This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa File: ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa (raw, json) Hash identifier: ocJ3ZhxBFEr5BinzaB5e1jdT52gEvEi1z6bbG+QW4Ns= Subject key identifier: 72:1D:06:7F:E2:E7:90:FA:F7:C4:BA:65:06:D2:23:43:64:8C:36:CA Certificate issuer: /CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Certificate serial: 019B7D5D00B030919CA1684AA1652A425235 Authority key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199231 IP address blocks: 185.4.228.0/22 maxlen: 22 2a02:c5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:00:b0:30:91:9c:a1:68:4a:a1:65:2a:42:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=721d067fe2e790faf7c4ba6506d22343648c36ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:35:bf:2d:54:a8:ac:61:fb:6b:77:8b:30:04: 11:d4:a0:98:88:73:6b:9e:1a:06:79:f9:59:14:7d: 98:52:70:57:a8:94:4f:f3:79:13:40:c4:af:b9:da: 86:d3:2a:14:23:6f:c6:d1:8f:53:57:2c:bb:98:c6: 19:5e:cf:9a:35:7a:31:7a:7a:92:31:1e:4c:96:37: 17:f9:96:c7:6a:46:34:f3:e1:9b:c3:6c:9a:91:90: 91:09:a0:e9:2f:1a:f6:02:1e:1c:a5:c9:f5:32:0c: cd:65:95:d3:33:bd:99:22:4f:a0:b6:ac:4f:c9:99: ec:89:0c:90:2b:f2:9d:61:75:15:c5:5e:ce:ce:ed: 94:d5:3f:82:80:cd:33:1b:99:1d:74:f1:92:1e:9c: 3a:ac:0f:a2:2c:ec:53:00:d7:e9:0f:78:1e:c1:a8: ed:5e:63:64:5e:13:b4:dd:5b:73:5a:8a:f8:da:a9: 77:7c:d7:43:e2:c7:e3:94:6c:63:7b:16:b2:93:01: bc:a5:16:90:20:fa:6d:ea:4e:49:87:48:48:e1:a2: aa:26:92:8c:99:c9:0f:6c:4c:e4:02:4f:57:a8:14: c2:93:fe:b1:92:cf:23:b7:3b:94:57:f6:80:77:ee: 05:73:15:77:41:0d:18:c2:57:6a:18:25:ae:82:e8: 09:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1D:06:7F:E2:E7:90:FA:F7:C4:BA:65:06:D2:23:43:64:8C:36:CA X509v3 Authority Key Identifier: keyid:9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/ch0Gf-LnkPr3xLplBtIjQ2SMNso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.228.0/22 IPv6: 2a02:c5c0::/29 Signature Algorithm: sha256WithRSAEncryption 49:1c:88:ef:a8:2e:be:00:e2:68:1b:f0:de:6f:12:94:f0:d1: d6:0a:9a:23:0f:18:9c:a1:d3:7f:16:97:73:ba:8c:43:28:63: 22:e6:fd:de:3a:39:59:30:11:f7:61:d0:fd:69:e8:d7:36:84: 3c:ad:41:0e:b5:46:a0:a0:ef:c9:d3:c7:7d:30:08:d1:31:62: 12:9a:28:ba:d5:68:4c:d8:85:99:ee:b8:82:e1:36:9b:47:89: 15:51:59:af:9e:d3:f2:71:b8:6c:44:4f:35:b1:c4:dc:1e:71: 8e:60:9f:ff:35:81:18:5d:07:81:13:51:0f:eb:56:65:14:c5: 4d:34:39:af:86:7b:48:26:2a:17:a5:7c:8b:4a:23:89:67:27: 67:2a:c4:08:f4:ea:d9:01:ed:69:2a:11:dd:98:79:50:2d:de: 6f:9b:de:28:d5:8d:2d:dd:1a:0b:0e:62:d7:31:e0:22:90:fa: c9:40:a1:b0:ca:1f:5f:18:91:eb:ac:d9:d2:9a:0e:4b:5b:3e: 99:bd:33:8a:dd:3c:35:cb:31:5f:89:2a:d7:8d:2f:75:bd:b0: 68:2d:97:ca:29:31:9c:76:af:c6:e7:e5:e9:b9:83:ce:b4:e3: 5e:70:48:ec:b8:be:97:cf:70:2b:2f:35:7d:8f:cd:aa:22:cb: 72:86:22:a8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XQCwMJGcoWhKoWUqQlI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMmJjM2M1NTY0ZDQzNDM4MWNiNzhiYTQ3YWQ1OGJlNGQz ZGVhYTgwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjFkMDY3ZmUyZTc5MGZhZjdjNGJhNjUwNmQyMjM0MzY0OGMzNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjW/LVSorGH7a3eLMAQR1KCYiHNr nhoGeflZFH2YUnBXqJRP83kTQMSvudqG0yoUI2/G0Y9TVyy7mMYZXs+aNXoxenqS MR5MljcX+ZbHakY08+Gbw2yakZCRCaDpLxr2Ah4cpcn1MgzNZZXTM72ZIk+gtqxP yZnsiQyQK/KdYXUVxV7Ozu2U1T+CgM0zG5kddPGSHpw6rA+iLOxTANfpD3gewajt XmNkXhO03VtzWor42ql3fNdD4sfjlGxjexaykwG8pRaQIPpt6k5Jh0hI4aKqJpKM mckPbEzkAk9XqBTCk/6xks8jtzuUV/aAd+4FcxV3QQ0YwldqGCWugugJvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHIdBn/i55D698S6ZQbSI0NkjDbKMB8GA1UdIwQY MBaAFJ8rw8VWTUNDgct4uketWL5NPeqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1Mjct NTU0MjYzODE5NTNjLzEvY2gwR2YtTG5rUHIzeExwbEJ0SWpRMlNNTnNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8zNmJiNmQtZmM3My00NDQ5LWE1MjctNTU0MjYzODE5NTNj LzEvbnl2RHhWWk5RME9CeTNpNlI2MVl2azA5NnFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQTkMA0E AgACMAcDBQMqAsXAMA0GCSqGSIb3DQEBCwUAA4IBAQBJHIjvqC6+AOJoG/DebxKU 8NHWCpojDxicodN/FpdzuoxDKGMi5v3eOjlZMBH3YdD9aejXNoQ8rUEOtUagoO/J 08d9MAjRMWISmii61WhM2IWZ7riC4TabR4kVUVmvntPycbhsRE81scTcHnGOYJ// NYEYXQeBE1EP61ZlFMVNNDmvhntIJioXpXyLSiOJZydnKsQI9OrZAe1pKhHdmHlQ Ld5vm94o1Y0t3RoLDmLXMeAikPrJQKGwyh9fGJHrrNnSmg5LWz6ZvTOK3Tw1yzFf iSrXjS91vbBoLZfKKTGcdq/G5+XpuYPOtONecEjsuL6Xz3ArLzV9j82qIstyhiKo -----END CERTIFICATE-----Generated at Tue Jan 13 08:07:53 2026 by rpki-client