This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa File: CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa (raw, json) Hash identifier: 243j3TvIuSB1M/hUhuu8ZLn+QAVeT40RY9rpOYK+p6Q= Subject key identifier: 0A:38:12:FD:BD:AB:FB:7A:A9:95:9E:4A:0D:56:5A:F1:54:AD:22:14 Certificate issuer: /CN=1dd7088d9da221f0565eb178443600171e7977aa Certificate serial: 019B7CEE3DD8B6C4B01FF3A3C7A7C123CA78 Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa Signing time: Fri 02 Jan 2026 04:19:06 +0000 ROA not before: Fri 02 Jan 2026 04:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 46.29.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:3d:d8:b6:c4:b0:1f:f3:a3:c7:a7:c1:23:ca:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa Validity Not Before: Jan 2 04:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a3812fdbdabfb7aa9959e4a0d565af154ad2214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:93:a9:d7:76:35:aa:ac:18:54:76:2e:29: ff:36:37:32:e1:37:44:ad:5f:7f:b9:12:de:20:ce: db:40:d2:17:33:9b:f9:c3:9d:2a:55:5f:95:91:88: 78:a3:32:d0:c4:9b:93:cd:0d:c0:98:0d:2b:3e:c7: 43:db:a6:f4:f7:a0:7d:7c:8e:0c:f7:35:dc:10:74: 51:d0:7d:71:55:3a:f3:61:b4:19:db:3c:9e:b6:9b: 84:6b:2b:75:f4:cb:35:23:b9:16:61:38:6e:40:55: 21:3c:32:35:2b:65:d1:6d:37:a4:43:e2:d3:c0:3b: 77:92:5e:a2:cc:15:a7:e3:e5:ff:e2:93:be:38:aa: 68:ab:ee:51:e5:9e:a3:5a:f8:d6:80:52:cd:7d:79: cc:4b:1a:4c:f8:7f:24:4b:b9:43:c2:c4:2d:10:17: 13:ae:b8:ba:89:17:0d:31:2f:32:ab:1b:21:dd:86: 85:33:4b:6a:bd:ba:57:35:dd:7d:7d:34:eb:2d:f5: 7a:c6:0b:70:19:4b:3a:6b:fc:83:15:87:ea:2a:b4: 18:31:b6:5f:3c:8e:18:55:ef:2b:ef:87:75:46:31: f2:48:d3:f8:c5:be:d0:60:8e:cd:e6:38:ad:a1:76: 26:95:0f:a4:a0:2d:6c:d3:eb:c1:87:bb:a8:32:2e: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:12:FD:BD:AB:FB:7A:A9:95:9E:4A:0D:56:5A:F1:54:AD:22:14 X509v3 Authority Key Identifier: keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/CjgS_b2r-3qplZ5KDVZa8VStIhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.34.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a5:96:3e:f1:a1:c2:26:07:98:db:17:2a:ad:39:f2:34:e5: 53:1d:40:c5:33:3b:9b:93:e4:b2:89:96:20:ce:9d:45:6a:b0: d0:26:be:97:65:8f:f3:c9:8a:0e:58:1b:f9:4a:ee:c1:56:9b: e3:03:0e:c1:0c:96:07:66:d8:26:d1:ff:74:f2:27:b0:a7:f8: 87:7d:7e:71:ec:55:e5:ce:47:79:4f:1b:a1:98:e3:dc:20:1f: 40:b8:ba:75:ab:90:5e:02:e2:85:52:22:20:76:d6:c1:35:f0: 8a:51:01:5f:6f:68:5d:51:eb:96:f7:f0:2b:1c:37:d4:1a:33: d0:45:ac:23:21:0a:fd:25:3c:f7:7e:74:d2:5e:4c:84:60:25: 65:57:39:10:69:1a:46:1b:f3:c6:87:73:f9:5c:e0:78:a9:8e: f4:09:26:b6:3b:b8:aa:fa:1a:3b:f5:8a:6c:ce:2a:d5:18:cc: ec:02:f9:b6:87:f1:88:76:5c:6e:a5:52:96:bd:a9:7e:71:e9: 75:9b:56:26:0f:a3:93:90:31:22:5e:82:4e:8b:0f:fe:eb:e3: 92:d8:d4:c2:7d:ba:c1:48:d8:66:14:34:69:3a:e9:49:a6:a7: 3a:3f:9a:16:19:5a:fe:b7:de:74:b2:df:a7:02:32:10:17:26: a8:3d:94:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87j3YtsSwH/Ojx6fBI8p4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3 OTc3YWEwHhcNMjYwMTAyMDQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTM4MTJmZGJkYWJmYjdhYTk5NTllNGEwZDU2NWFmMTU0YWQyMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rSTqdd2NaqsGFR2Lin/Njcy4TdE rV9/uRLeIM7bQNIXM5v5w50qVV+VkYh4ozLQxJuTzQ3AmA0rPsdD26b096B9fI4M 9zXcEHRR0H1xVTrzYbQZ2zyetpuEayt19Ms1I7kWYThuQFUhPDI1K2XRbTekQ+LT wDt3kl6izBWn4+X/4pO+OKpoq+5R5Z6jWvjWgFLNfXnMSxpM+H8kS7lDwsQtEBcT rri6iRcNMS8yqxsh3YaFM0tqvbpXNd19fTTrLfV6xgtwGUs6a/yDFYfqKrQYMbZf PI4YVe8r74d1RjHySNP4xb7QYI7N5jitoXYmlQ+koC1s0+vBh7uoMi4r4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAo4Ev29q/t6qZWeSg1WWvFUrSIUMB8GA1UdIwQY MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt ZTBiZTE0OGM0MDk3LzEvQ2pnU19iMnItM3FwbFo1S0RWWmE4VlN0SWhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3 LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0iMA0G CSqGSIb3DQEBCwUAA4IBAQCqpZY+8aHCJgeY2xcqrTnyNOVTHUDFMzubk+SyiZYg zp1FarDQJr6XZY/zyYoOWBv5Su7BVpvjAw7BDJYHZtgm0f908iewp/iHfX5x7FXl zkd5TxuhmOPcIB9AuLp1q5BeAuKFUiIgdtbBNfCKUQFfb2hdUeuW9/ArHDfUGjPQ RawjIQr9JTz3fnTSXkyEYCVlVzkQaRpGG/PGh3P5XOB4qY70CSa2O7iq+ho79Yps zirVGMzsAvm2h/GIdlxupVKWval+cel1m1YmD6OTkDEiXoJOiw/+6+OS2NTCfbrB SNhmFDRpOulJpqc6P5oWGVr+t950st+nAjIQFyaoPZQh -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:02 2026 by rpki-client