This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa File: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (raw, json) Hash identifier: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0= Subject key identifier: 0A:38:66:08:C5:A9:B6:B1:04:84:63:F4:AD:66:77:69:2F:C6:64:24 Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Certificate serial: 019B79107BFD2CD3B6166499FF5F01CA9D66 Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 194.110.130.0/24 maxlen: 24 194.110.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7b:fd:2c:d3:b6:16:64:99:ff:5f:01:ca:9d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a386608c5a9b6b1048463f4ad6677692fc66424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8b:c3:b9:1c:83:df:7d:b3:ff:b6:4b:c4:52: ea:a2:0e:41:5e:79:6c:46:26:04:64:6f:d0:45:09: 3a:65:15:54:52:67:44:44:68:51:68:55:0a:bf:6e: 2a:78:ed:af:d9:4a:4b:a2:5d:65:c9:b0:71:b0:f6: 94:ed:39:a7:7b:64:52:c7:b1:32:02:fa:ab:91:cd: f6:28:65:97:53:d4:c1:eb:d0:ea:f3:48:80:56:1b: 5b:10:87:6f:75:a0:8c:bc:09:85:1d:ae:d6:2c:02: 96:ff:7c:43:cf:d8:c1:16:7f:e0:cc:91:35:95:de: 08:3b:da:6d:58:b8:46:12:c5:d2:6d:2b:9a:91:00: 11:68:d8:80:e0:d7:22:a5:71:6d:0a:c7:01:20:5a: 10:ab:42:a9:b4:54:c8:7d:26:a2:d5:9f:c0:83:f0: c1:d0:86:2a:a1:b6:64:fa:5a:3c:72:dd:97:5b:bf: 9c:5f:93:cb:b3:7b:12:c7:8b:9b:76:84:82:b1:78: f0:f3:d8:25:ed:58:09:04:34:38:b5:d9:b0:5c:cb: 1d:cd:49:09:d2:fd:27:aa:98:99:60:2b:01:3e:a5: 3f:6d:58:fb:8f:38:10:9e:bd:b2:83:a9:a1:ef:2a: 73:3b:fc:04:1d:26:c1:e1:5e:49:92:f0:ea:23:d3: 77:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:66:08:C5:A9:B6:B1:04:84:63:F4:AD:66:77:69:2F:C6:64:24 X509v3 Authority Key Identifier: keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.130.0/23 Signature Algorithm: sha256WithRSAEncryption 17:22:d2:92:ba:17:bb:6a:6f:14:ab:04:0c:fe:66:70:59:c8: fd:42:a0:90:8e:82:21:37:b7:da:b6:00:de:96:b0:28:8a:79: f4:2e:a8:70:8b:08:46:24:08:bf:cd:06:07:22:c8:80:e3:66: a8:55:30:bf:d4:69:57:ce:58:fa:91:00:38:74:22:29:08:6c: 82:08:80:55:50:f6:be:95:b4:43:97:95:c4:f6:db:ac:b0:78: 19:27:57:a3:21:0f:d5:cd:ab:8b:e7:fe:ac:8e:97:4f:fe:73: 8a:b4:2f:7a:56:25:fc:09:20:ea:b8:ac:0b:d5:b5:88:51:a8: 10:45:3d:ad:f0:07:81:16:63:09:10:1f:88:bf:7d:51:6e:c7: 36:0e:91:de:9e:d7:d9:83:4d:36:db:0a:dd:17:f0:8f:f1:00: f0:21:04:f4:99:e8:8c:7c:6b:dc:fa:79:87:fc:e5:55:e8:f2: 04:22:12:b5:88:be:d1:b7:d9:72:1f:ed:cb:fb:59:43:68:a0: 52:e0:70:25:6d:90:95:a3:bb:fd:1a:c6:f1:5c:c6:10:1c:1e: 69:5e:2d:23:b7:0a:34:20:28:36:c8:78:89:16:d9:6f:e0:b4: 38:37:aa:66:0f:d1:0a:16:56:1e:2c:ea:0f:9e:72:14:e9:b6: c4:c1:05:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHv9LNO2FmSZ/18Byp1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1 MzM5MTAwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTM4NjYwOGM1YTliNmIxMDQ4NDYzZjRhZDY2Nzc2OTJmYzY2NDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4vDuRyD332z/7ZLxFLqog5BXnls RiYEZG/QRQk6ZRVUUmdERGhRaFUKv24qeO2v2UpLol1lybBxsPaU7Tmne2RSx7Ey Avqrkc32KGWXU9TB69Dq80iAVhtbEIdvdaCMvAmFHa7WLAKW/3xDz9jBFn/gzJE1 ld4IO9ptWLhGEsXSbSuakQARaNiA4NcipXFtCscBIFoQq0KptFTIfSai1Z/Ag/DB 0IYqobZk+lo8ct2XW7+cX5PLs3sSx4ubdoSCsXjw89gl7VgJBDQ4tdmwXMsdzUkJ 0v0nqpiZYCsBPqU/bVj7jzgQnr2yg6mh7ypzO/wEHSbB4V5JkvDqI9N3EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAo4ZgjFqbaxBIRj9K1md2kvxmQkMB8GA1UdIwQY MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt MTUzZTkxODJhZjQxLzEvQ2pobUNNV3B0ckVFaEdQMHJXWjNhU19HWkNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwm6CMA0G CSqGSIb3DQEBCwUAA4IBAQAXItKSuhe7am8UqwQM/mZwWcj9QqCQjoIhN7fatgDe lrAoinn0LqhwiwhGJAi/zQYHIsiA42aoVTC/1GlXzlj6kQA4dCIpCGyCCIBVUPa+ lbRDl5XE9tussHgZJ1ejIQ/VzauL5/6sjpdP/nOKtC96ViX8CSDquKwL1bWIUagQ RT2t8AeBFmMJEB+Iv31Rbsc2DpHentfZg0022wrdF/CP8QDwIQT0meiMfGvc+nmH /OVV6PIEIhK1iL7Rt9lyH+3L+1lDaKBS4HAlbZCVo7v9GsbxXMYQHB5pXi0jtwo0 ICg2yHiJFtlv4LQ4N6pmD9EKFlYeLOoPnnIU6bbEwQXY -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:47 2026 by rpki-client