This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/C2VLEg7n0tawM_YjuKM0EwCOIdU.roa File: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (raw, json) Hash identifier: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s= Subject key identifier: 0B:65:4B:12:0E:E7:D2:D6:B0:33:F6:23:B8:A3:34:13:00:8E:21:D5 Certificate issuer: /CN=ceb86983547113359bade1f3f38104091e3a6439 Certificate serial: 019B7C7F75B9E1B71F63BCA261D5B761264B Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/C2VLEg7n0tawM_YjuKM0EwCOIdU.roa Signing time: Fri 02 Jan 2026 02:18:06 +0000 ROA not before: Fri 02 Jan 2026 02:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3269 IP address blocks: 193.207.192.0/20 maxlen: 20 193.207.208.0/20 maxlen: 20 193.207.224.0/21 maxlen: 21 193.207.232.0/21 maxlen: 21 193.207.240.0/22 maxlen: 22 193.207.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:75:b9:e1:b7:1f:63:bc:a2:61:d5:b7:61:26:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439 Validity Not Before: Jan 2 02:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b654b120ee7d2d6b033f623b8a33413008e21d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:bb:4c:60:c5:dc:05:77:b5:3b:77:d4:1e: ba:10:c7:72:65:2b:c8:6b:9f:d8:d7:f0:3a:b4:5d: 56:2b:21:81:e5:b5:ec:98:82:32:b1:86:30:9f:ae: b5:51:cb:e4:93:9c:3b:be:99:9c:48:cd:5a:6b:bf: cb:4b:99:2e:de:0f:0e:7f:d3:4e:83:e1:d0:73:29: 1a:57:cc:cd:cd:16:d7:cd:ab:70:c5:9d:ce:ff:fc: 0b:47:38:a4:8b:05:8f:fe:70:84:cd:63:8c:5b:d2: 0a:72:82:6a:4b:0e:05:22:8a:c9:07:44:57:0c:63: aa:9d:d3:4d:80:0e:ac:d8:1d:22:22:7f:af:ce:1d: 06:ed:1b:44:86:c0:a8:56:c2:43:50:4e:ed:82:4f: 8a:f4:a9:70:06:6e:f3:66:11:6a:0a:ce:58:8d:ce: bc:8d:f5:df:e3:e6:a7:5b:4f:2b:80:62:a6:0c:0f: 08:6c:67:9b:3e:25:d1:0b:bd:8c:a9:ef:c8:64:a0: fd:e9:f1:ef:e4:6f:dc:0b:2b:a9:02:0a:f0:a8:15: 99:2c:67:dd:2a:74:96:46:6f:af:09:9c:c5:68:8e: 61:50:22:82:03:43:9a:58:91:d4:88:da:95:c2:78: 7b:71:03:1c:76:2f:90:3f:9d:0f:88:7f:fe:82:ac: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:65:4B:12:0E:E7:D2:D6:B0:33:F6:23:B8:A3:34:13:00:8E:21:D5 X509v3 Authority Key Identifier: keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/C2VLEg7n0tawM_YjuKM0EwCOIdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.207.192.0-193.207.247.255 Signature Algorithm: sha256WithRSAEncryption 44:d8:47:a9:43:01:95:c1:b0:ec:4f:7c:d2:52:00:fb:0f:d4: eb:96:c7:c8:6b:46:c8:59:e6:10:8d:c6:8f:57:56:f2:d5:8a: c1:8c:cc:ca:48:9d:c5:d4:b2:e8:ff:46:9b:c8:f8:3a:b8:5c: c5:0e:64:94:84:c7:e5:76:13:10:6e:a8:02:76:21:8f:cb:e9: 37:2f:5b:dd:0a:85:51:06:71:6c:84:22:da:6d:49:33:05:55: 1a:57:78:a0:b8:a2:ca:f9:dc:da:d5:5e:d6:80:b9:3f:b6:93: 92:6d:ad:93:d4:b0:b3:f8:f5:97:c1:7d:24:c0:9e:ff:f1:8e: fa:fe:4a:84:f4:21:72:0d:97:bd:47:7d:ab:cd:b9:14:85:29: 10:bb:8b:d7:d5:dd:fd:1c:0b:e7:bc:dc:f0:71:76:33:5e:3a: 50:1b:c1:1e:2c:cf:fa:4b:13:44:d0:0b:7d:d0:2c:a3:2c:6c: d7:17:ed:81:07:f7:e7:37:52:39:04:15:53:d0:82:6b:81:74: f1:af:58:21:21:5a:f5:38:a7:33:ce:9d:68:76:91:46:51:5a: f9:ef:f8:72:f2:d4:9a:58:15:31:73:91:28:c0:39:d9:08:e8: ff:a2:b1:a0:a9:b0:bf:55:bd:eb:3d:66:0b:15:eb:7b:ba:63: 8f:5b:9d:e3 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8f3W54bcfY7yiYdW3YSZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYjg2OTgzNTQ3MTEzMzU5YmFkZTFmM2YzODEwNDA5MWUz YTY0MzkwHhcNMjYwMTAyMDIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjY1NGIxMjBlZTdkMmQ2YjAzM2Y2MjNiOGEzMzQxMzAwOGUyMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2W7TGDF3AV3tTt31B66EMdyZSvI a5/Y1/A6tF1WKyGB5bXsmIIysYYwn661Ucvkk5w7vpmcSM1aa7/LS5ku3g8Of9NO g+HQcykaV8zNzRbXzatwxZ3O//wLRzikiwWP/nCEzWOMW9IKcoJqSw4FIorJB0RX DGOqndNNgA6s2B0iIn+vzh0G7RtEhsCoVsJDUE7tgk+K9KlwBm7zZhFqCs5Yjc68 jfXf4+anW08rgGKmDA8IbGebPiXRC72Mqe/IZKD96fHv5G/cCyupAgrwqBWZLGfd KnSWRm+vCZzFaI5hUCKCA0OaWJHUiNqVwnh7cQMcdi+QP50PiH/+gqw2JQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAtlSxIO59LWsDP2I7ijNBMAjiHVMB8GA1UdIwQY MBaAFM64aYNUcRM1m63h8/OBBAkeOmQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2Qt ZGVlMmY2NTBkZDg2LzEvQzJWTEVnN24wdGF3TV9ZanVLTTBFd0NPSWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMzUzOWQtMzhjZC00NjVlLWE1N2QtZGVlMmY2NTBkZDg2 LzEvenJocGcxUnhFeldicmVIejg0RUVDUjQ2WkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAbBz8AD BAPBz/AwDQYJKoZIhvcNAQELBQADggEBAETYR6lDAZXBsOxPfNJSAPsP1OuWx8hr RshZ5hCNxo9XVvLVisGMzMpIncXUsuj/RpvI+Dq4XMUOZJSEx+V2ExBuqAJ2IY/L 6TcvW90KhVEGcWyEItptSTMFVRpXeKC4osr53NrVXtaAuT+2k5JtrZPUsLP49ZfB fSTAnv/xjvr+SoT0IXINl71HfavNuRSFKRC7i9fV3f0cC+e83PBxdjNeOlAbwR4s z/pLE0TQC33QLKMsbNcX7YEH9+c3UjkEFVPQgmuBdPGvWCEhWvU4pzPOnWh2kUZR Wvnv+HLy1JpYFTFzkSjAOdkI6P+isaCpsL9Vves9ZgsV63u6Y49bneM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:56:06 2026 by rpki-client