This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CLjBOSAKGYLmscM65RDo8NuXd8U.roa File: CLjBOSAKGYLmscM65RDo8NuXd8U.roa (raw, json) Hash identifier: S7TNkkTTabKvFy0q8Kb4F/zSSuLSse6SgQZ9e7XN4Zg= Subject key identifier: 08:B8:C1:39:20:0A:19:82:E6:B1:C3:3A:E5:10:E8:F0:DB:97:77:C5 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C801DE7ECD5CD988AD6C0221DB05652 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CLjBOSAKGYLmscM65RDo8NuXd8U.roa Signing time: Fri 02 Jan 2026 02:18:49 +0000 ROA not before: Fri 02 Jan 2026 02:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53340 IP address blocks: 45.10.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1d:e7:ec:d5:cd:98:8a:d6:c0:22:1d:b0:56:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08b8c139200a1982e6b1c33ae510e8f0db9777c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:1b:a8:2a:98:92:b5:df:a5:dc:1f:d8:ec: fc:b1:38:b7:01:99:5e:3e:bc:1c:1a:e2:41:1c:7a: f0:bc:d0:ee:9c:ca:cf:89:37:0e:d7:5a:94:d9:12: 9d:1f:c5:1f:39:88:47:35:30:26:1a:4f:e0:fd:fd: 7d:bd:be:13:b7:5a:27:4a:ac:ed:13:8d:30:62:86: db:21:7f:97:b3:10:9f:65:6b:fb:3f:23:66:aa:c3: da:2f:fa:ef:18:4a:83:e3:16:d4:b0:3a:c0:72:9b: a2:df:2b:01:be:8a:13:78:36:ea:bc:25:88:27:7b: 16:34:b6:19:47:ef:af:6e:5d:00:ee:9e:68:39:75: 2e:57:38:ca:c1:b1:e6:82:e7:cd:f7:fd:38:11:7a: 56:36:fc:91:bc:e5:e5:33:83:19:6a:58:28:32:a2: ac:0f:4e:6d:b4:6d:e2:a2:33:db:7d:ad:7c:86:ff: c2:85:74:c3:a4:c9:35:86:f2:3d:c1:e7:a1:4d:2c: 01:67:5e:21:fe:65:a3:97:59:3d:31:27:30:88:0a: 46:c1:9f:c4:a0:6e:41:70:23:12:32:f5:61:ed:20: bf:7e:96:2e:c0:b9:95:35:14:03:0f:ae:1f:17:cb: 5a:90:4a:f0:6e:fd:50:2f:d4:22:f4:2e:dc:7f:bd: 18:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B8:C1:39:20:0A:19:82:E6:B1:C3:3A:E5:10:E8:F0:DB:97:77:C5 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/CLjBOSAKGYLmscM65RDo8NuXd8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.22.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:61:a1:4a:0b:e4:b0:e2:8d:38:e7:0c:f9:56:9e:68:da:db: 29:ba:6d:34:00:ae:75:da:83:bb:60:6f:3b:3f:67:be:3a:5c: 18:48:7a:c5:39:59:2c:2f:a4:2e:e9:2b:b3:80:d0:2c:4c:27: bb:52:9f:7e:50:53:9b:0f:30:6a:3a:e1:3d:89:0f:7a:71:01: 1f:ff:2f:0e:05:1b:e1:82:7a:95:06:b6:d0:a2:a1:e8:42:81: 0f:98:09:6d:d6:cd:03:d1:bf:d9:34:9b:3e:db:45:30:c0:57: 04:92:0b:8a:19:cd:c4:c1:83:0e:c4:6e:28:c8:50:ee:62:ef: 59:a1:d4:58:03:03:71:38:b6:4a:7b:c4:09:d4:ca:b2:d7:f1: c3:88:fa:b2:d7:5c:7f:19:c6:8a:a4:30:97:11:d1:d2:e6:08: 89:91:63:e6:2d:ce:86:11:2f:d7:e9:32:5b:f1:fc:cf:06:03: f9:7b:16:fc:9f:51:0a:cd:b0:77:5a:5a:e5:cd:dc:55:6e:92: 7b:e9:bb:f5:3d:56:96:c7:e6:b4:09:3e:27:15:67:96:4a:9a: 64:44:4c:de:fb:ca:b1:15:2c:fe:b9:18:0c:d9:5f:a2:4b:b2: 6e:c0:9a:ab:50:de:84:bc:c8:31:51:fd:f5:79:a9:de:63:d7: 5b:88:d1:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gB3n7NXNmIrWwCIdsFZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGI4YzEzOTIwMGExOTgyZTZiMWMzM2FlNTEwZThmMGRiOTc3N2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu4bqCqYkrXfpdwf2Oz8sTi3AZle PrwcGuJBHHrwvNDunMrPiTcO11qU2RKdH8UfOYhHNTAmGk/g/f19vb4Tt1onSqzt E40wYobbIX+XsxCfZWv7PyNmqsPaL/rvGEqD4xbUsDrAcpui3ysBvooTeDbqvCWI J3sWNLYZR++vbl0A7p5oOXUuVzjKwbHmgufN9/04EXpWNvyRvOXlM4MZalgoMqKs D05ttG3iojPbfa18hv/ChXTDpMk1hvI9weehTSwBZ14h/mWjl1k9MScwiApGwZ/E oG5BcCMSMvVh7SC/fpYuwLmVNRQDD64fF8takErwbv1QL9Qi9C7cf70YtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAi4wTkgChmC5rHDOuUQ6PDbl3fFMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvQ0xqQk9TQUtHWUxtc2NNNjVSRG84TnVYZDhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQoWMA0G CSqGSIb3DQEBCwUAA4IBAQAsYaFKC+Sw4o045wz5Vp5o2tspum00AK512oO7YG87 P2e+OlwYSHrFOVksL6Qu6SuzgNAsTCe7Up9+UFObDzBqOuE9iQ96cQEf/y8OBRvh gnqVBrbQoqHoQoEPmAlt1s0D0b/ZNJs+20UwwFcEkguKGc3EwYMOxG4oyFDuYu9Z odRYAwNxOLZKe8QJ1Mqy1/HDiPqy11x/GcaKpDCXEdHS5giJkWPmLc6GES/X6TJb 8fzPBgP5exb8n1EKzbB3WlrlzdxVbpJ76bv1PVaWx+a0CT4nFWeWSppkREze+8qx FSz+uRgM2V+iS7JuwJqrUN6EvMgxUf31eaneY9dbiNFa -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:29 2026 by rpki-client