This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CzCschrCu44OrGQHgGg3O9t3D1s.roa File: CzCschrCu44OrGQHgGg3O9t3D1s.roa (raw, json) Hash identifier: jZcRpg9EdYkVey2NjkGeN6Bik02DSGIoLht/Srb1BJ0= Subject key identifier: 0B:30:AC:72:1A:C2:BB:8E:0E:AC:64:07:80:68:37:3B:DB:77:0F:5B Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B361C03379B9F67EAF2ADF2C9204E05 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CzCschrCu44OrGQHgGg3O9t3D1s.roa Signing time: Thu 01 Jan 2026 20:18:22 +0000 ROA not before: Thu 01 Jan 2026 20:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215314 IP address blocks: 45.93.22.0/24 maxlen: 24 91.132.226.0/24 maxlen: 24 91.188.212.0/24 maxlen: 24 91.188.213.0/24 maxlen: 24 91.188.214.0/24 maxlen: 24 91.188.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:1c:03:37:9b:9f:67:ea:f2:ad:f2:c9:20:4e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b30ac721ac2bb8e0eac64078068373bdb770f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c2:f7:e6:d1:67:1b:09:8d:2a:07:c5:d5:bf: 66:37:2b:3a:d1:e9:3c:8d:0a:fc:83:a5:0c:aa:67: 80:9b:fa:90:07:72:17:b2:bd:74:69:b7:71:eb:c1: 09:d8:37:c9:3a:b7:fe:11:7c:1a:47:54:f0:30:72: c5:64:17:a0:c4:2d:ff:b9:94:29:30:d7:29:67:69: 59:d9:fa:23:de:a1:95:43:fa:ac:5d:e3:5a:fb:a4: a7:4b:ae:67:73:0a:04:d3:a8:e0:d4:c6:db:6d:d5: ae:6c:d2:a3:81:5e:94:7a:25:ff:ec:93:f9:46:7b: 6b:ac:b2:46:9c:07:87:4d:c4:e6:9b:d6:b3:ac:37: de:07:ea:e1:16:06:f6:ff:39:ab:ef:26:b1:15:f9: b8:83:ae:69:fb:3d:5b:11:96:a4:b2:39:4c:cd:72: 8d:3b:36:11:d3:fb:de:24:38:cc:c3:ae:24:e9:c4: c1:cc:6f:ec:6e:20:9e:09:90:f3:58:29:31:db:4e: ba:36:04:52:43:bf:d6:d0:59:03:c2:65:5c:6b:19: 0f:73:bc:04:51:16:db:e3:3e:e4:19:d7:da:45:5b: 44:2d:1c:b3:71:7c:e3:57:73:4a:e0:b2:0b:93:2d: cf:24:c2:53:2d:9c:4a:46:9c:55:fb:37:ac:0d:3c: 21:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:30:AC:72:1A:C2:BB:8E:0E:AC:64:07:80:68:37:3B:DB:77:0F:5B X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/CzCschrCu44OrGQHgGg3O9t3D1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.22.0/24 91.132.226.0/24 91.188.212.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:a6:67:2b:f1:91:84:f2:32:cd:a5:4a:58:f0:c5:d4:e0:db: ff:76:37:30:ab:24:dd:f9:75:18:49:0e:be:cd:26:6a:ee:16: 6a:cb:7d:e5:c4:e0:37:e5:4c:cb:2a:3d:a7:81:e9:d1:c0:ba: 1e:27:3e:5a:95:57:36:37:64:27:c0:f1:a9:fa:15:67:5c:21: 21:75:90:bd:d0:22:3d:c2:be:21:d3:28:35:8c:64:0d:59:d3: f3:be:bf:f6:c7:5e:92:7e:3a:1c:45:5c:98:af:39:39:5d:ca: 53:50:3a:55:1b:b9:a4:9b:09:9d:41:15:10:69:5e:38:ba:1d: 9c:7b:3c:e6:00:ea:4f:c0:e4:8a:74:32:52:fc:7a:61:f2:aa: 67:cd:3f:14:ba:34:dc:6f:0f:72:6b:5a:3d:ca:dc:24:e3:7b: 64:91:40:1c:3b:5e:5f:9b:c2:49:1f:ec:3d:5a:81:f2:a8:4e: 21:d7:67:a8:b7:43:72:de:bc:a8:0b:17:59:34:a7:cb:03:64: 6e:e9:a4:52:7d:3b:23:d8:cc:0c:da:78:a9:38:41:b4:ef:e1: f6:8f:90:68:f8:fd:4b:44:2e:a9:ec:85:77:50:c3:28:fd:23: 02:8e:ea:dd:f1:1f:18:82:ce:70:3e:0e:09:df:8d:bf:f5:18: 47:6b:6d:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NhwDN5ufZ+ryrfLJIE4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjMwYWM3MjFhYzJiYjhlMGVhYzY0MDc4MDY4MzczYmRiNzcwZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsL35tFnGwmNKgfF1b9mNys60ek8 jQr8g6UMqmeAm/qQB3IXsr10abdx68EJ2DfJOrf+EXwaR1TwMHLFZBegxC3/uZQp MNcpZ2lZ2foj3qGVQ/qsXeNa+6SnS65ncwoE06jg1MbbbdWubNKjgV6UeiX/7JP5 RntrrLJGnAeHTcTmm9azrDfeB+rhFgb2/zmr7yaxFfm4g65p+z1bEZaksjlMzXKN OzYR0/veJDjMw64k6cTBzG/sbiCeCZDzWCkx2066NgRSQ7/W0FkDwmVcaxkPc7wE URbb4z7kGdfaRVtELRyzcXzjV3NK4LILky3PJMJTLZxKRpxV+zesDTwh3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAswrHIawruODqxkB4BoNzvbdw9bMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvQ3pDc2NockN1NDRPckdRSGdHZzNPOXQzRDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALV0WAwQA W4TiAwQCW7zUMA0GCSqGSIb3DQEBCwUAA4IBAQCbpmcr8ZGE8jLNpUpY8MXU4Nv/ djcwqyTd+XUYSQ6+zSZq7hZqy33lxOA35UzLKj2ngenRwLoeJz5alVc2N2QnwPGp +hVnXCEhdZC90CI9wr4h0yg1jGQNWdPzvr/2x16SfjocRVyYrzk5XcpTUDpVG7mk mwmdQRUQaV44uh2cezzmAOpPwOSKdDJS/Hph8qpnzT8UujTcbw9ya1o9ytwk43tk kUAcO15fm8JJH+w9WoHyqE4h12eot0Ny3ryoCxdZNKfLA2Ru6aRSfTsj2MwM2nip OEG07+H2j5Bo+P1LRC6p7IV3UMMo/SMCjurd8R8Ygs5wPg4J342/9RhHa20x -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:33 2026 by rpki-client