This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v_yWUNVDqqK8xAbX0jqettAQD-k.roa File: v_yWUNVDqqK8xAbX0jqettAQD-k.roa (raw, json) Hash identifier: x/t9gMaavznkdDy2sz6vY0Jhoy1nYHPEadCR6xAIzLg= Subject key identifier: BF:FC:96:50:D5:43:AA:A2:BC:C4:06:D7:D2:3A:9E:B6:D0:10:0F:E9 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC7142393FFD671C03C28D4CECE49D Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v_yWUNVDqqK8xAbX0jqettAQD-k.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212743 IP address blocks: 144.31.12.0/24 maxlen: 24 144.31.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:71:42:39:3f:fd:67:1c:03:c2:8d:4c:ec:e4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bffc9650d543aaa2bcc406d7d23a9eb6d0100fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:13:fe:52:5c:d9:e2:63:f1:90:95:70:51:ff: 21:ba:dd:fe:9a:59:59:e6:6b:5e:75:c4:b0:b5:6e: 7a:75:59:d5:98:2e:ed:23:b8:a7:8f:4d:51:49:9b: fd:9c:ef:65:fe:ce:0f:6f:5a:0d:27:f5:91:83:00: 2c:ce:73:dd:ce:c9:09:08:ce:ea:bf:2a:38:8b:02: df:3b:da:40:72:81:1b:59:e7:47:4c:ba:5d:37:9c: 67:8b:d3:07:8d:48:e7:99:36:ac:6b:65:93:d0:36: 40:32:68:30:38:66:b0:9c:ca:81:36:bf:88:79:00: 49:72:ca:33:4a:aa:a4:80:a5:5e:91:30:3f:a6:5c: f1:88:dd:bd:a4:92:24:c4:df:c2:84:d2:5a:d6:72: e7:3c:83:e0:56:67:06:6e:b6:63:bd:69:1a:d3:40: 28:c9:e3:42:4e:de:b9:85:2e:44:8e:7a:05:e5:1b: 7a:99:fe:38:1d:40:c4:fa:70:9c:36:16:67:44:f5: 02:8b:1b:ba:f8:a0:12:58:0f:42:ad:ee:c8:4b:cd: 57:7b:0e:31:4e:20:90:59:00:f7:61:70:e4:fd:5d: 6c:7a:03:01:fc:a6:b5:23:5d:83:9b:45:6d:31:58: 76:51:0e:08:52:6b:94:3f:a2:19:57:b2:1b:2f:e8: 4b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FC:96:50:D5:43:AA:A2:BC:C4:06:D7:D2:3A:9E:B6:D0:10:0F:E9 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/v_yWUNVDqqK8xAbX0jqettAQD-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.12.0/24 144.31.191.0/24 Signature Algorithm: sha256WithRSAEncryption 45:94:3e:1f:92:69:29:11:d8:91:24:cc:eb:95:e1:8d:33:1a: 12:65:ef:ee:cc:9e:b9:12:27:c8:a8:5c:b7:55:e3:48:1d:31: 20:f7:85:ea:cc:2e:f9:f0:1e:03:3f:8d:44:7a:06:de:ff:a1: a8:0d:fb:09:21:9a:47:6b:b3:ee:24:71:d1:78:b0:3f:88:e8: d0:85:a8:52:11:fb:3d:67:f2:b9:60:04:e4:84:95:29:0d:87: 9d:13:42:1a:a4:22:f6:db:66:34:44:51:d8:8a:15:c0:67:82: a4:2d:26:d9:99:64:e0:de:0c:e5:02:da:bc:e8:67:d5:15:f6: 2a:85:30:43:22:94:7d:d8:4b:71:a3:78:01:09:f8:0d:c5:1f: 0e:ee:f1:62:39:71:67:82:1a:e3:96:72:83:d9:ff:4f:c6:c7: c4:aa:ea:3d:c3:cb:45:ef:30:ed:d1:80:d0:49:a2:29:f0:ef: 40:cb:e3:4b:fa:b6:41:ef:fd:ba:01:49:47:70:2b:7b:9f:39: 04:ba:0d:0c:44:cf:d9:02:bf:69:41:66:e1:e8:61:ea:97:e2: 63:e7:fe:1b:7e:c4:af:24:dd:98:bd:ef:f4:b3:97:8c:c0:28: 65:be:a0:40:fb:1a:2c:05:b0:dd:1d:c8:e3:36:b1:96:78:66: 5a:08:12:a5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57HFCOT/9ZxwDwo1M7OSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmZjOTY1MGQ1NDNhYWEyYmNjNDA2ZDdkMjNhOWViNmQwMTAwZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hP+UlzZ4mPxkJVwUf8hut3+mllZ 5mtedcSwtW56dVnVmC7tI7inj01RSZv9nO9l/s4Pb1oNJ/WRgwAsznPdzskJCM7q vyo4iwLfO9pAcoEbWedHTLpdN5xni9MHjUjnmTasa2WT0DZAMmgwOGawnMqBNr+I eQBJcsozSqqkgKVekTA/plzxiN29pJIkxN/ChNJa1nLnPIPgVmcGbrZjvWka00Ao yeNCTt65hS5EjnoF5Rt6mf44HUDE+nCcNhZnRPUCixu6+KASWA9Cre7IS81Xew4x TiCQWQD3YXDk/V1segMB/Ka1I12Dm0VtMVh2UQ4IUmuUP6IZV7IbL+hLAwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL/8llDVQ6qivMQG19I6nrbQEA/pMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvdl95V1VOVkRxcUs4eEFiWDBqcWV0dEFRRC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkB8MAwQA kB+/MA0GCSqGSIb3DQEBCwUAA4IBAQBFlD4fkmkpEdiRJMzrleGNMxoSZe/uzJ65 EifIqFy3VeNIHTEg94XqzC758B4DP41Eegbe/6GoDfsJIZpHa7PuJHHReLA/iOjQ hahSEfs9Z/K5YATkhJUpDYedE0IapCL222Y0RFHYihXAZ4KkLSbZmWTg3gzlAtq8 6GfVFfYqhTBDIpR92Etxo3gBCfgNxR8O7vFiOXFnghrjlnKD2f9PxsfEquo9w8tF 7zDt0YDQSaIp8O9Ay+NL+rZB7/26AUlHcCt7nzkEug0MRM/ZAr9pQWbh6GHql+Jj 5/4bfsSvJN2Yve/0s5eMwChlvqBA+xosBbDdHcjjNrGWeGZaCBKl -----END CERTIFICATE-----Generated at Sun Jan 25 12:46:01 2026 by rpki-client