This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wHEzLlXt8k8D8CR_B4JKhOdYuI8.roa File: wHEzLlXt8k8D8CR_B4JKhOdYuI8.roa (raw, json) Hash identifier: QqyrfScrUEYRVIO7rR9PE1asPcIDCF9ryYjgxmqGel4= Subject key identifier: C0:71:33:2E:55:ED:F2:4F:03:F0:24:7F:07:82:4A:84:E7:58:B8:8F Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AF55E9D3674E5F81D3F3F1B73B8DD48BD Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wHEzLlXt8k8D8CR_B4JKhOdYuI8.roa Signing time: Sat 06 Dec 2025 20:33:29 +0000 ROA not before: Sat 06 Dec 2025 20:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213877 IP address blocks: 64.188.73.0/24 maxlen: 24 64.188.75.0/24 maxlen: 24 64.188.92.0/22 maxlen: 24 64.188.96.0/24 maxlen: 24 64.188.97.0/24 maxlen: 24 64.188.112.0/23 maxlen: 24 64.188.124.0/24 maxlen: 24 64.188.125.0/24 maxlen: 24 64.188.126.0/24 maxlen: 24 77.239.104.0/24 maxlen: 24 77.239.105.0/24 maxlen: 24 77.239.122.0/24 maxlen: 24 77.239.123.0/24 maxlen: 24 144.31.26.0/23 maxlen: 24 144.31.64.0/22 maxlen: 24 144.31.68.0/22 maxlen: 24 144.31.72.0/22 maxlen: 24 144.31.76.0/22 maxlen: 24 144.31.86.0/23 maxlen: 24 144.31.89.0/24 maxlen: 24 144.31.104.0/23 maxlen: 24 144.31.120.0/23 maxlen: 24 144.31.137.0/24 maxlen: 24 144.31.192.0/23 maxlen: 24 144.31.198.0/23 maxlen: 24 144.31.246.0/23 maxlen: 24 150.241.105.0/24 maxlen: 24 150.241.108.0/24 maxlen: 24 150.241.123.0/24 maxlen: 24 185.184.122.0/24 maxlen: 24 185.184.123.0/24 maxlen: 24 185.207.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:5e:9d:36:74:e5:f8:1d:3f:3f:1b:73:b8:dd:48:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 6 20:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c071332e55edf24f03f0247f07824a84e758b88f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:f7:9b:80:0d:d8:6b:90:00:af:66:58:a2: 87:60:62:d6:ff:e7:28:dd:98:fd:71:34:2a:42:15: 69:f9:db:e7:29:b3:43:88:70:60:ed:62:44:bc:48: df:80:b6:a0:b2:47:32:18:27:63:39:d9:3f:24:b5: 77:3a:9c:d6:47:96:ba:c6:37:e8:8a:a2:9b:e0:6e: 5c:22:9d:39:ba:14:45:25:10:85:02:ad:89:e9:7d: c0:b3:25:20:d5:81:8a:ed:99:72:3d:24:eb:43:83: c6:9b:8e:76:5f:34:26:e5:c4:f8:75:aa:a2:d5:3f: ad:ce:98:6c:e5:2b:e2:ea:16:5d:fd:b2:f2:ad:28: 71:3b:69:04:e6:5f:bf:dd:4f:29:97:57:97:1e:a7: 2d:71:d7:ba:f6:ae:b1:53:88:94:e1:dd:f5:51:8b: 49:ae:bc:bb:5c:9b:d5:84:9c:45:ca:7a:41:2e:bb: c4:85:8a:4d:34:4c:75:73:de:f1:f0:5f:64:26:01: 2c:ac:dc:ec:2e:a7:36:43:f4:1e:1a:a7:3f:25:2f: 0c:29:52:84:a1:4f:24:39:ad:bc:e2:bd:21:69:bc: f1:0f:81:ce:4d:72:56:21:52:74:87:cf:bb:3f:f0: b4:40:a1:c3:e4:c5:31:6b:69:70:dc:0f:03:71:c2: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:71:33:2E:55:ED:F2:4F:03:F0:24:7F:07:82:4A:84:E7:58:B8:8F X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wHEzLlXt8k8D8CR_B4JKhOdYuI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.73.0/24 