This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/giuMMjmpeJrQ2778jmtujuko86A.roa File: giuMMjmpeJrQ2778jmtujuko86A.roa (raw, json) Hash identifier: pgN80HCoibw7tVYQkCu+f4zASlFRO5fH0h84q/QjsKM= Subject key identifier: 82:2B:8C:32:39:A9:78:9A:D0:DB:BE:FC:8E:6B:6E:8E:E9:28:F3:A0 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C245EAEB74877194F0789BAF4E7035AC6 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/giuMMjmpeJrQ2778jmtujuko86A.roa Signing time: Tue 03 Feb 2026 16:38:30 +0000 ROA not before: Tue 03 Feb 2026 16:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201907 IP address blocks: 144.31.32.0/24 maxlen: 24 144.31.34.0/24 maxlen: 24 144.31.37.0/24 maxlen: 24 144.31.38.0/24 maxlen: 24 144.31.39.0/24 maxlen: 24 144.31.40.0/24 maxlen: 24 144.31.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:5e:ae:b7:48:77:19:4f:07:89:ba:f4:e7:03:5a:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Feb 3 16:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=822b8c3239a9789ad0dbbefc8e6b6e8ee928f3a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:45:3f:9e:2c:d8:34:78:81:25:10:df:7b:64: 09:71:e7:3c:2d:b2:43:4a:84:10:71:ab:d6:17:93: c1:36:1a:a9:de:bd:16:6a:9c:a2:44:c3:61:ff:f2: 16:ae:a7:30:d2:6b:61:2c:74:8d:88:96:67:07:4a: 2d:90:4f:c5:b6:9b:85:82:e3:90:ed:f8:44:fd:6c: 71:dd:84:9b:23:39:cc:ba:a2:6e:d4:33:e1:45:8e: d6:13:52:60:86:ea:1a:63:ce:8c:c8:d5:61:30:9e: 07:cc:36:0d:d2:43:e0:45:cd:fd:99:50:42:33:b3: 71:47:12:c6:fb:b3:f6:e0:36:73:6e:0b:f5:e2:b2: 1b:9a:7b:cf:bf:ee:6e:f5:c3:15:15:86:e4:de:eb: 1d:72:fb:e3:24:e1:e4:50:3e:73:2a:d4:1b:14:d2: d1:27:b8:48:89:27:6d:19:d1:c0:3f:73:ff:56:0b: a2:18:53:5f:08:a3:79:f3:6b:50:88:c1:f5:0b:a7: 35:8e:7c:1e:b7:9d:c1:ae:ce:0b:6a:9e:89:1c:6f: 52:53:62:f1:fb:01:1e:49:b2:a3:41:7f:5e:ff:49: 31:48:b4:14:4a:32:13:27:f4:15:f5:46:37:c5:48: 30:0b:72:92:e3:55:bc:3e:70:60:10:16:f0:60:1e: df:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:2B:8C:32:39:A9:78:9A:D0:DB:BE:FC:8E:6B:6E:8E:E9:28:F3:A0 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/giuMMjmpeJrQ2778jmtujuko86A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.32.0/24 144.31.34.0/24 144.31.37.0-144.31.40.255 144.31.43.0/24 Signature Algorithm: sha256WithRSAEncryption 03:4f:20:6b:8c:12:b4:ff:8f:4b:01:92:10:0d:1e:82:f5:0d: 95:db:e3:ea:77:0c:73:8a:8b:49:96:57:a9:a2:f7:a8:1f:08: 3c:c6:1e:e8:09:3e:de:cf:5a:05:f1:50:b5:b2:1f:01:2f:c3: c6:3a:06:79:d0:f7:1c:34:19:88:83:2b:34:86:9c:e2:fb:f4: f1:73:76:99:eb:50:b4:23:51:1d:60:43:50:f1:05:c9:2b:7b: 68:87:15:1e:23:b3:49:9a:42:15:38:23:4b:78:4b:b8:6a:82: 9d:a5:4a:28:6f:25:ea:84:a6:84:94:6c:19:43:85:98:36:bf: 67:66:66:fd:57:88:13:bb:c1:78:c7:0d:c1:63:59:9f:4e:d7: f4:0b:d7:8d:c1:f5:d5:af:d3:9c:96:0f:d5:c7:47:0e:60:74: 1e:a1:a7:6c:21:25:e6:da:11:d5:80:73:7f:cb:c0:aa:44:6c: a4:b6:69:85:4f:36:bf:1a:6b:97:36:49:f6:d4:3c:8d:d2:cb: 4f:b8:c3:52:9d:0e:a0:33:94:e2:5e:44:05:c2:5f:04:21:94: 25:dc:98:44:c4:05:f1:e9:23:6f:08:68:4a:cf:b9:c2:0a:44: 66:9e:59:6b:70:e0:1d:88:f8:92:55:dc:b9:61:b3:7f:80:0e: 24:e2:4d:c6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZwkXq63SHcZTweJuvTnA1rGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMjAzMTYzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjJiOGMzMjM5YTk3ODlhZDBkYmJlZmM4ZTZiNmU4ZWU5MjhmM2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkU/nizYNHiBJRDfe2QJcec8LbJD SoQQcavWF5PBNhqp3r0WapyiRMNh//IWrqcw0mthLHSNiJZnB0otkE/FtpuFguOQ 7fhE/Wxx3YSbIznMuqJu1DPhRY7WE1JghuoaY86MyNVhMJ4HzDYN0kPgRc39mVBC M7NxRxLG+7P24DZzbgv14rIbmnvPv+5u9cMVFYbk3usdcvvjJOHkUD5zKtQbFNLR J7hIiSdtGdHAP3P/VguiGFNfCKN582tQiMH1C6c1jnwet53Brs4Lap6JHG9SU2Lx +wEeSbKjQX9e/0kxSLQUSjITJ/QV9UY3xUgwC3KS41W8PnBgEBbwYB7fAQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIIrjDI5qXia0Nu+/I5rbo7pKPOgMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvZ2l1TU1qbXBlSnJRMjc3OGptdHVqdWtvODZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAkB8gAwQA kB8iMAwDBACQHyUDBACQHygDBACQHyswDQYJKoZIhvcNAQELBQADggEBAANPIGuM ErT/j0sBkhANHoL1DZXb4+p3DHOKi0mWV6mi96gfCDzGHugJPt7PWgXxULWyHwEv w8Y6BnnQ9xw0GYiDKzSGnOL79PFzdpnrULQjUR1gQ1DxBckre2iHFR4js0maQhU4 I0t4S7hqgp2lSihvJeqEpoSUbBlDhZg2v2dmZv1XiBO7wXjHDcFjWZ9O1/QL143B 9dWv05yWD9XHRw5gdB6hp2whJebaEdWAc3/LwKpEbKS2aYVPNr8aa5c2SfbUPI3S y0+4w1KdDqAzlOJeRAXCXwQhlCXcmETEBfHpI28IaErPucIKRGaeWWtw4B2I+JJV 3Llhs3+ADiTiTcY= -----END CERTIFICATE-----Generated at Wed Feb 4 10:06:00 2026 by rpki-client