This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/CJhFdSugh2xrtXcQtigps8wHu28.roa File: CJhFdSugh2xrtXcQtigps8wHu28.roa (raw, json) Hash identifier: dLTf/Etn9ztfuP7WaPG+Vc9FZ4tRdTOgYexvxbXPjIo= Subject key identifier: 08:98:45:75:2B:A0:87:6C:6B:B5:77:10:B6:28:29:B3:CC:07:BB:6F Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8 Certificate serial: 019B7F840383C11ED72089590FC02FC750DA Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/CJhFdSugh2xrtXcQtigps8wHu28.roa Signing time: Fri 02 Jan 2026 16:21:56 +0000 ROA not before: Fri 02 Jan 2026 16:21:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56597 IP address blocks: 91.225.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:03:83:c1:1e:d7:20:89:59:0f:c0:2f:c7:50:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8 Validity Not Before: Jan 2 16:21:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=089845752ba0876c6bb57710b62829b3cc07bb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:ce:78:df:a0:09:26:fd:50:ea:06:3c:a1: 36:8b:bf:89:56:59:e7:a3:d2:8a:b2:4c:2c:bc:c1: 11:08:6d:b8:ba:4d:3a:d5:f8:c1:ad:b8:30:4e:85: cd:90:55:ce:8b:9f:99:a4:5c:b1:69:23:39:77:59: c0:c0:7b:dd:69:2b:f2:b0:c2:55:62:fd:34:1f:10: ce:1e:66:fa:ca:d9:0e:b7:dd:52:f5:24:d7:d3:0f: b0:38:30:60:82:84:a8:19:96:ec:0c:b6:49:d0:b4: 38:38:5d:77:e0:97:f9:c2:0a:6e:81:59:13:ff:a4: 6f:b7:b6:98:66:c5:76:bd:b7:92:62:b1:35:c7:3a: 75:3e:24:db:61:66:cc:a9:4e:62:31:c2:05:76:e0: b5:11:73:65:c9:b1:88:e7:51:1e:99:d7:06:22:08: 6b:23:96:53:73:b1:7a:38:6a:90:fd:56:f6:6d:56: 63:27:53:a2:b2:1e:d2:9f:0f:f9:97:d1:d8:73:1c: 4f:71:a0:ba:aa:bf:a8:1f:37:b5:f0:16:af:a6:03: 50:20:6a:ea:e4:85:65:e6:fb:61:ef:8d:e3:89:63: f1:b2:ce:c8:bd:2c:76:df:8a:44:7c:bb:21:43:07: ea:4f:1e:3a:ed:2c:46:9c:32:73:f7:2e:db:47:cb: 31:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:45:75:2B:A0:87:6C:6B:B5:77:10:B6:28:29:B3:CC:07:BB:6F X509v3 Authority Key Identifier: keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/CJhFdSugh2xrtXcQtigps8wHu28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.225.240.0/22 Signature Algorithm: sha256WithRSAEncryption 00:a1:81:96:3f:74:91:f7:81:d2:ab:b8:6f:0f:f4:c0:2c:a9: 0d:ee:4f:a6:dc:fe:92:2f:48:94:b2:bc:de:38:05:8a:64:f0: 99:d8:b0:24:ba:08:08:23:b4:9a:03:42:1f:6b:3c:0a:54:d4: b8:a6:7f:5c:b8:b8:2f:66:7e:49:cd:f5:2c:49:ef:54:ea:67: e0:1a:19:2b:da:6e:f3:f4:fe:db:f0:69:65:1d:61:5d:07:8a: eb:19:2b:3e:56:85:fa:bd:9a:19:c5:34:a2:69:26:b6:88:2d: 50:d7:82:5d:90:0e:89:73:0f:b4:d8:98:64:06:13:a8:1d:a0: cc:4f:88:16:4b:4f:bc:e4:93:d1:05:a8:35:0c:8b:3b:78:cc: 3e:6e:8e:fc:fc:fc:da:3e:8c:45:03:f6:ee:6c:97:41:e0:dd: 21:64:b4:e5:24:c7:1b:79:05:cc:50:3d:44:a2:0b:21:dd:9e: 1e:f7:2d:aa:f1:e0:80:d0:fa:f2:7c:1f:c7:86:04:be:f4:b4: 2a:f9:3f:43:2a:d8:ad:1a:09:d7:21:c9:96:16:b6:7a:e5:31: 09:c3:54:38:31:9a:f8:f9:77:ee:c6:45:04:d5:1b:c4:7f:8d: 77:1a:6a:37:54:f7:18:c8:ac:e2:af:45:7d:e2:9a:db:f3:2c: 35:ca:88:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hAODwR7XIIlZD8Avx1DaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm OTgxYTgwHhcNMjYwMTAyMTYyMTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODk4NDU3NTJiYTA4NzZjNmJiNTc3MTBiNjI4MjliM2NjMDdiYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKfOeN+gCSb9UOoGPKE2i7+JVlnn o9KKskwsvMERCG24uk061fjBrbgwToXNkFXOi5+ZpFyxaSM5d1nAwHvdaSvysMJV Yv00HxDOHmb6ytkOt91S9STX0w+wODBggoSoGZbsDLZJ0LQ4OF134Jf5wgpugVkT /6Rvt7aYZsV2vbeSYrE1xzp1PiTbYWbMqU5iMcIFduC1EXNlybGI51EemdcGIghr I5ZTc7F6OGqQ/Vb2bVZjJ1Oish7Snw/5l9HYcxxPcaC6qr+oHze18BavpgNQIGrq 5IVl5vth743jiWPxss7IvSx234pEfLshQwfqTx467SxGnDJz9y7bR8sxCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiYRXUroIdsa7V3ELYoKbPMB7tvMB8GA1UdIwQY MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt ZjA3YTIxOGUxY2M3LzEvQ0poRmRTdWdoMnhydFhjUXRpZ3BzOHdIdTI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3 LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+HwMA0G CSqGSIb3DQEBCwUAA4IBAQAAoYGWP3SR94HSq7hvD/TALKkN7k+m3P6SL0iUsrze OAWKZPCZ2LAkuggII7SaA0IfazwKVNS4pn9cuLgvZn5JzfUsSe9U6mfgGhkr2m7z 9P7b8GllHWFdB4rrGSs+VoX6vZoZxTSiaSa2iC1Q14JdkA6Jcw+02JhkBhOoHaDM T4gWS0+85JPRBag1DIs7eMw+bo78/PzaPoxFA/bubJdB4N0hZLTlJMcbeQXMUD1E ogsh3Z4e9y2q8eCA0PryfB/HhgS+9LQq+T9DKtitGgnXIcmWFrZ65TEJw1Q4MZr4 +XfuxkUE1RvEf413Gmo3VPcYyKzir0V94prb8yw1yohm -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:53 2026 by rpki-client