6e:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXzgPtfS710V8GSfnKCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjAxMDkxMjQwYTE1NWU0ZjkwNzJhZTIzMWU1YWYxY2M4YTJlNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguGN0ozaNNN0o3TBZ1mGtIDf6R4H h17sSQ+Bo9+JZIL/xQ4qToZhw7aMmNNIvf5oYBqbj/0lxsBu7BuS5qL7th4f7Wy6 Zmp0/38dnqvOX7JaG0mxsU9Sxohbn1M2A7V3YRG0L0CJES7oRQQhbU9DtXVsk/kq I7OU6TgeVX/u2p+hrIuDPgqUUXyjwyU0Dou55Njo/vxk+ALoivE0JOMm1PPDbIxG tSBS49b/P6dfqLmbtF0sc+ujzEIc3FUL0m2xcZqFV2JBqoOVi0KURA9xjVA6VvCB DFmIJAAYkqFp4CqqLmtcPTpqh1UbbZA8PCKLC8OOHBi5EZSGyU86Asz+4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsBCRJAoVXk+Qcq4jHlrxzIouSnMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvQ3dFSkVrQ2hWZVQ1QnlyaU1lV3ZITWlpNUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSb9MA0G CSqGSIb3DQEBCwUAA4IBAQAtgvLaTOOWIahM0ya0nLwTl1ZVldOuhUI0C5KhHLsC 1n77mzyBpAB9ImjnLIUCsc0h2N5HTCHiPAXtS2PE7+oEUYfPh8eSXnPT2sU0s0Ze pPOZXaLevXiTUoOXF19OwnpIFMmb85/Wd61jiFQvcEjz6tV8tRBW4j5huPKAGdiI r50xXFiwmrxhzc1FTMpmytM0nQXKR2+rG37KoyaKUh4y/Cnk86P8YzHgsSOOI+8S cx89jMLGxWWu1OnQ3MMZx75Wz78JUCUCzzfsufmjTWXx/uFeacL9iBUmA81QbmSM weMZP6yds4eZWnw1RS1NhIiAPAR8nzArs8cv2S4J8m6Z -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:53 2026 by rpki-client