This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tBWt6fA_WtoQv-AMF2PAZhf3ZDs.roa
File: tBWt6fA_WtoQv-AMF2PAZhf3ZDs.roa (raw, json)
Hash identifier: m/Xn83EKIzadewTA9hmV/695GMYz0Lrf6tUqwZHB9U8=
Subject key identifier: B4:15:AD:E9:F0:3F:5A:DA:10:BF:E0:0C:17:63:C0:66:17:F7:64:3B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019BFB29F8CD8516A036D04611F5F27F1936
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tBWt6fA_WtoQv-AMF2PAZhf3ZDs.roa
Signing time: Mon 26 Jan 2026 16:36:30 +0000
ROA not before: Mon 26 Jan 2026 16:36:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Feb 2026 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fb:29:f8:cd:85:16:a0:36:d0:46:11:f5:f2:7f:19:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jan 26 16:36:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b415ade9f03f5ada10bfe00c1763c06617f7643b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:31:f2:08:f0:99:e7:27:45:0d:bc:04:06:5b:
f6:13:af:66:56:73:e9:7c:64:da:83:52:e7:44:c7:
ca:a7:fc:1a:0d:f0:6e:11:b1:a3:9b:64:e0:4c:83:
64:3a:2d:f3:6f:60:34:cc:de:b1:7a:81:93:8e:cc:
fb:86:29:5c:13:ed:a4:25:95:2f:6c:d6:ec:bb:d0:
da:e9:53:e9:f2:25:93:10:96:70:93:60:78:18:bc:
02:2e:37:1b:56:5c:45:d3:c5:f8:1b:b4:bd:86:be:
cc:5b:e3:fb:30:28:26:63:3a:da:a3:4b:e8:1b:9c:
c2:e2:4c:99:33:0a:af:7c:59:37:bc:52:81:62:f1:
61:4d:35:da:ff:3e:d6:d7:cc:2a:60:6b:31:a6:0b:
ba:41:45:06:31:08:a1:f0:f4:04:22:c9:8f:91:5b:
6e:76:b5:50:44:84:7d:f6:af:60:94:76:68:db:8e:
ed:80:39:83:03:87:c1:7b:62:b6:03:dc:6a:e5:60:
ad:2f:f0:86:5a:82:6e:61:48:38:29:ce:dd:a6:5a:
1e:70:e1:2c:b4:6c:e5:3a:95:f3:58:0f:fd:40:de:
64:a9:9a:00:0a:57:20:ff:48:5e:d6:a5:3e:e3:3f:
f5:a5:19:8a:a6:7c:84:57:03:bf:a1:47:22:dc:ad:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:AD:E9:F0:3F:5A:DA:10:BF:E0:0C:17:63:C0:66:17:F7:64:3B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/tBWt6fA_WtoQv-AMF2PAZhf3ZDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.248.0/24
150.241.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:2f:83:8d:5d:62:95:fc:cf:00:23:6d:33:11:cd:40:0a:26:
3a:6d:ec:69:6a:c6:94:77:8c:07:65:fd:0c:e8:fc:a3:84:a8:
32:b0:33:ea:a0:59:12:bc:8b:80:58:d6:b7:83:0e:d1:40:1c:
24:6c:d6:f4:9d:56:07:48:21:57:ff:ca:ef:44:9b:aa:11:1f:
62:97:18:7a:d3:d3:0a:18:30:1a:4b:e8:07:ee:43:8a:37:90:
48:85:ff:a4:75:a9:1a:49:47:2f:5d:e7:f8:53:3b:1b:aa:06:
93:74:60:b6:30:39:02:0e:32:73:cf:2f:2c:d2:d0:18:8e:09:
2b:a2:71:cb:e9:2c:b2:78:09:e7:6d:d9:71:f2:d6:b5:3a:c3:
1b:35:3f:68:a7:c3:20:af:08:ef:b0:0a:55:d3:3c:3e:6f:76:
22:5f:eb:6f:ee:68:22:fa:b9:67:73:45:97:52:77:25:cc:f4:
13:33:e4:09:9b:7a:e5:f7:86:cb:e6:5a:34:8b:16:fc:45:ed:
6f:30:30:18:bc:5a:ae:0e:a7:b4:17:04:b8:c9:e1:76:0e:b3:
3c:08:5b:2b:f3:2c:16:f7:9b:d0:58:fb:70:85:5c:17:51:e6:
41:4c:84:b7:5c:0f:55:a3:d1:24:e9:6a:5c:41:e1:b7:a3:69:
82:45:56:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 10:02:14 2026 by rpki-client