This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/chpnAXFJwcK5gPySDUqDwv2KJTQ.roa File: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (raw, json) Hash identifier: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g= Subject key identifier: 72:1A:67:01:71:49:C1:C2:B9:80:FC:92:0D:4A:83:C2:FD:8A:25:34 Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4 Certificate serial: 019B7C80D9350C613D017DFAAF2359E53F9E Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/chpnAXFJwcK5gPySDUqDwv2KJTQ.roa Signing time: Fri 02 Jan 2026 02:19:37 +0000 ROA not before: Fri 02 Jan 2026 02:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202543 IP address blocks: 45.154.176.0/24 maxlen: 24 45.154.177.0/24 maxlen: 24 45.154.178.0/24 maxlen: 24 45.154.179.0/24 maxlen: 24 185.227.6.0/24 maxlen: 24 185.246.168.0/24 maxlen: 24 185.246.169.0/24 maxlen: 24 185.246.170.0/24 maxlen: 24 185.246.171.0/24 maxlen: 24 2a0f:3980::/30 maxlen: 30 2a0f:3984::/30 maxlen: 30 2a0f:c300::/30 maxlen: 30 2a0f:c304::/30 maxlen: 30 2a14:2980::/30 maxlen: 30 2a14:2984::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d9:35:0c:61:3d:01:7d:fa:af:23:59:e5:3f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4 Validity Not Before: Jan 2 02:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=721a67017149c1c2b980fc920d4a83c2fd8a2534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:3a:79:24:46:63:52:60:1b:ea:7a:66:76:9e: 2e:2f:35:77:80:82:5f:a1:91:72:65:41:f3:dd:6f: 04:20:fd:fb:85:13:c4:86:b3:5d:8e:55:66:d0:a9: a6:ae:42:5e:00:1f:18:8d:ba:fe:a9:be:13:33:90: da:b6:6a:80:05:a7:a9:06:2f:5f:ab:80:72:c5:f2: 7b:7d:a4:b5:d6:dd:22:35:62:92:e0:18:6d:44:00: d9:18:81:c6:92:c2:e5:a5:05:66:10:3c:00:f3:67: b9:ed:d8:05:c3:61:0c:d3:5c:62:08:2f:14:1d:ff: 78:5c:61:ca:01:23:63:9c:e5:ff:92:9e:f3:b7:ff: bf:9d:5b:14:31:f5:ee:bb:6b:67:90:d1:3a:08:73: d3:91:df:71:f7:4e:8e:24:f6:e9:d1:85:10:68:7f: 5c:59:c2:f7:15:47:df:04:e1:ef:de:4a:2d:d0:88: 92:c0:42:bc:ec:71:43:58:9a:f1:c4:9a:58:69:be: 94:f7:e7:74:24:55:ee:7c:67:ee:5b:e4:ea:b7:1d: 4c:7a:c5:50:b2:b2:0e:ec:34:8c:69:ed:77:e9:67: 63:a9:54:66:a8:1b:80:15:7e:ab:7a:04:18:ef:ff: be:fa:59:c1:6c:8f:58:91:58:aa:bd:ce:f6:07:5e: 84:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1A:67:01:71:49:C1:C2:B9:80:FC:92:0D:4A:83:C2:FD:8A:25:34 X509v3 Authority Key Identifier: keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/chpnAXFJwcK5gPySDUqDwv2KJTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.176.0/22 185.227.6.0/24 185.246.168.0/22 IPv6: 2a0f:3980::/29 2a0f:c300::/29 2a14:2980::/29 Signature Algorithm: sha256WithRSAEncryption 04:5a:b4:d0:a9:58:01:27:93:6d:38:59:e2:6a:40:58:33:ab: 74:d6:6d:b5:a0:e6:0a:e1:47:a1:be:a3:8e:bc:8b:e0:58:64: c5:16:e8:0f:b1:b7:73:93:c7:27:77:0f:24:2b:da:c5:52:7b: d1:8c:96:3c:fb:38:0d:c0:62:aa:59:fd:25:ef:90:87:73:50: 3a:0b:cc:d0:1e:9c:78:d4:02:9f:49:ee:75:b4:b3:ee:ab:8e: 77:fc:20:f0:11:4d:34:b2:e6:29:61:78:2b:af:c2:77:11:bb: e4:53:58:18:b3:19:c9:39:89:3d:bb:6e:97:d7:1e:d3:16:67: f9:8a:2d:26:ac:1f:ac:1e:f8:00:c1:9b:f1:6b:c2:09:02:30: 25:89:a7:11:bf:4a:dd:8b:3f:a6:4e:f2:b0:90:48:5d:16:a3: 22:af:76:0d:1c:91:f9:94:a6:b1:9a:69:65:b8:f6:98:b1:99: 1a:0e:96:9b:95:74:48:42:f0:f6:d7:fd:02:4d:a6:d9:74:be: 99:c4:25:06:dc:70:8c:72:c0:1d:42:d2:63:5a:41:db:5c:48: 1d:74:a2:4f:d5:3d:a6:3a:e8:3a:9d:33:3b:8a:84:ec:f6:5a: 73:01:9a:9e:20:b4:3f:16:97:ff:58:21:21:a4:e9:6a:b2:f9: 51:31:96:0c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt8gNk1DGE9AX36ryNZ5T+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi MTBhZDQwHhcNMjYwMTAyMDIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjFhNjcwMTcxNDljMWMyYjk4MGZjOTIwZDRhODNjMmZkOGEyNTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDp5JEZjUmAb6npmdp4uLzV3gIJf oZFyZUHz3W8EIP37hRPEhrNdjlVm0KmmrkJeAB8Yjbr+qb4TM5DatmqABaepBi9f q4ByxfJ7faS11t0iNWKS4BhtRADZGIHGksLlpQVmEDwA82e57dgFw2EM01xiCC8U Hf94XGHKASNjnOX/kp7zt/+/nVsUMfXuu2tnkNE6CHPTkd9x906OJPbp0YUQaH9c WcL3FUffBOHv3kot0IiSwEK87HFDWJrxxJpYab6U9+d0JFXufGfuW+Tqtx1MesVQ srIO7DSMae136WdjqVRmqBuAFX6regQY7/+++lnBbI9YkViqvc72B16EnwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFHIaZwFxScHCuYD8kg1Kg8L9iiU0MB8GA1UdIwQY MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt YzNkNTdlMjM4N2NhLzEvY2hwbkFYRkp3Y0s1Z1B5U0RVcUR3djJLSlRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQCLZqwAwQA ueMGAwQCufaoMBsEAgACMBUDBQMqDzmAAwUDKg/DAAMFAyoUKYAwDQYJKoZIhvcN AQELBQADggEBAARatNCpWAEnk204WeJqQFgzq3TWbbWg5grhR6G+o468i+BYZMUW 6A+xt3OTxyd3DyQr2sVSe9GMljz7OA3AYqpZ/SXvkIdzUDoLzNAenHjUAp9J7nW0 s+6rjnf8IPARTTSy5ilheCuvwncRu+RTWBizGck5iT27bpfXHtMWZ/mKLSasH6we +ADBm/FrwgkCMCWJpxG/St2LP6ZO8rCQSF0WoyKvdg0ckfmUprGaaWW49pixmRoO lpuVdEhC8PbX/QJNptl0vpnEJQbccIxywB1C0mNaQdtcSB10ok/VPaY66DqdMzuK hOz2WnMBmp4gtD8Wl/9YISGk6Wqy+VExlgw= -----END CERTIFICATE-----Generated at Tue Jan 20 10:12:24 2026 by rpki-client