This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dVVMVPT-44GEI2NPTZuDld-AKlI.roa File: dVVMVPT-44GEI2NPTZuDld-AKlI.roa (raw, json) Hash identifier: fg/X/L/xurYwHyZ6vz4kfFL36mxtwSFqcR7LmW8E/fM= Subject key identifier: 75:55:4C:54:F4:FE:E3:81:84:23:63:4F:4D:9B:83:95:DF:80:2A:52 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC76135ED77F2A7C8C4EE5691C5623 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dVVMVPT-44GEI2NPTZuDld-AKlI.roa Signing time: Thu 01 Jan 2026 14:18:18 +0000 ROA not before: Thu 01 Jan 2026 14:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213877 IP address blocks: 64.188.73.0/24 maxlen: 24 64.188.75.0/24 maxlen: 24 64.188.92.0/22 maxlen: 24 64.188.96.0/24 maxlen: 24 64.188.97.0/24 maxlen: 24 64.188.112.0/23 maxlen: 24 64.188.124.0/24 maxlen: 24 64.188.125.0/24 maxlen: 24 64.188.126.0/24 maxlen: 24 77.239.104.0/24 maxlen: 24 77.239.105.0/24 maxlen: 24 77.239.122.0/24 maxlen: 24 77.239.123.0/24 maxlen: 24 144.31.26.0/23 maxlen: 24 144.31.64.0/22 maxlen: 24 144.31.68.0/22 maxlen: 24 144.31.72.0/22 maxlen: 24 144.31.76.0/22 maxlen: 24 144.31.86.0/23 maxlen: 24 144.31.89.0/24 maxlen: 24 144.31.104.0/23 maxlen: 24 144.31.114.0/23 maxlen: 24 144.31.120.0/23 maxlen: 24 144.31.137.0/24 maxlen: 24 144.31.192.0/23 maxlen: 24 144.31.198.0/23 maxlen: 24 144.31.228.0/23 maxlen: 24 144.31.246.0/23 maxlen: 24 144.31.252.0/23 maxlen: 24 144.31.254.0/23 maxlen: 24 150.241.105.0/24 maxlen: 24 150.241.108.0/24 maxlen: 24 150.241.123.0/24 maxlen: 24 185.184.122.0/24 maxlen: 24 185.184.123.0/24 maxlen: 24 185.207.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:76:13:5e:d7:7f:2a:7c:8c:4e:e5:69:1c:56:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75554c54f4fee3818423634f4d9b8395df802a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:8f:f3:be:2a:20:ae:82:d4:c6:a1:9d:9d: 6b:41:47:a9:16:bd:f5:d9:70:28:d6:f3:bc:98:d4: 74:f0:1e:70:f2:0e:c6:d6:93:a8:25:9a:76:9a:bf: 00:fa:fc:4e:e5:e2:79:23:64:95:a3:56:87:b6:3a: 38:0d:a1:ad:81:66:f8:4b:20:7e:08:34:0b:23:14: a4:10:a8:6d:83:0e:31:59:f6:57:68:a8:54:92:9e: 5d:37:fb:08:73:7f:d0:e2:c0:3e:76:b0:f7:b8:06: e7:1d:a9:ca:70:22:53:21:01:62:fd:b6:9c:8e:fa: 54:79:d8:61:34:e0:93:51:d8:0f:07:2a:55:10:4a: a7:00:90:81:34:ca:a7:c1:90:fa:f4:e1:27:38:05: d4:53:8c:ed:5b:41:bf:72:07:75:e3:db:3c:95:e4: f6:7a:37:34:f0:cc:0f:75:4b:7d:36:c4:44:25:7c: 17:97:54:06:5c:08:8a:4d:ca:82:9d:33:ae:f1:d2: ae:a0:88:86:0f:a5:9d:cb:59:6d:28:c3:3e:66:c9: e1:9f:61:18:79:49:c1:fc:20:c1:7b:da:9d:5d:67: 7d:45:f2:93:1e:a2:ce:9e:3d:5f:fa:fa:75:82:af: ba:19:cd:7c:4b:9b:08:7f:7d:5d:d7:78:b9:84:5f: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:55:4C:54:F4:FE:E3:81:84:23:63:4F:4D:9B:83:95:DF:80:2A:52 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/dVVMVPT-44GEI2NPTZuDld-AKlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.73.0/24 