This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ChoBq-8V-Yxx9n3kPof9vSNYyNY.roa File: ChoBq-8V-Yxx9n3kPof9vSNYyNY.roa (raw, json) Hash identifier: M3UOqzcRWTAcuTdH7qailAPVTn3mcVjzMu/HOjGafwQ= Subject key identifier: 0A:1A:01:AB:EF:15:F9:8C:71:F6:7D:E4:3E:87:FD:BD:23:58:C8:D6 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6F283FF7F68A53435BD0A25E9DFDA Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ChoBq-8V-Yxx9n3kPof9vSNYyNY.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208487 IP address blocks: 2a0c:9a46:c00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:83:ff:7f:68:a5:34:35:bd:0a:25:e9:df:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a1a01abef15f98c71f67de43e87fdbd2358c8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:81:3b:6c:3a:ce:64:cb:2d:2f:fe:e9:24: 94:3d:75:77:af:04:99:ee:e9:15:05:ce:92:bd:e1: 33:c2:20:a7:5e:45:b3:93:1a:c7:53:02:bb:80:ef: 65:a1:c8:65:77:cd:6e:1a:26:2e:5f:66:bb:ad:06: 69:f4:c8:06:e2:b4:16:9e:6e:ce:2c:51:62:7d:f9: ee:f2:8e:59:bf:8b:5c:51:a1:de:9c:8c:77:f3:c3: b1:47:48:6b:a1:79:dc:89:e4:ad:3b:28:5f:d8:c2: ba:2c:f9:ac:fc:af:3c:09:2c:73:bf:e5:67:b4:3b: da:d6:be:36:c7:de:5b:54:8c:bf:fb:84:29:4b:e3: c9:89:62:34:2d:17:36:0e:eb:c8:9a:fc:e0:8d:05: d7:59:7f:7d:c4:da:98:a6:82:87:05:49:c4:fd:59: 06:e2:8e:3e:01:ec:fd:56:97:8e:c7:3b:a7:48:db: 74:87:ff:ae:b3:3f:2e:a4:f0:72:c1:57:74:9d:3b: a0:9c:7f:30:65:ad:be:4b:a2:d8:7e:4c:1d:8d:6d: 21:71:e1:ac:8d:31:ea:93:56:7a:4b:84:0f:01:09: 6e:4f:56:fd:e1:81:a0:5b:d8:87:d3:1c:28:c8:95: 3b:b5:e4:5f:50:ad:5a:54:0c:5c:e7:57:37:a1:20: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:01:AB:EF:15:F9:8C:71:F6:7D:E4:3E:87:FD:BD:23:58:C8:D6 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/ChoBq-8V-Yxx9n3kPof9vSNYyNY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a46:c00::/40 Signature Algorithm: sha256WithRSAEncryption 18:37:56:16:82:e8:b7:bf:16:3a:ce:70:59:3c:94:37:7d:44: 2b:23:56:86:7c:a2:93:9b:3c:bf:72:d3:ca:d2:ce:62:ad:f4: f8:fb:44:a8:92:8d:eb:7d:98:8f:f2:60:3d:2a:0a:36:be:e7: 90:6b:13:e8:8a:25:9a:1d:39:92:d1:59:b7:47:99:42:4d:41: bd:1e:50:17:59:33:b7:ca:93:dc:07:6a:e6:b3:c1:54:69:79: 09:e9:81:cc:48:93:e5:a2:41:31:c5:ac:e1:e5:e0:e9:03:3e: 44:e8:11:33:6a:45:9c:3f:b3:00:04:28:12:d5:19:29:33:fb: c5:c1:db:33:05:0d:d4:fa:59:98:64:da:9d:f2:fc:26:d5:e6: 5d:0f:ba:0b:1f:ca:75:7a:fb:38:fe:1c:bc:d0:18:71:e5:a6: 9e:c1:9b:e8:2b:ff:f2:06:57:22:e0:90:d8:37:04:16:b9:15: ba:23:aa:4c:1c:1a:05:37:7d:9c:2c:01:da:d4:d8:2b:fc:a1: 41:cb:44:15:a7:ae:c4:e4:8d:d8:aa:96:87:2e:4e:2c:73:ae: 15:e4:07:8d:21:da:f7:60:5d:5e:45:2a:9d:11:e9:98:e7:6f: 5c:9d:22:9a:b0:f4:37:9b:66:84:19:81:73:99:b9:01:67:c2: 5e:cb:cc:87 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pvKD/39opTQ1vQol6d/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTFhMDFhYmVmMTVmOThjNzFmNjdkZTQzZTg3ZmRiZDIzNThjOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+qBO2w6zmTLLS/+6SSUPXV3rwSZ 7ukVBc6SveEzwiCnXkWzkxrHUwK7gO9lochld81uGiYuX2a7rQZp9MgG4rQWnm7O LFFiffnu8o5Zv4tcUaHenIx388OxR0hroXncieStOyhf2MK6LPms/K88CSxzv+Vn tDva1r42x95bVIy/+4QpS+PJiWI0LRc2DuvImvzgjQXXWX99xNqYpoKHBUnE/VkG 4o4+Aez9VpeOxzunSNt0h/+usz8upPBywVd0nTugnH8wZa2+S6LYfkwdjW0hceGs jTHqk1Z6S4QPAQluT1b94YGgW9iH0xwoyJU7teRfUK1aVAxc51c3oSDGmQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFAoaAavvFfmMcfZ95D6H/b0jWMjWMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvQ2hvQnEtOFYtWXh4OW4za1BvZjl2U05ZeU5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRgww DQYJKoZIhvcNAQELBQADggEBABg3VhaC6Le/FjrOcFk8lDd9RCsjVoZ8opObPL9y 08rSzmKt9Pj7RKiSjet9mI/yYD0qCja+55BrE+iKJZodOZLRWbdHmUJNQb0eUBdZ M7fKk9wHauazwVRpeQnpgcxIk+WiQTHFrOHl4OkDPkToETNqRZw/swAEKBLVGSkz +8XB2zMFDdT6WZhk2p3y/CbV5l0PugsfynV6+zj+HLzQGHHlpp7Bm+gr//IGVyLg kNg3BBa5FbojqkwcGgU3fZwsAdrU2Cv8oUHLRBWnrsTkjdiqlocuTixzrhXkB40h 2vdgXV5FKp0R6Zjnb1ydIpqw9DebZoQZgXOZuQFnwl7LzIc= -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:46 2026 by rpki-client