This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w4UtWj-_4zdGuBoMTP1_TwGeTlY.roa File: w4UtWj-_4zdGuBoMTP1_TwGeTlY.roa (raw, json) Hash identifier: DTfpLOMhicbzkUxzUG6F4myaiIuPRnpfl/09yEU26DQ= Subject key identifier: C3:85:2D:5A:3F:BF:E3:37:46:B8:1A:0C:4C:FD:7F:4F:01:9E:4E:56 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BEC0DDF8FA0079E625FF2E4C33A4F8FFF Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w4UtWj-_4zdGuBoMTP1_TwGeTlY.roa Signing time: Fri 23 Jan 2026 18:11:30 +0000 ROA not before: Fri 23 Jan 2026 18:11:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 64.188.115.0/24 maxlen: 24 77.239.127.0/24 maxlen: 24 144.31.98.0/24 maxlen: 24 144.31.180.0/22 maxlen: 24 144.31.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:0d:df:8f:a0:07:9e:62:5f:f2:e4:c3:3a:4f:8f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 23 18:11:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3852d5a3fbfe33746b81a0c4cfd7f4f019e4e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:51:58:2f:e6:9b:8b:79:07:c8:df:2e:0b: 07:24:d6:b8:ad:45:b4:72:28:24:c4:87:64:21:63: 7c:95:6a:98:63:00:24:3a:ad:23:1d:37:a8:92:c2: e1:7a:77:c3:0c:76:71:85:31:08:ee:27:96:a6:3e: 5f:28:f0:7a:de:f7:5f:f2:2c:6d:12:fa:28:16:39: b1:1a:45:3e:6f:1d:78:82:9b:42:ef:4e:82:3a:13: 73:06:e3:a9:17:2b:7f:1a:ab:55:0c:b9:1f:14:4c: 6a:7c:be:9a:7a:c8:c4:f2:2f:67:ce:ea:10:15:ea: b3:eb:f7:95:11:f8:df:04:22:d5:d4:7e:cd:fd:b4: 08:11:17:7f:1d:66:30:3d:d2:b8:3e:a8:05:39:55: 21:67:83:f2:57:83:ff:24:4c:e1:8e:c5:d0:5b:58: aa:28:2c:e5:5b:44:87:c3:95:29:1f:9d:2b:01:8b: 21:82:52:d0:8b:ed:c0:a5:67:ea:68:56:6b:ac:d8: 9b:bb:04:81:2b:e2:38:45:bf:68:2c:b8:22:65:1a: 8c:3e:e5:cd:8e:93:29:de:df:4c:6f:16:96:c1:d1: 03:70:13:ed:64:08:0c:00:c8:53:6a:b1:d3:63:2c: 2f:71:55:41:3a:8c:ad:a6:b3:bf:3b:fd:01:28:7d: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:85:2D:5A:3F:BF:E3:37:46:B8:1A:0C:4C:FD:7F:4F:01:9E:4E:56 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/w4UtWj-_4zdGuBoMTP1_TwGeTlY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.115.0/24 77.239.127.0/24 144.31.98.0/24 144.31.180.0/22 144.31.251.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:5f:d9:c5:ac:fb:37:57:65:79:e8:f3:d7:7f:0d:e3:aa:11: 16:98:85:32:0b:a1:de:2c:24:f0:b7:ae:a7:13:d6:ab:cb:f5: 0a:59:64:ce:19:b8:d5:48:5a:2d:1d:ac:57:6a:09:99:23:f8: e2:cd:5c:34:76:ad:a4:0b:35:77:7f:99:ae:d7:c1:75:59:01: 66:63:0d:e8:fc:10:e0:58:ad:60:e5:a7:5f:4d:25:6a:60:5a: a0:f0:1f:13:73:a9:8d:51:9a:73:12:f2:81:75:2b:56:57:c1: 17:63:86:73:96:3e:8d:22:ae:a8:b2:19:ab:af:cc:cd:ab:30: 9d:98:98:3d:52:2e:f8:34:41:44:2e:a1:df:a0:79:4c:82:91: fe:e5:81:42:f3:43:f2:40:a6:b2:9e:09:17:e0:6c:f1:59:c1: dd:b3:e1:31:5c:f7:14:5d:ea:92:14:9b:79:07:b3:92:4f:76: 48:ec:ff:ba:b4:13:03:0a:62:89:30:a6:39:54:ca:f1:01:52: 07:2a:6b:60:93:5a:ff:5b:74:27:db:7d:5a:8e:98:f7:d2:ee: eb:4e:6f:4a:90:0d:60:82:51:02:91:ce:6a:9a:f0:ac:71:36: 5c:db:e7:a7:62:fe:96:99:b1:ac:45:2a:69:d4:33:dc:70:79: a6:95:1e:56 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvsDd+PoAeeYl/y5MM6T4//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTIzMTgxMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzg1MmQ1YTNmYmZlMzM3NDZiODFhMGM0Y2ZkN2Y0ZjAxOWU0ZTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5BRWC/mm4t5B8jfLgsHJNa4rUW0 cigkxIdkIWN8lWqYYwAkOq0jHTeoksLhenfDDHZxhTEI7ieWpj5fKPB63vdf8ixt EvooFjmxGkU+bx14gptC706COhNzBuOpFyt/GqtVDLkfFExqfL6aesjE8i9nzuoQ Feqz6/eVEfjfBCLV1H7N/bQIERd/HWYwPdK4PqgFOVUhZ4PyV4P/JEzhjsXQW1iq KCzlW0SHw5UpH50rAYshglLQi+3ApWfqaFZrrNibuwSBK+I4Rb9oLLgiZRqMPuXN jpMp3t9MbxaWwdEDcBPtZAgMAMhTarHTYywvcVVBOoytprO/O/0BKH2wLQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMOFLVo/v+M3RrgaDEz9f08Bnk5WMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvdzRVdFdqLV80emRHdUJvTVRQMV9Ud0dlVGxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQLxzAwQA Te9/AwQAkB9iAwQCkB+0AwQAkB/7MA0GCSqGSIb3DQEBCwUAA4IBAQAPX9nFrPs3 V2V56PPXfw3jqhEWmIUyC6HeLCTwt66nE9ary/UKWWTOGbjVSFotHaxXagmZI/ji zVw0dq2kCzV3f5mu18F1WQFmYw3o/BDgWK1g5adfTSVqYFqg8B8Tc6mNUZpzEvKB dStWV8EXY4Zzlj6NIq6oshmrr8zNqzCdmJg9Ui74NEFELqHfoHlMgpH+5YFC80Py QKayngkX4GzxWcHds+ExXPcUXeqSFJt5B7OST3ZI7P+6tBMDCmKJMKY5VMrxAVIH Kmtgk1r/W3Qn231ajpj30u7rTm9KkA1gglECkc5qmvCscTZc2+enYv6WmbGsRSpp 1DPccHmmlR5W -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:21 2026 by rpki-client