This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/chXDRFsp1aWisLhsFGlOCYH1irQ.roa File: chXDRFsp1aWisLhsFGlOCYH1irQ.roa (raw, json) Hash identifier: 56ssVQ0UuBbsJ1hgq0MNiaiBDFQ4tklgHUkGyPlHJKw= Subject key identifier: 72:15:C3:44:5B:29:D5:A5:A2:B0:B8:6C:14:69:4E:09:81:F5:8A:B4 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE3D9517670CF656DDEA34C324954 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/chXDRFsp1aWisLhsFGlOCYH1irQ.roa Signing time: Thu 01 Jan 2026 16:18:55 +0000 ROA not before: Thu 01 Jan 2026 16:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215710 IP address blocks: 81.168.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e3:d9:51:76:70:cf:65:6d:de:a3:4c:32:49:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7215c3445b29d5a5a2b0b86c14694e0981f58ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e9:7d:40:de:91:01:e1:ff:c4:eb:de:97:13: a8:81:36:5c:13:03:a5:7d:75:ed:ba:6f:89:cb:74: ac:c7:c7:c0:d7:9f:ac:23:68:a6:2b:b0:44:43:a7: 30:ed:b8:67:01:58:64:95:b8:d6:0b:86:04:3d:2b: f5:3c:09:a3:ec:5c:95:05:02:1c:4c:39:ed:7e:1e: 41:4f:8b:b3:2f:22:fd:e1:0d:14:b1:3c:4d:9d:9d: 39:76:88:4d:0d:29:b8:71:dc:e0:15:0f:21:71:d1: 8f:71:2f:46:ec:74:05:c9:4e:9b:3d:6a:65:13:32: 93:f0:09:4f:7d:38:37:82:8c:9d:61:68:df:c3:0f: 6e:cc:ab:ab:cc:85:87:7c:a8:d5:4a:69:e0:f7:d8: f8:7e:b2:ec:21:ca:a6:f8:1a:ba:f4:2f:1d:1e:43: 2c:00:83:bc:80:db:de:4f:41:bc:19:c6:65:9e:14: 04:f4:79:e0:81:00:dc:b1:ce:67:e5:26:61:bb:99: 97:20:c0:7b:f1:19:3c:f8:8f:8c:7e:7a:db:62:bc: cc:4c:bd:fe:91:ed:76:14:10:d4:a5:b7:f1:88:fd: 90:b0:bd:ee:13:3e:41:06:e4:13:9f:df:74:0d:fd: 04:20:7a:7b:47:76:05:00:50:69:e8:6d:dd:c1:b1: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:15:C3:44:5B:29:D5:A5:A2:B0:B8:6C:14:69:4E:09:81:F5:8A:B4 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/chXDRFsp1aWisLhsFGlOCYH1irQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.168.119.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:6d:59:cf:b5:b0:cb:b8:ee:84:06:a2:21:10:1f:67:99:a4: 03:c2:cd:d5:86:06:dc:d4:35:7c:c9:b7:bf:07:70:1d:e7:b1: 8b:f3:44:7c:e1:b5:84:42:cc:9c:36:d6:c9:fd:eb:dd:74:07: 71:1d:13:9f:5e:d3:18:45:78:a0:d6:e9:ff:37:6e:f9:6c:0f: 9a:f4:a4:4c:dd:d1:0d:99:50:33:85:aa:b5:87:83:69:d5:c0: 92:7d:49:3a:72:31:d6:d4:3b:52:78:a9:97:0e:70:6d:82:64: ad:f9:19:4c:7a:f5:d4:ec:bc:cd:3c:33:2a:38:7c:04:45:08: f8:7c:ca:3c:6e:62:74:7f:6e:41:d8:a3:fd:e9:d1:87:44:d0: 9e:f7:f6:37:82:84:55:8f:09:ab:f6:f0:08:71:9b:b6:56:1a: f2:43:aa:47:1c:d9:4f:76:40:43:ee:7f:8d:ba:e7:e1:45:cc: f9:9c:bd:98:e9:c9:dd:a1:5e:fa:22:9e:6e:89:6e:8a:bc:0d: 1b:a0:00:f7:d8:48:b8:96:77:47:57:2c:76:95:29:20:c3:04: 1c:dd:ee:92:6d:7d:6d:14:ca:40:ae:d5:35:97:62:29:fb:9d: 73:4e:73:24:aa:f9:d3:31:7b:06:6a:30:39:b9:ff:b5:05:93: 87:86:11:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WuPZUXZwz2Vt3qNMMklUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjE1YzM0NDViMjlkNWE1YTJiMGI4NmMxNDY5NGUwOTgxZjU4YWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ul9QN6RAeH/xOvelxOogTZcEwOl fXXtum+Jy3Ssx8fA15+sI2imK7BEQ6cw7bhnAVhklbjWC4YEPSv1PAmj7FyVBQIc TDntfh5BT4uzLyL94Q0UsTxNnZ05dohNDSm4cdzgFQ8hcdGPcS9G7HQFyU6bPWpl EzKT8AlPfTg3goydYWjfww9uzKurzIWHfKjVSmng99j4frLsIcqm+Bq69C8dHkMs AIO8gNveT0G8GcZlnhQE9HnggQDcsc5n5SZhu5mXIMB78Rk8+I+MfnrbYrzMTL3+ ke12FBDUpbfxiP2QsL3uEz5BBuQTn990Df0EIHp7R3YFAFBp6G3dwbEDsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHIVw0RbKdWlorC4bBRpTgmB9Yq0MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvY2hYRFJGc3AxYVdpc0xoc0ZHbE9DWUgxaXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUah3MA0G CSqGSIb3DQEBCwUAA4IBAQAObVnPtbDLuO6EBqIhEB9nmaQDws3Vhgbc1DV8ybe/ B3Ad57GL80R84bWEQsycNtbJ/evddAdxHROfXtMYRXig1un/N275bA+a9KRM3dEN mVAzhaq1h4Np1cCSfUk6cjHW1DtSeKmXDnBtgmSt+RlMevXU7LzNPDMqOHwERQj4 fMo8bmJ0f25B2KP96dGHRNCe9/Y3goRVjwmr9vAIcZu2VhryQ6pHHNlPdkBD7n+N uufhRcz5nL2Y6cndoV76Ip5uiW6KvA0boAD32Ei4lndHVyx2lSkgwwQc3e6SbX1t FMpArtU1l2Ip+51zTnMkqvnTMXsGajA5uf+1BZOHhhF0 -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:37 2026 by rpki-client