This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yq6dbN_TIgUzO2pBNc_sSgrl0cE.roa File: yq6dbN_TIgUzO2pBNc_sSgrl0cE.roa (raw, json) Hash identifier: KSviiyrL/OE9+LAVPRh6p3wIasV1lOqUUIEfvY7bRnA= Subject key identifier: CA:AE:9D:6C:DF:D3:22:05:33:3B:6A:41:35:CF:EC:4A:0A:E5:D1:C1 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BEF4E99D6ADBAEB77F64C29A3A6AABE88 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yq6dbN_TIgUzO2pBNc_sSgrl0cE.roa Signing time: Sat 24 Jan 2026 09:21:04 +0000 ROA not before: Sat 24 Jan 2026 09:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215474 IP address blocks: 144.31.126.0/24 maxlen: 24 144.31.215.0/24 maxlen: 24 144.31.230.0/24 maxlen: 24 144.31.249.0/24 maxlen: 24 150.241.64.0/24 maxlen: 24 150.241.65.0/24 maxlen: 24 150.241.68.0/24 maxlen: 24 193.23.194.0/24 maxlen: 24 193.23.201.0/24 maxlen: 24 193.23.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:4e:99:d6:ad:ba:eb:77:f6:4c:29:a3:a6:aa:be:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 24 09:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caae9d6cdfd32205333b6a4135cfec4a0ae5d1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:3c:21:ff:06:ac:87:46:31:ad:9f:40:49: 7e:86:d2:53:46:b5:62:95:6f:98:82:6d:14:cf:69: 26:f1:e9:0e:af:99:cd:49:cf:2a:a2:12:76:ab:ec: f5:5d:4c:41:c3:ba:62:a2:59:07:ed:94:0d:8e:e4: fb:5e:23:8a:94:fe:57:4c:64:4c:cb:5b:27:f4:90: 9a:ee:aa:63:13:b8:82:2b:b4:21:d6:83:87:f7:bf: 99:b8:53:b3:32:f5:a2:dc:72:eb:fb:ff:23:87:af: e7:81:8c:88:7c:7e:61:d5:2c:89:e6:72:a2:36:7d: e4:28:94:de:5a:c7:ed:89:94:ba:82:b8:e9:d3:f3: 83:2f:db:6a:dc:fb:bb:f1:3c:96:c4:d4:14:a2:b9: 8d:ec:d7:d4:0c:97:9f:e9:26:12:f8:cf:15:c3:b7: 2b:4c:a7:92:24:74:12:9c:77:83:a4:dc:7d:cc:98: 1f:22:e4:f0:05:d0:2e:1a:25:7d:81:54:83:81:d0: 77:2c:18:81:2e:70:5b:f2:52:5f:fa:4d:a6:71:d1: 8e:d8:97:ef:ac:0d:88:ce:85:61:8d:30:9b:b3:18: ba:37:50:e2:c6:d1:1f:c8:e1:b3:06:6c:0a:1b:16: 2e:96:1f:33:86:65:1c:ab:12:40:60:4f:4d:e4:11: 03:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:9D:6C:DF:D3:22:05:33:3B:6A:41:35:CF:EC:4A:0A:E5:D1:C1 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/yq6dbN_TIgUzO2pBNc_sSgrl0cE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.126.0/24 144.31.215.0/24 144.31.230.0/24 144.31.249.0/24 150.241.64.0/23 150.241.68.0/24 193.23.194.0/24 193.23.201.0/24 193.23.222.0/24 Signature Algorithm: sha256WithRSAEncryption 85:3a:a3:f7:28:e6:d7:16:bf:bb:32:b7:9a:30:c6:c4:ac:ea: 43:98:01:ca:77:dc:e4:54:4f:65:9d:af:4f:81:b7:a3:09:5c: f5:68:bd:3b:8f:22:ab:6b:d7:06:ea:aa:17:41:f3:14:e7:47: 80:01:c9:5b:41:47:79:04:c8:66:60:f6:7f:11:e6:c8:12:60: f0:7e:61:37:99:6a:4a:00:60:3e:a5:7e:79:ba:ed:ab:3b:63: 82:31:56:1f:7c:d7:9a:e0:de:c7:7a:58:29:11:a4:ef:e9:cb: 41:0f:b4:c5:99:a0:f7:ad:f1:0f:b6:72:37:db:02:d5:b9:32: 4c:ba:cf:5e:3f:bf:fd:db:f4:b2:b0:47:a2:ce:05:8e:2d:4d: fa:eb:52:41:ca:89:1d:59:8c:79:98:58:d6:09:27:88:e8:47: 97:bd:97:25:78:81:a7:9d:ff:38:78:5e:35:c1:a7:96:7f:83: 7a:91:ee:9b:c7:9b:d6:08:78:9a:4f:da:05:d9:58:56:2a:34: ef:57:87:df:77:52:89:32:1f:59:c5:5b:1e:f7:9a:1d:2b:4f: 95:32:c5:62:0f:cc:e0:45:c6:3d:1b:89:a2:86:1d:52:da:4d: 9a:74:f0:a3:fa:75:55:28:75:93:9f:3a:27:08:97:fa:b0:2f: 49:67:2f:1a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvvTpnWrbrrd/ZMKaOmqr6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTI0MDkyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWFlOWQ2Y2RmZDMyMjA1MzMzYjZhNDEzNWNmZWM0YTBhZTVkMWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlw8If8GrIdGMa2fQEl+htJTRrVi lW+Ygm0Uz2km8ekOr5nNSc8qohJ2q+z1XUxBw7piolkH7ZQNjuT7XiOKlP5XTGRM y1sn9JCa7qpjE7iCK7Qh1oOH97+ZuFOzMvWi3HLr+/8jh6/ngYyIfH5h1SyJ5nKi Nn3kKJTeWsftiZS6grjp0/ODL9tq3Pu78TyWxNQUormN7NfUDJef6SYS+M8Vw7cr TKeSJHQSnHeDpNx9zJgfIuTwBdAuGiV9gVSDgdB3LBiBLnBb8lJf+k2mcdGO2Jfv rA2IzoVhjTCbsxi6N1DixtEfyOGzBmwKGxYulh8zhmUcqxJAYE9N5BEDOwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFMqunWzf0yIFMztqQTXP7EoK5dHBMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEveXE2ZGJOX1RJZ1V6TzJwQk5jX3NTZ3JsMGNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAkB9+AwQA kB/XAwQAkB/mAwQAkB/5AwQBlvFAAwQAlvFEAwQAwRfCAwQAwRfJAwQAwRfeMA0G CSqGSIb3DQEBCwUAA4IBAQCFOqP3KObXFr+7MreaMMbErOpDmAHKd9zkVE9lna9P gbejCVz1aL07jyKra9cG6qoXQfMU50eAAclbQUd5BMhmYPZ/EebIEmDwfmE3mWpK AGA+pX55uu2rO2OCMVYffNea4N7HelgpEaTv6ctBD7TFmaD3rfEPtnI32wLVuTJM us9eP7/92/SysEeizgWOLU3661JByokdWYx5mFjWCSeI6EeXvZcleIGnnf84eF41 waeWf4N6ke6bx5vWCHiaT9oF2VhWKjTvV4ffd1KJMh9ZxVse95odK0+VMsViD8zg RcY9G4mihh1S2k2adPCj+nVVKHWTnzonCJf6sC9JZy8a -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:09 2026 by rpki-client