This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CjAdakK4jK3bzKfmCY1veFE0mhI.roa File: CjAdakK4jK3bzKfmCY1veFE0mhI.roa (raw, json) Hash identifier: Z5oJMwQkoJMOahrr4QbJ28O5skdvLzLVhMGsjLOYb1g= Subject key identifier: 0A:30:1D:6A:42:B8:8C:AD:DB:CC:A7:E6:09:8D:6F:78:51:34:9A:12 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA25375254D58B1F0AE6A8FB3454FB Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CjAdakK4jK3bzKfmCY1veFE0mhI.roa Signing time: Fri 02 Jan 2026 08:19:18 +0000 ROA not before: Fri 02 Jan 2026 08:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33185 IP address blocks: 37.221.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:25:37:52:54:d5:8b:1f:0a:e6:a8:fb:34:54:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a301d6a42b88caddbcca7e6098d6f7851349a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:21:6b:f6:cd:e9:50:08:d1:f5:f0:b8:26:d5: 44:ad:fc:63:a0:67:fa:02:e9:8b:f0:22:f4:f3:cb: aa:75:1f:14:df:9a:e2:90:52:6e:f7:a3:02:d0:e8: 3f:31:cb:59:19:93:54:7f:aa:a8:17:a7:4e:f1:c3: 66:a1:78:5f:38:0c:54:89:c7:5a:78:5d:3d:91:79: fc:44:d5:13:2f:ed:f6:89:6c:a1:9a:4b:96:5d:eb: da:7e:43:27:31:ec:14:51:80:7d:f1:f1:8d:28:3a: 5a:9f:f5:7a:44:e8:59:1e:0a:57:d8:20:55:0c:58: de:c0:17:d5:c6:1c:07:e3:de:92:fb:6e:49:01:08: 52:3c:ba:ca:fe:55:36:6c:6d:a1:13:dc:bc:b6:f2: 3a:6a:de:b7:4f:91:c4:9c:8f:a0:0f:32:d9:57:ae: ef:22:a3:ae:6d:48:4d:89:27:fb:0f:6b:d5:6d:51: 3f:93:9b:d1:64:02:1f:05:7d:c0:5a:2f:f3:d6:7b: 1a:f0:7a:e3:a5:fc:30:55:1c:b1:6e:e8:67:89:ee: 87:e8:25:d9:55:29:56:e2:41:c7:b0:c7:72:f2:63: 2d:b9:c1:0b:81:79:3a:fd:15:ed:2b:ae:cb:d0:d4: 37:7c:57:63:d6:d2:6f:7c:89:47:7f:37:1c:f0:68: b5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:30:1D:6A:42:B8:8C:AD:DB:CC:A7:E6:09:8D:6F:78:51:34:9A:12 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/CjAdakK4jK3bzKfmCY1veFE0mhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.110.0/24 Signature Algorithm: sha256WithRSAEncryption 22:a0:97:d5:e3:4d:6f:8f:76:3a:c9:32:66:2c:78:aa:a2:af: e3:1c:fd:e7:2f:12:a3:e3:4c:4e:55:34:0d:9b:b4:05:09:f8: 4c:52:70:66:e3:7a:6a:47:bb:b0:c4:14:ae:94:f6:df:41:f6: cb:a8:22:48:d2:7f:b9:56:17:97:5a:a9:78:80:f9:be:a2:d1: 4b:8f:71:fa:50:12:44:ba:66:a9:3f:5d:5a:1c:7b:dc:e5:c3: 58:aa:3f:ad:08:08:71:41:f9:44:e6:fc:be:fd:98:ae:af:02: b2:7f:40:32:fe:15:51:3b:1c:66:00:fc:a3:fe:9e:4d:24:b9: 99:4c:2f:c8:23:7e:12:11:ad:f3:0b:53:f3:96:4e:5d:1c:22: 70:c4:a2:b0:da:74:13:c8:b4:ef:ea:21:94:ca:60:1d:ed:b8: 47:24:d2:71:7b:7f:e4:da:c2:aa:39:ef:9a:e5:ee:ba:b5:32: c7:af:79:ef:44:98:90:8e:e8:c7:55:54:d5:77:ae:ca:df:ba: df:b0:ae:84:fb:f9:fe:ac:2a:6e:7a:1f:23:46:cf:97:4b:54: bf:9c:8d:31:94:67:13:9b:a0:cf:8d:51:c0:de:f4:9b:b3:40: ad:18:0b:57:47:44:71:37:63:c7:68:af:a8:56:8f:66:62:28: 26:9a:80:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yiU3UlTVix8K5qj7NFT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTMwMWQ2YTQyYjg4Y2FkZGJjY2E3ZTYwOThkNmY3ODUxMzQ5YTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iFr9s3pUAjR9fC4JtVErfxjoGf6 AumL8CL088uqdR8U35rikFJu96MC0Og/MctZGZNUf6qoF6dO8cNmoXhfOAxUicda eF09kXn8RNUTL+32iWyhmkuWXevafkMnMewUUYB98fGNKDpan/V6ROhZHgpX2CBV DFjewBfVxhwH496S+25JAQhSPLrK/lU2bG2hE9y8tvI6at63T5HEnI+gDzLZV67v IqOubUhNiSf7D2vVbVE/k5vRZAIfBX3AWi/z1nsa8HrjpfwwVRyxbuhnie6H6CXZ VSlW4kHHsMdy8mMtucELgXk6/RXtK67L0NQ3fFdj1tJvfIlHfzcc8Gi1cwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAowHWpCuIyt28yn5gmNb3hRNJoSMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvQ2pBZGFrSzRqSzNiektmbUNZMXZlRkUwbWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJd1uMA0G CSqGSIb3DQEBCwUAA4IBAQAioJfV401vj3Y6yTJmLHiqoq/jHP3nLxKj40xOVTQN m7QFCfhMUnBm43pqR7uwxBSulPbfQfbLqCJI0n+5VheXWql4gPm+otFLj3H6UBJE umapP11aHHvc5cNYqj+tCAhxQflE5vy+/ZiurwKyf0Ay/hVROxxmAPyj/p5NJLmZ TC/II34SEa3zC1Pzlk5dHCJwxKKw2nQTyLTv6iGUymAd7bhHJNJxe3/k2sKqOe+a 5e66tTLHr3nvRJiQjujHVVTVd67K37rfsK6E+/n+rCpueh8jRs+XS1S/nI0xlGcT m6DPjVHA3vSbs0CtGAtXR0RxN2PHaK+oVo9mYigmmoA4 -----END CERTIFICATE-----Generated at Mon Jan 19 21:26:26 2026 by rpki-client