This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_wVA9gSnx4hCVcNI6zO1WQBF4kQ.roa File: _wVA9gSnx4hCVcNI6zO1WQBF4kQ.roa (raw, json) Hash identifier: wjzH9rxN3S5YTH/ezsoE0h0qrfnLqazTVp5sP7b96jg= Subject key identifier: FF:05:40:F6:04:A7:C7:88:42:55:C3:48:EB:33:B5:59:00:45:E2:44 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C1FD136946B1BD5CAD7BBE6B7D5383E4D Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_wVA9gSnx4hCVcNI6zO1WQBF4kQ.roa Signing time: Mon 02 Feb 2026 19:25:30 +0000 ROA not before: Mon 02 Feb 2026 19:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207957 IP address blocks: 64.188.89.0/24 maxlen: 24 64.188.90.0/24 maxlen: 24 64.188.98.0/24 maxlen: 24 64.188.127.0/24 maxlen: 24 77.239.107.0/24 maxlen: 24 144.31.82.0/24 maxlen: 24 144.31.83.0/24 maxlen: 24 144.31.93.0/24 maxlen: 24 144.31.103.0/24 maxlen: 24 144.31.107.0/24 maxlen: 24 144.31.108.0/24 maxlen: 24 144.31.213.0/24 maxlen: 24 144.31.214.0/24 maxlen: 24 144.31.216.0/24 maxlen: 24 144.31.217.0/24 maxlen: 24 144.31.218.0/24 maxlen: 24 144.31.219.0/24 maxlen: 24 144.31.239.0/24 maxlen: 24 144.31.240.0/24 maxlen: 24 144.31.241.0/24 maxlen: 24 144.31.242.0/24 maxlen: 24 144.31.243.0/24 maxlen: 24 150.241.72.0/24 maxlen: 24 150.241.73.0/24 maxlen: 24 150.241.74.0/24 maxlen: 24 150.241.75.0/24 maxlen: 24 150.241.82.0/24 maxlen: 24 150.241.83.0/24 maxlen: 24 185.170.153.0/24 maxlen: 24 185.170.154.0/24 maxlen: 24 193.23.195.0/24 maxlen: 24 193.23.200.0/24 maxlen: 24 193.23.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:d1:36:94:6b:1b:d5:ca:d7:bb:e6:b7:d5:38:3e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Feb 2 19:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff0540f604a7c7884255c348eb33b5590045e244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:41:b3:6e:24:e3:45:85:21:b7:cf:54:f2:40: c1:49:a6:ef:cd:7e:18:2d:5a:ff:e9:a3:2a:d7:af: 58:6a:1a:07:43:52:44:cb:53:4f:5f:ba:ce:15:46: 9b:5e:ab:bc:96:b1:28:8d:b7:95:a9:87:bf:ae:fe: 32:6a:d2:f7:51:62:7f:4a:66:b4:73:09:8c:84:79: 9e:33:1a:9c:8f:9c:ad:58:aa:bb:9c:ad:9f:78:aa: 96:f4:4b:a8:2d:08:77:0d:6c:fa:0d:3a:ef:7b:77: 0f:30:3a:5f:80:b0:8e:16:97:48:f9:c4:64:14:1b: 33:de:38:58:db:3a:d1:0d:01:19:84:c4:f4:47:1e: 7f:07:69:5d:2c:15:5a:b4:4f:55:ec:0b:90:a7:e7: 30:96:ea:e7:b7:cf:73:2e:00:f4:b8:5f:5d:f9:27: 14:9b:20:3d:ab:3e:0d:b1:29:d8:76:fb:d7:a5:85: c1:39:2e:8b:a1:e8:75:73:62:7c:43:50:45:34:51: 9f:c2:de:66:b4:f4:28:26:2f:34:b4:1e:7a:ab:3c: 48:95:e0:0d:e8:e0:86:61:c5:01:08:59:76:08:ca: 02:cc:17:06:99:d2:20:44:a1:33:9f:c7:9b:60:0a: cb:9c:90:61:8f:a0:98:85:80:02:6e:3d:16:46:98: e3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:05:40:F6:04:A7:C7:88:42:55:C3:48:EB:33:B5:59:00:45:E2:44 