This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/chIZLY8l51nJXJ379i_VFhLnuUM.roa File: chIZLY8l51nJXJ379i_VFhLnuUM.roa (raw, json) Hash identifier: UXgnsFlUxbE8IjtBLfG1zOG1isR+HQWiSaU0UyIJl3A= Subject key identifier: 72:12:19:2D:8F:25:E7:59:C9:5C:9D:FB:F6:2F:D5:16:12:E7:B9:43 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E3351F4605C19885B07BA299B6830 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/chIZLY8l51nJXJ379i_VFhLnuUM.roa Signing time: Thu 01 Jan 2026 12:17:52 +0000 ROA not before: Thu 01 Jan 2026 12:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133295 IP address blocks: 45.132.15.0/24 maxlen: 24 2a06:7a02::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:33:51:f4:60:5c:19:88:5b:07:ba:29:9b:68:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7212192d8f25e759c95c9dfbf62fd51612e7b943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:e7:27:c3:cd:f4:60:88:91:97:80:63:9c: c0:e6:b6:17:ce:51:3f:71:4d:12:00:0e:d4:92:c4: e5:7d:d0:33:bd:66:7c:9a:ca:d4:e9:f4:e2:c8:7a: e9:98:27:05:93:c3:76:6e:57:2b:ee:31:d1:a5:b1: 49:1b:54:31:eb:1c:9f:b1:b7:6b:33:0e:1f:b3:bb: b8:aa:89:2d:1a:64:89:54:c4:bf:e0:5a:e3:9f:71: 2a:f6:1e:0f:b4:b5:d2:de:2c:de:26:68:d9:13:14: 80:a9:c7:a9:8b:f1:46:e7:d1:25:5c:45:ad:3c:aa: 60:c8:ea:9e:e2:74:20:4a:7d:ef:2f:d7:f6:4b:aa: 0a:8f:1d:94:0e:cc:8f:02:a4:fa:42:6f:34:18:6d: a0:57:73:28:9e:cc:ff:ac:69:eb:81:35:1e:55:65: 24:89:1a:a3:0b:66:9d:9f:ef:57:42:f7:34:8b:af: 1b:fc:36:6e:c2:2e:81:63:ff:45:a1:7a:ff:05:ee: 72:d0:e3:78:4b:9a:a5:7a:e0:35:45:4b:50:d9:c6: 1f:85:5f:64:05:be:00:c6:14:7c:25:f4:9e:1c:82: ad:58:fc:30:64:11:ff:4f:d3:8c:15:09:6c:29:af: 07:db:67:56:14:30:29:ba:3c:eb:7f:ca:3b:1f:d7: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:12:19:2D:8F:25:E7:59:C9:5C:9D:FB:F6:2F:D5:16:12:E7:B9:43 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/chIZLY8l51nJXJ379i_VFhLnuUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.15.0/24 IPv6: 2a06:7a02::/48 Signature Algorithm: sha256WithRSAEncryption 15:7f:b6:18:dd:0c:76:70:86:36:9f:e5:93:dc:0d:25:b0:f1: f5:d0:ff:f6:0a:3a:3e:3b:5d:a5:9e:20:c0:92:70:85:d6:24: 86:9c:74:03:86:ec:44:3b:ce:19:da:ad:f6:f6:bb:97:fa:ad: d6:90:a6:52:6a:6a:02:ba:3c:81:17:14:e6:fb:22:d4:54:97: 9d:2a:b1:72:e6:27:03:4b:0e:a1:17:7a:52:d9:01:a3:7d:6a: 13:c5:60:50:a8:ab:17:ec:87:53:25:53:53:3d:8b:a4:fc:7b: d3:a6:4f:30:8a:99:d0:d3:3b:6c:50:1f:ae:6c:a3:9e:03:7d: cd:61:93:dc:6e:ff:ca:91:f0:6e:0d:59:82:7c:17:8b:ed:97: 92:7f:10:d9:55:6b:69:67:ac:e3:91:1d:10:03:2e:06:d0:34: 40:8e:94:0a:4e:22:bf:bc:13:23:35:8f:e2:61:59:aa:eb:b4: 48:11:03:21:e0:37:2b:9c:b6:a3:b8:a3:76:f5:df:07:9c:73: 49:c2:f6:b0:ad:89:37:1f:85:e0:6a:5e:28:ac:84:c6:29:e6: 5a:27:62:07:06:d8:06:05:5a:98:de:57:c9:93:97:ad:24:a0: d2:7e:0b:ae:74:e3:23:45:fb:62:b6:c3:65:9a:5c:53:d6:8f: 76:5c:1e:0e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fjNR9GBcGYhbB7opm2gwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjEyMTkyZDhmMjVlNzU5Yzk1YzlkZmJmNjJmZDUxNjEyZTdiOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXDnJ8PN9GCIkZeAY5zA5rYXzlE/ cU0SAA7UksTlfdAzvWZ8msrU6fTiyHrpmCcFk8N2blcr7jHRpbFJG1Qx6xyfsbdr Mw4fs7u4qoktGmSJVMS/4Frjn3Eq9h4PtLXS3izeJmjZExSAqcepi/FG59ElXEWt PKpgyOqe4nQgSn3vL9f2S6oKjx2UDsyPAqT6Qm80GG2gV3Monsz/rGnrgTUeVWUk iRqjC2adn+9XQvc0i68b/DZuwi6BY/9FoXr/Be5y0ON4S5qleuA1RUtQ2cYfhV9k Bb4AxhR8JfSeHIKtWPwwZBH/T9OMFQlsKa8H22dWFDApujzrf8o7H9eqZwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHISGS2PJedZyVyd+/Yv1RYS57lDMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvY2hJWkxZOGw1MW5KWEozNzlpX1ZGaExudVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALYQPMA8E AgACMAkDBwAqBnoCAAAwDQYJKoZIhvcNAQELBQADggEBABV/thjdDHZwhjaf5ZPc DSWw8fXQ//YKOj47XaWeIMCScIXWJIacdAOG7EQ7zhnarfb2u5f6rdaQplJqagK6 PIEXFOb7ItRUl50qsXLmJwNLDqEXelLZAaN9ahPFYFCoqxfsh1MlU1M9i6T8e9Om TzCKmdDTO2xQH65so54Dfc1hk9xu/8qR8G4NWYJ8F4vtl5J/ENlVa2lnrOORHRAD LgbQNECOlApOIr+8EyM1j+JhWarrtEgRAyHgNyuctqO4o3b13wecc0nC9rCtiTcf heBqXiishMYp5lonYgcG2AYFWpjeV8mTl60koNJ+C6504yNF+2K2w2WaXFPWj3Zc Hg4= -----END CERTIFICATE-----Generated at Mon Jan 19 20:27:35 2026 by rpki-client