This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa File: cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa (raw, json) Hash identifier: t7NhiF+NyV27XscI6RzA4LqkqVZugOUpSYy9Otwnrn8= Subject key identifier: 70:92:F8:32:0A:75:49:05:94:00:48:91:11:C7:41:D0:8F:AC:25:64 Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911 Certificate serial: 019B7CEDDB9ED3D959574AAFE4F15A58146F Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa Signing time: Fri 02 Jan 2026 04:18:41 +0000 ROA not before: Fri 02 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398642 IP address blocks: 144.57.48.0/21 maxlen: 21 144.57.48.0/24 maxlen: 24 144.57.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:db:9e:d3:d9:59:57:4a:af:e4:f1:5a:58:14:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911 Validity Not Before: Jan 2 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7092f8320a7549059400489111c741d08fac2564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:77:53:6a:a0:83:1a:49:1e:9c:f1:4d:de: 14:56:5b:28:59:0c:68:ad:a2:08:82:9e:53:2c:a7: 13:3d:8a:ab:61:49:3c:12:55:a4:bc:41:97:bd:91: 1e:22:67:9f:26:41:58:3c:87:03:d0:93:e0:ef:87: 81:48:a8:fa:22:c5:a6:96:0f:fa:8c:b7:95:08:f6: e4:93:68:2f:33:71:37:14:e7:5c:ea:ed:c9:6d:04: 51:b9:e5:db:6c:ac:27:f7:80:3e:28:dd:96:69:1d: 08:da:28:a4:8c:62:bd:e5:12:39:60:6e:ac:fa:c9: 0d:33:5d:97:cd:57:c0:0c:8a:ae:4a:39:48:0c:ad: 13:41:84:f0:22:e8:25:97:6f:67:c6:fa:78:e8:9d: c9:ff:98:b1:2c:6b:9a:e2:31:18:57:a3:fd:bb:17: 48:91:99:2c:6e:12:09:23:c0:99:a2:fa:ea:9f:ba: ef:ca:4d:13:0f:97:3d:4f:40:b0:1f:e1:73:10:c3: 8a:fd:6d:d4:37:95:06:59:b0:a9:3c:76:f7:3c:aa: 6d:2a:cf:7d:24:79:02:41:15:2e:fd:b3:05:f6:a3: 56:6c:ba:ae:b4:a9:7d:6a:76:25:d2:80:62:b5:97: 33:0f:72:cd:b9:88:73:52:68:ae:d9:99:65:94:03: 5c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:92:F8:32:0A:75:49:05:94:00:48:91:11:C7:41:D0:8F:AC:25:64 X509v3 Authority Key Identifier: keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.57.48.0/21 Signature Algorithm: sha256WithRSAEncryption 65:68:18:a4:7e:3c:75:a0:e7:f3:16:ee:86:3e:b8:47:37:67: 14:58:e4:7f:63:ac:5d:f8:40:55:cc:4b:d6:41:a3:93:e6:a4: 03:27:79:57:2e:15:de:21:da:11:2d:a5:6f:29:3a:d4:2b:2d: 44:33:06:70:11:59:3f:cb:19:e5:56:a5:bd:c3:84:d9:85:82: 9e:d8:cc:64:11:df:c2:10:50:74:a2:b1:6a:7e:ad:d4:de:31: cc:4c:ab:65:02:0b:9f:94:a9:4d:94:58:aa:10:52:7a:73:50: 0c:c3:a3:ac:ab:45:30:78:45:a6:cc:19:48:4a:46:b6:5b:98: ff:26:67:c7:80:46:c9:06:da:4a:8b:2b:a4:70:51:96:af:1f: fa:17:13:51:19:32:20:26:44:74:e8:41:ff:e8:6c:f8:a7:6f: 5d:29:0c:85:a3:3f:60:ea:53:1d:09:fa:32:6e:bb:4b:9c:d0: df:b8:da:3c:b2:96:ce:9b:e5:74:b9:89:a8:c5:db:33:53:59: 2f:ab:6e:eb:ed:3f:84:60:30:54:25:fe:8c:fe:b9:2d:1b:24: f5:f5:f2:0f:93:fa:4a:e7:06:e4:dc:25:84:93:b1:7f:57:27: a7:16:32:d5:4a:50:b9:19:f9:32:ee:30:92:a2:b8:e6:a0:29: 56:1f:b6:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87due09lZV0qv5PFaWBRvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNWNhYWYzYTA5OTNiNzZhZTEzZTExOTEzNmRiZjAwNjk2 OTg5MTEwHhcNMjYwMTAyMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDkyZjgzMjBhNzU0OTA1OTQwMDQ4OTExMWM3NDFkMDhmYWMyNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzJ3U2qggxpJHpzxTd4UVlsoWQxo raIIgp5TLKcTPYqrYUk8ElWkvEGXvZEeImefJkFYPIcD0JPg74eBSKj6IsWmlg/6 jLeVCPbkk2gvM3E3FOdc6u3JbQRRueXbbKwn94A+KN2WaR0I2iikjGK95RI5YG6s +skNM12XzVfADIquSjlIDK0TQYTwIugll29nxvp46J3J/5ixLGua4jEYV6P9uxdI kZksbhIJI8CZovrqn7rvyk0TD5c9T0CwH+FzEMOK/W3UN5UGWbCpPHb3PKptKs99 JHkCQRUu/bMF9qNWbLqutKl9anYl0oBitZczD3LNuYhzUmiu2ZlllANc7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCS+DIKdUkFlABIkRHHQdCPrCVkMB8GA1UdIwQY MBaAFBpcqvOgmTt2rhPhGRNtvwBpaYkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUt N2M1OTBiY2Y5ODFhLzEvY0pMNE1ncDFTUVdVQUVpUkVjZEIwSS1zSldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUtN2M1OTBiY2Y5ODFh LzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDkDkwMA0G CSqGSIb3DQEBCwUAA4IBAQBlaBikfjx1oOfzFu6GPrhHN2cUWOR/Y6xd+EBVzEvW QaOT5qQDJ3lXLhXeIdoRLaVvKTrUKy1EMwZwEVk/yxnlVqW9w4TZhYKe2MxkEd/C EFB0orFqfq3U3jHMTKtlAguflKlNlFiqEFJ6c1AMw6Osq0UweEWmzBlISka2W5j/ JmfHgEbJBtpKiyukcFGWrx/6FxNRGTIgJkR06EH/6Gz4p29dKQyFoz9g6lMdCfoy brtLnNDfuNo8spbOm+V0uYmoxdszU1kvq27r7T+EYDBUJf6M/rktGyT19fIPk/pK 5wbk3CWEk7F/VyenFjLVSlC5Gfky7jCSorjmoClWH7aG -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:19 2026 by rpki-client