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_wVA9gSnx4hCVcNI6zO1WQBF4kQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.89.0-64.188.90.255 64.188.98.0/24 64.188.127.0/24 77.239.107.0/24 144.31.82.0/23 144.31.93.0/24 144.31.103.0/24 144.31.107.0-144.31.108.255 144.31.213.0-144.31.214.255 144.31.216.0/22 144.31.239.0-144.31.243.255 150.241.72.0/22 150.241.82.0/23 185.170.153.0-185.170.154.255 193.23.195.0/24 193.23.200.0/24 193.23.202.0/24 Signature Algorithm: sha256WithRSAEncryption 15:45:8d:25:79:ec:a7:38:2b:04:c8:a0:e0:26:a3:ca:a7:f9: 49:bc:d7:52:21:a1:15:2f:92:b5:0b:10:8f:49:47:ff:ce:19: 64:20:eb:be:6d:6e:ca:23:02:dc:1a:e9:b8:ff:6c:9c:ed:d5: 41:4b:ec:fa:d5:04:fa:3a:26:e4:b6:3a:8d:b9:8a:2c:e7:24: 1a:7a:35:f1:90:01:fd:4c:56:13:40:55:0a:18:2a:bc:d6:bd: 06:98:fa:9f:04:d5:70:e7:f4:cd:c3:43:db:02:ca:8e:e3:86: b3:03:51:03:61:37:df:8b:51:c8:2d:2e:e0:5b:ba:4f:05:e5: 98:26:ee:54:97:0f:e6:47:db:3a:f3:6e:44:b7:75:53:48:7f: c0:de:cf:37:5a:ef:6c:d4:15:aa:ee:97:12:b4:36:63:84:bc: 3a:60:4c:62:34:b9:b0:56:05:e0:d9:ab:e2:59:9d:7b:6f:06: f5:51:3e:bc:38:84:c7:04:7e:88:74:ba:f4:55:6f:bf:fa:81: 8b:78:4f:fb:0b:9f:ed:cb:48:b8:6d:7b:ee:af:92:e3:8d:71: 86:64:d6:25:1c:a3:3b:b4:dd:9f:f0:af:bc:dc:14:b2:33:c3: 34:e3:07:9b:f8:09:8c:5b:f0:c5:df:2a:6d:79:96:7c:99:6b: 46:89:ad:f4 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZwf0TaUaxvVyte75rfVOD5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMjAyMTkyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjA1NDBmNjA0YTdjNzg4NDI1NWMzNDhlYjMzYjU1OTAwNDVlMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kGzbiTjRYUht89U8kDBSabvzX4Y LVr/6aMq169YahoHQ1JEy1NPX7rOFUabXqu8lrEojbeVqYe/rv4yatL3UWJ/Sma0 cwmMhHmeMxqcj5ytWKq7nK2feKqW9EuoLQh3DWz6DTrve3cPMDpfgLCOFpdI+cRk FBsz3jhY2zrRDQEZhMT0Rx5/B2ldLBVatE9V7AuQp+cwlurnt89zLgD0uF9d+ScU myA9qz4NsSnYdvvXpYXBOS6Loeh1c2J8Q1BFNFGfwt5mtPQoJi80tB56qzxIleAN 6OCGYcUBCFl2CMoCzBcGmdIgRKEzn8ebYArLnJBhj6CYhYACbj0WRpjjKQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFP8FQPYEp8eIQlXDSOsztVkAReJEMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvX3dWQTlnU254NGhDVmNOSTZ6TzFXUUJGNGtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4wDAME AEC8WQMEAEC8WgMEAEC8YgMEAEC8fwMEAE3vawMEAZAfUgMEAJAfXQMEAJAfZzAM AwQAkB9rAwQAkB9sMAwDBACQH9UDBACQH9YDBAKQH9gwDAMEAJAf7wMEApAf8AME ApbxSAMEAZbxUjAMAwQAuaqZAwQAuaqaAwQAwRfDAwQAwRfIAwQAwRfKMA0GCSqG SIb3DQEBCwUAA4IBAQAVRY0leeynOCsEyKDgJqPKp/lJvNdSIaEVL5K1CxCPSUf/ zhlkIOu+bW7KIwLcGum4/2yc7dVBS+z61QT6OibktjqNuYos5yQaejXxkAH9TFYT QFUKGCq81r0GmPqfBNVw5/TNw0PbAsqO44azA1EDYTffi1HILS7gW7pPBeWYJu5U lw/mR9s6825Et3VTSH/A3s83Wu9s1BWq7pcStDZjhLw6YExiNLmwVgXg2aviWZ17 bwb1UT68OITHBH6IdLr0VW+/+oGLeE/7C5/ty0i4bXvur5LjjXGGZNYlHKM7tN2f 8K+83BSyM8M04web+AmMW/DF3ypteZZ8mWtGia30 -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:14 2026 by rpki-client