This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/chrWEMSnsHQ5qDX81HcnPTBq_Y0.roa File: chrWEMSnsHQ5qDX81HcnPTBq_Y0.roa (raw, json) Hash identifier: 4nRRY84JoOkyqb8gxvuK3rCxwUm9wXE1GSVojNKVH70= Subject key identifier: 72:1A:D6:10:C4:A7:B0:74:39:A8:35:FC:D4:77:27:3D:30:6A:FD:8D Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39075E3828739774C7DF1477E63ED5 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/chrWEMSnsHQ5qDX81HcnPTBq_Y0.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39131 IP address blocks: 194.190.250.0/23 maxlen: 24 194.190.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:5e:38:28:73:97:74:c7:df:14:77:e6:3e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=721ad610c4a7b07439a835fcd477273d306afd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:fb:a0:58:57:b1:4f:f9:93:ce:09:9b:ca: 27:4e:5e:b9:a9:9b:35:cb:bd:a5:9f:47:05:90:f6: d4:dd:9f:90:75:c2:f3:86:8e:a0:81:9f:53:47:c0: 88:56:0b:e0:07:fa:bb:7f:d6:37:a2:62:ac:08:7c: 58:75:b8:05:da:98:38:da:12:44:6b:5f:76:4c:5d: 8a:2f:66:b1:fb:37:d7:42:8b:89:ae:79:dd:52:fc: 6f:47:37:93:95:30:ae:0b:5e:35:8c:57:74:d0:4b: a8:5d:6c:4e:30:df:f5:bb:8a:bf:f1:11:bd:6f:c8: fd:6a:88:11:db:35:69:8d:8d:2d:60:8c:31:b6:e3: 08:18:38:21:91:a9:0a:13:0e:55:21:6d:dc:b1:b5: 6c:c5:96:b7:e0:b1:81:97:69:d9:56:07:6b:8d:a2: 81:23:8a:46:72:a3:d3:63:94:1f:c2:23:20:de:1f: aa:9e:14:6e:7e:6e:cd:a0:2c:1a:76:64:8d:da:1b: d6:e9:f2:93:ae:ef:ac:cd:86:9e:c7:af:6b:ec:17: a3:b1:93:bf:e6:3f:1e:f9:e0:62:08:67:23:a8:8e: 50:a4:51:cb:d6:d3:f9:75:b9:51:31:8a:e2:79:a0: 8e:5b:d8:ab:aa:8f:f6:8e:f5:f4:e7:a3:f6:c7:a8: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1A:D6:10:C4:A7:B0:74:39:A8:35:FC:D4:77:27:3D:30:6A:FD:8D X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/chrWEMSnsHQ5qDX81HcnPTBq_Y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.190.250.0-194.190.253.255 Signature Algorithm: sha256WithRSAEncryption 5b:48:33:c3:c3:3d:11:8c:a8:13:8e:a2:9a:7e:13:17:d4:ee: a1:2c:4b:59:9f:df:8d:f4:85:eb:93:d1:5b:49:6a:ca:e7:56: f7:65:44:61:99:13:f0:5f:03:86:b3:1d:7f:4e:91:18:f2:2e: 2c:9b:f1:cf:d3:f4:d8:0b:2e:53:10:4b:8d:d0:33:52:d8:a8: 3b:db:1c:be:b9:58:e4:34:40:e7:23:a4:3a:87:0f:fa:ae:b3: 60:ce:c1:53:96:6d:a6:30:53:71:e1:91:09:8b:2f:47:79:a4: 96:36:23:dc:02:77:89:0c:b2:b6:0d:14:52:26:62:fa:41:5e: 88:75:08:27:b4:53:39:3f:58:35:d6:bb:a8:e8:c9:b7:ad:93: 9c:cc:4f:1d:9c:09:10:20:48:28:5a:9e:04:08:34:75:d6:2d: 05:3d:91:67:1c:7c:0d:06:5b:56:23:d1:d9:a3:0c:60:6a:df: d4:0c:9a:32:5c:70:4f:41:5d:e4:11:18:3a:93:c9:b7:3d:88: c7:e9:f6:64:bb:63:17:12:6d:86:1f:90:b5:97:3c:c4:ad:4d: 68:ca:22:ca:9a:a5:d4:9c:40:24:e6:d9:46:87:c9:71:e0:f1: c6:e3:6f:de:b2:fa:26:8f:b6:32:60:d5:01:a6:93:88:e3:92: fe:60:2d:87 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+OQdeOChzl3TH3xR35j7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjFhZDYxMGM0YTdiMDc0MzlhODM1ZmNkNDc3MjczZDMwNmFmZDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCX7oFhXsU/5k84Jm8onTl65qZs1 y72ln0cFkPbU3Z+QdcLzho6ggZ9TR8CIVgvgB/q7f9Y3omKsCHxYdbgF2pg42hJE a192TF2KL2ax+zfXQouJrnndUvxvRzeTlTCuC141jFd00EuoXWxOMN/1u4q/8RG9 b8j9aogR2zVpjY0tYIwxtuMIGDghkakKEw5VIW3csbVsxZa34LGBl2nZVgdrjaKB I4pGcqPTY5QfwiMg3h+qnhRufm7NoCwadmSN2hvW6fKTru+szYaex69r7BejsZO/ 5j8e+eBiCGcjqI5QpFHL1tP5dblRMYrieaCOW9irqo/2jvX056P2x6ilPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHIa1hDEp7B0Oag1/NR3Jz0wav2NMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvY2hyV0VNU25zSFE1cURYODFIY25QVEJxX1kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCvvoD BAHCvvwwDQYJKoZIhvcNAQELBQADggEBAFtIM8PDPRGMqBOOopp+ExfU7qEsS1mf 3430heuT0VtJasrnVvdlRGGZE/BfA4azHX9OkRjyLiyb8c/T9NgLLlMQS43QM1LY qDvbHL65WOQ0QOcjpDqHD/qus2DOwVOWbaYwU3HhkQmLL0d5pJY2I9wCd4kMsrYN FFImYvpBXoh1CCe0Uzk/WDXWu6joybetk5zMTx2cCRAgSChangQINHXWLQU9kWcc fA0GW1Yj0dmjDGBq39QMmjJccE9BXeQRGDqTybc9iMfp9mS7YxcSbYYfkLWXPMSt TWjKIsqapdScQCTm2UaHyXHg8cbjb96y+iaPtjJg1QGmk4jjkv5gLYc= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:08 2026 by rpki-client