This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/e2FL9pCSYgJl4byB6vLgfITHJi0.roa File: e2FL9pCSYgJl4byB6vLgfITHJi0.roa (raw, json) Hash identifier: 8VvAI+gOCCqNNW9Fm3kK6m0Rw+KWaXvazrYRO2UE3Wo= Subject key identifier: 7B:61:4B:F6:90:92:62:02:65:E1:BC:81:EA:F2:E0:7C:84:C7:26:2D Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC6615C2061344AF16A8E6A809A778 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/e2FL9pCSYgJl4byB6vLgfITHJi0.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51559 IP address blocks: 144.31.10.0/24 maxlen: 24 193.23.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:66:15:c2:06:13:44:af:16:a8:e6:a8:09:a7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b614bf69092620265e1bc81eaf2e07c84c7262d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b8:d1:c0:a5:d7:b6:4e:a5:fc:df:bf:73:39: ca:2f:55:7e:0a:65:52:b0:31:6d:48:e9:43:3f:5c: 40:2e:ce:f8:67:e6:fb:33:d6:ac:29:8a:d1:f4:ab: 0e:85:73:d7:9e:b5:37:ca:bf:e2:c6:a1:07:6b:d1: 03:05:5b:26:1a:90:2f:05:c5:c4:1e:47:43:07:f0: b7:52:92:bf:3a:77:7b:1a:94:ab:d2:a0:12:34:2b: 83:d2:f5:56:89:29:b8:3f:e0:33:c7:4c:4c:dd:bd: bd:ae:15:5f:15:e9:12:be:06:c4:64:d9:24:81:15: ef:e0:d0:27:36:8b:68:19:2e:db:ed:57:99:d8:c4: fb:71:0f:4b:06:96:3a:dc:d4:74:fd:19:bb:68:2f: 04:6f:e7:ab:62:ee:bb:3f:5a:c8:48:75:ff:36:3d: 64:62:64:7c:a3:87:b8:ff:26:24:4b:8b:9a:b1:e0: 71:e8:f1:67:1c:da:1a:b2:c2:1e:e4:e3:1f:28:09: 4c:4c:d3:8b:d2:59:3e:c4:10:3e:b8:92:6e:27:4d: fa:9b:ff:dd:48:da:a8:8d:6b:b4:ea:df:4a:b6:26: 89:43:c3:4f:61:20:68:63:57:86:76:fe:46:09:9a: e3:1d:b6:9a:62:a4:6d:99:dc:ef:2a:b8:83:f8:7f: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:61:4B:F6:90:92:62:02:65:E1:BC:81:EA:F2:E0:7C:84:C7:26:2D X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/e2FL9pCSYgJl4byB6vLgfITHJi0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.10.0/24 193.23.196.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ae:27:81:33:2e:c2:f9:6b:c1:ab:a6:8f:f8:41:1f:1b:d2: c3:65:59:db:c7:58:40:4d:66:a4:72:80:e2:54:f5:66:03:4a: 83:32:50:ed:7e:6d:2f:71:4e:b3:2f:f5:f2:b2:ae:c5:e6:4c: 37:d9:1a:6f:33:df:ee:e3:90:ba:4b:ff:f0:40:cc:03:a6:65: 85:50:05:25:45:b3:fd:3b:6f:8a:2f:66:d3:3d:1b:d2:43:ce: 6d:7e:38:2f:f7:18:b4:e2:76:d7:83:6d:d6:96:e1:d7:e1:f9: 05:b4:79:ee:2b:d5:67:3c:b9:53:cc:19:89:86:0d:be:56:8b: 48:ee:42:de:5f:ee:a4:ec:bb:1b:52:ad:26:d5:b2:9a:dc:e5: 3e:75:de:09:ca:2b:6f:e4:bd:58:79:4e:54:bf:0a:ce:dc:c2: 30:74:6a:dd:a5:00:8e:2f:7d:7d:38:11:b8:c9:b8:95:4a:ec: 07:ba:02:9c:5b:53:8c:03:94:10:71:cd:55:4d:d8:00:e5:f9: 80:f7:6e:b9:85:fb:f9:8d:d1:5d:a6:08:92:6d:d1:47:a3:8c: b0:a8:e3:a9:d6:01:48:8d:54:94:39:7c:2d:23:1e:6d:c9:49: bd:e5:18:8a:22:41:0e:7c:dc:0a:9f:1f:65:3e:da:a2:96:5b: 10:d2:78:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57GYVwgYTRK8WqOaoCad4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjYxNGJmNjkwOTI2MjAyNjVlMWJjODFlYWYyZTA3Yzg0YzcyNjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLjRwKXXtk6l/N+/cznKL1V+CmVS sDFtSOlDP1xALs74Z+b7M9asKYrR9KsOhXPXnrU3yr/ixqEHa9EDBVsmGpAvBcXE HkdDB/C3UpK/Ond7GpSr0qASNCuD0vVWiSm4P+Azx0xM3b29rhVfFekSvgbEZNkk gRXv4NAnNotoGS7b7VeZ2MT7cQ9LBpY63NR0/Rm7aC8Eb+erYu67P1rISHX/Nj1k YmR8o4e4/yYkS4uaseBx6PFnHNoassIe5OMfKAlMTNOL0lk+xBA+uJJuJ036m//d SNqojWu06t9KtiaJQ8NPYSBoY1eGdv5GCZrjHbaaYqRtmdzvKriD+H+inQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHthS/aQkmICZeG8gery4HyExyYtMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvZTJGTDlwQ1NZZ0psNGJ5QjZ2TGdmSVRISmkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkB8KAwQA wRfEMA0GCSqGSIb3DQEBCwUAA4IBAQCorieBMy7C+WvBq6aP+EEfG9LDZVnbx1hA TWakcoDiVPVmA0qDMlDtfm0vcU6zL/Xysq7F5kw32RpvM9/u45C6S//wQMwDpmWF UAUlRbP9O2+KL2bTPRvSQ85tfjgv9xi04nbXg23WluHX4fkFtHnuK9VnPLlTzBmJ hg2+VotI7kLeX+6k7LsbUq0m1bKa3OU+dd4Jyitv5L1YeU5UvwrO3MIwdGrdpQCO L319OBG4ybiVSuwHugKcW1OMA5QQcc1VTdgA5fmA9265hfv5jdFdpgiSbdFHo4yw qOOp1gFIjVSUOXwtIx5tyUm95RiKIkEOfNwKnx9lPtqillsQ0nju -----END CERTIFICATE-----Generated at Sun Jan 25 07:26:08 2026 by rpki-client