This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/usvNnht_enNSwjMPa0saEpJ0O4I.roa File: usvNnht_enNSwjMPa0saEpJ0O4I.roa (raw, json) Hash identifier: N5+gKLQXvJgXeK3fHqvD+QtIjkM5U5rHXx1nizWDIkQ= Subject key identifier: BA:CB:CD:9E:1B:7F:7A:73:52:C2:33:0F:6B:4B:1A:12:92:74:3B:82 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC8219F666B2A32E39612D928B6629 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/usvNnht_enNSwjMPa0saEpJ0O4I.roa Signing time: Thu 01 Jan 2026 14:18:21 +0000 ROA not before: Thu 01 Jan 2026 14:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215730 IP address blocks: 64.188.91.0/24 maxlen: 24 144.31.0.0/21 maxlen: 24 144.31.90.0/24 maxlen: 24 144.31.94.0/24 maxlen: 24 144.31.125.0/24 maxlen: 24 144.31.128.0/23 maxlen: 24 144.31.130.0/23 maxlen: 24 193.23.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:82:19:f6:66:b2:a3:2e:39:61:2d:92:8b:66:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bacbcd9e1b7f7a7352c2330f6b4b1a1292743b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:c3:e1:9b:d7:4b:5c:e5:f6:8c:30:a3:4d: e2:e5:04:82:97:ad:47:06:e8:cf:b1:9e:c6:00:4f: 8a:3e:cc:48:0d:00:d6:20:8a:15:44:63:75:7e:23: 36:5a:57:23:cd:9f:ff:d4:4e:12:e6:e8:ed:e1:04: 0a:cc:6f:47:f2:39:69:fa:6a:29:1d:f6:62:f6:db: e9:01:6c:d1:30:86:e3:8a:78:06:fe:8d:e7:34:4f: 91:cf:01:57:59:42:7f:dd:15:e5:dc:04:f6:6d:fd: b9:4a:3b:a5:64:1d:2f:ff:29:ac:79:c6:6e:68:b9: 98:d5:23:b1:1b:38:8e:6b:8b:6d:bb:5e:c6:12:90: 9f:4e:49:9c:3d:67:0d:1e:88:c1:a0:48:ee:d7:f8: 29:83:41:07:72:91:6a:19:b9:8e:78:98:c3:69:41: 91:c6:0e:76:d1:f0:d3:4d:c0:fa:14:0f:78:55:b8: 4e:03:77:a8:40:12:8f:92:df:1a:92:ff:5f:23:9c: 82:0e:aa:8c:fb:4c:50:d7:85:61:b7:08:c8:b9:3f: 8f:59:0c:e2:02:35:1d:c2:e8:47:ae:e1:45:6b:30: c7:a6:6d:03:11:7a:d3:01:24:7f:4b:71:55:36:7b: 67:a6:74:16:4a:a3:95:a5:4b:ca:77:a0:86:9b:54: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CB:CD:9E:1B:7F:7A:73:52:C2:33:0F:6B:4B:1A:12:92:74:3B:82 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/usvNnht_enNSwjMPa0saEpJ0O4I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.91.0/24 144.31.0.0/21 144.31.90.0/24 144.31.94.0/24 144.31.125.0/24 144.31.128.0/22 193.23.193.0/24 Signature Algorithm: sha256WithRSAEncryption 09:05:a6:6d:bf:49:ca:00:7f:a2:9f:39:d1:75:57:64:48:4f: 67:5c:8b:dd:83:2d:36:cf:71:47:a0:5b:f1:ed:59:63:12:99: 21:72:46:fa:ab:2b:b0:53:3a:e1:fe:e8:0b:66:8e:32:98:04: a2:1e:fd:66:ea:9a:5e:65:82:8a:7c:99:f5:76:50:9f:38:b0: 1f:3b:ca:0d:00:4b:d9:15:61:cf:5b:2a:0e:a4:dd:ca:5a:51: 13:3d:bd:f8:7d:71:10:7f:d1:65:0d:e7:30:2c:02:63:1a:af: f8:3b:40:98:3d:f8:72:34:e4:76:a6:c5:7b:2b:79:77:cb:a0: de:dd:86:82:36:d6:8a:94:70:0b:ab:48:c6:a7:de:5c:46:b1: 40:61:5b:7e:21:d2:4b:c9:4c:bf:8a:f7:4a:9c:a0:3d:89:bd: 6a:02:f8:dd:64:7d:a9:c7:ca:23:4e:4a:78:3d:71:f4:c4:e1: 92:a6:4b:07:26:2f:4c:b8:2c:a0:dd:55:c8:e1:a6:17:46:80: ea:e8:cc:43:ff:a3:ef:f6:9e:f7:0a:a8:2c:f1:f8:e8:87:d2: 1f:85:e8:27:ea:b7:61:ba:a0:18:e0:31:27:63:fc:11:71:2b: e5:e1:a4:27:75:80:1d:bc:bb:7d:4f:c3:13:0d:de:24:d3:00: 43:2a:c0:3a -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt57IIZ9mayoy45YS2Si2YpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYWNiY2Q5ZTFiN2Y3YTczNTJjMjMzMGY2YjRiMWExMjkyNzQzYjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf3D4ZvXS1zl9owwo03i5QSCl61H BujPsZ7GAE+KPsxIDQDWIIoVRGN1fiM2WlcjzZ//1E4S5ujt4QQKzG9H8jlp+mop HfZi9tvpAWzRMIbjingG/o3nNE+RzwFXWUJ/3RXl3AT2bf25SjulZB0v/ymsecZu aLmY1SOxGziOa4ttu17GEpCfTkmcPWcNHojBoEju1/gpg0EHcpFqGbmOeJjDaUGR xg520fDTTcD6FA94VbhOA3eoQBKPkt8akv9fI5yCDqqM+0xQ14VhtwjIuT+PWQzi AjUdwuhHruFFazDHpm0DEXrTASR/S3FVNntnpnQWSqOVpUvKd6CGm1QrXQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLrLzZ4bf3pzUsIzD2tLGhKSdDuCMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvdXN2Tm5odF9lbk5Td2pNUGEwc2FFcEowTzRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAQLxbAwQD kB8AAwQAkB9aAwQAkB9eAwQAkB99AwQCkB+AAwQAwRfBMA0GCSqGSIb3DQEBCwUA A4IBAQAJBaZtv0nKAH+inznRdVdkSE9nXIvdgy02z3FHoFvx7VljEpkhckb6qyuw Uzrh/ugLZo4ymASiHv1m6ppeZYKKfJn1dlCfOLAfO8oNAEvZFWHPWyoOpN3KWlET Pb34fXEQf9FlDecwLAJjGq/4O0CYPfhyNOR2psV7K3l3y6De3YaCNtaKlHALq0jG p95cRrFAYVt+IdJLyUy/ivdKnKA9ib1qAvjdZH2px8ojTkp4PXH0xOGSpksHJi9M uCyg3VXI4aYXRoDq6MxD/6Pv9p73Cqgs8fjoh9Ifhegn6rdhuqAY4DEnY/wRcSvl 4aQndYAdvLt9T8MTDd4k0wBDKsA6 -----END CERTIFICATE-----Generated at Sun Jan 25 13:42:54 2026 by rpki-client