This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa File: CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa (raw, json) Hash identifier: o2Udx+b7zpQWtPDTqUJxGNdjl7Wv2+AvE2gIsIBVVkU= Subject key identifier: 0A:62:42:5A:F7:3E:2F:99:FA:11:3A:81:FD:8F:44:79:B7:D3:81:57 Certificate issuer: /CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Certificate serial: 019B7C8034592FE48B4BD1FA4974066A7A34 Authority key identifier: 8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60855 IP address blocks: 195.42.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.mft rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:34:59:2f:e4:8b:4b:d1:fa:49:74:06:6a:7a:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e1a48721ff43b18057ef4174a9d396a981c6693 Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a62425af73e2f99fa113a81fd8f4479b7d38157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:3b:e2:64:37:be:3a:f4:d0:e3:06:d0:5a: 26:d3:77:56:db:53:3c:00:d7:5c:9e:7a:f9:3e:ea: 64:c0:d7:1a:3b:81:48:4f:57:d7:ff:95:d4:a7:48: 22:6e:64:e6:0e:58:7b:c1:92:68:a1:4b:8f:ed:a4: ee:4a:1f:68:b8:9e:6a:a8:b6:15:14:80:d6:b2:b5: 07:0a:30:5f:32:51:ea:74:1a:84:55:9c:00:84:8f: c1:05:a7:c3:ad:03:38:21:60:5a:21:37:3b:51:1b: 58:bc:40:6c:94:02:d4:5c:8e:ba:bb:8f:8a:47:60: 7b:22:3d:9c:0b:12:7a:42:ce:43:ba:07:2d:1f:e7: 8a:98:78:84:8d:c6:08:20:5a:1f:56:91:db:97:9a: e2:50:e1:d3:97:e3:0b:30:5b:81:79:9b:d8:78:b1: ac:72:4c:84:aa:04:fb:ac:30:c6:2f:cc:90:16:1e: d7:7f:c4:30:10:af:6e:93:01:68:f0:f7:6b:4e:a0: 6a:50:7c:71:38:ed:55:e6:54:35:ee:dd:28:37:50: 28:4d:6d:8a:d5:01:12:5b:eb:7c:7f:76:8d:93:14: 48:3c:58:03:e9:22:6c:f4:10:31:00:b8:c6:8b:b5: 96:4e:3d:c6:6c:15:16:78:c0:32:73:07:0b:7a:23: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:62:42:5A:F7:3E:2F:99:FA:11:3A:81:FD:8F:44:79:B7:D3:81:57 X509v3 Authority Key Identifier: keyid:8E:1A:48:72:1F:F4:3B:18:05:7E:F4:17:4A:9D:39:6A:98:1C:66:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhpIch_0OxgFfvQXSp05apgcZpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/CmJCWvc-L5n6ETqB_Y9EebfTgVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/02bca2-ae30-48e2-b333-ce4e31ce1518/1/jhpIch_0OxgFfvQXSp05apgcZpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.42.231.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e8:d4:70:10:7c:e7:5b:29:30:97:97:74:fb:70:a6:ba:48: 00:f0:eb:46:2a:38:c9:79:91:80:fd:00:b9:bd:74:39:65:c8: 8c:1d:67:09:8b:e3:4c:67:32:4b:cc:b6:c9:30:88:2e:b3:e3: a9:69:1a:32:41:8f:9a:e1:f4:f3:bd:aa:5a:82:c8:66:7c:5f: f2:31:41:6b:57:0f:d0:49:b5:b2:87:fb:2c:3b:4c:d5:10:47: 3e:73:79:f3:c3:29:7a:86:b0:3c:a8:4c:b4:55:44:3c:ab:8b: c5:1e:fa:14:2b:15:ba:ef:ee:19:f6:bf:ba:d8:f7:b8:f0:08: 35:59:4c:d4:a7:5f:c4:b1:96:9e:fb:0b:64:07:2c:c3:8b:72: b6:5d:e2:7f:3e:4f:d2:b6:74:04:fd:5d:0f:7f:4a:70:f4:07: bb:94:01:77:7d:a8:de:5d:c0:a5:a2:e2:d7:a6:8e:82:ca:68: af:72:ef:03:21:ed:70:ab:82:1a:04:fe:d1:90:88:e2:15:36: f1:d3:a7:f4:35:ed:b9:19:08:ef:2f:7c:25:20:4e:c6:ad:b7: 2c:8b:88:8f:06:e6:b5:c4:a2:a8:a7:cd:ac:7c:a6:f6:06:37: 29:7e:75:07:ef:69:63:5b:d4:e2:45:b3:30:14:8c:a4:90:94: 96:01:d8:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gDRZL+SLS9H6SXQGano0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlMWE0ODcyMWZmNDNiMTgwNTdlZjQxNzRhOWQzOTZhOTgx YzY2OTMwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTYyNDI1YWY3M2UyZjk5ZmExMTNhODFmZDhmNDQ3OWI3ZDM4MTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApik74mQ3vjr00OMG0Fom03dW21M8 ANdcnnr5PupkwNcaO4FIT1fX/5XUp0gibmTmDlh7wZJooUuP7aTuSh9ouJ5qqLYV FIDWsrUHCjBfMlHqdBqEVZwAhI/BBafDrQM4IWBaITc7URtYvEBslALUXI66u4+K R2B7Ij2cCxJ6Qs5DugctH+eKmHiEjcYIIFofVpHbl5riUOHTl+MLMFuBeZvYeLGs ckyEqgT7rDDGL8yQFh7Xf8QwEK9ukwFo8PdrTqBqUHxxOO1V5lQ17t0oN1AoTW2K 1QESW+t8f3aNkxRIPFgD6SJs9BAxALjGi7WWTj3GbBUWeMAycwcLeiMiUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFApiQlr3Pi+Z+hE6gf2PRHm304FXMB8GA1UdIwQY MBaAFI4aSHIf9DsYBX70F0qdOWqYHGaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMt Y2U0ZTMxY2UxNTE4LzEvQ21KQ1d2Yy1MNW42RVRxQl9ZOUVlYmZUZ1ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMmJjYTItYWUzMC00OGUyLWIzMzMtY2U0ZTMxY2UxNTE4 LzEvamhwSWNoXzBPeGdGZnZRWFNwMDVhcGdjWnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyrnMA0G CSqGSIb3DQEBCwUAA4IBAQBE6NRwEHznWykwl5d0+3CmukgA8OtGKjjJeZGA/QC5 vXQ5ZciMHWcJi+NMZzJLzLbJMIgus+OpaRoyQY+a4fTzvapagshmfF/yMUFrVw/Q SbWyh/ssO0zVEEc+c3nzwyl6hrA8qEy0VUQ8q4vFHvoUKxW67+4Z9r+62Pe48Ag1 WUzUp1/EsZae+wtkByzDi3K2XeJ/Pk/StnQE/V0Pf0pw9Ae7lAF3fajeXcClouLX po6Cymivcu8DIe1wq4IaBP7RkIjiFTbx06f0Ne25GQjvL3wlIE7Grbcsi4iPBua1 xKKop82sfKb2BjcpfnUH72ljW9TiRbMwFIykkJSWAdgH -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:00 2026 by rpki-client