This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CHO44I77w6VJL2zUa_ZJ10zZ9ss.roa File: CHO44I77w6VJL2zUa_ZJ10zZ9ss.roa (raw, json) Hash identifier: HsjNONuC8AMl+Rb5jGemSs1a+5XI6RVmsEVzIB2O0GE= Subject key identifier: 08:73:B8:E0:8E:FB:C3:A5:49:2F:6C:D4:6B:F6:49:D7:4C:D9:F6:CB Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDF92E7B6F9AE991F744427B87769C Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CHO44I77w6VJL2zUa_ZJ10zZ9ss.roa Signing time: Fri 02 Jan 2026 04:18:49 +0000 ROA not before: Fri 02 Jan 2026 04:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216126 IP address blocks: 2a05:1082::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f9:2e:7b:6f:9a:e9:91:f7:44:42:7b:87:76:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0873b8e08efbc3a5492f6cd46bf649d74cd9f6cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b8:03:13:27:09:ec:1e:a1:af:d3:c3:3e:2f: 97:d7:57:e3:9e:2d:9c:d0:75:53:0e:1b:73:36:0f: 5c:de:a3:60:35:29:9e:0e:da:d4:5f:06:51:12:3d: d8:c7:2d:e6:74:73:4b:a8:52:ce:ff:00:2a:30:d0: 9c:57:89:09:75:e0:0e:00:ea:7b:70:0f:cc:95:86: fe:b9:9e:00:67:6a:53:a7:60:9f:61:79:14:a2:72: 38:e5:de:5a:9f:d6:23:e3:a7:a6:04:5e:52:57:84: 61:69:bc:8c:94:67:ce:b8:58:80:cb:27:87:16:2f: 0a:64:ce:d2:26:62:57:d3:6c:42:57:cb:c1:6e:26: 73:ba:28:f6:16:19:bb:88:ae:ef:30:c0:be:4e:92: 5d:ff:e0:5a:80:9c:f8:9b:6e:d1:b3:5b:20:68:f1: 56:aa:77:11:e9:01:9e:15:7e:46:4c:56:ba:be:b4: 09:c1:fd:51:24:12:55:8d:d6:32:b4:4f:e2:b1:ce: 7e:15:a3:21:1d:0e:2a:c4:1c:9e:df:d5:2e:9b:62: 5d:98:76:00:61:9a:47:a6:70:04:6d:00:c0:fb:a9: 16:3f:80:96:76:99:20:8c:cd:cb:1f:cf:10:12:d3: 5c:5e:a5:0a:c7:9b:1a:39:54:4f:06:4b:56:2d:15: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:73:B8:E0:8E:FB:C3:A5:49:2F:6C:D4:6B:F6:49:D7:4C:D9:F6:CB X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/CHO44I77w6VJL2zUa_ZJ10zZ9ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:1082::/32 Signature Algorithm: sha256WithRSAEncryption b5:1f:aa:a2:00:e3:3e:b7:80:f6:19:ac:c1:d8:70:8c:67:d7: 95:04:e8:ae:50:fe:34:ce:1f:f5:bc:03:79:09:c4:a7:d8:c2: 9b:8a:18:42:cb:0c:a6:79:81:b2:34:25:f1:66:6b:97:47:74: 9b:47:76:e1:d3:d0:da:81:7a:8f:87:8f:d2:5c:63:31:3b:1b: 4b:ba:3f:7d:79:a5:87:09:e8:eb:4b:6e:8e:c2:32:25:07:1b: c2:6b:d1:5d:a5:d5:59:a2:49:2e:18:53:59:7c:1a:31:47:b5: 58:91:0e:ff:2f:0f:1d:a1:92:90:ca:6e:46:23:ac:d3:a9:a8: 16:8a:fc:1e:1b:88:23:08:82:96:bc:a8:74:89:29:6d:2b:30: cc:3d:d8:00:58:23:64:1e:b4:62:a2:0d:a2:08:fb:b1:e5:f7: 22:fa:fc:49:cd:37:80:91:49:34:9c:d8:a6:0f:8e:d7:a6:6a: 2d:5b:9b:6e:b1:57:4c:68:51:cb:c4:de:11:8d:84:76:1c:4b: c6:02:e4:3c:14:65:ad:6c:9d:19:1b:53:f8:47:1c:d5:b7:39: d0:dd:85:23:8b:83:a0:65:08:bc:30:8c:01:b1:34:57:3d:be: 35:86:fe:1a:91:e5:ff:8e:c0:84:1c:3c:63:a9:33:ac:93:c3: ad:17:9a:fc -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87fkue2+a6ZH3REJ7h3acMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODczYjhlMDhlZmJjM2E1NDkyZjZjZDQ2YmY2NDlkNzRjZDlmNmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrgDEycJ7B6hr9PDPi+X11fjni2c 0HVTDhtzNg9c3qNgNSmeDtrUXwZREj3Yxy3mdHNLqFLO/wAqMNCcV4kJdeAOAOp7 cA/MlYb+uZ4AZ2pTp2CfYXkUonI45d5an9Yj46emBF5SV4RhabyMlGfOuFiAyyeH Fi8KZM7SJmJX02xCV8vBbiZzuij2Fhm7iK7vMMC+TpJd/+BagJz4m27Rs1sgaPFW qncR6QGeFX5GTFa6vrQJwf1RJBJVjdYytE/isc5+FaMhHQ4qxBye39Uum2JdmHYA YZpHpnAEbQDA+6kWP4CWdpkgjM3LH88QEtNcXqUKx5saOVRPBktWLRW+OwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFAhzuOCO+8OlSS9s1Gv2SddM2fbLMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvQ0hPNDRJNzd3NlZKTDJ6VWFfWkoxMHpaOXNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgUQgjAN BgkqhkiG9w0BAQsFAAOCAQEAtR+qogDjPreA9hmswdhwjGfXlQTorlD+NM4f9bwD eQnEp9jCm4oYQssMpnmBsjQl8WZrl0d0m0d24dPQ2oF6j4eP0lxjMTsbS7o/fXml hwno60tujsIyJQcbwmvRXaXVWaJJLhhTWXwaMUe1WJEO/y8PHaGSkMpuRiOs06mo For8HhuIIwiClryodIkpbSswzD3YAFgjZB60YqINogj7seX3Ivr8Sc03gJFJNJzY pg+O16ZqLVubbrFXTGhRy8TeEY2EdhxLxgLkPBRlrWydGRtT+Ecc1bc50N2FI4uD oGUIvDCMAbE0Vz2+NYb+GpHl/47AhBw8Y6kzrJPDrRea/A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:40 2026 by rpki-client