This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CZTHXMpO1GW4aCEuf945vLA-9LY.roa File: CZTHXMpO1GW4aCEuf945vLA-9LY.roa (raw, json) Hash identifier: 6hMs6U5Uz32bt/WuTzqYSwbJ3eNIo87LoimEDKIlHgY= Subject key identifier: 09:94:C7:5C:CA:4E:D4:65:B8:68:21:2E:7F:DE:39:BC:B0:3E:F4:B6 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3819C77D101DAD8F7C28BDC689C3CF Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CZTHXMpO1GW4aCEuf945vLA-9LY.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19437 IP address blocks: 5.8.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:19:c7:7d:10:1d:ad:8f:7c:28:bd:c6:89:c3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0994c75cca4ed465b868212e7fde39bcb03ef4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3c:b0:f3:22:06:34:78:bf:98:3d:23:ac:f3: 8a:d6:9a:af:35:a4:81:9a:1f:0a:61:5a:11:9e:a4: 29:9e:45:ec:f8:00:68:fc:fe:24:90:21:03:bb:a1: a2:0c:bc:9f:0a:29:fd:7e:a1:1e:1d:66:10:19:4f: da:80:ce:c2:37:98:2c:3f:c8:a5:90:87:01:3d:a1: d3:5f:46:16:a2:e8:44:74:f8:2a:10:51:7b:e5:4b: 78:fd:b3:69:cd:ee:19:de:7c:3e:f1:b4:34:e1:ad: d6:72:fe:27:4a:e0:a6:64:fc:a8:7d:31:62:2d:a7: 32:d5:3c:69:fe:26:49:ce:c7:8d:81:1d:fa:66:fa: ad:dc:b4:9c:b6:ac:87:f0:78:7d:ee:7b:b6:df:f6: c7:b9:9f:f2:b0:f0:fd:9f:cb:e7:03:7f:bf:8e:22: 12:37:00:91:03:be:86:11:d1:2c:b5:b9:59:c9:85: b2:92:21:13:94:db:0a:b4:2b:c9:58:9e:af:cd:fc: c0:0a:5d:b3:5c:6c:de:43:88:ff:e1:fc:15:ca:a4: 73:0b:42:25:c3:c8:12:b7:92:56:42:83:6e:81:e5: f2:84:21:db:4c:e3:ab:82:a5:b7:96:e0:21:a9:82: eb:1c:34:a5:7b:49:98:60:43:68:22:77:f8:e2:12: 2b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:94:C7:5C:CA:4E:D4:65:B8:68:21:2E:7F:DE:39:BC:B0:3E:F4:B6 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/CZTHXMpO1GW4aCEuf945vLA-9LY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.63.0/24 Signature Algorithm: sha256WithRSAEncryption 30:a0:c3:0c:0e:fa:df:39:d5:7e:92:36:dc:08:86:95:06:33: 1e:c1:b9:0f:f8:f2:a8:51:40:b3:2c:26:fa:b0:e5:38:f6:95: 56:98:c6:7c:ee:3b:4a:e8:87:a9:b5:8d:31:f9:32:ad:be:bd: 1b:30:81:c6:be:91:52:98:83:51:17:cc:a7:7d:eb:50:10:52: 66:7c:96:b6:d1:18:9c:4d:a0:f2:8a:34:0d:a6:ba:95:83:4a: c3:63:05:db:16:b7:51:2e:c1:57:dd:89:47:68:f0:8a:86:bc: ad:b3:54:67:d1:bb:29:0e:e4:39:68:9e:83:28:5b:c4:f7:95: f9:15:06:00:b3:4c:44:d6:e1:9a:c5:e8:a2:aa:a8:2a:a4:d8: 1c:cf:89:5c:72:51:e4:a0:7a:c8:48:9a:94:83:f8:cb:e6:76: 2d:9c:e1:a9:15:b9:22:06:1c:5d:b4:f7:62:62:f4:e2:64:2f: a1:67:97:18:c3:e0:b8:ab:3a:d0:14:4d:dd:16:c1:fb:6e:84: 7e:60:b8:d5:df:8f:82:9f:00:e7:db:94:1d:c8:8e:7f:bb:78: ff:a6:99:0b:37:f5:1f:0f:69:ba:26:f4:86:52:3a:9c:03:42: 6a:3c:1c:fa:52:82:2f:54:62:d4:95:89:2a:9c:2c:c7:9e:03: 2e:4f:f6:28 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OBnHfRAdrY98KL3GicPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTk0Yzc1Y2NhNGVkNDY1Yjg2ODIxMmU3ZmRlMzliY2IwM2VmNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTyw8yIGNHi/mD0jrPOK1pqvNaSB mh8KYVoRnqQpnkXs+ABo/P4kkCEDu6GiDLyfCin9fqEeHWYQGU/agM7CN5gsP8il kIcBPaHTX0YWouhEdPgqEFF75Ut4/bNpze4Z3nw+8bQ04a3Wcv4nSuCmZPyofTFi Lacy1Txp/iZJzseNgR36Zvqt3LSctqyH8Hh97nu23/bHuZ/ysPD9n8vnA3+/jiIS NwCRA76GEdEstblZyYWykiETlNsKtCvJWJ6vzfzACl2zXGzeQ4j/4fwVyqRzC0Il w8gSt5JWQoNugeXyhCHbTOOrgqW3luAhqYLrHDSle0mYYENoInf44hIrRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAmUx1zKTtRluGghLn/eObywPvS2MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvQ1pUSFhNcE8xR1c0YUNFdWY5NDV2TEEtOUxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQg/MA0G CSqGSIb3DQEBCwUAA4IBAQAwoMMMDvrfOdV+kjbcCIaVBjMewbkP+PKoUUCzLCb6 sOU49pVWmMZ87jtK6IeptY0x+TKtvr0bMIHGvpFSmINRF8ynfetQEFJmfJa20Ric TaDyijQNprqVg0rDYwXbFrdRLsFX3YlHaPCKhryts1Rn0bspDuQ5aJ6DKFvE95X5 FQYAs0xE1uGaxeiiqqgqpNgcz4lcclHkoHrISJqUg/jL5nYtnOGpFbkiBhxdtPdi YvTiZC+hZ5cYw+C4qzrQFE3dFsH7boR+YLjV34+CnwDn25QdyI5/u3j/ppkLN/Uf D2m6JvSGUjqcA0JqPBz6UoIvVGLUlYkqnCzHngMuT/Yo -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:21 2026 by rpki-client