This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/CX4SjTdi-WVaIel19sRIG6HUUUw.roa File: CX4SjTdi-WVaIel19sRIG6HUUUw.roa (raw, json) Hash identifier: UDsW/lOEequNbC4ieUO0oqmh57jt4K+cQMjTjOFaxBs= Subject key identifier: 09:7E:12:8D:37:62:F9:65:5A:21:E9:75:F6:C4:48:1B:A1:D4:51:4C Certificate issuer: /CN=19ac1498860e2bb0958173854bd04c869a369017 Certificate serial: 019B7A5B748026DDF441838EC7AF45351EE2 Authority key identifier: 19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/CX4SjTdi-WVaIel19sRIG6HUUUw.roa Signing time: Thu 01 Jan 2026 16:19:32 +0000 ROA not before: Thu 01 Jan 2026 16:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 37.143.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.mft rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:74:80:26:dd:f4:41:83:8e:c7:af:45:35:1e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ac1498860e2bb0958173854bd04c869a369017 Validity Not Before: Jan 1 16:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=097e128d3762f9655a21e975f6c4481ba1d4514c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:d4:aa:b2:e4:cf:9a:86:c9:61:7d:64:7b: 7a:d4:8e:59:00:ff:59:fb:70:d9:32:7b:5e:b7:d9: ec:03:0a:59:ed:3d:45:92:29:4a:10:f5:4e:dc:bf: 6e:98:d0:9a:a7:f5:3d:22:73:e3:4e:44:0d:2c:8e: bc:24:1c:93:7c:91:93:d5:93:fc:f1:a1:e5:8d:10: cb:34:b9:b4:32:70:70:b8:db:69:28:85:aa:d7:93: c0:a8:b2:37:22:4c:d2:12:9b:0b:b8:d2:f4:3a:a0: d0:24:bd:08:81:05:a0:fa:e3:aa:1d:86:6b:64:f4: b9:73:b1:d0:ca:f9:74:5a:cd:9d:f6:ba:db:5f:00: 11:dd:21:bd:e9:16:87:c4:98:12:71:65:00:94:c5: fb:ff:78:5d:4d:16:93:da:b0:a1:4b:c9:10:1b:5b: 71:b4:c8:ba:1f:0d:15:72:bc:21:f9:09:67:30:6a: 5e:b1:7c:0e:92:90:36:07:3b:7e:81:6e:ba:06:64: 5a:e3:2e:2a:e3:a6:c0:36:17:aa:0c:40:10:e5:7c: 42:7c:2a:55:a1:3d:6e:3b:cc:fe:b1:50:14:18:10: 0e:b3:16:00:77:67:9d:e2:9d:0e:74:61:73:8b:ff: a7:95:8c:af:83:b4:b4:4b:7d:6c:a8:c1:25:6c:23: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7E:12:8D:37:62:F9:65:5A:21:E9:75:F6:C4:48:1B:A1:D4:51:4C X509v3 Authority Key Identifier: keyid:19:AC:14:98:86:0E:2B:B0:95:81:73:85:4B:D0:4C:86:9A:36:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GawUmIYOK7CVgXOFS9BMhpo2kBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/CX4SjTdi-WVaIel19sRIG6HUUUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/69c389-17c9-4461-a390-7aa290e857e9/1/GawUmIYOK7CVgXOFS9BMhpo2kBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.143.129.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e6:28:74:53:f1:82:3e:c2:92:93:72:8c:0a:9f:61:03:f4: 98:27:ad:fd:a6:1c:32:fa:98:8c:08:eb:c6:6e:c6:a1:6c:88: 54:84:dc:39:10:8f:ac:ca:d8:f9:53:53:fc:fb:46:48:be:33: f9:88:22:46:b3:dc:0d:10:52:01:6b:19:68:83:3b:49:c8:e0: ec:e8:18:9c:a7:d2:97:48:32:4b:c9:51:83:72:78:32:a0:d8: d4:85:cd:09:1c:d9:6b:04:84:19:ba:30:45:23:d6:95:70:e0: 58:23:2d:6d:72:7f:9d:ca:31:58:8f:32:47:51:60:03:f1:74: 8e:ad:db:00:bf:52:2a:7c:5c:8d:54:9d:5a:a0:a9:ac:db:ec: 57:5b:56:32:c9:a1:b5:0b:46:e3:20:30:b0:60:0f:5c:36:c2: 42:81:76:b9:81:59:9b:d3:e1:39:2c:6a:c2:94:f0:14:85:54: 36:31:1d:41:29:92:82:e7:36:4b:f0:bb:41:f1:1f:6c:61:68: 3a:ba:b7:86:1a:bf:55:91:23:d1:c2:97:61:ae:e2:86:72:15: a2:df:85:fc:6f:0a:70:bf:7f:41:4b:57:a1:20:b4:16:86:cc: 02:13:52:c1:46:9d:c1:74:4e:73:60:72:11:84:2a:54:09:c2: fe:a4:66:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3SAJt30QYOOx69FNR7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YWMxNDk4ODYwZTJiYjA5NTgxNzM4NTRiZDA0Yzg2OWEz NjkwMTcwHhcNMjYwMTAxMTYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTdlMTI4ZDM3NjJmOTY1NWEyMWU5NzVmNmM0NDgxYmExZDQ1MTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+zUqrLkz5qGyWF9ZHt61I5ZAP9Z +3DZMntet9nsAwpZ7T1FkilKEPVO3L9umNCap/U9InPjTkQNLI68JByTfJGT1ZP8 8aHljRDLNLm0MnBwuNtpKIWq15PAqLI3IkzSEpsLuNL0OqDQJL0IgQWg+uOqHYZr ZPS5c7HQyvl0Ws2d9rrbXwAR3SG96RaHxJgScWUAlMX7/3hdTRaT2rChS8kQG1tx tMi6Hw0Vcrwh+QlnMGpesXwOkpA2Bzt+gW66BmRa4y4q46bANheqDEAQ5XxCfCpV oT1uO8z+sVAUGBAOsxYAd2ed4p0OdGFzi/+nlYyvg7S0S31sqMElbCPCXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAl+Eo03YvllWiHpdfbESBuh1FFMMB8GA1UdIwQY MBaAFBmsFJiGDiuwlYFzhUvQTIaaNpAXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAt N2FhMjkwZTg1N2U5LzEvQ1g0U2pUZGktV1ZhSWVsMTlzUklHNkhVVVV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82OWMzODktMTdjOS00NDYxLWEzOTAtN2FhMjkwZTg1N2U5 LzEvR2F3VW1JWU9LN0NWZ1hPRlM5Qk1ocG8ya0JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJY+BMA0G CSqGSIb3DQEBCwUAA4IBAQAk5ih0U/GCPsKSk3KMCp9hA/SYJ639phwy+piMCOvG bsahbIhUhNw5EI+sytj5U1P8+0ZIvjP5iCJGs9wNEFIBaxlogztJyODs6Bicp9KX SDJLyVGDcngyoNjUhc0JHNlrBIQZujBFI9aVcOBYIy1tcn+dyjFYjzJHUWAD8XSO rdsAv1IqfFyNVJ1aoKms2+xXW1YyyaG1C0bjIDCwYA9cNsJCgXa5gVmb0+E5LGrC lPAUhVQ2MR1BKZKC5zZL8LtB8R9sYWg6ureGGr9VkSPRwpdhruKGchWi34X8bwpw v39BS1ehILQWhswCE1LBRp3BdE5zYHIRhCpUCcL+pGax -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:28 2026 by rpki-client