This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CJBGuJGh24D-Ml5M4AGUZTdeOoE.roa File: CJBGuJGh24D-Ml5M4AGUZTdeOoE.roa (raw, json) Hash identifier: n/4sjZnKagsHk2YPK36WaDNsoMN6JNyV2FRlSaZdjts= Subject key identifier: 08:90:46:B8:91:A1:DB:80:FE:32:5E:4C:E0:01:94:65:37:5E:3A:81 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC79B5994C8A497C363753E59DE03DF Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CJBGuJGh24D-Ml5M4AGUZTdeOoE.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62300 IP address blocks: 213.108.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9b:59:94:c8:a4:97:c3:63:75:3e:59:de:03:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=089046b891a1db80fe325e4ce0019465375e3a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:74:25:e8:11:33:70:88:e3:6e:e2:38:4d: 8b:4b:c3:d4:5e:bd:5e:ae:9d:a1:01:d7:7f:81:35: 19:44:7b:d1:b7:cb:95:6a:99:74:d1:81:be:37:40: f8:f5:7c:ab:9b:85:f2:4c:90:ea:9e:e9:72:48:c4: aa:6f:81:93:7c:d9:16:0e:0e:71:e7:66:78:7f:d8: 73:92:26:69:a4:2e:8c:e3:bd:9b:ed:b4:53:b4:ef: 12:22:5a:34:d2:66:5d:5b:ca:2e:e4:eb:cc:e9:41: a1:a1:ae:6c:74:ce:80:9c:05:fc:15:84:44:4b:3d: 0e:54:54:6f:c0:22:be:03:62:9b:e2:f6:bd:34:08: 48:96:f8:9e:f8:df:d6:a1:84:fc:22:06:63:67:82: b9:fe:1b:f4:3b:35:ad:0b:80:16:42:97:45:b1:3c: 0f:41:e2:6f:d2:da:18:73:44:a7:5a:55:77:03:ed: b3:c9:01:50:ce:4b:68:3b:2d:23:c3:e5:4b:93:24: cb:47:83:d6:b8:44:99:e8:86:e3:3f:3d:48:82:b7: a6:eb:09:c2:e3:63:10:aa:f0:5b:f5:a0:26:4e:c0: 0c:6c:c5:43:a7:b5:98:c1:dc:e0:77:c5:17:04:22: 12:e8:cf:eb:9d:73:16:3e:97:28:51:c1:fb:ac:01: d4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:90:46:B8:91:A1:DB:80:FE:32:5E:4C:E0:01:94:65:37:5E:3A:81 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/CJBGuJGh24D-Ml5M4AGUZTdeOoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.108.7.0/24 Signature Algorithm: sha256WithRSAEncryption c4:24:ae:38:2f:6a:ac:54:ad:25:67:19:60:69:46:7d:4c:2a: 87:db:de:cf:a2:97:16:2a:89:fa:15:fc:c0:ea:c5:48:d4:96: 13:a1:a8:b8:61:9c:7d:71:74:c4:78:b2:0b:5a:15:15:ce:0d: ad:b3:fb:26:41:3f:1b:29:da:44:cc:90:e0:d6:62:14:e0:e9: ba:74:98:16:b7:c5:fa:26:50:5b:bc:ba:96:72:ca:82:47:06: e0:eb:6a:c4:9c:57:c7:81:ac:cb:9a:91:9e:0b:b4:27:7e:40: a4:e6:bd:76:28:d6:0c:25:9d:07:81:58:f7:a7:4b:0c:2e:68: b8:ce:a4:94:28:23:f6:5f:c3:af:f2:1b:a6:1f:d8:c7:c0:cf: 0c:6f:53:62:ba:d6:d5:e8:30:c8:51:95:76:f5:31:84:5b:76: d2:26:e9:d4:55:d7:87:4e:ac:e2:97:9b:e5:05:da:14:fa:b7: 2e:3d:16:63:e9:78:f0:a7:60:3c:1f:2d:c7:69:5d:16:c2:65: 08:0d:b4:5e:4f:7f:7b:b8:c5:f1:28:39:df:07:e4:be:8c:2e: 35:ab:7f:28:cf:b6:3f:0f:f9:3f:91:0b:f4:84:a6:06:77:8f: e7:ff:37:cc:ee:65:6f:98:34:a7:be:cc:08:84:4b:91:1e:6a: 44:76:1c:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x5tZlMikl8NjdT5Z3gPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODkwNDZiODkxYTFkYjgwZmUzMjVlNGNlMDAxOTQ2NTM3NWUzYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UB0JegRM3CI427iOE2LS8PUXr1e rp2hAdd/gTUZRHvRt8uVapl00YG+N0D49Xyrm4XyTJDqnulySMSqb4GTfNkWDg5x 52Z4f9hzkiZppC6M472b7bRTtO8SIlo00mZdW8ou5OvM6UGhoa5sdM6AnAX8FYRE Sz0OVFRvwCK+A2Kb4va9NAhIlvie+N/WoYT8IgZjZ4K5/hv0OzWtC4AWQpdFsTwP QeJv0toYc0SnWlV3A+2zyQFQzktoOy0jw+VLkyTLR4PWuESZ6IbjPz1Igrem6wnC 42MQqvBb9aAmTsAMbMVDp7WYwdzgd8UXBCIS6M/rnXMWPpcoUcH7rAHU6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiQRriRoduA/jJeTOABlGU3XjqBMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvQ0pCR3VKR2gyNEQtTWw1TTRBR1VaVGRlT29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1WwHMA0G CSqGSIb3DQEBCwUAA4IBAQDEJK44L2qsVK0lZxlgaUZ9TCqH297PopcWKon6FfzA 6sVI1JYToai4YZx9cXTEeLILWhUVzg2ts/smQT8bKdpEzJDg1mIU4Om6dJgWt8X6 JlBbvLqWcsqCRwbg62rEnFfHgazLmpGeC7QnfkCk5r12KNYMJZ0HgVj3p0sMLmi4 zqSUKCP2X8Ov8humH9jHwM8Mb1NiutbV6DDIUZV29TGEW3bSJunUVdeHTqzil5vl BdoU+rcuPRZj6Xjwp2A8Hy3HaV0WwmUIDbReT397uMXxKDnfB+S+jC41q38oz7Y/ D/k/kQv0hKYGd4/n/zfM7mVvmDSnvswIhEuRHmpEdhxC -----END CERTIFICATE-----Generated at Mon Jan 19 20:35:06 2026 by rpki-client