64.188.75.0/24 64.188.92.0-64.188.97.255 64.188.112.0/23 64.188.124.0-64.188.126.255 77.239.104.0/23 77.239.122.0/23 144.31.26.0/23 144.31.64.0/20 144.31.86.0/23 144.31.89.0/24 144.31.104.0/23 144.31.114.0/23 144.31.120.0/23 144.31.137.0/24 144.31.192.0/23 144.31.198.0/23 144.31.228.0/23 144.31.246.0/23 144.31.252.0/22 150.241.105.0/24 150.241.108.0/24 150.241.123.0/24 185.184.122.0/23 185.207.133.0/24 Signature Algorithm: sha256WithRSAEncryption 87:8c:2f:01:7e:ff:92:c7:c8:61:a3:cb:96:70:26:12:23:9d: 0d:43:3e:39:41:4b:7a:80:d0:21:68:13:c3:3a:66:73:bc:82: 51:9e:a1:03:68:b7:8b:81:70:9a:71:c1:80:0b:c0:75:75:26: a8:31:6c:37:fa:f5:19:1e:77:a1:c0:3d:fd:90:23:55:52:da: 5b:27:75:45:26:30:b1:5c:55:d3:3b:be:36:19:b7:8a:f5:33: 31:b9:a1:95:49:f4:2b:9c:b1:55:7d:be:4d:f8:ab:f9:7c:41: f2:35:7e:93:e2:50:f4:59:61:ae:52:50:1d:be:d5:13:81:d2: 05:5f:5b:c5:c0:1b:d5:d5:e1:b0:90:52:f1:6b:1b:eb:ab:33: 5a:9d:c2:c3:b8:72:4a:d9:03:e3:07:8f:68:f2:b0:41:8a:c0: 34:a8:1c:3b:5e:38:7f:03:03:21:7b:19:35:67:cd:de:2b:66: 70:d8:50:b0:9e:99:2b:39:db:c6:9c:bb:b8:64:22:b3:64:61: 96:89:15:a5:b7:f9:d6:a2:bc:3d:a6:43:c4:a2:b0:d2:73:55: 00:28:2e:70:30:84:f0:24:18:14:66:2e:54:2c:49:2c:33:d1: 91:fb:ec:e9:39:bb:52:46:58:51:72:66:b1:c5:f3:0f:63:c3: 4c:14:55:40 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZt57HYTXtd/KnyMTuVpHFYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTU1NGM1NGY0ZmVlMzgxODQyMzYzNGY0ZDliODM5NWRmODAyYTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6P874qIK6C1MahnZ1rQUepFr31 2XAo1vO8mNR08B5w8g7G1pOoJZp2mr8A+vxO5eJ5I2SVo1aHtjo4DaGtgWb4SyB+ CDQLIxSkEKhtgw4xWfZXaKhUkp5dN/sIc3/Q4sA+drD3uAbnHanKcCJTIQFi/bac jvpUedhhNOCTUdgPBypVEEqnAJCBNMqnwZD69OEnOAXUU4ztW0G/cgd149s8leT2 ejc08MwPdUt9NsREJXwXl1QGXAiKTcqCnTOu8dKuoIiGD6Wdy1ltKMM+Zsnhn2EY eUnB/CDBe9qdXWd9RfKTHqLOnj1f+vp1gq+6Gc18S5sIf31d13i5hF+2pwIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFHVVTFT0/uOBhCNjT02bg5XfgCpSMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvZFZWTVZQVC00NEdFSTJOUFRadURsZC1BS2xJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBABA vEkDBABAvEswDAMEAkC8XAMEAUC8YAMEAUC8cDAMAwQCQLx8AwQAQLx+AwQBTe9o AwQBTe96AwQBkB8aAwQEkB9AAwQBkB9WAwQAkB9ZAwQBkB9oAwQBkB9yAwQBkB94 AwQAkB+JAwQBkB/AAwQBkB/GAwQBkB/kAwQBkB/2AwQCkB/8AwQAlvFpAwQAlvFs AwQAlvF7AwQBubh6AwQAuc+FMA0GCSqGSIb3DQEBCwUAA4IBAQCHjC8Bfv+Sx8hh o8uWcCYSI50NQz45QUt6gNAhaBPDOmZzvIJRnqEDaLeLgXCaccGAC8B1dSaoMWw3 +vUZHnehwD39kCNVUtpbJ3VFJjCxXFXTO742GbeK9TMxuaGVSfQrnLFVfb5N+Kv5 fEHyNX6T4lD0WWGuUlAdvtUTgdIFX1vFwBvV1eGwkFLxaxvrqzNancLDuHJK2QPj B49o8rBBisA0qBw7Xjh/AwMhexk1Z83eK2Zw2FCwnpkrOdvGnLu4ZCKzZGGWiRWl t/nWorw9pkPEorDSc1UAKC5wMITwJBgUZi5ULEksM9GR++zpObtSRlhRcmaxxfMP Y8NMFFVA -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:33 2026 by rpki-client