This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CJdgBq-JHLeqwJw0U8uTjNUdUh8.roa File: CJdgBq-JHLeqwJw0U8uTjNUdUh8.roa (raw, json) Hash identifier: nW7tFXL/jXTbHiXTU7hxFn8fN9K3NaWWNRkUBItQlMY= Subject key identifier: 08:97:60:06:AF:89:1C:B7:AA:C0:9C:34:53:CB:93:8C:D5:1D:52:1F Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758F3F23DDB569856E5FEFDB3AF9336 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CJdgBq-JHLeqwJw0U8uTjNUdUh8.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42401 IP address blocks: 91.192.88.0/22 maxlen: 22 91.192.88.0/24 maxlen: 24 91.192.89.0/24 maxlen: 24 91.192.90.0/24 maxlen: 24 91.192.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:f2:3d:db:56:98:56:e5:fe:fd:b3:af:93:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=08976006af891cb7aac09c3453cb938cd51d521f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:aa:b4:bd:80:1e:a5:cf:20:60:45:c5:c0:9b: 9e:83:2f:69:d4:53:e5:43:31:d2:8c:ca:10:7e:07: 39:1d:9e:33:f0:ab:be:f5:b4:ea:2e:94:74:ec:7d: 4d:63:e4:14:29:b9:e9:87:ae:e1:64:af:3c:4b:5f: e0:c0:eb:55:06:5b:d7:64:aa:2e:ec:98:b7:f1:74: cb:89:14:9b:cd:e7:26:08:58:37:47:f6:11:6b:a8: 7b:d6:4c:9c:98:34:0c:d6:1b:a3:62:d8:c1:71:38: 6f:22:f1:b0:4c:62:1f:6e:12:12:f3:be:69:c2:bb: e4:a7:1c:eb:48:2e:16:bb:83:b9:ec:cb:c2:9d:39: 7d:cb:43:71:59:f8:f0:b1:75:6c:85:60:a3:37:46: b9:37:d9:a6:dc:5c:28:1a:a2:a7:36:71:14:34:c0: e8:12:a5:2f:f8:d8:2b:a5:58:18:ea:cb:1a:f9:f8: 2f:1f:9f:ba:4c:9f:64:28:33:24:20:e1:b5:21:10: 7d:a7:cc:59:64:ae:e5:ce:c6:ac:16:41:5c:0f:85: 2d:f9:07:3b:75:b8:70:4e:75:50:5d:ec:6a:a0:85: 50:0b:b6:99:a8:c1:67:1d:3f:77:2a:1b:29:7a:de: f7:ff:85:67:99:34:0e:1a:1b:67:69:cb:87:26:ca: b6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:97:60:06:AF:89:1C:B7:AA:C0:9C:34:53:CB:93:8C:D5:1D:52:1F X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/CJdgBq-JHLeqwJw0U8uTjNUdUh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.192.88.0/22 Signature Algorithm: sha256WithRSAEncryption 76:40:06:2c:55:c4:d8:36:3c:87:ff:99:3e:75:fa:bc:d8:0e: 73:99:6f:91:7f:00:42:8c:a0:e6:07:89:62:d3:e4:04:5d:0f: 06:d2:69:8a:5f:ce:d5:71:9c:2d:e7:5f:0f:6a:b4:9a:6f:78: 7a:be:3c:75:2f:c5:a6:2d:e4:85:9b:0f:1b:44:c8:89:eb:87: a3:06:a5:df:f3:c9:72:38:c7:0b:1b:73:df:5b:c7:22:1e:3d: 68:96:a0:05:28:31:4a:cf:b1:48:4b:6e:32:89:8e:02:6b:0c: 8a:92:41:3a:05:95:d9:c9:ff:1b:37:a9:0f:9f:6b:c2:2f:9f: 71:d3:1e:9e:09:27:db:da:4d:97:20:66:60:9e:d3:a6:b5:2c: d5:e0:c3:29:62:f4:29:c5:ca:c3:18:5a:18:43:b2:07:ae:5e: 86:3c:08:4b:07:4a:6f:86:49:84:70:7f:7c:93:cc:3a:41:82: d0:e3:36:a9:30:fe:43:6c:f9:e5:52:e1:75:f2:2d:87:a8:a1: 9e:95:87:4f:54:1d:36:e1:8f:66:5b:c5:c6:b2:a0:24:8b:7c: 31:78:59:40:27:b7:87:27:20:8a:5d:04:e8:c5:7c:5d:e5:e9: 4b:d2:6f:5e:bd:c5:74:bf:90:00:98:7f:f6:4b:6e:a3:a6:78: 99:9e:ba:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WPPyPdtWmFbl/v2zr5M2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODk3NjAwNmFmODkxY2I3YWFjMDljMzQ1M2NiOTM4Y2Q1MWQ1MjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKq0vYAepc8gYEXFwJuegy9p1FPl QzHSjMoQfgc5HZ4z8Ku+9bTqLpR07H1NY+QUKbnph67hZK88S1/gwOtVBlvXZKou 7Ji38XTLiRSbzecmCFg3R/YRa6h71kycmDQM1hujYtjBcThvIvGwTGIfbhIS875p wrvkpxzrSC4Wu4O57MvCnTl9y0NxWfjwsXVshWCjN0a5N9mm3FwoGqKnNnEUNMDo EqUv+NgrpVgY6ssa+fgvH5+6TJ9kKDMkIOG1IRB9p8xZZK7lzsasFkFcD4Ut+Qc7 dbhwTnVQXexqoIVQC7aZqMFnHT93Khspet73/4VnmTQOGhtnacuHJsq2swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiXYAaviRy3qsCcNFPLk4zVHVIfMB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvQ0pkZ0JxLUpITGVxd0p3MFU4dVRqTlVkVWg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8BYMA0G CSqGSIb3DQEBCwUAA4IBAQB2QAYsVcTYNjyH/5k+dfq82A5zmW+RfwBCjKDmB4li 0+QEXQ8G0mmKX87VcZwt518ParSab3h6vjx1L8WmLeSFmw8bRMiJ64ejBqXf88ly OMcLG3PfW8ciHj1olqAFKDFKz7FIS24yiY4CawyKkkE6BZXZyf8bN6kPn2vCL59x 0x6eCSfb2k2XIGZgntOmtSzV4MMpYvQpxcrDGFoYQ7IHrl6GPAhLB0pvhkmEcH98 k8w6QYLQ4zapMP5DbPnlUuF18i2HqKGelYdPVB024Y9mW8XGsqAki3wxeFlAJ7eH JyCKXQToxXxd5elL0m9evcV0v5AAmH/2S26jpniZnrpW -----END CERTIFICATE-----Generated at Sun Jan 25 20:31:10 2026 by rpki-client