This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/Crjca7fOHa3XODW9UiyUGAIwWc8.roa File: Crjca7fOHa3XODW9UiyUGAIwWc8.roa (raw, json) Hash identifier: WnPbNWjg6gHgCjmDpm8NmXxP+ad/7QuLqIJAknA++jw= Subject key identifier: 0A:B8:DC:6B:B7:CE:1D:AD:D7:38:35:BD:52:2C:94:18:02:30:59:CF Certificate issuer: /CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898 Certificate serial: 019B7CED0C9F8885DCC1BCFB072C27988EC6 Authority key identifier: EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/Crjca7fOHa3XODW9UiyUGAIwWc8.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197869 IP address blocks: 185.194.92.0/22 maxlen: 22 2a00:5980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.mft rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0c:9f:88:85:dc:c1:bc:fb:07:2c:27:98:8e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb5da1da1fa1d425cf1dc9e826d65edaed6cd898 Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ab8dc6bb7ce1dadd73835bd522c9418023059cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:54:e5:d6:2f:ef:a1:06:98:b2:46:73:23: 42:a0:bf:26:f1:5e:94:57:59:5c:38:0e:ed:f1:69: c4:29:55:c4:b7:18:0b:fc:cf:9c:6a:e5:56:8e:5f: 6d:d4:a0:ea:8a:64:42:03:49:c2:38:8a:ef:2f:22: 9f:b6:02:93:9f:9d:0e:92:ea:f1:5e:a3:3f:91:1e: b9:52:bc:0d:eb:35:59:9a:5e:50:9a:97:17:6b:7d: 0a:16:44:96:0b:e7:64:69:1c:dc:db:8a:fa:9c:c7: c7:10:ab:11:7a:b3:47:c3:33:de:72:1f:13:b0:e4: c3:58:de:71:51:30:3e:f7:09:92:6c:c2:c5:fc:4d: 25:e6:07:9f:11:69:95:60:17:6f:ca:92:fc:76:31: 34:8e:31:51:40:d0:ac:b2:d6:31:5c:e3:fc:0e:d9: 99:7f:59:4d:64:65:b6:b6:81:16:42:23:2b:e6:41: e5:89:49:77:a3:7c:49:12:be:bc:6c:ef:61:09:21: af:6f:21:a5:fc:56:0b:f0:1f:ba:c0:c9:67:a7:4f: 6f:5e:10:81:cb:d7:e4:73:b1:b0:8f:3b:6e:80:54: 76:a3:08:48:2a:0d:8e:78:fe:49:1d:f9:51:5f:36: 96:26:f4:cd:5a:5f:38:a4:d7:0f:45:f7:64:66:13: ac:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B8:DC:6B:B7:CE:1D:AD:D7:38:35:BD:52:2C:94:18:02:30:59:CF X509v3 Authority Key Identifier: keyid:EB:5D:A1:DA:1F:A1:D4:25:CF:1D:C9:E8:26:D6:5E:DA:ED:6C:D8:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/612h2h-h1CXPHcnoJtZe2u1s2Jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/Crjca7fOHa3XODW9UiyUGAIwWc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6ae54-ed67-401a-88f3-7f8c983f14a4/1/612h2h-h1CXPHcnoJtZe2u1s2Jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.194.92.0/22 IPv6: 2a00:5980::/32 Signature Algorithm: