This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4YLe7DXWMU8kT5VHmXIPjjEFHRQ.roa File: 4YLe7DXWMU8kT5VHmXIPjjEFHRQ.roa (raw, json) Hash identifier: rtGZ+po8KU4IQlZMRJEJA6SFmYgMsCnTnc3pASvbIi0= Subject key identifier: E1:82:DE:EC:35:D6:31:4F:24:4F:95:47:99:72:0F:8E:31:05:1D:14 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C1BE4E13DFD7DBB7F352EE7D047E7D8E2 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4YLe7DXWMU8kT5VHmXIPjjEFHRQ.roa Signing time: Mon 02 Feb 2026 01:08:30 +0000 ROA not before: Mon 02 Feb 2026 01:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210457 IP address blocks: 144.31.12.0/24 maxlen: 24 144.31.25.0/24 maxlen: 24 144.31.106.0/24 maxlen: 24 144.31.136.0/24 maxlen: 24 144.31.169.0/24 maxlen: 24 144.31.221.0/24 maxlen: 24 150.241.66.0/24 maxlen: 24 193.23.199.0/24 maxlen: 24 193.23.209.0/24 maxlen: 24 193.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:e4:e1:3d:fd:7d:bb:7f:35:2e:e7:d0:47:e7:d8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Feb 2 01:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e182deec35d6314f244f954799720f8e31051d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:71:ae:cf:fc:1e:c0:f4:26:67:59:44:53: 93:bf:ee:3b:49:04:23:8b:8b:f3:23:85:95:6e:e1: a3:af:ab:97:24:f8:1a:0f:3b:9f:fe:3c:e8:7f:5b: b6:d1:ff:c0:19:46:8e:cb:b4:4e:77:a7:fc:9f:47: 5c:9f:e5:28:5a:11:48:23:7e:ca:18:67:6c:eb:76: 37:a1:a2:0f:19:26:ef:fe:27:52:80:0a:98:75:34: d4:eb:b6:90:37:02:d5:cd:af:ee:14:8b:71:14:8f: 80:aa:06:12:0a:4c:10:7f:f4:88:95:f3:31:0a:08: 2e:64:3a:53:54:55:df:de:51:dd:ad:69:09:16:c1: 99:35:b4:33:e7:23:d9:e1:c5:f8:bb:6c:8e:99:35: 72:b6:62:4f:e3:45:0d:e7:c8:bc:65:78:89:f5:5c: 5f:ae:70:44:20:db:be:a3:0d:46:c1:54:24:41:14: a5:65:6f:fd:06:89:60:95:02:c7:4d:cc:ff:c2:b5: f9:3c:fe:39:e7:e4:35:93:19:f8:2a:bc:9c:be:18: a2:6e:63:03:9d:15:79:ed:d4:7f:d8:6e:38:3e:1a: 36:75:cd:4c:ed:9f:00:bd:d2:c8:ca:87:89:88:1f: 2f:46:87:5e:b0:7d:ab:5f:91:94:75:02:f3:c5:9e: e2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:DE:EC:35:D6:31:4F:24:4F:95:47:99:72:0F:8E:31:05:1D:14 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4YLe7DXWMU8kT5VHmXIPjjEFHRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.12.0/24 144.31.25.0/24 144.31.106.0/24 144.31.136.0/24 144.31.169.0/24 144.31.221.0/24 150.241.66.0/24 193.23.199.0/24 193.23.209.0/24 193.23.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:a6:4b:95:11:2c:5f:c2:a9:89:9f:0a:2c:05:24:4b:7b:54: 98:cf:25:c3:6f:3c:3a:c3:15:b3:da:09:61:32:ee:bd:ee:eb: 25:ab:21:77:de:9f:73:f1:fb:0f:55:a6:80:85:6f:8c:a2:70: 60:b1:13:9b:ae:88:82:c1:69:05:28:a0:56:b3:3f:f6:94:d3: f2:3f:b9:32:12:00:9b:5b:81:73:4b:7c:8d:1b:bf:11:14:71: 87:b1:16:01:a0:f0:11:e0:18:51:e8:ec:d1:48:e5:a1:89:87: f9:5c:4a:b3:aa:e5:45:e6:a8:c6:4e:43:72:b2:02:0c:45:ed: aa:73:0a:cd:04:3a:69:51:a4:01:4b:99:54:f8:62:08:2e:fc: 85:87:c2:56:1a:a1:70:b6:8c:66:70:58:69:fa:26:c9:42:2c: 7b:20:a8:1d:27:0c:71:4c:a2:af:a6:85:96:89:c1:d1:58:91: 44:9e:a3:7f:5a:10:54:c0:4a:3c:79:98:cf:f9:05:a8:59:a7: 1d:71:76:9c:72:c6:d6:a4:0b:42:9b:2a:de:11:31:31:f4:44: 67:db:8e:82:b9:6a:5f:83:85:f0:5d:59:b8:b4:42:04:a1:7f: a9:3f:53:7c:eb:f1:a6:e9:f4:af:ff:69:d5:48:68:02:66:a4: 65:30:3c:c1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZwb5OE9/X27fzUu59BH59jiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMjAyMDEwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTgyZGVlYzM1ZDYzMTRmMjQ0Zjk1NDc5OTcyMGY4ZTMxMDUxZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHFxrs/8HsD0JmdZRFOTv+47SQQj i4vzI4WVbuGjr6uXJPgaDzuf/jzof1u20f/AGUaOy7ROd6f8n0dcn+UoWhFII37K GGds63Y3oaIPGSbv/idSgAqYdTTU67aQNwLVza/uFItxFI+AqgYSCkwQf/SIlfMx CgguZDpTVFXf3lHdrWkJFsGZNbQz5yPZ4cX4u2yOmTVytmJP40UN58i8ZXiJ9Vxf rnBEINu+ow1GwVQkQRSlZW/9BolglQLHTcz/wrX5PP455+Q1kxn4KrycvhiibmMD nRV57dR/2G44Pho2dc1M7Z8AvdLIyoeJiB8vRodesH2rX5GUdQLzxZ7inwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFOGC3uw11jFPJE+VR5lyD44xBR0UMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvNFlMZTdEWFdNVThrVDVWSG1YSVBqakVGSFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAkB8MAwQA kB8ZAwQAkB9qAwQAkB+IAwQAkB+pAwQAkB/dAwQAlvFCAwQAwRfHAwQAwRfRAwQA wRfdMA0GCSqGSIb3DQEBCwUAA4IBAQA+pkuVESxfwqmJnwosBSRLe1SYzyXDbzw6 wxWz2glhMu697uslqyF33p9z8fsPVaaAhW+MonBgsRObroiCwWkFKKBWsz/2lNPy P7kyEgCbW4FzS3yNG78RFHGHsRYBoPAR4BhR6OzRSOWhiYf5XEqzquVF5qjGTkNy sgIMRe2qcwrNBDppUaQBS5lU+GIILvyFh8JWGqFwtoxmcFhp+ibJQix7IKgdJwxx TKKvpoWWicHRWJFEnqN/WhBUwEo8eZjP+QWoWacdcXaccsbWpAtCmyreETEx9ERn 246CuWpfg4XwXVm4tEIEoX+pP1N86/Gm6fSv/2nVSGgCZqRlMDzB -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:28 2026 by rpki-client