This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa File: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (raw, json) Hash identifier: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo= Subject key identifier: 0A:17:03:C9:19:DA:00:71:77:38:3F:61:F0:26:4B:C5:36:0B:9D:DD Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260 Certificate serial: 019B7A5AAE19A30EDD31EF2932CA9A1BB9AC Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa Signing time: Thu 01 Jan 2026 16:18:41 +0000 ROA not before: Thu 01 Jan 2026 16:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197537 IP address blocks: 45.140.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ae:19:a3:0e:dd:31:ef:29:32:ca:9a:1b:b9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260 Validity Not Before: Jan 1 16:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a1703c919da007177383f61f0264bc5360b9ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:9e:a5:a7:ac:4c:6d:ce:62:6f:4c:6b:4c: 38:ed:70:07:7e:bb:e0:01:b0:87:47:eb:b9:fb:cd: db:5c:40:40:d7:d6:69:47:c1:06:8d:3b:55:cc:32: c6:77:59:b4:c0:1d:f5:f9:67:d9:82:cb:b3:bc:e1: 7a:5a:23:81:b0:b9:f7:a8:8f:38:40:e0:24:63:ff: e7:af:84:fe:30:ab:b2:28:e0:7c:7c:33:7d:62:4e: a2:92:5b:a4:a9:cc:bb:de:84:76:e8:7c:51:83:c6: 74:0d:77:9c:f9:7f:28:e3:b7:3d:94:49:09:85:98: 9e:93:b7:90:de:b9:5b:6e:b9:a7:4e:14:49:5d:78: 9b:36:81:f4:2b:da:05:1d:00:c0:50:5c:fa:17:ab: 22:20:8b:6c:08:23:07:d6:08:b3:d4:e4:25:56:cd: fb:1f:77:1b:27:b8:78:9b:41:2c:b5:e2:e3:8d:75: 51:1a:fb:53:b6:f6:97:d4:01:60:f6:13:11:de:e5: b1:0e:e1:e1:92:98:ea:53:07:09:92:c7:c6:3f:d7: d0:66:83:22:80:45:ba:88:ee:58:49:12:c7:f4:28: ea:f7:ed:97:c8:af:d0:a3:00:76:9a:1c:4f:6b:38: 5a:9a:5b:5a:7d:37:54:10:4d:14:6d:8a:40:16:8b: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:17:03:C9:19:DA:00:71:77:38:3F:61:F0:26:4B:C5:36:0B:9D:DD X509v3 Authority Key Identifier: keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.210.0/24 Signature Algorithm: sha256WithRSAEncryption 03:46:28:91:b2:73:a3:95:35:af:de:f0:8a:8b:73:1c:8c:a3: c3:ce:0f:c8:a4:07:ad:24:ad:2c:0e:c7:f0:80:dd:29:53:41: 67:1b:15:dd:c6:ad:11:6e:5f:8a:bf:7f:a5:24:b6:17:90:98: 22:0e:cf:39:85:b8:2d:44:6c:db:09:e7:0e:ce:20:17:b1:85: db:c9:cb:32:18:39:91:68:82:3d:5b:16:16:3f:2f:49:47:45: 2f:2d:61:ca:f9:99:c8:47:53:68:47:94:44:c1:a0:7b:06:1c: 1d:3b:42:1b:7f:cc:63:ba:d2:1b:70:5a:c4:2d:0b:df:20:2e: c5:ce:1c:3f:a7:e2:25:8b:3d:34:81:21:51:ae:9c:70:89:69: cf:7a:47:b6:a9:7e:31:4f:36:ce:f6:ce:fb:fe:eb:42:f6:16: 81:08:43:46:a9:14:d5:18:34:54:ee:30:ca:96:f0:78:7f:1e: be:3c:08:80:8b:00:45:e6:d8:e7:50:e8:80:ea:9e:da:9f:39: a5:93:09:17:7d:0d:59:86:16:b6:d6:6e:50:29:27:0f:9c:3d: 04:b0:6d:30:e6:fd:82:bc:87:34:5f:ff:20:6c:d6:48:f1:58: 77:f1:8e:a1:e3:1d:b0:5b:c7:da:9d:7b:d8:70:53:e6:7a:18: 35:69:3f:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wq4Zow7dMe8pMsqaG7msMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2 Y2MyNjAwHhcNMjYwMTAxMTYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTE3MDNjOTE5ZGEwMDcxNzczODNmNjFmMDI2NGJjNTM2MGI5ZGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9yepaesTG3OYm9Ma0w47XAHfrvg AbCHR+u5+83bXEBA19ZpR8EGjTtVzDLGd1m0wB31+WfZgsuzvOF6WiOBsLn3qI84 QOAkY//nr4T+MKuyKOB8fDN9Yk6iklukqcy73oR26HxRg8Z0DXec+X8o47c9lEkJ hZiek7eQ3rlbbrmnThRJXXibNoH0K9oFHQDAUFz6F6siIItsCCMH1giz1OQlVs37 H3cbJ7h4m0EsteLjjXVRGvtTtvaX1AFg9hMR3uWxDuHhkpjqUwcJksfGP9fQZoMi gEW6iO5YSRLH9Cjq9+2XyK/QowB2mhxPazhamltafTdUEE0UbYpAFoukpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAoXA8kZ2gBxdzg/YfAmS8U2C53dMB8GA1UdIwQY MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt NjA3ZDRmMzdmNTlmLzEvQ2hjRHlSbmFBSEYzT0Q5aDhDWkx4VFlMbmQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYzSMA0G CSqGSIb3DQEBCwUAA4IBAQADRiiRsnOjlTWv3vCKi3McjKPDzg/IpAetJK0sDsfw gN0pU0FnGxXdxq0Rbl+Kv3+lJLYXkJgiDs85hbgtRGzbCecOziAXsYXbycsyGDmR aII9WxYWPy9JR0UvLWHK+ZnIR1NoR5REwaB7BhwdO0Ibf8xjutIbcFrELQvfIC7F zhw/p+Iliz00gSFRrpxwiWnPeke2qX4xTzbO9s77/utC9haBCENGqRTVGDRU7jDK lvB4fx6+PAiAiwBF5tjnUOiA6p7anzmlkwkXfQ1Zhha21m5QKScPnD0EsG0w5v2C vIc0X/8gbNZI8Vh38Y6h4x2wW8fanXvYcFPmehg1aT/Y -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:09 2026 by rpki-client