This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/CwDjP9tnkLMqRQJExwbW5a8tb2c.roa File: CwDjP9tnkLMqRQJExwbW5a8tb2c.roa (raw, json) Hash identifier: Cvhm4+Ug1T3hSPp5fKBEvpgdxdZDIyd8JjxFJnRL+xc= Subject key identifier: 0B:00:E3:3F:DB:67:90:B3:2A:45:02:44:C7:06:D6:E5:AF:2D:6F:67 Certificate issuer: /CN=137f3372df57c814aba8b51a907861d92b9e4f55 Certificate serial: 019B7C124D958A8A58DB00FB549E7F07D279 Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/CwDjP9tnkLMqRQJExwbW5a8tb2c.roa Signing time: Fri 02 Jan 2026 00:18:52 +0000 ROA not before: Fri 02 Jan 2026 00:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209459 IP address blocks: 5.253.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:4d:95:8a:8a:58:db:00:fb:54:9e:7f:07:d2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55 Validity Not Before: Jan 2 00:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b00e33fdb6790b32a450244c706d6e5af2d6f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c6:c9:23:90:19:18:a1:66:97:d6:60:0c:2e: f3:4e:7a:09:b4:50:04:58:4b:70:b6:5f:a7:0e:f0: f3:10:7e:07:1c:a3:5e:59:33:9e:84:24:ad:67:bc: 80:64:91:8f:a1:4e:45:12:11:93:8b:3d:69:c2:df: 48:e6:f9:6f:3f:d5:d1:68:23:1c:a5:ae:8a:eb:ea: cd:55:f0:3a:93:34:f7:bb:77:03:a7:61:ce:70:dd: 41:81:40:e3:4e:5a:a8:b0:fe:a5:ee:5a:bb:16:96: d3:88:9c:a7:ea:db:e6:be:f4:b9:75:82:cb:56:7b: 1d:0d:79:ce:a7:a0:01:15:3b:07:3e:4c:0b:e2:99: bb:da:41:d5:87:28:db:88:f9:c1:9d:98:f6:5c:f5: c5:c5:b3:44:d6:ca:d2:83:b7:c3:83:c7:9e:f0:ea: 89:f4:e2:7e:56:93:7d:e3:ff:01:8b:c7:3d:3d:08: 46:96:7e:49:28:26:01:e5:4f:e1:6c:1a:81:23:63: 8f:0a:e5:b0:74:f0:8a:f6:43:5e:c1:e8:89:6a:08: ed:87:0c:a1:1d:9a:99:8a:49:9c:53:ca:f3:f2:5c: 12:7d:28:35:4c:fa:6e:63:e4:10:fe:82:66:2e:01: 37:a3:ec:99:d5:10:6c:e1:8f:dc:fa:68:ef:04:3e: 37:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:00:E3:3F:DB:67:90:B3:2A:45:02:44:C7:06:D6:E5:AF:2D:6F:67 X509v3 Authority Key Identifier: keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/CwDjP9tnkLMqRQJExwbW5a8tb2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.24.0/22 Signature Algorithm: sha256WithRSAEncryption 28:71:1f:0a:4d:5f:01:af:08:1a:d3:aa:d4:98:4c:47:66:83: 56:36:88:b7:11:26:c0:3c:26:cd:2d:3a:e0:84:67:9d:5e:bf: 98:5e:cb:ba:e8:d3:72:68:a0:79:86:c6:c8:5f:28:c7:3d:a6: a8:b2:26:98:c7:c0:5a:ad:53:d2:d9:32:c5:b3:47:22:9f:25: 0c:1a:0f:d0:93:94:c1:32:eb:61:8d:d0:a0:35:ae:dc:25:3f: 64:13:49:0a:6d:5a:12:63:2a:de:02:f8:6e:3b:fb:bd:68:72: 54:7b:5c:a7:06:a7:9c:1d:de:90:f1:bb:b8:a0:1a:81:04:28: f0:5a:25:ca:91:c2:3c:1a:8f:24:9c:73:73:a4:94:b4:a5:e4: 5d:23:f4:d7:26:5d:ca:02:e1:77:0b:50:70:0e:9c:7e:1c:11: 4b:ee:01:6c:0e:a4:d9:95:f9:98:5c:8a:f7:06:b1:83:53:b7: c3:9e:4c:c6:09:6a:28:9c:83:f5:88:6f:41:11:9b:b2:66:7f: f4:1b:80:55:2e:29:be:de:53:b7:bf:48:f9:eb:9e:58:b0:c3: 12:fc:08:6e:b3:15:ac:cb:e1:e0:b1:0f:bf:56:82:27:ab:10: 34:02:8c:1d:0d:5b:b8:67:9a:98:f3:e9:34:f7:55:25:02:a7: 81:f6:be:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Ek2ViopY2wD7VJ5/B9J5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzN2YzMzcyZGY1N2M4MTRhYmE4YjUxYTkwNzg2MWQ5MmI5 ZTRmNTUwHhcNMjYwMTAyMDAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjAwZTMzZmRiNjc5MGIzMmE0NTAyNDRjNzA2ZDZlNWFmMmQ2ZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8bJI5AZGKFml9ZgDC7zTnoJtFAE WEtwtl+nDvDzEH4HHKNeWTOehCStZ7yAZJGPoU5FEhGTiz1pwt9I5vlvP9XRaCMc pa6K6+rNVfA6kzT3u3cDp2HOcN1BgUDjTlqosP6l7lq7FpbTiJyn6tvmvvS5dYLL VnsdDXnOp6ABFTsHPkwL4pm72kHVhyjbiPnBnZj2XPXFxbNE1srSg7fDg8ee8OqJ 9OJ+VpN94/8Bi8c9PQhGln5JKCYB5U/hbBqBI2OPCuWwdPCK9kNeweiJagjthwyh HZqZikmcU8rz8lwSfSg1TPpuY+QQ/oJmLgE3o+yZ1RBs4Y/c+mjvBD43OQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsA4z/bZ5CzKkUCRMcG1uWvLW9nMB8GA1UdIwQY MBaAFBN/M3LfV8gUq6i1GpB4Ydkrnk9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMt YTIyNGZlZmFjMjE4LzEvQ3dEalA5dG5rTE1xUlFKRXh3Ylc1YTh0YjJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84YjE0MWItNDk0ZS00NjZiLWEyMmMtYTIyNGZlZmFjMjE4 LzEvRTM4emN0OVh5QlNycUxVYWtIaGgyU3VlVDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBf0YMA0G CSqGSIb3DQEBCwUAA4IBAQAocR8KTV8Brwga06rUmExHZoNWNoi3ESbAPCbNLTrg hGedXr+YXsu66NNyaKB5hsbIXyjHPaaosiaYx8BarVPS2TLFs0cinyUMGg/Qk5TB MuthjdCgNa7cJT9kE0kKbVoSYyreAvhuO/u9aHJUe1ynBqecHd6Q8bu4oBqBBCjw WiXKkcI8Go8knHNzpJS0peRdI/TXJl3KAuF3C1BwDpx+HBFL7gFsDqTZlfmYXIr3 BrGDU7fDnkzGCWoonIP1iG9BEZuyZn/0G4BVLim+3lO3v0j5655YsMMS/AhusxWs y+HgsQ+/VoInqxA0AowdDVu4Z5qY8+k091UlAqeB9r4n -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:39 2026 by rpki-client