This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa File: Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa (raw, json) Hash identifier: L+v38GzXEltb5Lhi/QksoQvn5l/DyY6ZKL5vW/SAZU0= Subject key identifier: 0A:3E:69:E2:6F:27:05:21:EA:14:8E:DC:21:74:34:8F:15:5A:66:AB Certificate issuer: /CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Certificate serial: 019BB34EA4D2555F8BEC22093A9A2181C7D2 Authority key identifier: 30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa Signing time: Mon 12 Jan 2026 17:43:54 +0000 ROA not before: Mon 12 Jan 2026 17:43:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1680 IP address blocks: 193.110.180.0/23 maxlen: 24 2a14:dc00::/48 maxlen: 48 2a14:dc00:1::/48 maxlen: 48 2a14:dc00:2::/48 maxlen: 48 2a14:dc00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.mft rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:4e:a4:d2:55:5f:8b:ec:22:09:3a:9a:21:81:c7:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a34f9d1dbd20aa87fb0f62bd2b6c5e30c614a2 Validity Not Before: Jan 12 17:43:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a3e69e26f270521ea148edc2174348f155a66ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:fc:aa:c8:8a:cf:26:34:0a:cb:70:6d:aa: b0:98:b0:a3:e2:04:bf:9b:05:f4:aa:13:40:29:4b: 0c:56:5d:04:61:3e:2e:b8:e5:62:f2:7d:cd:73:5e: 92:14:e8:42:a0:06:69:59:af:1d:b8:be:48:28:79: 0d:94:1e:eb:5f:7b:75:bf:db:e4:17:fe:23:fe:d9: 9c:94:ab:d5:24:be:29:de:98:0c:f2:bf:95:17:af: 76:34:87:c2:16:dd:81:39:ed:f0:7b:12:06:61:dd: 0a:94:cb:96:6b:1b:67:9f:31:60:34:1e:28:56:25: 98:b9:2d:22:64:98:9c:d9:41:b8:46:ab:cf:2b:65: 3d:aa:e1:56:56:db:f1:51:fb:e1:13:e7:6d:f9:75: c1:29:86:e4:87:29:95:ab:75:ba:a4:27:0b:64:96: 24:a1:f4:e8:5c:00:89:26:f1:c4:25:fd:55:44:5a: 64:09:60:35:93:ad:f9:ba:2a:21:8d:17:08:07:64: c5:82:e0:49:fb:0f:cb:03:b9:a4:53:be:f5:91:f4: 53:5a:6d:71:96:cc:5a:65:c8:b7:b7:d2:c4:e6:7b: 7c:d0:ef:da:6e:03:96:ae:cf:46:a0:e9:50:d8:ce: f7:3a:51:d7:2c:50:3a:82:ee:3d:d0:01:d8:c2:a4: 84:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:69:E2:6F:27:05:21:EA:14:8E:DC:21:74:34:8F:15:5A:66:AB X509v3 Authority Key Identifier: keyid:30:A3:4F:9D:1D:BD:20:AA:87:FB:0F:62:BD:2B:6C:5E:30:C6:14:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKNPnR29IKqH-w9ivStsXjDGFKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/Cj5p4m8nBSHqFI7cIXQ0jxVaZqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee4732-c3ba-4088-a5fa-eb653d3622bb/1/MKNPnR29IKqH-w9ivStsXjDGFKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.110.180.0/23 