This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lS0ZE4fdLgafLyTc1ah0_Zu6nm8.roa File: lS0ZE4fdLgafLyTc1ah0_Zu6nm8.roa (raw, json) Hash identifier: c3vHO6WCbaa2wdcgkP9QF5auXuq35crutbd0nM8Brtw= Subject key identifier: 95:2D:19:13:87:DD:2E:06:9F:2F:24:DC:D5:A8:74:FD:9B:BA:9E:6F Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BF2817B22F96CA31A79CC363539470060 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lS0ZE4fdLgafLyTc1ah0_Zu6nm8.roa Signing time: Sun 25 Jan 2026 00:15:30 +0000 ROA not before: Sun 25 Jan 2026 00:15:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401152 IP address blocks: 77.239.100.0/22 maxlen: 24 77.239.112.0/22 maxlen: 24 144.31.8.0/23 maxlen: 24 144.31.11.0/24 maxlen: 24 144.31.13.0/24 maxlen: 24 144.31.15.0/24 maxlen: 24 144.31.32.0/19 maxlen: 19 144.31.91.0/24 maxlen: 24 144.31.109.0/24 maxlen: 24 144.31.110.0/24 maxlen: 24 144.31.127.0/24 maxlen: 24 144.31.136.0/24 maxlen: 24 144.31.140.0/23 maxlen: 24 144.31.142.0/23 maxlen: 24 144.31.144.0/21 maxlen: 24 144.31.152.0/21 maxlen: 24 144.31.160.0/22 maxlen: 24 144.31.186.0/23 maxlen: 24 144.31.188.0/23 maxlen: 24 144.31.188.0/24 maxlen: 24 144.31.189.0/24 maxlen: 24 144.31.220.0/24 maxlen: 24 144.31.225.0/24 maxlen: 24 144.31.226.0/24 maxlen: 24 144.31.227.0/24 maxlen: 24 144.31.234.0/24 maxlen: 24 144.31.235.0/24 maxlen: 24 144.31.236.0/24 maxlen: 24 144.31.237.0/24 maxlen: 24 144.31.238.0/24 maxlen: 24 144.31.239.0/24 maxlen: 24 144.31.240.0/24 maxlen: 24 144.31.241.0/24 maxlen: 24 144.31.242.0/24 maxlen: 24 144.31.243.0/24 maxlen: 24 150.241.69.0/24 maxlen: 24 150.241.70.0/24 maxlen: 24 150.241.71.0/24 maxlen: 24 150.241.72.0/24 maxlen: 24 150.241.73.0/24 maxlen: 24 150.241.74.0/24 maxlen: 24 150.241.75.0/24 maxlen: 24 150.241.85.0/24 maxlen: 24 150.241.86.0/24 maxlen: 24 150.241.121.0/24 maxlen: 24 185.229.222.0/24 maxlen: 24 193.23.192.0/24 maxlen: 24 193.23.198.0/24 maxlen: 24 193.23.204.0/22 maxlen: 22 193.23.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:81:7b:22:f9:6c:a3:1a:79:cc:36:35:39:47:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 25 00:15:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=952d191387dd2e069f2f24dcd5a874fd9bba9e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:fe:57:61:c1:0d:49:4a:ee:10:b1:b3:c7: a5:bd:02:5c:78:26:7e:99:ad:eb:80:81:58:d1:44: 93:43:d7:2b:a8:7f:e8:9f:c8:03:bb:49:c5:4b:fb: a0:2a:7b:85:ea:da:26:30:9a:71:db:c9:97:51:ff: 8c:9b:df:35:8f:9d:15:2f:86:e4:74:cb:d4:ad:ef: 35:76:f3:e2:ea:b2:bc:89:90:09:dc:0d:1b:f6:b1: e6:7f:b7:65:e2:c7:e3:3d:4d:ad:64:f4:12:3d:81: f0:6c:b8:ff:1a:f9:63:9b:95:53:07:ce:c8:68:62: 50:2b:35:44:a5:0e:83:ed:a1:54:ef:39:8b:52:0e: e8:a2:34:e9:8b:4b:9c:b9:5b:c4:02:bc:2d:c8:da: ae:f5:6d:83:8a:d2:1b:64:76:60:f5:72:8b:92:69: 18:c5:6e:f0:e3:54:ca:16:0f:52:77:f2:96:e7:40: 00:96:80:d4:20:1d:4d:1b:69:08:2b:aa:cd:91:8c: 46:ac:44:67:b7:0a:60:5e:30:be:34:2a:93:50:5e: db:d3:0a:15:ef:58:96:0b:66:20:ca:86:eb:d2:3c: c9:0b:1b:4e:29:ea:26:92:fb:2b:ce:97:c3:62:3a: 93:90:7d:bb:39:38:a6:a4:4f:55:00:8a:f2:21:c4: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2D:19:13:87:DD:2E:06:9F:2F:24:DC:D5:A8:74:FD:9B:BA:9E:6F