64.188.75.0/24 64.188.92.0-64.188.97.255 64.188.112.0/23 64.188.124.0-64.188.126.255 77.239.104.0/23 77.239.122.0/23 144.31.26.0/23 144.31.64.0/20 144.31.86.0/23 144.31.89.0/24 144.31.104.0/23 144.31.120.0/23 144.31.137.0/24 144.31.192.0/23 144.31.198.0/23 144.31.246.0/23 150.241.105.0/24 150.241.108.0/24 150.241.123.0/24 185.184.122.0/23 185.207.133.0/24 Signature Algorithm: sha256WithRSAEncryption 00:9b:e6:6a:27:92:3e:85:ef:39:da:66:1a:5b:33:c1:d1:56: 34:f2:ea:c2:a9:25:93:74:b0:a9:3f:a9:42:ab:ef:b6:d8:47: e8:3d:5f:73:04:33:90:7d:a4:76:3c:ae:5d:be:3f:78:70:f1: 89:81:3d:7c:7b:ab:ef:1f:77:a3:53:31:54:83:87:58:18:3f: 71:72:a0:44:d4:53:27:a7:5d:dd:5c:f1:e9:0b:b5:da:8e:0b: fa:45:72:fd:38:54:6c:44:65:d2:2b:16:cd:04:f3:1e:a2:14: 39:3e:bc:7f:65:f6:53:eb:31:40:4b:c5:cc:cd:7b:2d:47:3d: 04:d1:9f:38:45:7f:b8:c7:68:64:7f:3f:e5:d4:6c:5f:c3:5f: 93:68:ee:73:37:62:55:9b:a8:36:8e:78:7e:8d:44:6e:15:50: 08:86:9a:d6:82:f7:57:91:17:0d:2d:d1:90:5e:8e:2b:33:2a: be:91:c1:5a:16:df:61:9b:07:ad:bd:85:f8:c8:78:54:9d:06: 37:f3:91:62:39:e4:20:f6:4b:d9:5c:9c:0d:ae:65:87:4c:58: f1:cd:4d:6c:5e:73:ff:bb:43:e3:5c:48:cb:48:2b:c6:c2:33: bd:51:e0:06:b0:61:34:72:c7:4d:68:44:2a:ca:ea:7c:00:6e: 5e:6e:66:79 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgISAZr1Xp02dOX4HT8/G3O43Ui9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjA2MjAzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDcxMzMyZTU1ZWRmMjRmMDNmMDI0N2YwNzgyNGE4NGU3NThiODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY33m4AN2GuQAK9mWKKHYGLW/+co 3Zj9cTQqQhVp+dvnKbNDiHBg7WJEvEjfgLagskcyGCdjOdk/JLV3OpzWR5a6xjfo iqKb4G5cIp05uhRFJRCFAq2J6X3AsyUg1YGK7ZlyPSTrQ4PGm452XzQm5cT4daqi 1T+tzphs5Svi6hZd/bLyrShxO2kE5l+/3U8pl1eXHqctcde69q6xU4iU4d31UYtJ rry7XJvVhJxFynpBLrvEhYpNNEx1c97x8F9kJgEsrNzsLqc2Q/QeGqc/JS8MKVKE oU8kOa284r0habzxD4HOTXJWIVJ0h8+7P/C0QKHD5MUxa2lw3A8DccIFRwIDAQAB o4ICnDCCApgwHQYDVR0OBBYEFMBxMy5V7fJPA/AkfweCSoTnWLiPMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvd0hFekxsWHQ4azhEOENSX0I0SktoT2RZdUk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBABA vEkDBABAvEswDAMEAkC8XAMEAUC8YAMEAUC8cDAMAwQCQLx8AwQAQLx+AwQBTe9o AwQBTe96AwQBkB8aAwQEkB9AAwQBkB9WAwQAkB9ZAwQBkB9oAwQBkB94AwQAkB+J AwQBkB/AAwQBkB/GAwQBkB/2AwQAlvFpAwQAlvFsAwQAlvF7AwQBubh6AwQAuc+F MA0GCSqGSIb3DQEBCwUAA4IBAQAAm+ZqJ5I+he852mYaWzPB0VY08urCqSWTdLCp P6lCq++22EfoPV9zBDOQfaR2PK5dvj94cPGJgT18e6vvH3ejUzFUg4dYGD9xcqBE 1FMnp13dXPHpC7Xajgv6RXL9OFRsRGXSKxbNBPMeohQ5Prx/ZfZT6zFAS8XMzXst Rz0E0Z84RX+4x2hkfz/l1Gxfw1+TaO5zN2JVm6g2jnh+jURuFVAIhprWgvdXkRcN LdGQXo4rMyq+kcFaFt9hmwetvYX4yHhUnQY385FiOeQg9kvZXJwNrmWHTFjxzU1s XnP/u0PjXEjLSCvGwjO9UeAGsGE0csdNaEQqyup8AG5ebmZ5 -----END CERTIFICATE-----Generated at Sun Dec 7 05:56:47 2025 by rpki-client