This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ChCNWP0AWM8m3zEbGVxnEjMLjo4.roa File: ChCNWP0AWM8m3zEbGVxnEjMLjo4.roa (raw, json) Hash identifier: kF5OITs74cZdjqfav/j0MV7EzHVcnmThndl7M6dwdBA= Subject key identifier: 0A:10:8D:58:FD:00:58:CF:26:DF:31:1B:19:5C:67:12:33:0B:8E:8E Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019BA7596DBB89F6CCEE643A3D089844763A Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ChCNWP0AWM8m3zEbGVxnEjMLjo4.roa Signing time: Sat 10 Jan 2026 10:00:14 +0000 ROA not before: Sat 10 Jan 2026 10:00:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 109.204.104.0/21 maxlen: 24 212.134.38.0/24 maxlen: 24 212.134.45.0/24 maxlen: 24 212.134.59.0/24 maxlen: 24 212.134.116.0/22 maxlen: 24 212.134.128.0/22 maxlen: 24 212.134.136.0/22 maxlen: 24 212.134.158.0/24 maxlen: 24 212.134.204.0/22 maxlen: 24 212.134.248.0/22 maxlen: 24 212.135.16.0/22 maxlen: 24 212.135.134.0/24 maxlen: 24 212.135.149.0/24 maxlen: 24 212.135.152.0/24 maxlen: 24 212.135.159.0/24 maxlen: 24 212.135.243.0/24 maxlen: 24 212.135.250.0/24 maxlen: 24 212.135.251.0/24 maxlen: 24 212.135.253.0/24 maxlen: 24 212.135.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:59:6d:bb:89:f6:cc:ee:64:3a:3d:08:98:44:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 10 10:00:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a108d58fd0058cf26df311b195c6712330b8e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:18:00:dd:af:4b:37:d4:0b:c1:3c:7f:8e: df:f7:67:bc:50:8d:2c:1e:a4:2c:d9:25:9b:a7:0e: 1a:5d:d6:82:8f:5a:51:ee:64:f2:e4:53:11:92:8c: 23:85:16:c1:39:cc:b1:8d:1f:bc:e1:58:5d:7c:be: f4:96:a2:bb:dc:d0:ba:e7:6b:cd:0b:d9:dd:3d:97: 0d:0e:51:66:e2:19:1f:b3:c8:16:09:44:98:d0:f4: 9b:d2:b1:23:ad:54:22:fd:fe:ec:8b:19:fd:28:ea: 7e:5f:78:64:3e:05:ad:41:6b:8a:0d:46:51:67:ea: 5c:82:ba:ba:5b:2e:c6:61:35:96:df:bd:b6:99:7c: cb:ce:b2:ef:cd:ac:c6:36:53:61:e8:ca:6f:8e:44: c1:3f:a7:5b:43:3e:3d:d0:09:56:b7:96:70:f8:32: d6:b8:1c:06:9f:44:9b:9a:a5:17:cd:6b:72:8f:13: 23:91:94:d9:d1:d9:54:a2:dd:ae:48:8d:9e:0f:8a: 8d:93:37:0f:13:7b:00:3f:e8:48:94:29:f2:a1:c2: a4:3a:38:71:d8:d6:fe:d6:80:66:55:04:de:59:8c: 50:6f:f3:fd:fa:58:29:dd:e7:e5:42:45:be:fc:4d: 83:7d:86:ae:ea:dc:bb:9a:75:ae:ff:0f:50:95:d0: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:8D:58:FD:00:58:CF:26:DF:31:1B:19:5C:67:12:33:0B:8E:8E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/ChCNWP0AWM8m3zEbGVxnEjMLjo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.204.104.0/21 212.134.38.0/24 212.134.45.0/24 212.134.59.0/24 212.134.116.0/22 