This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/CJjsxGugLLvFbEHWxKghiGCE6lc.roa File: CJjsxGugLLvFbEHWxKghiGCE6lc.roa (raw, json) Hash identifier: cOhc+r4MNkPP5359GE1QtRWPIxNlJ+rMixUIriIgwqM= Subject key identifier: 08:98:EC:C4:6B:A0:2C:BB:C5:6C:41:D6:C4:A8:21:88:60:84:EA:57 Certificate issuer: /CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09 Certificate serial: 019B7CEDF83B45237EB811A06839ED42AE4D Authority key identifier: 3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/CJjsxGugLLvFbEHWxKghiGCE6lc.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200802 IP address blocks: 185.95.104.0/24 maxlen: 24 185.95.105.0/24 maxlen: 24 185.95.106.0/24 maxlen: 24 185.95.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.mft rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f8:3b:45:23:7e:b8:11:a0:68:39:ed:42:ae:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b7dc3d022828e4f5b36bdef7a18b0bb0cfbae09 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0898ecc46ba02cbbc56c41d6c4a821886084ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:74:e8:d4:17:a6:c6:f3:dc:39:fb:e3:eb: 1c:31:b5:50:d9:0a:25:48:b5:c1:27:23:f3:e1:fa: 25:d1:6f:c3:b0:ee:ac:eb:f1:4c:76:39:9c:ec:18: 45:2a:78:cf:48:06:f1:62:46:41:69:1c:40:72:ce: 54:9d:90:0d:6e:e5:97:59:1d:58:32:b7:f0:0c:13: 78:dd:e0:6c:b9:4f:ac:42:cd:5b:07:01:e6:09:53: ae:9c:24:63:64:54:3a:cc:4b:8e:e4:4c:ee:fe:88: cb:a7:b2:63:5c:ae:b6:cd:f9:2b:24:3c:93:89:44: d2:e8:a0:45:02:8b:92:f6:24:0a:19:c5:ba:5d:f5: 3b:7e:4b:81:cc:ee:52:1f:13:75:f4:42:53:4e:2e: 35:7e:82:f1:b3:c5:a9:30:fc:ce:95:1f:29:6c:60: 59:6e:e3:ea:a6:25:88:db:2f:eb:40:81:66:f5:2b: dd:da:01:c4:02:72:20:f5:1b:7b:71:ec:dd:5f:c2: 35:2c:6e:fb:09:74:56:29:0d:56:81:79:64:15:fb: f7:0f:ba:c7:29:fe:ab:52:45:f5:c5:a7:27:b6:96: c0:c1:2a:ec:a3:e3:f4:14:b8:02:d5:12:3c:4d:0d: 41:48:9c:6f:5e:63:ad:f9:3f:71:71:05:92:d7:ae: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:EC:C4:6B:A0:2C:BB:C5:6C:41:D6:C4:A8:21:88:60:84:EA:57 X509v3 Authority Key Identifier: keyid:3B:7D:C3:D0:22:82:8E:4F:5B:36:BD:EF:7A:18:B0:BB:0C:FB:AE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O33D0CKCjk9bNr3vehiwuwz7rgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/CJjsxGugLLvFbEHWxKghiGCE6lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/4ef02c-8f8d-46e3-8d0b-71948e3c9ad4/1/O33D0CKCjk9bNr3vehiwuwz7rgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.95.104.0/22 Signature Algorithm: sha256WithRSAEncryption 19:06:64:0e:39:51:8c:cc:6b:f6:6d:ba:09:f5:ab:bd:6d:94: 61:aa:5f:08:23:e5:10:7f:15:59:0c:b8:1b:10:27:a6:39:72: ef:b3:21:87:84:ff:b5:f9:91:3e:6f:f8:f3:89:21:bd:52:55: f1:29:7f:12:fc:87:42:7e:07:cf:78:85:ba:32:13:40:6f:53: d0:8c:39:2a:d4:41:6d:39:80:d2:0d:cd:9d:d0:c6:48:4a:e5: 61:cd:aa:3f:d2:4e:7d:83:47:a9:cf:05:b5:0b:7b:12:a7:b4: 02:33:00:76:71:df:89:d0:d4:02:60:67:b4:52:31:24:4a:67: 31:bb:4b:05:73:cc:59:12:4c:b9:1c:63:5d:9c:0e:aa:27:9f: 72:a3:42:79:a4:1e:9e:12:90:03:22:3d:f3:0f:2f:03:f4:af: 40:0c:d9:7b:46:f1:1d:e3:f7:b9:8d:9e:38:98:05:af:70:27: 7f:c6:26:e2:24:83:93:ba:3e:bf:11:7b:9b:30:79:8b:6a:9e: da:3e:9b:5c:11:dc:c5:85:ae:a1:b4:51:f7:ab:43:3e:da:98: b8:ae:c2:16:a4:ad:87:50:ea:22:a5:ee:e5:cc:14:c7:a9:45: 71:8b:07:9f:df:5f:66:cb:23:3f:c1:46:11:84:0e:98:bf:73: 35:ed:46:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87fg7RSN+uBGgaDntQq5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiN2RjM2QwMjI4MjhlNGY1YjM2YmRlZjdhMThiMGJiMGNm YmFlMDkwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODk4ZWNjNDZiYTAyY2JiYzU2YzQxZDZjNGE4MjE4ODYwODRlYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4F06NQXpsbz3Dn74+scMbVQ2Qol SLXBJyPz4fol0W/DsO6s6/FMdjmc7BhFKnjPSAbxYkZBaRxAcs5UnZANbuWXWR1Y MrfwDBN43eBsuU+sQs1bBwHmCVOunCRjZFQ6zEuO5Ezu/ojLp7JjXK62zfkrJDyT iUTS6KBFAouS9iQKGcW6XfU7fkuBzO5SHxN19EJTTi41foLxs8WpMPzOlR8pbGBZ buPqpiWI2y/rQIFm9Svd2gHEAnIg9Rt7cezdX8I1LG77CXRWKQ1WgXlkFfv3D7rH Kf6rUkX1xacntpbAwSrso+P0FLgC1RI8TQ1BSJxvXmOt+T9xcQWS167dNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAiY7MRroCy7xWxB1sSoIYhghOpXMB8GA1UdIwQY MBaAFDt9w9Aigo5PWza973oYsLsM+64JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGIt NzE5NDhlM2M5YWQ0LzEvQ0pqc3hHdWdMTHZGYkVIV3hLZ2hpR0NFNmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80ZWYwMmMtOGY4ZC00NmUzLThkMGItNzE5NDhlM2M5YWQ0 LzEvTzMzRDBDS0NqazliTnIzdmVoaXd1d3o3cmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV9oMA0G CSqGSIb3DQEBCwUAA4IBAQAZBmQOOVGMzGv2bboJ9au9bZRhql8II+UQfxVZDLgb ECemOXLvsyGHhP+1+ZE+b/jziSG9UlXxKX8S/IdCfgfPeIW6MhNAb1PQjDkq1EFt OYDSDc2d0MZISuVhzao/0k59g0epzwW1C3sSp7QCMwB2cd+J0NQCYGe0UjEkSmcx u0sFc8xZEky5HGNdnA6qJ59yo0J5pB6eEpADIj3zDy8D9K9ADNl7RvEd4/e5jZ44 mAWvcCd/xibiJIOTuj6/EXubMHmLap7aPptcEdzFha6htFH3q0M+2pi4rsIWpK2H UOoipe7lzBTHqUVxiwef319myyM/wUYRhA6Yv3M17UaV -----END CERTIFICATE-----Generated at Thu Jan 8 11:01:50 2026 by rpki-client