This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CHwZq_Xadhe3TQj8VDszmZLB11Y.roa File: CHwZq_Xadhe3TQj8VDszmZLB11Y.roa (raw, json) Hash identifier: sNHYya5JAy0WtscWb8z6hPUouoqJR3HwctU+LU/dWac= Subject key identifier: 08:7C:19:AB:F5:DA:76:17:B7:4D:08:FC:54:3B:33:99:92:C1:D7:56 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14AE5D0431BE983CD25280160371D7 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CHwZq_Xadhe3TQj8VDszmZLB11Y.roa Signing time: Fri 02 Jan 2026 14:20:20 +0000 ROA not before: Fri 02 Jan 2026 14:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30371 IP address blocks: 2001:668:1f8::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ae:5d:04:31:be:98:3c:d2:52:80:16:03:71:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=087c19abf5da7617b74d08fc543b339992c1d756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:69:be:a7:30:a9:ae:e5:87:95:8c:ec:9c: 47:05:41:6a:3e:3a:27:23:78:c4:cb:55:1b:07:f7: 3d:c1:af:ec:e8:c9:c3:9f:c2:55:0c:88:67:42:06: b8:46:e4:be:9d:ee:c4:84:95:25:07:03:0a:74:dc: 83:0a:64:88:46:49:c3:45:21:db:f0:52:a0:af:83: 18:9f:44:50:d6:a5:5c:7f:0a:f9:7c:77:ab:12:3f: 78:be:3e:15:72:bd:6b:40:54:af:45:86:0e:ba:3c: c9:ef:5d:ae:8a:72:87:db:fe:5f:d5:38:a9:b5:0c: 22:46:b9:dc:4b:c5:ad:5b:58:08:8f:43:82:2e:78: 48:43:84:3b:f9:c2:27:6d:31:15:cf:de:67:5a:56: 92:71:6f:d0:37:f5:41:51:90:47:e5:85:c2:46:fa: f9:9d:b6:13:8d:95:71:1c:a6:cf:c4:4a:55:b9:a6: 8a:ac:81:0a:b8:0d:3d:cf:19:c6:26:7e:de:b3:c5: 4e:bb:7f:e2:78:b2:a1:b3:16:a5:02:42:78:ac:f3: 66:96:60:02:d7:b2:d3:5e:88:36:0c:2d:bf:80:3c: 75:93:03:3a:06:a6:9c:d7:30:73:d0:44:dd:38:60: e0:ad:70:f1:36:67:68:27:e6:04:fd:4a:b8:9d:78: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:7C:19:AB:F5:DA:76:17:B7:4D:08:FC:54:3B:33:99:92:C1:D7:56 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/CHwZq_Xadhe3TQj8VDszmZLB11Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:668:1f8::/46 Signature Algorithm: sha256WithRSAEncryption 73:69:f1:fe:6b:47:8f:e7:b2:6f:9b:98:d2:bb:6c:55:cc:43: 3a:98:3c:03:49:93:45:d3:98:2e:b3:e9:70:70:04:2d:5f:45: 5f:63:90:8b:bd:85:53:0b:8f:68:89:2d:4e:a1:e4:87:18:48: df:d9:67:d0:86:c3:2c:22:fa:a7:c3:32:63:40:5f:3f:f6:2c: 01:3e:62:4c:e8:64:bb:39:c5:ad:98:7c:16:28:32:0c:c6:63: f8:da:aa:0c:0e:16:3a:0e:0b:2a:ce:50:c6:c3:e2:2c:b0:7d: b1:1f:02:c1:a6:c5:97:20:56:30:3d:47:27:c3:b1:dc:f6:b8: 70:26:85:d3:55:1b:49:c5:07:ca:9e:05:2f:3d:c5:ed:ba:8a: df:b4:33:6e:bc:dd:0e:7d:53:55:d9:85:c8:be:6b:90:75:76: 8b:66:94:0e:ad:09:ae:06:0d:f4:88:c9:e6:10:a5:fd:df:b5: fc:ca:62:d1:fb:b6:a9:ac:5d:41:00:51:ab:7f:7e:ba:23:ca: 56:aa:fb:45:53:7f:4d:b2:fd:38:4a:4a:84:a2:2a:53:e4:71: fc:2c:1b:9c:9e:49:cf:c3:06:2e:a9:24:73:e2:cf:90:ee:08: 93:6d:c1:0b:5f:b4:bb:71:dd:9a:24:2b:7a:c5:49:6d:eb:32: 63:c9:19:0f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FK5dBDG+mDzSUoAWA3HXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODdjMTlhYmY1ZGE3NjE3Yjc0ZDA4ZmM1NDNiMzM5OTkyYzFkNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ9pvqcwqa7lh5WM7JxHBUFqPjon I3jEy1UbB/c9wa/s6MnDn8JVDIhnQga4RuS+ne7EhJUlBwMKdNyDCmSIRknDRSHb 8FKgr4MYn0RQ1qVcfwr5fHerEj94vj4Vcr1rQFSvRYYOujzJ712uinKH2/5f1Tip tQwiRrncS8WtW1gIj0OCLnhIQ4Q7+cInbTEVz95nWlaScW/QN/VBUZBH5YXCRvr5 nbYTjZVxHKbPxEpVuaaKrIEKuA09zxnGJn7es8VOu3/ieLKhsxalAkJ4rPNmlmAC 17LTXog2DC2/gDx1kwM6Bqac1zBz0ETdOGDgrXDxNmdoJ+YE/Uq4nXhsRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAh8Gav12nYXt00I/FQ7M5mSwddWMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvQ0h3WnFfWGFkaGUzVFFqOFZEc3ptWkxCMTFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCIAEGaAH4 MA0GCSqGSIb3DQEBCwUAA4IBAQBzafH+a0eP57Jvm5jSu2xVzEM6mDwDSZNF05gu s+lwcAQtX0VfY5CLvYVTC49oiS1OoeSHGEjf2WfQhsMsIvqnwzJjQF8/9iwBPmJM 6GS7OcWtmHwWKDIMxmP42qoMDhY6DgsqzlDGw+IssH2xHwLBpsWXIFYwPUcnw7Hc 9rhwJoXTVRtJxQfKngUvPcXtuorftDNuvN0OfVNV2YXIvmuQdXaLZpQOrQmuBg30 iMnmEKX937X8ymLR+7aprF1BAFGrf366I8pWqvtFU39Nsv04SkqEoipT5HH8LBuc nknPwwYuqSRz4s+Q7giTbcELX7S7cd2aJCt6xUlt6zJjyRkP -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:05 2026 by rpki-client