This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CjqRUuv68PFiU7765GT5HXOx8Bw.roa File: CjqRUuv68PFiU7765GT5HXOx8Bw.roa (raw, json) Hash identifier: PvucfJQmBJoQyaNYzAVmEi/q9uSQDhp1g2JhGdUwoW0= Subject key identifier: 0A:3A:91:52:EB:FA:F0:F1:62:53:BE:FA:E4:64:F9:1D:73:B1:F0:1C Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Certificate serial: 019B76EBA25F200D036E8E97A141E70244D8 Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CjqRUuv68PFiU7765GT5HXOx8Bw.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48623 IP address blocks: 81.4.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:5f:20:0d:03:6e:8e:97:a1:41:e7:02:44:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a3a9152ebfaf0f16253befae464f91d73b1f01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5a:8e:d5:97:bf:0a:55:55:a8:ce:d2:98:d4: 54:71:9d:30:f4:8e:1e:5f:4a:09:1b:6d:62:e5:70: 4d:9b:ca:97:b8:3f:6e:64:26:f5:82:c6:2d:48:68: ab:3a:e2:ed:14:c3:89:1a:28:44:e2:62:cd:cd:3e: 29:8f:57:5c:c8:24:10:b0:37:d9:98:50:fc:b0:6b: 4e:79:34:ac:9e:cd:fb:c3:d4:13:f3:03:c3:23:15: f0:a2:2a:9c:1a:98:0f:45:aa:9c:4b:ab:49:19:5f: cb:9c:ec:77:2a:81:70:7d:35:60:b2:bb:f2:7a:60: 80:69:41:79:f4:7c:12:b1:e4:09:55:b4:d7:51:50: 1a:ee:2d:a7:68:10:e4:20:ae:76:77:b0:60:4d:fc: fb:4f:83:21:d5:38:19:22:ce:2d:40:d3:b1:b4:0d: 16:44:4f:95:f9:c8:56:61:35:12:06:b6:de:9e:d3: e4:64:94:3d:5a:3f:21:c3:5e:22:66:50:20:f9:85: df:8d:91:d9:b8:92:9e:b6:26:95:b9:a4:50:60:38: b0:9f:4a:a5:5b:fd:1e:62:5a:04:ab:e2:bd:e5:b1: 51:56:d0:42:95:6d:0a:b8:1a:6e:30:67:b2:c7:5c: e8:64:e9:48:2e:90:a4:d4:8c:b7:6f:53:0a:6f:81: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3A:91:52:EB:FA:F0:F1:62:53:BE:FA:E4:64:F9:1D:73:B1:F0:1C X509v3 Authority Key Identifier: keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/CjqRUuv68PFiU7765GT5HXOx8Bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.4.154.0/24 Signature Algorithm: sha256WithRSAEncryption 12:44:0f:23:68:47:68:99:c2:2d:65:6e:cd:9c:71:fb:f5:86: eb:2b:99:1c:cd:7a:5b:9e:68:9f:f0:3c:df:e4:4d:da:28:e2: b6:ec:0a:4e:69:89:8e:f7:d9:e4:71:73:c1:b5:31:38:d6:f2: 21:10:5f:4c:26:6a:c4:08:71:08:31:fe:65:5e:d3:14:96:bb: 36:39:d6:f0:30:9b:ea:bf:64:aa:4f:97:6a:e7:24:06:96:59: 46:63:3e:4a:91:55:3b:f1:59:11:da:1c:5f:af:3d:6c:9c:d4: 6e:08:a8:62:59:e4:a0:6d:5e:e6:95:3b:d1:c2:c5:37:e7:d3: b2:05:84:a4:d9:77:17:6d:2c:90:03:b7:ca:60:ab:d2:26:e9: e7:a0:cd:ff:d2:43:09:a1:0a:3b:3a:d3:c9:9d:7c:29:21:7e: 3b:95:8b:35:ca:0e:3e:bf:19:e3:72:47:b7:45:bb:a1:08:b6: 67:01:e7:5e:5f:6e:83:e0:e5:92:eb:20:74:3f:7d:a5:61:73: 68:42:9c:79:5b:36:ac:7e:a8:bb:32:f0:8b:32:d6:77:c4:46: 81:e8:cd:34:36:5f:75:73:b1:24:0a:6a:d5:bf:2e:be:af:5c: 50:17:25:4d:70:91:65:0d:4b:d7:6b:5a:35:0b:2d:fc:c4:eb: 4b:24:7f:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266JfIA0Dbo6XoUHnAkTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MTFhYmM0YzA0NjhhYjI4OTFlYWFjYWRiYTBkYzAzNzc5 MzZmZDUwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTNhOTE1MmViZmFmMGYxNjI1M2JlZmFlNDY0ZjkxZDczYjFmMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61qO1Ze/ClVVqM7SmNRUcZ0w9I4e X0oJG21i5XBNm8qXuD9uZCb1gsYtSGirOuLtFMOJGihE4mLNzT4pj1dcyCQQsDfZ mFD8sGtOeTSsns37w9QT8wPDIxXwoiqcGpgPRaqcS6tJGV/LnOx3KoFwfTVgsrvy emCAaUF59HwSseQJVbTXUVAa7i2naBDkIK52d7BgTfz7T4Mh1TgZIs4tQNOxtA0W RE+V+chWYTUSBrbentPkZJQ9Wj8hw14iZlAg+YXfjZHZuJKetiaVuaRQYDiwn0ql W/0eYloEq+K95bFRVtBClW0KuBpuMGeyx1zoZOlILpCk1Iy3b1MKb4GiEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAo6kVLr+vDxYlO++uRk+R1zsfAcMB8GA1UdIwQY MBaAFNQRq8TARoqyiR6qytug3AN3k2/VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTIt YjBmNGI5YzM3ZTQ5LzEvQ2pxUlV1djY4UEZpVTc3NjVHVDVIWE94OEJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82MThlNTMtYWZjNC00MGRmLTg2MTItYjBmNGI5YzM3ZTQ5 LzEvMUJHcnhNQkdpcktKSHFySzI2RGNBM2VUYjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUQSaMA0G CSqGSIb3DQEBCwUAA4IBAQASRA8jaEdomcItZW7NnHH79YbrK5kczXpbnmif8Dzf 5E3aKOK27ApOaYmO99nkcXPBtTE41vIhEF9MJmrECHEIMf5lXtMUlrs2OdbwMJvq v2SqT5dq5yQGlllGYz5KkVU78VkR2hxfrz1snNRuCKhiWeSgbV7mlTvRwsU359Oy BYSk2XcXbSyQA7fKYKvSJunnoM3/0kMJoQo7OtPJnXwpIX47lYs1yg4+vxnjcke3 RbuhCLZnAedeX26D4OWS6yB0P32lYXNoQpx5Wzasfqi7MvCLMtZ3xEaB6M00Nl91 c7EkCmrVvy6+r1xQFyVNcJFlDUvXa1o1Cy38xOtLJH8i -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:28 2026 by rpki-client