This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa File: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (raw, json) Hash identifier: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is= Subject key identifier: 08:46:61:C5:77:5D:70:94:AE:F0:6B:43:7A:85:0E:D4:5A:B7:97:C8 Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Certificate serial: 019B7E39043ABBCC2781B39B3127D7A7F344 Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20884 IP address blocks: 160.218.96.0/21 maxlen: 21 160.218.104.0/21 maxlen: 21 160.218.112.0/20 maxlen: 20 160.218.176.0/21 maxlen: 21 160.218.184.0/21 maxlen: 21 160.218.212.0/22 maxlen: 22 160.218.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:04:3a:bb:cc:27:81:b3:9b:31:27:d7:a7:f3:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=084661c5775d7094aef06b437a850ed45ab797c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:ec:4f:e5:0b:c8:34:5a:5c:64:7a:75:49: d2:0b:ee:d7:cb:78:b1:a9:1e:99:89:be:8a:1b:0f: 2c:9a:ef:8a:61:ef:01:ed:43:3a:14:0f:d0:87:1f: ac:46:d9:42:3a:f2:3c:62:d8:21:7c:e3:77:a0:9e: 64:9e:a9:29:b1:13:58:ab:6e:5f:29:d9:ac:79:91: ef:78:74:84:17:6d:3a:f6:07:e7:28:a3:77:16:ff: 09:75:48:8d:2a:ad:24:df:e6:1b:bb:f7:72:28:75: 51:d9:07:a8:60:61:d8:13:8c:61:3e:d1:8f:62:48: 38:d5:ba:1a:2b:cb:b1:cd:20:f0:71:f7:4e:8e:25: ca:82:69:a4:b8:5a:d8:46:56:72:15:d0:1a:1c:c3: 87:cf:44:8e:78:da:d6:91:61:b9:87:84:6a:30:e1: 22:4a:70:a2:72:b3:f4:95:fb:4f:3f:0d:e7:0f:e1: af:56:5a:ab:a8:4d:d5:fc:08:39:f6:04:fd:7e:49: 00:63:92:8a:31:87:69:ce:1d:0f:c1:0f:fa:0b:f4: a2:13:1f:50:78:cc:bd:ea:d2:be:14:c7:4f:de:3f: 74:56:45:25:02:8b:c8:3c:29:af:e9:30:22:45:d6: 32:6b:b7:8d:55:b1:21:2d:7d:ae:d2:fc:8d:b5:68: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:46:61:C5:77:5D:70:94:AE:F0:6B:43:7A:85:0E:D4:5A:B7:97:C8 X509v3 Authority Key Identifier: keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.218.96.0/19 160.218.176.0/20 160.218.212.0/22 160.218.244.0/22 Signature Algorithm: sha256WithRSAEncryption 75:49:78:fa:3b:50:ea:fe:8e:61:bd:21:ef:c4:b2:bb:a3:d3: 32:b8:dc:8d:40:fd:17:b5:32:c0:54:95:4f:c3:67:f8:38:e3: 29:c2:12:67:19:dd:45:ce:ae:ee:e7:a4:13:55:74:cf:d9:a9: 56:89:7e:14:41:d4:8a:b6:ca:9f:bd:8f:40:a3:a5:81:3b:a1: e2:88:76:df:06:41:1c:f2:7e:0e:3a:5c:19:3f:64:39:d2:52: fe:7f:0f:bf:18:47:b3:d0:3b:14:56:f5:e4:50:d7:fb:19:44: 98:34:c1:ff:32:ff:a6:fd:95:b0:07:94:7c:53:b8:cb:e4:40: a5:46:c2:b6:85:90:f6:bf:57:2c:aa:54:eb:1d:61:7a:51:60: 61:fb:05:cf:da:15:e2:9d:ff:2c:d4:06:3a:73:86:15:f6:82: bc:cf:bd:9f:d1:42:35:3e:71:f0:55:23:58:33:2c:ae:91:c7: 93:d7:fa:a3:c0:22:4c:1e:01:82:84:56:c2:3a:d2:42:dc:f0: 13:27:c9:31:a3:df:a6:b1:4e:74:3e:95:86:84:35:4b:f8:02: 87:4e:e6:c4:b8:74:7f:cf:b5:7a:8a:59:e9:a4:56:e0:03:03: f4:fe:97:53:e0:ea:cd:29:54:2f:d3:a6:d0:d0:cf:3d:11:3b: 82:cd:82:9a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+OQQ6u8wngbObMSfXp/NEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDZjNmU4YmNlZDQwYmQwMzJkMTc3MThjMWIxZTM5YWU4 NDFhZTgwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODQ2NjFjNTc3NWQ3MDk0YWVmMDZiNDM3YTg1MGVkNDVhYjc5N2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9DsT+ULyDRaXGR6dUnSC+7Xy3ix qR6Zib6KGw8smu+KYe8B7UM6FA/Qhx+sRtlCOvI8YtghfON3oJ5knqkpsRNYq25f KdmseZHveHSEF2069gfnKKN3Fv8JdUiNKq0k3+Ybu/dyKHVR2QeoYGHYE4xhPtGP Ykg41boaK8uxzSDwcfdOjiXKgmmkuFrYRlZyFdAaHMOHz0SOeNrWkWG5h4RqMOEi SnCicrP0lftPPw3nD+GvVlqrqE3V/Ag59gT9fkkAY5KKMYdpzh0PwQ/6C/SiEx9Q eMy96tK+FMdP3j90VkUlAovIPCmv6TAiRdYya7eNVbEhLX2u0vyNtWjzeQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAhGYcV3XXCUrvBrQ3qFDtRat5fIMB8GA1UdIwQY MBaAFOXWxui87UC9Ay0XcYwbHjmuhBroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQt YmQyNDliNjI1Nzk3LzEvQ0VaaHhYZGRjSlN1OEd0RGVvVU8xRnEzbDhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wODk0ZjctZTI0ZC00NzI4LThjYWQtYmQyNDliNjI1Nzk3 LzEvNWRiRzZMenRRTDBETFJkeGpCc2VPYTZFR3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFoNpgAwQE oNqwAwQCoNrUAwQCoNr0MA0GCSqGSIb3DQEBCwUAA4IBAQB1SXj6O1Dq/o5hvSHv xLK7o9MyuNyNQP0XtTLAVJVPw2f4OOMpwhJnGd1Fzq7u56QTVXTP2alWiX4UQdSK tsqfvY9Ao6WBO6HiiHbfBkEc8n4OOlwZP2Q50lL+fw+/GEez0DsUVvXkUNf7GUSY NMH/Mv+m/ZWwB5R8U7jL5EClRsK2hZD2v1csqlTrHWF6UWBh+wXP2hXinf8s1AY6 c4YV9oK8z72f0UI1PnHwVSNYMyyukceT1/qjwCJMHgGChFbCOtJC3PATJ8kxo9+m sU50PpWGhDVL+AKHTubEuHR/z7V6ilnppFbgAwP0/pdT4OrNKVQv06bQ0M89ETuC zYKa -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:04 2026 by rpki-client