This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1yEuy4--LpEjZMwcGU4XYRQtK8k.roa
File: 1yEuy4--LpEjZMwcGU4XYRQtK8k.roa (raw, json)
Hash identifier: y6OhFCsGp+jONFOI59qoKWFku0DzfMF9GX10vYtd6ZI=
Subject key identifier: D7:21:2E:CB:8F:BE:2E:91:23:64:CC:1C:19:4E:17:61:14:2D:2B:C9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C05AD9F0E329DC30C61FC9F050C320106
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1yEuy4--LpEjZMwcGU4XYRQtK8k.roa
Signing time: Wed 28 Jan 2026 17:36:30 +0000
ROA not before: Wed 28 Jan 2026 17:36:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 144.31.169.0/24 maxlen: 24
144.31.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:05:ad:9f:0e:32:9d:c3:0c:61:fc:9f:05:0c:32:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 28 17:36:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d7212ecb8fbe2e912364cc1c194e1761142d2bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:51:d7:56:78:fe:c7:34:36:1c:4c:17:a4:
4c:cd:09:77:48:77:a3:81:60:9e:40:80:35:3e:b7:
55:ca:40:38:03:5f:ad:82:1b:79:f6:04:a2:10:c3:
ca:dd:6a:c0:e5:6c:7c:8e:24:95:75:0d:cf:2e:69:
fa:c9:1d:40:4c:70:20:d9:33:66:c6:14:f5:1d:54:
05:72:e9:b6:6a:a1:70:e7:d9:b8:d3:43:bc:f7:81:
dc:1b:86:86:72:82:28:5e:e5:ac:43:0a:7e:05:24:
ff:2c:e2:3f:36:ff:33:03:9c:02:cf:c2:6b:bb:76:
82:b9:35:5c:7c:c9:7c:10:c0:5a:e8:d7:8c:28:ee:
08:6b:16:72:10:6c:a5:14:44:b3:e5:61:e1:20:00:
33:bf:c0:d0:cc:e2:1c:2d:bf:cc:7f:c4:17:66:61:
91:e1:4b:d4:49:76:61:c3:a1:69:7d:bc:dc:bb:7a:
23:1e:d9:b8:6e:97:e1:cb:54:72:8b:f7:5f:21:dd:
4f:9f:7a:2e:a3:2b:13:88:27:5d:e2:92:2f:fe:ba:
d5:82:da:31:f3:c9:96:d2:03:96:57:65:ab:20:98:
e1:69:58:49:2e:6a:59:98:8a:07:7b:4b:66:ec:f6:
2f:60:f6:8e:07:dd:c5:40:ae:f5:3b:4e:74:53:2a:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:2E:CB:8F:BE:2E:91:23:64:CC:1C:19:4E:17:61:14:2D:2B:C9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1yEuy4--LpEjZMwcGU4XYRQtK8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.169.0/24
144.31.238.0/24
Signature Algorithm: sha256WithRSAEncryption
86:0d:21:c0:6c:89:c0:d8:7c:d2:7f:85:66:72:3f:26:c6:18:
2e:dc:0f:d9:3a:60:b6:af:36:67:72:84:ac:03:c8:8d:2c:92:
4d:f5:b2:a0:92:f6:c7:c1:7c:8b:d7:93:0c:eb:df:f1:06:6b:
09:69:45:75:2c:7f:fd:ba:53:fb:16:1d:5d:e4:db:5d:62:32:
0c:64:b2:f0:93:cc:a3:d0:bb:7f:4a:b9:8d:0f:39:60:df:c7:
ba:e5:67:e2:e3:cf:35:c7:5c:80:56:44:d7:da:b7:a0:7f:76:
e7:d4:e4:e1:35:49:03:91:89:e0:b7:dc:6b:88:30:17:9f:19:
0b:7f:28:61:fa:a3:4b:0e:8d:76:e2:c2:49:5f:59:69:ac:30:
98:4e:15:8b:42:66:d6:4e:11:5c:b8:10:8c:f1:9a:89:5b:14:
96:61:2c:b0:1e:0f:3d:83:43:07:82:7a:1c:82:b4:f7:11:ff:
1e:3a:6d:65:8a:fe:92:f1:19:17:27:9d:cd:94:92:a5:47:a1:
1a:fa:90:bc:84:b6:69:3f:e0:ed:f3:89:32:1f:93:7a:45:11:
d3:56:2c:a4:70:88:06:3a:d0:4e:65:2f:d6:64:00:d9:54:a5:
7d:f7:e6:fc:86:35:7b:34:85:6f:ae:92:3b:02:82:76:ab:16:
35:31:8c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:03:37 2026 by rpki-client