This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8sWURzd2JaHkX16jnu7K27wjW_4.roa File: 8sWURzd2JaHkX16jnu7K27wjW_4.roa (raw, json) Hash identifier: RbDxzMfx4w3vP5yx0cUhdYQw1I2XxSK49f+Wwa62ys8= Subject key identifier: F2:C5:94:47:37:76:25:A1:E4:5F:5E:A3:9E:EE:CA:DB:BC:23:5B:FE Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C1BE4E1D55566B343604EBC15D451B681 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8sWURzd2JaHkX16jnu7K27wjW_4.roa Signing time: Mon 02 Feb 2026 01:08:30 +0000 ROA not before: Mon 02 Feb 2026 01:08:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212743 IP address blocks: 144.31.12.0/24 maxlen: 24 144.31.136.0/24 maxlen: 24 144.31.191.0/24 maxlen: 24 144.31.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:e4:e1:d5:55:66:b3:43:60:4e:bc:15:d4:51:b6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Feb 2 01:08:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f2c59447377625a1e45f5ea39eeecadbbc235bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:e8:06:fa:20:ef:68:2d:6e:b1:77:e0:d8: a1:1e:7e:ca:74:e5:8c:a2:9e:36:66:e8:17:0c:10: 05:5a:b8:bd:97:16:d1:22:b5:82:34:87:ef:b4:6e: 78:a5:2a:da:af:7f:ed:8b:6c:a7:37:96:00:06:c2: 48:17:62:df:01:1b:e0:6a:db:0f:c0:90:68:e3:f0: 6c:bd:69:dd:5e:39:47:2e:39:d2:40:6d:06:29:ef: 75:6c:f6:24:bb:e1:fb:38:48:73:d9:97:8f:41:cd: 53:e2:17:2b:9f:23:27:f3:51:85:a9:1c:18:69:b3: f1:76:16:fc:9b:10:0a:a6:82:4e:55:33:47:85:88: f5:b5:8b:78:ea:08:65:38:2b:5d:f3:0d:90:1c:46: f7:64:9a:44:a5:6c:16:da:03:f8:1b:94:49:bf:5c: d8:48:70:26:eb:fc:c4:7e:04:05:d3:02:82:60:73: 25:d4:c6:f7:27:f2:94:e9:8b:3e:3a:10:4c:b3:12: 12:3d:66:8d:ab:20:d3:1f:8c:5a:cd:9c:00:e5:33: 88:05:6e:ef:91:37:dd:5c:2c:6e:41:5a:62:48:81: 69:75:40:f5:51:eb:b7:a3:a1:56:36:51:af:bb:2a: 74:5a:8c:e5:12:f1:e1:a7:ef:3a:66:9d:a1:ef:3e: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:94:47:37:76:25:A1:E4:5F:5E:A3:9E:EE:CA:DB:BC:23:5B:FE X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/8sWURzd2JaHkX16jnu7K27wjW_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.12.0/24 144.31.136.0/24 144.31.191.0/24 144.31.237.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:3a:ba:0a:ed:c1:a2:76:a0:87:25:ed:d3:ec:f1:71:7d:9c: 49:d5:22:37:cf:77:f9:54:f5:ff:a3:b2:0e:a3:0c:31:f9:93: 24:4c:81:1e:04:98:21:91:b9:5b:e7:ad:15:0b:5b:ac:46:54: 7d:46:1c:73:b2:25:39:db:5f:49:bb:45:68:e2:6a:22:77:6b: 26:2c:15:5f:f8:4d:9e:2d:97:c4:2d:46:17:1d:49:09:41:60: 5d:e4:3f:02:da:ad:1e:61:6d:e1:c8:e8:6f:10:22:db:e1:51: 72:50:5a:9b:6b:53:be:c1:2f:dd:0b:b7:93:7c:54:59:44:de: ce:57:14:92:c9:3b:9a:72:98:24:af:88:12:22:39:05:90:f2: da:fc:1b:ae:25:de:0b:47:45:ed:93:cc:9e:58:1c:b6:c8:d3: fb:be:b3:44:20:10:bf:5e:6e:ab:b9:de:11:d8:26:c5:98:43: 74:29:36:7e:d2:3a:18:18:89:c5:8e:ff:ed:20:60:b9:eb:10: 06:5a:13:e9:77:9c:a6:77:f6:74:65:ee:4c:38:f4:5f:04:4e: 24:c6:f8:64:05:49:46:1b:02:a8:57:b3:ed:a9:1e:bc:2f:be: ff:a0:0a:93:c2:1d:fe:48:d7:8c:11:7c:5f:50:3b:21:59:6f: 2d:0d:97:eb -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwb5OHVVWazQ2BOvBXUUbaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMjAyMDEwODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmM1OTQ0NzM3NzYyNWExZTQ1ZjVlYTM5ZWVlY2FkYmJjMjM1YmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53PoBvog72gtbrF34NihHn7KdOWM op42ZugXDBAFWri9lxbRIrWCNIfvtG54pSrar3/ti2ynN5YABsJIF2LfARvgatsP wJBo4/BsvWndXjlHLjnSQG0GKe91bPYku+H7OEhz2ZePQc1T4hcrnyMn81GFqRwY abPxdhb8mxAKpoJOVTNHhYj1tYt46ghlOCtd8w2QHEb3ZJpEpWwW2gP4G5RJv1zY SHAm6/zEfgQF0wKCYHMl1Mb3J/KU6Ys+OhBMsxISPWaNqyDTH4xazZwA5TOIBW7v kTfdXCxuQVpiSIFpdUD1Ueu3o6FWNlGvuyp0WozlEvHhp+86Zp2h7z7rjwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPLFlEc3diWh5F9eo57uytu8I1v+MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvOHNXVVJ6ZDJKYUhrWDE2am51N0syN3dqV180LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAkB8MAwQA kB+IAwQAkB+/AwQAkB/tMA0GCSqGSIb3DQEBCwUAA4IBAQAuOroK7cGidqCHJe3T 7PFxfZxJ1SI3z3f5VPX/o7IOowwx+ZMkTIEeBJghkblb560VC1usRlR9RhxzsiU5 219Ju0Vo4moid2smLBVf+E2eLZfELUYXHUkJQWBd5D8C2q0eYW3hyOhvECLb4VFy UFqba1O+wS/dC7eTfFRZRN7OVxSSyTuacpgkr4gSIjkFkPLa/BuuJd4LR0Xtk8ye WBy2yNP7vrNEIBC/Xm6rud4R2CbFmEN0KTZ+0joYGInFjv/tIGC56xAGWhPpd5ym d/Z0Ze5MOPRfBE4kxvhkBUlGGwKoV7PtqR68L77/oAqTwh3+SNeMEXxfUDshWW8t DZfr -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:51 2026 by rpki-client