This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa File: Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa (raw, json) Hash identifier: G5PDsg/wG8I5/QaFUvVe7A5FW81hq3JrSXknwZ7dvi0= Subject key identifier: 0A:3D:21:5A:0B:B4:C8:AB:E1:0D:7F:17:9F:71:7E:36:E5:21:C9:E0 Certificate issuer: /CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Certificate serial: 019B7F15D66C2CC7AA9D751B2473D5FCCC32 Authority key identifier: 2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa Signing time: Fri 02 Jan 2026 14:21:36 +0000 ROA not before: Fri 02 Jan 2026 14:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 89.124.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:d6:6c:2c:c7:aa:9d:75:1b:24:73:d5:fc:cc:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba1cfd757f51f2feb74509e9c39be46806be642 Validity Not Before: Jan 2 14:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a3d215a0bb4c8abe10d7f179f717e36e521c9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:54:00:be:49:57:79:0f:cc:ec:1d:23:66: fd:96:0e:86:50:48:c6:7a:ad:70:11:b3:16:46:67: ac:5c:c3:a0:bf:e2:ab:9d:a4:e6:82:bc:15:81:c4: 12:72:46:ac:e8:bc:2a:e9:30:e7:d0:9f:e8:8a:a8: b6:68:df:9a:c2:0d:9a:6e:10:de:cd:6e:1e:34:4e: 28:56:9a:da:07:c6:68:d2:3d:45:80:76:fb:90:15: 63:89:e7:d6:4d:a0:c6:aa:2d:45:4a:2a:dd:f9:c5: ea:2e:b3:16:5e:25:c3:08:10:4a:3f:51:58:8b:0a: af:7e:09:99:d0:a4:5d:46:8f:21:6b:19:d5:57:90: 40:9c:21:03:d0:36:e8:84:d9:7a:54:3e:27:22:60: ef:14:2b:e7:b4:70:c1:31:bb:1c:eb:e9:ad:cb:4e: ee:c2:0c:15:c0:31:fd:86:48:42:fb:60:32:9a:9e: 94:a5:d7:32:a6:bc:d0:b8:c7:3b:1e:2c:94:92:94: 71:6d:5f:74:ca:29:11:eb:09:4d:1f:30:a0:e0:34: bc:6c:7b:1e:01:f7:26:70:01:af:99:8a:e9:fd:bb: 60:59:7e:97:b7:ab:08:38:40:33:4a:fd:b0:e5:fd: dc:01:3b:4d:65:5d:ab:98:86:2a:be:cc:e5:13:19: de:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3D:21:5A:0B:B4:C8:AB:E1:0D:7F:17:9F:71:7E:36:E5:21:C9:E0 X509v3 Authority Key Identifier: keyid:2B:A1:CF:D7:57:F5:1F:2F:EB:74:50:9E:9C:39:BE:46:80:6B:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6HP11f1Hy_rdFCenDm-RoBr5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/Cj0hWgu0yKvhDX8Xn3F-NuUhyeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/745910-86c6-43d1-9765-5789de424a42/1/K6HP11f1Hy_rdFCenDm-RoBr5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.124.1.0/24 Signature Algorithm: sha256WithRSAEncryption 95:e3:1f:21:03:e1:fb:9a:7d:6a:9a:6d:e1:e0:15:c4:be:3a: 30:64:9a:85:59:f0:87:87:34:59:de:1a:b5:d3:9a:17:c8:8d: a2:2d:42:f0:1b:bf:34:94:7f:d4:4f:f8:15:eb:2f:5d:a0:ea: f4:27:15:48:0b:81:a7:4f:97:12:b0:66:ea:7a:6c:c6:51:80: 4d:6f:df:63:b7:4c:91:2f:30:66:06:0b:ed:2b:5d:04:4f:9b: fb:16:5e:14:15:01:ea:4b:e1:da:57:b0:54:90:a2:33:11:31: c8:00:89:62:75:53:1d:d2:55:cb:9a:34:1f:9f:1e:a5:66:0a: 34:e2:ac:2a:5e:cc:97:f3:85:2d:a7:95:89:d8:ca:9d:72:72: 17:76:a8:4d:23:a4:11:4b:ff:d1:da:e9:45:83:b2:43:61:96: c2:35:e3:f7:40:49:0f:b8:6b:ed:81:71:31:99:b2:8e:70:82: 90:09:40:b6:65:45:3e:2b:39:83:b6:81:39:d5:a5:31:ed:b1: 7c:22:13:d2:42:da:1c:11:61:c9:b7:c3:1c:69:bd:6e:2b:8d: ff:27:9b:95:eb:53:5f:88:32:5e:22:e2:75:e8:a9:99:c3:a0: 21:01:33:75:b5:7c:70:40:e2:e1:4e:34:6b:c0:1b:75:ef:d5: bc:f6:d8:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FdZsLMeqnXUbJHPV/MwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTFjZmQ3NTdmNTFmMmZlYjc0NTA5ZTljMzliZTQ2ODA2 YmU2NDIwHhcNMjYwMTAyMTQyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTNkMjE1YTBiYjRjOGFiZTEwZDdmMTc5ZjcxN2UzNmU1MjFjOWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2pUAL5JV3kPzOwdI2b9lg6GUEjG eq1wEbMWRmesXMOgv+KrnaTmgrwVgcQSckas6Lwq6TDn0J/oiqi2aN+awg2abhDe zW4eNE4oVpraB8Zo0j1FgHb7kBVjiefWTaDGqi1FSird+cXqLrMWXiXDCBBKP1FY iwqvfgmZ0KRdRo8haxnVV5BAnCED0DbohNl6VD4nImDvFCvntHDBMbsc6+mty07u wgwVwDH9hkhC+2Aymp6UpdcyprzQuMc7HiyUkpRxbV90yikR6wlNHzCg4DS8bHse AfcmcAGvmYrp/btgWX6Xt6sIOEAzSv2w5f3cATtNZV2rmIYqvszlExne7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAo9IVoLtMir4Q1/F59xfjblIcngMB8GA1UdIwQY MBaAFCuhz9dX9R8v63RQnpw5vkaAa+ZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUt NTc4OWRlNDI0YTQyLzEvQ2owaFdndTB5S3ZoRFg4WG4zRi1OdVVoeWVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS83NDU5MTAtODZjNi00M2QxLTk3NjUtNTc4OWRlNDI0YTQy LzEvSzZIUDExZjFIeV9yZEZDZW5EbS1Sb0JyNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXwBMA0G CSqGSIb3DQEBCwUAA4IBAQCV4x8hA+H7mn1qmm3h4BXEvjowZJqFWfCHhzRZ3hq1 05oXyI2iLULwG780lH/UT/gV6y9doOr0JxVIC4GnT5cSsGbqemzGUYBNb99jt0yR LzBmBgvtK10ET5v7Fl4UFQHqS+HaV7BUkKIzETHIAIlidVMd0lXLmjQfnx6lZgo0 4qwqXsyX84Utp5WJ2MqdcnIXdqhNI6QRS//R2ulFg7JDYZbCNeP3QEkPuGvtgXEx mbKOcIKQCUC2ZUU+KzmDtoE51aUx7bF8IhPSQtocEWHJt8Mcab1uK43/J5uV61Nf iDJeIuJ16KmZw6AhATN1tXxwQOLhTjRrwBt179W89thx -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:15 2026 by rpki-client