This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X3Fave-WayqUpStCFat30Ssj7lA.roa File: X3Fave-WayqUpStCFat30Ssj7lA.roa (raw, json) Hash identifier: hkg3WTHvFByP5lC9witMreIPTccW9cq6zfse6i4Qoio= Subject key identifier: 5F:71:5A:BD:EF:96:6B:2A:94:A5:2B:42:15:AB:77:D1:2B:23:EE:50 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC5ED3DC3D57D43717F4DFC7A1B19F Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X3Fave-WayqUpStCFat30Ssj7lA.roa Signing time: Thu 01 Jan 2026 14:18:12 +0000 ROA not before: Thu 01 Jan 2026 14:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 150.241.104.0/24 maxlen: 24 150.241.109.0/24 maxlen: 24 150.241.110.0/24 maxlen: 24 150.241.111.0/24 maxlen: 24 150.241.112.0/24 maxlen: 24 150.241.117.0/24 maxlen: 24 150.241.118.0/24 maxlen: 24 150.241.119.0/24 maxlen: 24 150.241.120.0/24 maxlen: 24 150.241.125.0/24 maxlen: 24 150.241.126.0/24 maxlen: 24 150.241.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:5e:d3:dc:3d:57:d4:37:17:f4:df:c7:a1:b1:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f715abdef966b2a94a52b4215ab77d12b23ee50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:d1:e1:d4:93:4d:d3:16:04:1a:af:58:99: 2b:dd:cc:8f:3f:16:45:36:d7:31:c6:0a:32:b2:b1: 10:cf:f9:d5:ab:08:e1:11:a0:a0:a3:1a:b2:f7:cd: 3d:1a:7d:3f:a8:96:e9:82:42:e3:cc:d0:75:e9:56: 67:5b:c4:20:a1:61:cc:20:e5:c8:a8:20:be:86:3e: 4f:a4:cb:40:09:e5:31:37:dc:47:9d:24:af:a5:86: 61:a0:4d:8b:1c:09:90:3d:9d:1f:25:1b:37:0d:ac: c1:9a:1f:3b:fd:c9:56:77:a4:5c:a1:e8:f2:56:d7: 16:cd:74:58:54:7e:d3:84:09:aa:cb:41:33:d4:37: 79:d0:e7:7c:ea:60:3e:1e:34:17:9d:12:ff:74:19: 02:ca:82:9d:16:24:01:08:e2:14:8d:5f:1a:a4:af: 16:88:64:76:8b:82:56:aa:47:e1:61:09:30:92:20: 4f:7c:d0:89:01:d1:7c:73:06:44:58:3e:e9:d2:18: dd:42:7b:ec:5f:22:e5:d4:28:3d:ad:ed:00:e9:c2: d3:05:97:b9:66:83:62:75:92:8f:65:b6:ab:9e:94: ba:81:85:6f:33:d5:fc:22:4f:ea:91:b9:56:5d:7d: 31:70:ec:ed:69:24:f5:85:12:29:60:e3:c7:d6:9a: 90:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:71:5A:BD:EF:96:6B:2A:94:A5:2B:42:15:AB:77:D1:2B:23:EE:50 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X3Fave-WayqUpStCFat30Ssj7lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.104.0/24 150.241.109.0-150.241.112.255 150.241.117.0-150.241.120.255 150.241.125.0-150.241.127.255 Signature Algorithm: sha256WithRSAEncryption 18:48:e0:69:f4:2e:13:e3:fc:b6:7e:ea:51:42:1d:ed:dc:fb: 93:9d:37:83:7b:89:bc:07:db:d1:df:b7:4c:4c:4e:8a:5a:18: 0e:db:2a:74:c8:94:bf:7a:ad:f4:b1:7e:82:86:a3:ba:6f:6d: 37:f8:2f:50:3a:9f:5c:0d:86:03:0d:94:d6:37:35:be:e3:41: ed:10:6e:06:60:f4:00:84:c8:11:48:90:e6:36:81:5a:bb:21: 3a:5f:25:05:5b:e0:b3:ef:7b:ef:10:e0:52:6b:ca:bd:e3:65: 4a:07:b7:18:a1:8d:dc:1b:b3:ee:47:2f:86:72:74:de:74:74: 8e:d1:5a:1c:65:d9:9b:dc:09:96:80:c0:86:68:c2:13:a7:dd: 7e:39:ca:a3:e6:74:9c:0b:c7:f8:3f:7a:c7:20:bd:6a:45:a3: b9:2a:9f:32:34:de:b5:10:c1:9d:f2:e6:7a:86:bb:f0:58:cf: 60:be:ea:b1:a6:02:f3:6e:25:03:2d:93:c7:23:e2:9a:f2:58: 3b:cc:93:a4:72:5b:9e:92:7f:ec:a2:ec:31:09:c4:26:89:3a: 55:c4:c4:ed:fa:95:c3:73:0b:aa:ad:73:1d:32:b3:b8:f6:0f: 2c:79:3c:8e:e9:c5:4c:b8:40:e4:bf:e5:d6:f2:29:73:d9:b5: 8c:4a:fb:64 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt57F7T3D1X1DcX9N/HobGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjcxNWFiZGVmOTY2YjJhOTRhNTJiNDIxNWFiNzdkMTJiMjNlZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZfR4dSTTdMWBBqvWJkr3cyPPxZF NtcxxgoysrEQz/nVqwjhEaCgoxqy9809Gn0/qJbpgkLjzNB16VZnW8QgoWHMIOXI qCC+hj5PpMtACeUxN9xHnSSvpYZhoE2LHAmQPZ0fJRs3DazBmh87/clWd6Rcoejy VtcWzXRYVH7ThAmqy0Ez1Dd50Od86mA+HjQXnRL/dBkCyoKdFiQBCOIUjV8apK8W iGR2i4JWqkfhYQkwkiBPfNCJAdF8cwZEWD7p0hjdQnvsXyLl1Cg9re0A6cLTBZe5 ZoNidZKPZbarnpS6gYVvM9X8Ik/qkblWXX0xcOztaST1hRIpYOPH1pqQDQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFF9xWr3vlmsqlKUrQhWrd9ErI+5QMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvWDNGYXZlLVdheXFVcFN0Q0ZhdDMwU3NqN2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAlvFoMAwD BACW8W0DBACW8XAwDAMEAJbxdQMEAJbxeDAMAwQAlvF9AwQHlvEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAYSOBp9C4T4/y2fupRQh3t3PuTnTeDe4m8B9vR37dMTE6KWhgO 2yp0yJS/eq30sX6ChqO6b203+C9QOp9cDYYDDZTWNzW+40HtEG4GYPQAhMgRSJDm NoFauyE6XyUFW+Cz73vvEOBSa8q942VKB7cYoY3cG7PuRy+GcnTedHSO0VocZdmb 3AmWgMCGaMITp91+Ocqj5nScC8f4P3rHIL1qRaO5Kp8yNN61EMGd8uZ6hrvwWM9g vuqxpgLzbiUDLZPHI+Ka8lg7zJOkcluekn/souwxCcQmiTpVxMTt+pXDcwuqrXMd MrO49g8seTyO6cVMuEDkv+XW8ilz2bWMSvtk -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:33 2026 by rpki-client