This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7jXqEqf8-y1PXIfyDBOZHO0dOOA.roa File: 7jXqEqf8-y1PXIfyDBOZHO0dOOA.roa (raw, json) Hash identifier: NWns0ORxSD3Xj6AuExzQjvErVuWVDMCLtYRmnB0doN8= Subject key identifier: EE:35:EA:12:A7:FC:FB:2D:4F:5C:87:F2:0C:13:99:1C:ED:1D:38:E0 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BF25B078231EA40F800B1E3FB741C61AE Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7jXqEqf8-y1PXIfyDBOZHO0dOOA.roa Signing time: Sat 24 Jan 2026 23:33:30 +0000 ROA not before: Sat 24 Jan 2026 23:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 37.46.16.0/24 maxlen: 24 37.46.17.0/24 maxlen: 24 37.46.18.0/24 maxlen: 24 37.46.19.0/24 maxlen: 24 64.188.99.0/24 maxlen: 24 77.239.106.0/24 maxlen: 24 144.31.80.0/23 maxlen: 24 144.31.132.0/23 maxlen: 24 144.31.184.0/23 maxlen: 24 144.31.194.0/23 maxlen: 24 150.241.76.0/23 maxlen: 24 150.241.113.0/24 maxlen: 24 150.241.114.0/24 maxlen: 24 150.241.115.0/24 maxlen: 24 150.241.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:5b:07:82:31:ea:40:f8:00:b1:e3:fb:74:1c:61:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 24 23:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee35ea12a7fcfb2d4f5c87f20c13991ced1d38e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:53:98:76:b3:5e:4f:f8:19:61:5c:66:69: ae:e0:9d:82:4b:92:2d:5b:1c:c3:a7:23:35:7a:ff: 5c:51:45:d5:36:c3:b6:2f:2a:4a:2a:32:ff:6b:32: b5:12:ad:7e:1d:6c:03:19:82:73:f9:2d:64:4b:ba: e6:49:90:21:60:70:dc:93:a6:de:f4:b1:f0:7a:8f: 3c:d7:4f:3d:ed:f9:f5:54:97:2b:16:d7:ff:1a:0c: fa:71:4d:11:07:0f:e6:43:e2:69:22:54:2a:92:95: 0e:f5:e9:89:3a:48:39:b3:8a:e6:f5:4d:7e:3d:b7: ba:7f:90:6f:9d:40:41:73:78:e7:ee:8e:2e:7b:11: dc:a5:b7:bf:de:9f:a3:0e:e0:f8:02:bb:4e:4d:fc: 82:5c:7a:6a:fb:73:68:0d:ea:1d:dc:96:0a:6f:3c: 28:39:f0:db:6c:16:29:92:14:c3:1c:cf:fd:c6:eb: 84:ec:f7:8a:c5:dd:81:70:16:1c:8a:75:14:f9:48: 07:fb:f4:79:58:de:07:fc:e0:e9:d1:e6:a3:1f:d1: e2:89:95:13:d9:d7:03:ed:b1:6c:01:49:69:a1:86: 21:69:19:ca:7e:0a:e7:95:cd:8b:41:78:68:af:0b: ae:ec:d6:c3:c6:21:2d:ca:0b:90:a3:d1:c6:27:3f: 21:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:35:EA:12:A7:FC:FB:2D:4F:5C:87:F2:0C:13:99:1C:ED:1D:38:E0 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7jXqEqf8-y1PXIfyDBOZHO0dOOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.16.0/22 64.188.99.0/24 77.239.106.0/24 144.31.80.0/23 144.31.132.0/23 144.31.184.0/23 144.31.194.0/23 150.241.76.0/23 150.241.113.0-150.241.116.255 Signature Algorithm: sha256WithRSAEncryption 34:05:58:ae:77:64:5b:16:12:45:c3:40:5d:ba:43:f0:1d:a9: 8d:88:d7:44:81:c9:52:68:a9:ad:9b:72:29:c9:af:7a:a5:d0: 64:87:32:45:de:fa:d1:8f:92:90:9e:b7:78:7c:50:d8:0d:3f: e9:62:e3:f9:c3:33:67:2f:c7:c0:6d:d2:33:03:6b:c8:1b:0b: 94:f5:21:0d:75:1e:7a:35:ee:c1:b9:95:92:96:da:7f:26:55: cb:6a:63:b1:46:5d:01:4a:e6:2d:8c:e2:f8:5d:d0:b6:a9:81: 9e:ae:b3:d9:db:d4:ce:13:32:bb:2b:e7:f9:93:cb:27:15:fa: 30:5e:b7:6f:a5:0e:7f:ce:61:5d:50:e4:f1:1e:00:a7:7a:48: 91:b7:de:46:59:8d:ee:3a:23:8c:38:02:f0:0e:10:66:b6:2d: dd:94:88:9e:28:9e:a8:16:52:4d:2d:2c:2f:d4:3c:c6:e5:1d: 56:27:e5:26:ed:58:7e:1f:a3:48:dd:0b:b8:97:43:96:f6:82: b8:a5:6a:97:9b:ed:cb:14:84:37:72:97:a0:54:70:0b:7d:85: e8:72:34:b4:c3:c4:ed:df:8d:52:8f:10:b6:50:ea:7e:30:0c: 52:7a:98:35:af:38:1d:73:e2:30:1f:d6:26:de:5c:60:70:37: 72:d2:b9:c3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZvyWweCMepA+ACx4/t0HGGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTI0MjMzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM1ZWExMmE3ZmNmYjJkNGY1Yzg3ZjIwYzEzOTkxY2VkMWQzOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT1TmHazXk/4GWFcZmmu4J2CS5It WxzDpyM1ev9cUUXVNsO2LypKKjL/azK1Eq1+HWwDGYJz+S1kS7rmSZAhYHDck6be 9LHweo8810897fn1VJcrFtf/Ggz6cU0RBw/mQ+JpIlQqkpUO9emJOkg5s4rm9U1+ Pbe6f5BvnUBBc3jn7o4uexHcpbe/3p+jDuD4ArtOTfyCXHpq+3NoDeod3JYKbzwo OfDbbBYpkhTDHM/9xuuE7PeKxd2BcBYcinUU+UgH+/R5WN4H/ODp0eajH9HiiZUT 2dcD7bFsAUlpoYYhaRnKfgrnlc2LQXhorwuu7NbDxiEtyguQo9HGJz8h5QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFO416hKn/PstT1yH8gwTmRztHTjgMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvN2pYcUVxZjgteTFQWElmeURCT1pITzBkT09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCJS4QAwQA QLxjAwQATe9qAwQBkB9QAwQBkB+EAwQBkB+4AwQBkB/CAwQBlvFMMAwDBACW8XED BACW8XQwDQYJKoZIhvcNAQELBQADggEBADQFWK53ZFsWEkXDQF26Q/AdqY2I10SB yVJoqa2bcinJr3ql0GSHMkXe+tGPkpCet3h8UNgNP+li4/nDM2cvx8Bt0jMDa8gb C5T1IQ11Hno17sG5lZKW2n8mVctqY7FGXQFK5i2M4vhd0LapgZ6us9nb1M4TMrsr 5/mTyycV+jBet2+lDn/OYV1Q5PEeAKd6SJG33kZZje46I4w4AvAOEGa2Ld2UiJ4o nqgWUk0tLC/UPMblHVYn5SbtWH4fo0jdC7iXQ5b2grilapeb7csUhDdyl6BUcAt9 hehyNLTDxO3fjVKPELZQ6n4wDFJ6mDWvOB1z4jAf1ibeXGBwN3LSucM= -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:29 2026 by rpki-client