This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa File: CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa (raw, json) Hash identifier: kcWbbVv8ASdYvi8EuyOv3tMh0xXxdFL5jH6YworqpiU= Subject key identifier: 08:79:76:7F:3F:F9:1E:7B:02:AC:6B:C3:8C:BB:12:6C:CD:2C:C6:5F Certificate issuer: /CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642 Certificate serial: 019B7F813CB6159AAFC54EDBD16605447467 Authority key identifier: 55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa Signing time: Fri 02 Jan 2026 16:18:54 +0000 ROA not before: Fri 02 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20910 IP address blocks: 185.242.184.0/24 maxlen: 24 2a13:6000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.mft rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:3c:b6:15:9a:af:c5:4e:db:d1:66:05:44:74:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553f4bc416639a7e1b6c4f0199e02e3160a1e642 Validity Not Before: Jan 2 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0879767f3ff91e7b02ac6bc38cbb126ccd2cc65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:71:37:5f:fa:12:45:0e:21:e7:62:a3:06:f2: 7e:fc:89:d5:4a:4b:20:22:56:23:95:dd:61:ea:e5: f3:a7:02:32:ce:56:4a:e3:d8:27:b8:33:ce:0a:6f: 3d:cf:b2:54:fa:d2:bc:71:4b:aa:e2:3c:06:9e:23: 79:89:52:10:7d:53:3c:8c:72:1d:ed:53:c2:5e:59: 7a:5f:61:6f:16:26:65:df:c5:0a:c1:54:4b:d6:32: 8d:96:e0:59:46:9c:61:ef:ef:f9:35:c2:d7:88:3f: 82:f8:8c:66:f3:b7:b9:6f:bb:24:b9:03:67:9c:6f: 85:3c:ce:89:c5:a3:e6:3b:d2:9a:49:2f:c1:cd:37: df:ad:6c:3a:af:54:3c:9f:d5:27:5f:e2:4c:69:de: be:d8:f8:7c:d3:e5:dc:06:a7:d1:f9:89:9b:83:55: 74:c8:6d:04:39:9a:0b:08:7b:21:f1:23:94:30:8f: 87:bd:7e:5f:be:d0:4d:59:b3:b6:27:67:10:13:de: 83:40:cf:bc:17:8c:68:30:0f:8e:2e:dc:76:c7:83: a0:3e:c9:b3:e1:b8:f2:56:ac:74:3c:4e:f4:0f:48: 60:2f:e6:32:96:ca:dc:9b:e1:b6:de:cb:8c:60:18: 69:d6:ea:33:3b:65:c1:a3:99:0e:58:0c:50:16:65: 13:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:79:76:7F:3F:F9:1E:7B:02:AC:6B:C3:8C:BB:12:6C:CD:2C:C6:5F X509v3 Authority Key Identifier: keyid:55:3F:4B:C4:16:63:9A:7E:1B:6C:4F:01:99:E0:2E:31:60:A1:E6:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9LxBZjmn4bbE8BmeAuMWCh5kI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/CHl2fz_5HnsCrGvDjLsSbM0sxl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d119f6-880d-4f5b-b079-5ddafb5954ba/1/VT9LxBZjmn4bbE8BmeAuMWCh5kI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.184.0/24 IPv6: 2a13:6000::/29 Signature Algorithm: sha256WithRSAEncryption 4a:67:1f:15:06:67:59:d0:df:29:f9:98:1b:d0:a6:02:39:0b: 0d:eb:15:1c:96:46:c7:db:0b:c5:90:c0:a4:8d:cf:2c:d4:69: 06:7f:5a:ee:01:30:38:98:db:c3:03:ad:4a:a5:0b:53:1b:7a: 89:c9:7c:66:38:4c:9f:73:5a:0c:fc:5a:53:4a:e7:6d:75:eb: 2a:dd:49:41:be:71:0a:c7:e8:c5:22:2e:ad:ec:50:cd:d0:26: 1f:c3:79:a0:c5:ab:11:1b:f9:3a:41:be:77:f4:32:51:05:2b: be:d7:3e:30:c4:dd:5a:50:cb:0b:f2:98:93:fb:93:fe:21:23: fc:8c:e4:08:dd:c9:c1:11:d8:4a:b8:da:9d:ee:64:90:a9:17: f8:99:28:d0:22:34:40:b0:f9:cd:02:b7:63:cf:19:27:c5:2e: f8:f5:c9:d2:61:34:a1:78:60:5c:3c:97:f9:53:b2:f0:17:03: 9d:5e:ca:ac:00:ee:c4:51:c8:37:e8:02:5c:ea:fb:49:99:92: 7a:f5:a1:8c:16:fb:df:63:f9:59:97:20:a2:fa:05:a8:ce:72: 51:43:c4:77:51:33:1c:69:8f:20:c9:cf:47:8b:6d:77:dc:05: ef:8f:fb:00:18:14:1e:21:9a:38:5b:fd:9b:75:98:41:56:bc: 46:9c:17:82 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/gTy2FZqvxU7b0WYFRHRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2Y0YmM0MTY2MzlhN2UxYjZjNGYwMTk5ZTAyZTMxNjBh MWU2NDIwHhcNMjYwMTAyMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODc5NzY3ZjNmZjkxZTdiMDJhYzZiYzM4Y2JiMTI2Y2NkMmNjNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHE3X/oSRQ4h52KjBvJ+/InVSksg IlYjld1h6uXzpwIyzlZK49gnuDPOCm89z7JU+tK8cUuq4jwGniN5iVIQfVM8jHId 7VPCXll6X2FvFiZl38UKwVRL1jKNluBZRpxh7+/5NcLXiD+C+Ixm87e5b7skuQNn nG+FPM6JxaPmO9KaSS/BzTffrWw6r1Q8n9UnX+JMad6+2Ph80+XcBqfR+Ymbg1V0 yG0EOZoLCHsh8SOUMI+HvX5fvtBNWbO2J2cQE96DQM+8F4xoMA+OLtx2x4OgPsmz 4bjyVqx0PE70D0hgL+Yylsrcm+G23suMYBhp1uozO2XBo5kOWAxQFmUTdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAh5dn8/+R57Aqxrw4y7EmzNLMZfMB8GA1UdIwQY MBaAFFU/S8QWY5p+G2xPAZngLjFgoeZCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzkt NWRkYWZiNTk1NGJhLzEvQ0hsMmZ6XzVIbnNDckd2RGpMc1NiTTBzeGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kMTE5ZjYtODgwZC00ZjViLWIwNzktNWRkYWZiNTk1NGJh LzEvVlQ5THhCWmptbjRiYkU4Qm1lQXVNV0NoNWtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAufK4MA0E AgACMAcDBQMqE2AAMA0GCSqGSIb3DQEBCwUAA4IBAQBKZx8VBmdZ0N8p+Zgb0KYC OQsN6xUclkbH2wvFkMCkjc8s1GkGf1ruATA4mNvDA61KpQtTG3qJyXxmOEyfc1oM /FpTSudtdesq3UlBvnEKx+jFIi6t7FDN0CYfw3mgxasRG/k6Qb539DJRBSu+1z4w xN1aUMsL8piT+5P+ISP8jOQI3cnBEdhKuNqd7mSQqRf4mSjQIjRAsPnNArdjzxkn xS749cnSYTSheGBcPJf5U7LwFwOdXsqsAO7EUcg36AJc6vtJmZJ69aGMFvvfY/lZ lyCi+gWoznJRQ8R3UTMcaY8gyc9Hi2133AXvj/sAGBQeIZo4W/2bdZhBVrxGnBeC -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:24 2026 by rpki-client