sha256WithRSAEncryption c9:74:64:13:ce:6c:37:5f:3a:cd:81:f8:21:7a:1c:fa:fe:fa: a1:d6:48:92:b2:91:a9:d3:6b:6c:dc:20:ee:4f:4c:e7:ac:42: 19:1c:2a:56:5e:97:b8:70:8a:cc:d9:21:4d:8f:ee:f8:da:69: d4:95:79:e2:e0:d6:5c:96:3e:ea:5f:f1:26:aa:d7:89:82:34: d6:d3:47:ba:55:41:e6:a7:38:ba:0c:1d:55:38:dc:84:26:96: db:6d:53:cf:92:69:42:a8:ac:54:71:f7:98:f0:b2:20:af:41: 20:5b:d2:26:1e:de:a7:b5:a8:63:e6:26:20:36:59:4f:cf:3c: 8a:37:d2:40:c1:67:c3:28:1f:15:79:d7:e1:61:6d:0d:ff:b0: c2:80:55:6d:23:73:ab:c0:33:ec:17:e0:af:5b:36:e1:3e:96: ab:0f:84:88:7f:6d:d6:b7:11:af:be:c7:84:50:32:78:d8:81: 43:a9:6e:19:aa:48:2e:a6:ae:4a:0c:3c:a8:1f:98:b9:d5:52: d3:cf:a6:f9:78:3c:ea:cc:f2:f1:6b:b1:d9:a9:44:78:d4:a7: fc:dd:fd:06:62:00:35:e9:8b:d3:c0:f6:88:0d:a9:98:7b:91: 84:09:fb:8c:c4:38:d7:f1:99:00:36:a1:7b:01:85:1d:2b:35: bc:02:17:ba -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87QyfiIXcwbz7BywnmI7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViNWRhMWRhMWZhMWQ0MjVjZjFkYzllODI2ZDY1ZWRhZWQ2 Y2Q4OTgwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWI4ZGM2YmI3Y2UxZGFkZDczODM1YmQ1MjJjOTQxODAyMzA1OWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy45U5dYv76EGmLJGcyNCoL8m8V6U V1lcOA7t8WnEKVXEtxgL/M+cauVWjl9t1KDqimRCA0nCOIrvLyKftgKTn50Okurx XqM/kR65UrwN6zVZml5QmpcXa30KFkSWC+dkaRzc24r6nMfHEKsRerNHwzPech8T sOTDWN5xUTA+9wmSbMLF/E0l5gefEWmVYBdvypL8djE0jjFRQNCsstYxXOP8DtmZ f1lNZGW2toEWQiMr5kHliUl3o3xJEr68bO9hCSGvbyGl/FYL8B+6wMlnp09vXhCB y9fkc7GwjztugFR2owhIKg2OeP5JHflRXzaWJvTNWl84pNcPRfdkZhOsqQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAq43Gu3zh2t1zg1vVIslBgCMFnPMB8GA1UdIwQY MBaAFOtdodofodQlzx3J6CbWXtrtbNiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmFlNTQtZWQ2Ny00MDFhLTg4ZjMt N2Y4Yzk4M2YxNGE0LzEvQ3JqY2E3Zk9IYTNYT0RXOVVpeVVHQUl3V2M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmFlNTQtZWQ2Ny00MDFhLTg4ZjMtN2Y4Yzk4M2YxNGE0 LzEvNjEyaDJoLWgxQ1hQSGNub0p0WmUydTFzMkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucJcMA0E AgACMAcDBQAqAFmAMA0GCSqGSIb3DQEBCwUAA4IBAQDJdGQTzmw3XzrNgfghehz6 /vqh1kiSspGp02ts3CDuT0znrEIZHCpWXpe4cIrM2SFNj+742mnUlXni4NZclj7q X/EmqteJgjTW00e6VUHmpzi6DB1VONyEJpbbbVPPkmlCqKxUcfeY8LIgr0EgW9Im Ht6ntahj5iYgNllPzzyKN9JAwWfDKB8VedfhYW0N/7DCgFVtI3OrwDPsF+CvWzbh PparD4SIf23WtxGvvseEUDJ42IFDqW4Zqkgupq5KDDyoH5i51VLTz6b5eDzqzPLx a7HZqUR41Kf83f0GYgA16YvTwPaIDamYe5GECfuMxDjX8ZkANqF7AYUdKzW8Ahe6 -----END CERTIFICATE-----Generated at Tue Jan 27 10:17:47 2026 by rpki-client