IPv6: 2a14:dc00::/46 Signature Algorithm: sha256WithRSAEncryption 0f:d0:f7:28:0e:48:99:fc:35:94:53:77:dd:53:92:cf:5e:38: a3:d9:e1:65:05:9a:ed:22:d3:15:3e:16:23:cf:e0:22:65:a3: 4e:b2:d0:64:0d:4a:9d:48:15:dd:c2:b3:2e:29:2c:09:3a:24: 84:f9:81:c8:92:62:bc:0b:7d:09:34:06:3b:90:c7:4a:8d:06: 9d:e1:c5:ce:1c:5d:e5:c8:70:3d:5a:d5:4e:ee:de:fa:76:fe: ff:b7:03:1b:9a:c9:66:64:73:df:a9:e6:88:c9:28:a7:49:5c: 20:42:6e:cb:0e:72:4a:c4:92:d5:21:53:ea:da:23:0e:ff:72: 3a:ee:ba:4f:72:c6:ac:88:a4:d4:b9:7b:9a:f9:75:d7:38:ba: be:21:f9:93:5f:78:82:8d:e5:0f:9d:99:0e:54:c7:34:4d:88: 63:61:61:cd:ce:29:8f:d0:9e:ce:4e:c8:8e:f9:8e:f0:45:c9: 97:35:dd:8b:65:18:fc:7e:2d:b1:5c:b1:39:dd:35:8e:ae:2a: cd:df:f8:2e:e5:1f:f6:82:a8:dc:d1:3f:de:c5:2c:5d:c6:0b: a7:20:64:49:2a:a9:87:ca:25:55:bd:63:ca:c5:0b:c0:29:4d: 53:64:a2:36:1a:57:94:37:07:cf:51:31:ad:08:33:5a:35:dd: f0:57:b3:76 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZuzTqTSVV+L7CIJOpohgcfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTM0ZjlkMWRiZDIwYWE4N2ZiMGY2MmJkMmI2YzVlMzBj NjE0YTIwHhcNMjYwMTEyMTc0MzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTNlNjllMjZmMjcwNTIxZWExNDhlZGMyMTc0MzQ4ZjE1NWE2NmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGr8qsiKzyY0CstwbaqwmLCj4gS/ mwX0qhNAKUsMVl0EYT4uuOVi8n3Nc16SFOhCoAZpWa8duL5IKHkNlB7rX3t1v9vk F/4j/tmclKvVJL4p3pgM8r+VF692NIfCFt2BOe3wexIGYd0KlMuWaxtnnzFgNB4o ViWYuS0iZJic2UG4RqvPK2U9quFWVtvxUfvhE+dt+XXBKYbkhymVq3W6pCcLZJYk ofToXACJJvHEJf1VRFpkCWA1k635uiohjRcIB2TFguBJ+w/LA7mkU771kfRTWm1x lsxaZci3t9LE5nt80O/abgOWrs9GoOlQ2M73OlHXLFA6gu490AHYwqSERwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAo+aeJvJwUh6hSO3CF0NI8VWmarMB8GA1UdIwQY MBaAFDCjT50dvSCqh/sPYr0rbF4wxhSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEt ZWI2NTNkMzYyMmJiLzEvQ2o1cDRtOG5CU0hxRkk3Y0lYUTBqeFZhWnFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lZTQ3MzItYzNiYS00MDg4LWE1ZmEtZWI2NTNkMzYyMmJi LzEvTUtOUG5SMjlJS3FILXc5aXZTdHNYakRHRktJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwW60MA8E AgACMAkDBwIqFNwAAAAwDQYJKoZIhvcNAQELBQADggEBAA/Q9ygOSJn8NZRTd91T ks9eOKPZ4WUFmu0i0xU+FiPP4CJlo06y0GQNSp1IFd3Csy4pLAk6JIT5gciSYrwL fQk0BjuQx0qNBp3hxc4cXeXIcD1a1U7u3vp2/v+3AxuayWZkc9+p5ojJKKdJXCBC bssOckrEktUhU+raIw7/cjruuk9yxqyIpNS5e5r5ddc4ur4h+ZNfeIKN5Q+dmQ5U xzRNiGNhYc3OKY/Qns5OyI75jvBFyZc13YtlGPx+LbFcsTndNY6uKs3f+C7lH/aC qNzRP97FLF3GC6cgZEkqqYfKJVW9Y8rFC8ApTVNkojYaV5Q3B89RMa0IM1o13fBX s3Y= -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:14 2026 by rpki-client