212.134.128.0/22 212.134.136.0/22 212.134.158.0/24 212.134.204.0/22 212.134.248.0/22 212.135.16.0/22 212.135.134.0/24 212.135.149.0/24 212.135.152.0/24 212.135.159.0/24 212.135.243.0/24 212.135.250.0/23 212.135.253.0-212.135.254.255 Signature Algorithm: sha256WithRSAEncryption b4:5f:e1:0a:b5:c6:88:d3:fa:58:b5:00:f6:5e:20:cc:ce:41: d7:f5:1d:bd:34:35:2d:9b:d8:a2:f7:69:8c:41:04:26:8e:ea: 64:3a:f6:b4:5c:27:96:49:da:78:09:d8:24:1c:e4:14:fa:5a: 71:34:a1:12:6f:57:c2:39:68:d3:13:83:34:0c:ae:61:ed:2f: 8f:00:a9:68:21:13:f9:e0:aa:f4:f6:88:d5:1f:2c:e4:c7:f5: 40:ec:a8:91:d3:5f:d6:a9:f5:3e:93:a0:d0:39:57:43:06:52: 48:51:72:38:4a:ef:6e:8f:88:57:d4:a9:3c:71:aa:f9:01:18: d5:74:db:d4:20:43:02:10:68:72:f5:47:16:ff:b4:66:94:8e: 13:63:f3:47:35:35:5e:65:68:00:3a:b1:c7:ff:5b:66:ac:8e: 7c:bd:f9:60:1b:87:c2:fc:0b:34:8f:38:85:5c:ad:08:61:b5: 23:0f:59:fa:d4:59:00:b5:74:10:3c:14:18:1a:10:c0:15:12: 25:74:09:79:49:9b:c0:7b:da:2e:e7:3f:a7:3b:4e:5f:59:2d: 59:7c:ad:44:70:66:34:10:a7:89:c6:f9:80:86:4d:66:96:0d: 46:b3:49:e5:7f:fd:12:34:bb:9c:68:79:33:6e:d5:15:61:a2: 17:5e:38:a1 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZunWW27ifbM7mQ6PQiYRHY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTEwMTAwMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTEwOGQ1OGZkMDA1OGNmMjZkZjMxMWIxOTVjNjcxMjMzMGI4ZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwYAN2vSzfUC8E8f47f92e8UI0s HqQs2SWbpw4aXdaCj1pR7mTy5FMRkowjhRbBOcyxjR+84VhdfL70lqK73NC652vN C9ndPZcNDlFm4hkfs8gWCUSY0PSb0rEjrVQi/f7sixn9KOp+X3hkPgWtQWuKDUZR Z+pcgrq6Wy7GYTWW3722mXzLzrLvzazGNlNh6MpvjkTBP6dbQz490AlWt5Zw+DLW uBwGn0SbmqUXzWtyjxMjkZTZ0dlUot2uSI2eD4qNkzcPE3sAP+hIlCnyocKkOjhx 2Nb+1oBmVQTeWYxQb/P9+lgp3eflQkW+/E2DfYau6ty7mnWu/w9QldAVTQIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFAoQjVj9AFjPJt8xGxlcZxIzC46OMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQ2hDTldQMEFXTThtM3pFYkdWeG5Fak1Mam80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEA23MaAME ANSGJgMEANSGLQMEANSGOwMEAtSGdAMEAtSGgAMEAtSGiAMEANSGngMEAtSGzAME AtSG+AMEAtSHEAMEANSHhgMEANSHlQMEANSHmAMEANSHnwMEANSH8wMEAdSH+jAM AwQA1If9AwQA1If+MA0GCSqGSIb3DQEBCwUAA4IBAQC0X+EKtcaI0/pYtQD2XiDM zkHX9R29NDUtm9ii92mMQQQmjupkOva0XCeWSdp4CdgkHOQU+lpxNKESb1fCOWjT E4M0DK5h7S+PAKloIRP54Kr09ojVHyzkx/VA7KiR01/WqfU+k6DQOVdDBlJIUXI4 Su9uj4hX1Kk8car5ARjVdNvUIEMCEGhy9UcW/7RmlI4TY/NHNTVeZWgAOrHH/1tm rI58vflgG4fC/As0jziFXK0IYbUjD1n61FkAtXQQPBQYGhDAFRIldAl5SZvAe9ou 5z+nO05fWS1ZfK1EcGY0EKeJxvmAhk1mlg1Gs0nlf/0SNLucaHkzbtUVYaIXXjih -----END CERTIFICATE-----Generated at Sun Jan 18 10:02:34 2026 by rpki-client