This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-MJwzgrncgeiX6OxgyOU2RBqgnA.roa File: 1-MJwzgrncgeiX6OxgyOU2RBqgnA.roa (raw, json) Hash identifier: CusR4xx5y8Ge45TJyl+Qw3c5d/gdYgNglzfaaeDJNY4= Subject key identifier: F8:C2:70:CE:0A:E7:72:07:A2:5F:A3:B1:83:23:94:D9:10:6A:82:70 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B7FDA65998CDA4D4924E630D25DDDC82B Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-MJwzgrncgeiX6OxgyOU2RBqgnA.roa Signing time: Fri 02 Jan 2026 17:56:17 +0000 ROA not before: Fri 02 Jan 2026 17:56:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 144.31.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:da:65:99:8c:da:4d:49:24:e6:30:d2:5d:dd:c8:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 2 17:56:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8c270ce0ae77207a25fa3b1832394d9106a8270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:76:c0:59:26:38:44:16:85:4a:a2:43:b1:77: 84:68:d4:c2:c6:b0:27:15:65:16:4c:b0:0a:54:fe: de:db:07:51:e5:35:4b:22:26:e0:c1:a1:4b:8e:21: 14:e8:e6:c3:63:bc:67:30:3d:3f:12:ab:7b:e7:88: 1f:2e:c6:a6:b7:e6:43:28:20:ba:6b:46:bc:79:04: 46:f7:94:42:d6:e1:29:18:b5:0b:ed:ed:6f:a9:06: 3c:c7:a8:6f:11:ea:77:0e:be:9f:13:55:fc:2f:e5: e5:fc:eb:61:e9:0d:62:ff:4b:21:7b:92:01:32:1b: 80:24:1b:cb:26:9d:89:af:d8:77:63:aa:11:5d:60: ac:b7:5a:bb:75:28:89:f0:0b:9b:94:cd:d0:b7:ea: 4f:2a:f6:e1:f8:c4:ff:49:fe:2c:5f:ef:b9:b5:92: 0e:b2:33:a0:46:67:ee:59:ab:ad:47:1f:5e:bd:26: 9e:05:ec:20:33:b5:34:e9:68:f6:79:df:00:f3:3e: c8:82:6d:62:fc:5a:35:b2:1a:62:7a:23:09:13:43: 55:21:58:9b:74:79:85:ba:be:3a:37:16:49:c8:14: ce:37:01:c6:0a:e3:1b:b9:31:f1:44:83:f7:ee:e3: 0e:de:00:2c:74:c5:6d:21:10:9e:a2:7d:b6:8a:34: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C2:70:CE:0A:E7:72:07:A2:5F:A3:B1:83:23:94:D9:10:6A:82:70 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-MJwzgrncgeiX6OxgyOU2RBqgnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.222.0/24 Signature Algorithm: sha256WithRSAEncryption 64:fc:18:e9:49:20:d9:27:10:b4:f8:2b:39:1e:3e:91:da:66: 8e:1c:fc:cd:22:b4:ce:fa:aa:cc:86:ef:d7:3c:0a:bb:0c:07: 3e:c5:f1:1a:2c:76:3e:eb:4b:b6:db:91:f0:41:ba:79:28:8b: 23:00:f2:63:ca:1a:81:46:fa:ea:31:fe:8d:c7:09:58:b3:9b: d7:11:43:f8:8a:9f:3c:35:ae:2c:16:de:90:9b:a9:bc:c2:94: 12:07:be:71:30:ef:d7:1b:d2:39:ae:d4:0f:45:b6:5b:e6:37: 09:c6:45:d6:17:72:37:65:4e:b6:32:34:31:31:18:d9:6f:3e: 41:b1:45:be:d6:8d:95:a9:a4:53:f9:ce:1c:fb:26:73:69:18: d8:ef:8a:a7:1e:c9:6f:f5:dd:2c:3e:62:2d:ce:fd:eb:c5:a1: 48:64:d1:95:2b:09:43:45:65:86:98:e5:8b:b9:b7:ec:0c:6e: 51:a7:1a:89:0c:a2:b6:ef:2d:88:9f:fe:cf:82:24:23:a5:fa: 50:d1:45:df:99:53:6e:f5:dd:4a:52:10:ad:b8:50:d2:28:80: 61:dc:0c:29:a7:96:61:2e:6e:e8:be:f3:70:41:be:25:72:6d: c3:f0:3c:54:c2:eb:96:15:66:4f:1d:f7:0f:9e:dd:50:67:5e: 3b:ac:38:34 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/2mWZjNpNSSTmMNJd3cgrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAyMTc1NjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGMyNzBjZTBhZTc3MjA3YTI1ZmEzYjE4MzIzOTRkOTEwNmE4MjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXbAWSY4RBaFSqJDsXeEaNTCxrAn FWUWTLAKVP7e2wdR5TVLIibgwaFLjiEU6ObDY7xnMD0/Eqt754gfLsamt+ZDKCC6 a0a8eQRG95RC1uEpGLUL7e1vqQY8x6hvEep3Dr6fE1X8L+Xl/Oth6Q1i/0she5IB MhuAJBvLJp2Jr9h3Y6oRXWCst1q7dSiJ8AublM3Qt+pPKvbh+MT/Sf4sX++5tZIO sjOgRmfuWautRx9evSaeBewgM7U06Wj2ed8A8z7Igm1i/Fo1shpieiMJE0NVIVib dHmFur46NxZJyBTONwHGCuMbuTHxRIP37uMO3gAsdMVtIRCeon22ijShcQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPjCcM4K53IHol+jsYMjlNkQaoJwMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvMS1NSnd6Z3JuY2dlaVg2T3hneU9VMlJCcWduQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvMzhmMTI4LWVhODItNDU1NS1iNTE0LTE0Mzk2N2E4ZmUw OC8xL0hKWS1QU0tFZlVac0ppd2doNHduZ05pRUFBTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJAf3jAN BgkqhkiG9w0BAQsFAAOCAQEAZPwY6Ukg2ScQtPgrOR4+kdpmjhz8zSK0zvqqzIbv 1zwKuwwHPsXxGix2PutLttuR8EG6eSiLIwDyY8oagUb66jH+jccJWLOb1xFD+Iqf PDWuLBbekJupvMKUEge+cTDv1xvSOa7UD0W2W+Y3CcZF1hdyN2VOtjI0MTEY2W8+ QbFFvtaNlamkU/nOHPsmc2kY2O+Kpx7Jb/XdLD5iLc7968WhSGTRlSsJQ0Vlhpjl i7m37AxuUacaiQyitu8tiJ/+z4IkI6X6UNFF35lTbvXdSlIQrbhQ0iiAYdwMKaeW YS5u6L7zcEG+JXJtw/A8VMLrlhVmTx33D57dUGdeO6w4NA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:51 2026 by rpki-client