This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CJEWTi1pUdoe7p3SG535ILY-Lns.roa File: CJEWTi1pUdoe7p3SG535ILY-Lns.roa (raw, json) Hash identifier: L58C/FbXxmyHdln4NZQ/6iUNYDIULyHQKYkUt3zwBNQ= Subject key identifier: 08:91:16:4E:2D:69:51:DA:1E:EE:9D:D2:1B:9D:F9:20:B6:3E:2E:7B Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CB2FF87C803C3FDED356A28EF061A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CJEWTi1pUdoe7p3SG535ILY-Lns.roa Signing time: Fri 02 Jan 2026 06:19:45 +0000 ROA not before: Fri 02 Jan 2026 06:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48795 IP address blocks: 45.12.68.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:b2:ff:87:c8:03:c3:fd:ed:35:6a:28:ef:06:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0891164e2d6951da1eee9dd21b9df920b63e2e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:c6:17:5f:97:92:be:22:13:ed:29:42:44: 09:d3:90:70:b5:eb:54:c3:a8:c6:6a:8a:5e:9f:66: 99:c8:d1:ab:b0:82:a9:96:d4:77:c6:b2:81:26:4c: 96:4b:5d:c7:6d:7c:f1:59:85:b3:b3:eb:96:25:0f: 61:7b:a0:99:b0:25:ad:dc:17:1a:09:ca:3e:1d:53: 3e:0e:66:2c:10:26:4c:32:21:71:53:d6:f1:b3:20: 68:a8:c9:67:1a:9c:43:f8:ca:34:58:af:ee:54:db: 64:67:a5:ac:70:0b:6b:d0:3e:e2:ab:28:d8:b3:50: c7:62:03:3e:ec:d2:ba:b5:e4:30:4d:82:1c:dd:7e: 58:a0:51:bd:77:40:7c:b9:ab:80:0a:fc:79:cc:fc: b2:b5:76:68:f7:28:73:25:2b:15:a6:ca:a1:82:e6: 67:e1:93:7a:64:5a:0b:77:fa:bd:be:b2:fd:a7:5d: a9:0b:2b:ce:d5:9b:29:69:43:30:87:af:74:df:89: 49:9a:7d:f2:c7:7b:3a:3f:67:d3:77:d5:77:b5:fb: e8:6c:1c:cd:b3:0b:ae:75:b7:57:6d:3d:39:98:26: 7a:f5:29:3c:c1:e3:de:6b:ea:f0:78:55:74:73:a1: b9:54:02:72:ab:80:0e:eb:40:50:37:de:49:39:81: 88:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:91:16:4E:2D:69:51:DA:1E:EE:9D:D2:1B:9D:F9:20:B6:3E:2E:7B X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CJEWTi1pUdoe7p3SG535ILY-Lns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.68.0/23 Signature Algorithm: sha256WithRSAEncryption 22:d9:a2:7c:26:3c:36:03:75:59:b4:4c:21:7c:04:8f:34:ea: 15:eb:15:de:d2:ea:f2:60:49:2c:9c:12:1f:57:75:02:34:1e: fd:63:59:15:f3:78:07:8e:91:c9:12:a3:e5:ae:9a:93:fc:72: 37:e2:66:37:4f:ac:3d:f4:b6:d8:dc:ec:0b:8b:4a:71:ef:ec: dd:07:a8:c5:3e:1f:35:0e:71:68:05:13:8e:47:d7:5e:b2:3e: 7e:b7:16:59:49:01:35:77:09:01:bc:35:fc:f5:bd:fe:66:f6: 98:93:fb:6f:fc:05:c4:ca:40:d2:7c:e4:d5:6c:c9:2c:63:24: a3:3c:44:88:88:bc:e2:9e:1d:40:c1:a6:fe:b6:df:04:8b:27: 9c:26:fa:cf:e5:d6:90:9a:ff:9b:82:1f:67:99:29:38:04:2b: 5d:34:6c:e8:e4:84:4b:c4:c2:61:90:35:e4:3b:b3:eb:3d:90: 6c:bf:b3:0c:f8:be:6b:bb:30:e5:96:a9:2c:33:5f:b2:21:a6: 38:f9:ff:e5:7b:17:0c:dd:1b:03:96:7c:59:80:38:0e:ed:ef: 75:d5:6e:b4:f0:b4:38:d6:ef:0c:5b:ce:0b:41:b7:71:b8:04: ad:5d:7a:be:e8:61:d2:39:67:3d:0f:64:0f:b4:8e:cb:69:5b: 94:3f:83:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XLL/h8gDw/3tNWoo7wYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODkxMTY0ZTJkNjk1MWRhMWVlZTlkZDIxYjlkZjkyMGI2M2UyZTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3zGF1+Xkr4iE+0pQkQJ05BwtetU w6jGaopen2aZyNGrsIKpltR3xrKBJkyWS13HbXzxWYWzs+uWJQ9he6CZsCWt3Bca Cco+HVM+DmYsECZMMiFxU9bxsyBoqMlnGpxD+Mo0WK/uVNtkZ6WscAtr0D7iqyjY s1DHYgM+7NK6teQwTYIc3X5YoFG9d0B8uauACvx5zPyytXZo9yhzJSsVpsqhguZn 4ZN6ZFoLd/q9vrL9p12pCyvO1ZspaUMwh69034lJmn3yx3s6P2fTd9V3tfvobBzN swuudbdXbT05mCZ69Sk8wePea+rweFV0c6G5VAJyq4AO60BQN95JOYGI1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiRFk4taVHaHu6d0hud+SC2Pi57MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQ0pFV1RpMXBVZG9lN3AzU0c1MzVJTFktTG5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQxEMA0G CSqGSIb3DQEBCwUAA4IBAQAi2aJ8Jjw2A3VZtEwhfASPNOoV6xXe0uryYEksnBIf V3UCNB79Y1kV83gHjpHJEqPlrpqT/HI34mY3T6w99LbY3OwLi0px7+zdB6jFPh81 DnFoBROOR9desj5+txZZSQE1dwkBvDX89b3+ZvaYk/tv/AXEykDSfOTVbMksYySj PESIiLzinh1Awab+tt8EiyecJvrP5daQmv+bgh9nmSk4BCtdNGzo5IRLxMJhkDXk O7PrPZBsv7MM+L5ruzDllqksM1+yIaY4+f/lexcM3RsDlnxZgDgO7e911W608LQ4 1u8MW84LQbdxuAStXXq+6GHSOWc9D2QPtI7LaVuUP4NS -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:07 2026 by rpki-client