X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/lS0ZE4fdLgafLyTc1ah0_Zu6nm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.100.0/22 77.239.112.0/22 144.31.8.0/23 144.31.11.0/24 144.31.13.0/24 144.31.15.0/24 144.31.32.0/19 144.31.91.0/24 144.31.109.0-144.31.110.255 144.31.127.0/24 144.31.136.0/24 144.31.140.0-144.31.163.255 144.31.186.0-144.31.189.255 144.31.220.0/24 144.31.225.0-144.31.227.255 144.31.234.0-144.31.243.255 150.241.69.0-150.241.75.255 150.241.85.0-150.241.86.255 150.241.121.0/24 185.229.222.0/24 193.23.192.0/24 193.23.198.0/24 193.23.204.0/22 193.23.212.0/22 Signature Algorithm: sha256WithRSAEncryption 88:f1:c3:9a:0e:a2:eb:93:85:4f:c5:65:1d:cc:9d:81:4e:23: e6:e1:31:18:7b:cb:fd:ce:4d:55:c5:75:5f:05:6a:11:b2:52: 1a:44:0c:14:0b:54:77:78:b0:9c:15:39:ad:52:95:36:56:5e: 3c:e1:31:63:d7:c0:2c:af:29:ee:82:44:44:b5:f6:da:b0:5e: 64:0e:07:80:47:0e:6b:08:24:cc:6a:0f:13:9a:24:36:12:f5: a8:dd:31:83:21:da:3f:27:9a:b2:e4:97:0d:6f:ad:c2:30:64: b3:b4:db:0a:a7:c5:47:dd:a1:18:e0:5a:f6:c9:3d:71:7c:d7: af:85:63:b2:55:4f:3b:2f:21:cb:c5:25:af:71:b1:59:4b:b9: 4d:9b:4e:16:9e:94:ae:7f:5b:04:79:ba:a5:f5:c6:92:1d:c3: ee:f0:73:98:e2:80:f7:eb:53:89:0f:63:a1:25:d3:87:5a:f3: a6:dd:07:35:c0:6b:dd:7e:d9:74:30:ef:b0:77:22:ad:3f:2f: 14:7d:46:a5:5e:3f:2b:e2:e4:be:bc:0d:85:8e:9c:b8:35:92: 32:9a:e7:48:bd:2b:23:1b:b9:1a:c2:fc:91:92:b4:ae:a3:37: ba:07:8a:2f:a9:8e:7f:66:06:3a:ae:f1:40:6e:e8:3d:37:b6: ed:b6:82:f8 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgISAZvygXsi+WyjGnnMNjU5RwBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTI1MDAxNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTJkMTkxMzg3ZGQyZTA2OWYyZjI0ZGNkNWE4NzRmZDliYmE5ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcH+V2HBDUlK7hCxs8elvQJceCZ+ ma3rgIFY0USTQ9crqH/on8gDu0nFS/ugKnuF6tomMJpx28mXUf+Mm981j50VL4bk dMvUre81dvPi6rK8iZAJ3A0b9rHmf7dl4sfjPU2tZPQSPYHwbLj/Gvljm5VTB87I aGJQKzVEpQ6D7aFU7zmLUg7oojTpi0ucuVvEArwtyNqu9W2DitIbZHZg9XKLkmkY xW7w41TKFg9Sd/KW50AAloDUIB1NG2kIK6rNkYxGrERntwpgXjC+NCqTUF7b0woV 71iWC2Ygyobr0jzJCxtOKeomkvsrzpfDYjqTkH27OTimpE9VAIryIcSsGQIDAQAB o4IC0DCCAswwHQYDVR0OBBYEFJUtGROH3S4Gny8k3NWodP2bup5vMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvbFMwWkU0ZmRMZ2FmTHlUYzFhaDBfWnU2bm04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgDBAJN 72QDBAJN73ADBAGQHwgDBACQHwsDBACQHw0DBACQHw8DBAWQHyADBACQH1swDAME AJAfbQMEAJAfbgMEAJAffwMEAJAfiDAMAwQCkB+MAwQCkB+gMAwDBAGQH7oDBAGQ H7wDBACQH9wwDAMEAJAf4QMEApAf4DAMAwQBkB/qAwQCkB/wMAwDBACW8UUDBAKW 8UgwDAMEAJbxVQMEAJbxVgMEAJbxeQMEALnl3gMEAMEXwAMEAMEXxgMEAsEXzAME AsEX1DANBgkqhkiG9w0BAQsFAAOCAQEAiPHDmg6i65OFT8VlHcydgU4j5uExGHvL /c5NVcV1XwVqEbJSGkQMFAtUd3iwnBU5rVKVNlZePOExY9fALK8p7oJERLX22rBe ZA4HgEcOawgkzGoPE5okNhL1qN0xgyHaPyeasuSXDW+twjBks7TbCqfFR92hGOBa 9sk9cXzXr4VjslVPOy8hy8Ulr3GxWUu5TZtOFp6Urn9bBHm6pfXGkh3D7vBzmOKA 9+tTiQ9joSXTh1rzpt0HNcBr3X7ZdDDvsHcirT8vFH1GpV4/K+LkvrwNhY6cuDWS MprnSL0rIxu5GsL8kZK0rqM3ugeKL6mOf2YGOq7xQG7oPTe27baC+A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:04 2026 by rpki-client