This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CLwxXV-UTIW5CICgniFlt29cmYk.roa File: CLwxXV-UTIW5CICgniFlt29cmYk.roa (raw, json) Hash identifier: Eh61neULMNwCpDN9fvZWUb4U1f2dHvmE6lGEUR2GGAM= Subject key identifier: 08:BC:31:5D:5F:94:4C:85:B9:08:80:A0:9E:21:65:B7:6F:5C:99:89 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C7010964F686B4A7F21EC09C47DCB7 Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CLwxXV-UTIW5CICgniFlt29cmYk.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211415 IP address blocks: 109.107.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:01:09:64:f6:86:b4:a7:f2:1e:c0:9c:47:dc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08bc315d5f944c85b90880a09e2165b76f5c9989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ef:7c:ba:91:33:f8:35:94:32:1a:03:cd:88: 86:e0:79:86:2b:2c:85:38:eb:58:21:26:27:54:5d: 2d:f8:85:50:c0:c3:67:7e:b0:6e:32:6b:00:c4:48: 8a:80:91:e1:d9:66:1d:a5:fc:99:4d:c9:9c:ec:73: 52:30:1b:72:f3:ba:55:ab:3d:78:10:8e:7d:28:0a: fe:27:38:a3:fb:09:ad:09:20:b3:7e:3c:1e:36:07: 1e:b3:1b:02:66:52:2b:f3:68:57:2e:4f:29:9c:43: 42:2f:10:ca:f7:18:29:73:36:00:e1:b9:1d:af:82: 58:b9:b6:ac:7b:cd:e8:c6:dc:22:78:a2:67:a5:0d: 2d:27:0a:a4:da:9a:10:54:c8:61:f3:bc:41:e1:db: 8e:6f:f4:ec:51:50:c5:ba:0d:10:22:f4:d1:a0:e2: 08:cd:2c:bd:ae:9c:d1:b6:95:55:fe:6d:9f:2c:a1: 75:9c:1b:fc:6e:41:60:df:58:75:9d:04:45:7e:cc: 67:89:a3:bc:be:5b:51:65:24:35:17:e4:f8:a9:68: 5d:9d:d8:fc:3c:40:d4:6e:26:66:4a:6f:09:7f:37: fd:03:12:66:9c:5b:03:fd:9b:7f:34:cc:c1:89:16: ca:9d:fb:80:b9:0d:97:58:7b:74:97:a4:10:21:06: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:31:5D:5F:94:4C:85:B9:08:80:A0:9E:21:65:B7:6F:5C:99:89 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/CLwxXV-UTIW5CICgniFlt29cmYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.107.135.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b3:11:d7:54:2b:3a:50:c3:dc:86:3d:5d:3b:c2:ee:b8:9a: 74:f8:c7:7b:91:dd:fa:2f:09:0c:d0:90:1b:c9:11:3c:c9:57: 6b:75:48:3c:60:67:d1:60:1e:be:f9:09:94:12:d2:8d:66:f5: bd:63:bd:a9:67:90:48:15:12:30:30:61:05:1d:1c:d5:c1:14: 71:b0:9e:b4:9d:97:79:85:9b:bd:f5:da:07:24:da:4e:b0:87: 4d:f9:0b:7b:cf:97:01:74:4a:b8:a3:d9:1c:35:bf:82:ac:c3: a6:d5:5e:7f:75:31:e5:fc:a0:ef:16:6b:11:23:b0:65:39:90: f5:2c:df:14:95:d1:7b:8a:32:79:c4:fd:87:25:3c:bd:84:03: 77:77:33:ff:30:06:e1:ae:81:c5:27:43:97:60:24:74:44:d9: bb:5e:65:de:ab:2d:3e:04:b0:fb:49:0e:68:8e:e9:2a:6c:fd: 62:a7:2b:39:11:5d:12:b8:25:e7:fe:e8:dc:82:66:f8:d5:d1: 8a:c3:3a:a5:cf:1e:23:8c:a2:c8:cc:5e:9b:d5:1e:7d:8e:27: 0e:50:f8:6d:f5:0c:9f:89:6e:ad:5a:ed:76:bd:27:3f:67:2c: ff:b5:2c:24:ab:59:60:dc:17:7a:b0:57:28:4c:f4:d3:5c:80: 2f:65:82:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xwEJZPaGtKfyHsCcR9y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGJjMzE1ZDVmOTQ0Yzg1YjkwODgwYTA5ZTIxNjViNzZmNWM5OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u98upEz+DWUMhoDzYiG4HmGKyyF OOtYISYnVF0t+IVQwMNnfrBuMmsAxEiKgJHh2WYdpfyZTcmc7HNSMBty87pVqz14 EI59KAr+Jzij+wmtCSCzfjweNgcesxsCZlIr82hXLk8pnENCLxDK9xgpczYA4bkd r4JYubase83oxtwieKJnpQ0tJwqk2poQVMhh87xB4duOb/TsUVDFug0QIvTRoOII zSy9rpzRtpVV/m2fLKF1nBv8bkFg31h1nQRFfsxniaO8vltRZSQ1F+T4qWhdndj8 PEDUbiZmSm8Jfzf9AxJmnFsD/Zt/NMzBiRbKnfuAuQ2XWHt0l6QQIQYIhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAi8MV1flEyFuQiAoJ4hZbdvXJmJMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvQ0x3eFhWLVVUSVc1Q0lDZ25pRmx0MjljbVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWuHMA0G CSqGSIb3DQEBCwUAA4IBAQBrsxHXVCs6UMPchj1dO8LuuJp0+Md7kd36LwkM0JAb yRE8yVdrdUg8YGfRYB6++QmUEtKNZvW9Y72pZ5BIFRIwMGEFHRzVwRRxsJ60nZd5 hZu99doHJNpOsIdN+Qt7z5cBdEq4o9kcNb+CrMOm1V5/dTHl/KDvFmsRI7BlOZD1 LN8UldF7ijJ5xP2HJTy9hAN3dzP/MAbhroHFJ0OXYCR0RNm7XmXeqy0+BLD7SQ5o jukqbP1ipys5EV0SuCXn/ujcgmb41dGKwzqlzx4jjKLIzF6b1R59jicOUPht9Qyf iW6tWu12vSc/Zyz/tSwkq1lg3Bd6sFcoTPTTXIAvZYK9 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:42 2026 by rpki-client