This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2SFDQfJVYdjwxFtctnfcZiE2aq8.roa File: 2SFDQfJVYdjwxFtctnfcZiE2aq8.roa (raw, json) Hash identifier: XcuNf4lEdAnFA1xXfA4ql+NScLgzxoNuuijdxMovJ9o= Subject key identifier: D9:21:43:41:F2:55:61:D8:F0:C4:5B:5C:B6:77:DC:66:21:36:6A:AF Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BD2C6C02337F5E8286C72714D4A93C1B5 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2SFDQfJVYdjwxFtctnfcZiE2aq8.roa Signing time: Sun 18 Jan 2026 20:23:19 +0000 ROA not before: Sun 18 Jan 2026 20:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49418 IP address blocks: 64.188.72.0/24 maxlen: 24 64.188.114.0/23 maxlen: 24 64.188.127.0/24 maxlen: 24 185.184.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:c6:c0:23:37:f5:e8:28:6c:72:71:4d:4a:93:c1:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 18 20:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9214341f25561d8f0c45b5cb677dc6621366aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:33:6c:4e:fb:39:5e:92:a7:f3:37:e5:06: 28:c2:fc:31:e6:42:89:9e:90:38:6e:d4:ff:2e:00: 20:11:e1:fb:ff:07:33:9f:71:81:f2:43:f8:f1:cb: 82:37:88:0b:fa:28:2d:c0:be:7b:e7:2e:3e:76:ec: c5:49:07:e7:b2:6b:9b:88:c5:79:ed:73:ce:e1:c3: b9:9a:72:cb:1f:ea:0a:30:6d:9d:24:cf:c3:ba:e4: 37:e8:b8:b7:96:8e:05:7f:8f:30:35:21:bb:0d:65: be:5d:52:57:c5:cc:af:56:6b:21:41:32:b7:fd:33: ae:26:29:80:c1:85:cf:b5:ba:54:99:d9:ab:48:ba: 77:06:b2:fd:5f:12:9a:71:ba:74:90:a2:7b:88:36: 7b:34:4b:ce:4a:bf:d2:cf:3b:72:12:98:6d:47:3b: d6:42:5d:7f:2b:bc:c9:1f:19:3d:b0:c1:e3:23:3b: e3:43:09:39:a6:4c:0e:16:90:cd:c4:5b:52:84:be: 22:c8:e0:7f:bc:f0:d9:b4:f6:9a:95:6c:64:5c:a4: 2e:e3:24:6d:cf:0e:ed:fb:9a:00:3d:64:dd:2c:ba: fe:95:d1:83:54:18:91:8c:cf:de:b2:4d:47:4a:af: 5a:dc:26:4c:44:08:68:2b:31:21:1c:eb:7d:50:75: 96:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:21:43:41:F2:55:61:D8:F0:C4:5B:5C:B6:77:DC:66:21:36:6A:AF X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/2SFDQfJVYdjwxFtctnfcZiE2aq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.72.0/24 64.188.114.0/23 64.188.127.0/24 185.184.120.0/22 Signature Algorithm: sha256WithRSAEncryption 92:04:c2:9a:81:f1:dd:6a:9a:31:67:a2:23:d0:15:e9:98:17: db:05:8e:58:e5:b8:8c:e1:97:e1:ec:d3:18:39:6d:9d:7e:34: fc:d6:38:72:d6:58:a1:db:c2:b6:f7:e1:c4:c4:9e:f0:a8:6f: 19:45:42:81:f5:43:2a:11:7e:c9:38:ce:e0:bd:38:a6:00:55: 0d:69:e0:d6:85:4d:91:83:4c:7c:0b:dc:a2:d5:73:bd:0e:8a: 3c:d7:e5:de:d2:a8:a6:4d:2c:19:62:3f:bd:3f:5a:a8:93:f8: fc:86:13:f9:14:89:8d:90:17:09:e9:f6:d4:f6:68:4f:bc:ed: 4b:0c:63:1c:ca:a8:41:46:9b:77:8a:e5:ad:9b:a9:0a:b2:b3: 77:30:90:05:d8:aa:ad:51:ac:92:f3:cd:2e:bb:32:5f:20:ec: 15:e7:f0:e1:d9:62:a7:4c:21:b2:ae:8f:c9:26:63:36:3e:e3: e3:1a:9f:5f:a6:13:5d:ac:77:63:69:eb:d6:dc:be:8f:b8:a9: 6c:a2:08:3d:26:d2:bf:f5:5c:f6:41:11:56:1e:30:32:e0:61: ba:5c:9a:8d:56:53:5c:74:9d:03:9d:67:57:dd:e6:07:5d:d8: b0:ec:1c:6d:7c:c4:8b:7a:e9:25:38:f7:66:ba:a5:a8:39:52: 47:de:26:c7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvSxsAjN/XoKGxycU1Kk8G1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTE4MjAyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTIxNDM0MWYyNTU2MWQ4ZjBjNDViNWNiNjc3ZGM2NjIxMzY2YWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGgzbE77OV6Sp/M35QYowvwx5kKJ npA4btT/LgAgEeH7/wczn3GB8kP48cuCN4gL+igtwL575y4+duzFSQfnsmubiMV5 7XPO4cO5mnLLH+oKMG2dJM/DuuQ36Li3lo4Ff48wNSG7DWW+XVJXxcyvVmshQTK3 /TOuJimAwYXPtbpUmdmrSLp3BrL9XxKacbp0kKJ7iDZ7NEvOSr/SzztyEphtRzvW Ql1/K7zJHxk9sMHjIzvjQwk5pkwOFpDNxFtShL4iyOB/vPDZtPaalWxkXKQu4yRt zw7t+5oAPWTdLLr+ldGDVBiRjM/esk1HSq9a3CZMRAhoKzEhHOt9UHWW2QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNkhQ0HyVWHY8MRbXLZ33GYhNmqvMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvMlNGRFFmSlZZZGp3eEZ0Y3RuZmNaaUUyYXE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQLxIAwQB QLxyAwQAQLx/AwQCubh4MA0GCSqGSIb3DQEBCwUAA4IBAQCSBMKagfHdapoxZ6Ij 0BXpmBfbBY5Y5biM4Zfh7NMYOW2dfjT81jhy1lih28K29+HExJ7wqG8ZRUKB9UMq EX7JOM7gvTimAFUNaeDWhU2Rg0x8C9yi1XO9Doo81+Xe0qimTSwZYj+9P1qok/j8 hhP5FImNkBcJ6fbU9mhPvO1LDGMcyqhBRpt3iuWtm6kKsrN3MJAF2KqtUayS880u uzJfIOwV5/Dh2WKnTCGyro/JJmM2PuPjGp9fphNdrHdjaevW3L6PuKlsogg9JtK/ 9Vz2QRFWHjAy4GG6XJqNVlNcdJ0DnWdX3eYHXdiw7BxtfMSLeuklOPdmuqWoOVJH 3ibH -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:15 2026 by rpki-client