This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-UidPDiH_sRrCcg0GO8Qw3a3WGs.roa File: 1-UidPDiH_sRrCcg0GO8Qw3a3WGs.roa (raw, json) Hash identifier: fnZ86VLFOKGO8MZ8E9HB9RDCD6IUjjxutsWfltgNnH4= Subject key identifier: F9:48:9D:3C:38:87:FE:C4:6B:09:C8:34:18:EF:10:C3:76:B7:58:6B Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C062A23C78239E1A17FA776FD6F6807B0 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-UidPDiH_sRrCcg0GO8Qw3a3WGs.roa Signing time: Wed 28 Jan 2026 19:52:30 +0000 ROA not before: Wed 28 Jan 2026 19:52:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33842 IP address blocks: 144.31.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:06:2a:23:c7:82:39:e1:a1:7f:a7:76:fd:6f:68:07:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 28 19:52:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9489d3c3887fec46b09c83418ef10c376b7586b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:63:fe:3a:64:58:05:d8:17:6d:fc:39:6d: 00:6e:24:8a:5a:c0:e6:97:d0:a2:bc:f6:89:be:fb: 87:a9:59:3c:0b:1d:f4:29:c2:53:ec:56:4e:f0:7d: 17:56:45:35:9b:9c:b6:ac:d2:92:5b:cd:06:9e:c8: 56:40:ce:f3:d5:25:dd:0b:53:fe:57:f2:12:e1:66: 76:91:72:3d:05:b3:0e:2e:f4:ed:cf:7d:6c:f8:8f: 4b:80:d1:7a:94:8f:f7:a1:09:c7:23:2c:c3:d6:c4: 6f:f5:96:5a:43:28:20:ae:60:20:73:33:eb:a5:42: 03:62:55:98:e7:5c:c0:e8:ca:bc:44:40:43:27:11: 9b:4e:6d:3c:45:8a:0f:d3:cf:34:0a:36:e3:cc:37: 8d:9a:ee:d5:36:0d:93:fc:46:76:69:36:b3:4d:0b: e5:ed:a7:89:56:2c:33:03:7e:b1:c6:3c:d1:a8:a3: 98:eb:9f:50:a0:6d:8b:3c:32:21:ed:dd:8b:3a:1d: 78:18:3e:6d:f5:9f:2d:44:96:b1:c6:3b:6d:14:17: ea:0d:89:04:34:2f:bf:c9:20:73:83:86:7c:d8:e3: b0:9c:80:4e:24:d2:d1:d4:fa:52:10:c6:5d:3f:c9: a1:f7:a6:f5:6e:18:56:7b:35:89:4f:58:5d:77:db: cc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:48:9D:3C:38:87:FE:C4:6B:09:C8:34:18:EF:10:C3:76:B7:58:6B X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-UidPDiH_sRrCcg0GO8Qw3a3WGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.48.0/24 Signature Algorithm: sha256WithRSAEncryption 15:84:d1:19:3e:63:00:f2:9e:65:76:12:05:b4:45:25:e0:17: e1:66:d6:26:77:a2:d2:d3:53:9c:10:63:4a:9b:55:16:96:10: da:d7:c8:d6:a3:0f:d0:de:a1:4e:24:5b:5d:97:eb:d1:d9:c2: a4:e6:aa:27:67:29:dd:b2:21:ce:85:9f:d6:41:06:2d:36:97: 9d:13:8e:ea:4d:61:b8:a5:33:0b:be:5a:fe:e1:1f:1b:04:a3: 52:d9:5e:b0:c5:41:a4:21:ab:19:18:2e:5b:f4:79:0d:86:d4: 1d:21:d7:2e:f3:7f:2c:ed:f9:08:ab:1c:87:d8:6a:ef:44:a0: 45:46:59:76:c1:fe:8f:f1:bf:2c:1f:31:09:6d:29:d4:b2:27: 21:6e:26:3d:8c:3e:f6:1f:1d:ac:8a:49:0b:24:ed:0a:c6:c9: 6c:96:42:81:70:a0:a2:e7:45:bc:b6:d2:45:90:79:34:96:b9: 9b:d8:52:86:67:7f:e2:92:29:1c:55:51:a3:30:93:9d:1d:e1: a2:56:2a:d9:1b:77:37:3b:fb:57:c7:61:25:12:f4:0f:b0:5e: 97:f8:24:12:24:c9:44:fa:14:45:69:f5:cc:be:52:f5:d5:f9: 46:d7:f6:a4:27:e0:81:ee:9a:fc:63:1c:24:5a:f3:63:85:a2: f0:c8:74:d7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZwGKiPHgjnhoX+ndv1vaAewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTI4MTk1MjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTQ4OWQzYzM4ODdmZWM0NmIwOWM4MzQxOGVmMTBjMzc2Yjc1ODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39Jj/jpkWAXYF238OW0AbiSKWsDm l9CivPaJvvuHqVk8Cx30KcJT7FZO8H0XVkU1m5y2rNKSW80GnshWQM7z1SXdC1P+ V/IS4WZ2kXI9BbMOLvTtz31s+I9LgNF6lI/3oQnHIyzD1sRv9ZZaQyggrmAgczPr pUIDYlWY51zA6Mq8REBDJxGbTm08RYoP0880CjbjzDeNmu7VNg2T/EZ2aTazTQvl 7aeJViwzA36xxjzRqKOY659QoG2LPDIh7d2LOh14GD5t9Z8tRJaxxjttFBfqDYkE NC+/ySBzg4Z82OOwnIBOJNLR1PpSEMZdP8mh96b1bhhWezWJT1hdd9vMhwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPlInTw4h/7EawnINBjvEMN2t1hrMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvMS1VaWRQRGlIX3NSckNjZzBHTzhRdzNhM1dHcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvMzhmMTI4LWVhODItNDU1NS1iNTE0LTE0Mzk2N2E4ZmUw OC8xL0hKWS1QU0tFZlVac0ppd2doNHduZ05pRUFBTS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJAfMDAN BgkqhkiG9w0BAQsFAAOCAQEAFYTRGT5jAPKeZXYSBbRFJeAX4WbWJnei0tNTnBBj SptVFpYQ2tfI1qMP0N6hTiRbXZfr0dnCpOaqJ2cp3bIhzoWf1kEGLTaXnROO6k1h uKUzC75a/uEfGwSjUtlesMVBpCGrGRguW/R5DYbUHSHXLvN/LO35CKsch9hq70Sg RUZZdsH+j/G/LB8xCW0p1LInIW4mPYw+9h8drIpJCyTtCsbJbJZCgXCgoudFvLbS RZB5NJa5m9hShmd/4pIpHFVRozCTnR3holYq2Rt3Nzv7V8dhJRL0D7Bel/gkEiTJ RPoURWn1zL5S9dX5Rtf2pCfgge6a/GMcJFrzY4Wi8Mh01w== -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:14 2026 by rpki-client