This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NhuNNnEL4dn_cwoJeA3uV74jTaI.roa File: NhuNNnEL4dn_cwoJeA3uV74jTaI.roa (raw, json) Hash identifier: k+YHeuFv+TOSmeFSIAXaD1lfWcxIgeYPGOpp1XeV9f4= Subject key identifier: 36:1B:8D:36:71:0B:E1:D9:FF:73:0A:09:78:0D:EE:57:BE:23:4D:A2 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C131E2F2B1FB236BF2DE43FDB42C191EC Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NhuNNnEL4dn_cwoJeA3uV74jTaI.roa Signing time: Sat 31 Jan 2026 08:14:31 +0000 ROA not before: Sat 31 Jan 2026 08:14:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 144.31.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:13:1e:2f:2b:1f:b2:36:bf:2d:e4:3f:db:42:c1:91:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 31 08:14:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=361b8d36710be1d9ff730a09780dee57be234da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ca:5d:ff:40:d0:2e:de:cf:cb:87:2b:7f:fa: b2:d0:96:63:0a:6b:96:63:39:ff:f0:3e:fe:f5:f2: 12:70:dc:b8:d4:59:31:a6:9b:a3:03:d7:69:c6:8b: e2:95:9a:dc:59:0e:8b:da:94:be:43:cc:b7:8e:84: 4b:af:73:7c:4a:44:63:8c:c0:b9:3b:7d:bd:4e:36: 47:ad:f1:8d:3c:c1:ab:51:ee:7e:06:ae:15:26:84: ea:1d:84:b2:0a:d5:5c:a4:94:f6:da:8c:55:e8:70: a0:2d:b7:12:a4:d3:6e:21:18:75:10:3f:03:6f:c7: 80:93:4e:13:ce:74:96:66:e9:55:c5:4f:77:19:69: 33:c8:60:91:1f:fb:35:9e:c7:4c:4b:00:f1:7b:a7: 9c:d3:ab:59:7e:1a:97:a3:6a:c4:99:10:7b:9f:e4: 7a:ef:98:96:69:46:13:81:04:93:ec:f9:c7:0f:bd: 11:8c:a2:ba:e2:c2:89:c9:47:25:52:45:86:c0:34: 2b:f6:98:92:38:d3:5a:43:11:71:78:2e:a7:51:34: 2e:4e:c2:70:05:d8:1d:3f:3e:c3:ef:07:7d:c0:61: b9:5b:e0:f6:6a:e9:f1:2d:a0:f5:27:7c:02:bb:a5: 6c:5c:1b:5d:92:e9:fd:c2:ee:e1:d0:6f:a0:51:79: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1B:8D:36:71:0B:E1:D9:FF:73:0A:09:78:0D:EE:57:BE:23:4D:A2 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/NhuNNnEL4dn_cwoJeA3uV74jTaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.46.0/24 Signature Algorithm: sha256WithRSAEncryption 28:29:b3:71:a9:e4:b2:ec:96:96:6f:61:f4:3d:7c:80:fe:1c: 49:d3:90:f7:87:91:74:a5:99:fa:7b:7d:43:db:98:06:2f:19: 7d:2b:a9:0c:93:42:7a:77:fc:80:65:6b:e8:99:75:b0:f2:ef: 6a:bb:cd:7e:51:f7:d2:b5:6f:9c:40:6c:fe:fa:8e:03:51:8b: 77:a3:cb:96:e9:2d:14:53:44:f1:b8:c7:8a:77:cf:cc:6b:b3: cc:97:d2:db:d4:93:0c:99:4f:af:19:e8:9b:6c:bf:f5:17:6e: 78:95:55:5f:36:74:ef:a7:0a:a5:c6:7b:57:d0:2c:15:b6:cc: 6a:6e:c0:82:a4:97:a4:ee:8f:e7:33:c3:95:54:68:4c:61:94: 52:c6:d4:4c:b8:e1:bf:d5:d1:ff:e1:ba:06:b2:c5:ae:93:7a: 7e:18:6d:26:31:4c:b4:5b:99:98:ed:a7:ea:f6:80:6a:65:5b: 2f:16:f4:66:8b:6b:ae:63:e3:19:9b:63:59:79:d6:6c:52:1c: 5f:df:db:67:8f:36:c6:2e:3f:e5:fe:2e:15:6c:05:39:97:b9: f0:d9:1b:c0:d0:1c:6c:19:f1:49:86:13:50:46:1b:45:d2:2d: a0:20:28:19:5e:31:17:02:a3:e6:fe:c0:a2:d5:2c:68:a1:1d: fd:06:03:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwTHi8rH7I2vy3kP9tCwZHsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTMxMDgxNDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjFiOGQzNjcxMGJlMWQ5ZmY3MzBhMDk3ODBkZWU1N2JlMjM0ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8pd/0DQLt7Py4crf/qy0JZjCmuW Yzn/8D7+9fIScNy41FkxppujA9dpxovilZrcWQ6L2pS+Q8y3joRLr3N8SkRjjMC5 O329TjZHrfGNPMGrUe5+Bq4VJoTqHYSyCtVcpJT22oxV6HCgLbcSpNNuIRh1ED8D b8eAk04TznSWZulVxU93GWkzyGCRH/s1nsdMSwDxe6ec06tZfhqXo2rEmRB7n+R6 75iWaUYTgQST7PnHD70RjKK64sKJyUclUkWGwDQr9piSONNaQxFxeC6nUTQuTsJw BdgdPz7D7wd9wGG5W+D2aunxLaD1J3wCu6VsXBtdkun9wu7h0G+gUXm7TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDYbjTZxC+HZ/3MKCXgN7le+I02iMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTmh1Tk5uRUw0ZG5fY3dvSmVBM3VWNzRqVGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB8uMA0G CSqGSIb3DQEBCwUAA4IBAQAoKbNxqeSy7JaWb2H0PXyA/hxJ05D3h5F0pZn6e31D 25gGLxl9K6kMk0J6d/yAZWvomXWw8u9qu81+UffStW+cQGz++o4DUYt3o8uW6S0U U0TxuMeKd8/Ma7PMl9Lb1JMMmU+vGeibbL/1F254lVVfNnTvpwqlxntX0CwVtsxq bsCCpJek7o/nM8OVVGhMYZRSxtRMuOG/1dH/4boGssWuk3p+GG0mMUy0W5mY7afq 9oBqZVsvFvRmi2uuY+MZm2NZedZsUhxf39tnjzbGLj/l/i4VbAU5l7nw2RvA0Bxs GfFJhhNQRhtF0i2gICgZXjEXAqPm/sCi1SxooR39BgOG -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:52 2026 by rpki-client