This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uh18nBh4BnH4T6A3PnNsPoyX0GU.roa File: uh18nBh4BnH4T6A3PnNsPoyX0GU.roa (raw, json) Hash identifier: KR9Mf6hwpip3DKFy2VERbfQ11VVcWG5dYlyZ4kSazEw= Subject key identifier: BA:1D:7C:9C:18:78:06:71:F8:4F:A0:37:3E:73:6C:3E:8C:97:D0:65 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C245EADADFC3D492CE58B088CEEAEB045 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uh18nBh4BnH4T6A3PnNsPoyX0GU.roa Signing time: Tue 03 Feb 2026 16:38:30 +0000 ROA not before: Tue 03 Feb 2026 16:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 144.31.32.0/24 maxlen: 24 144.31.34.0/24 maxlen: 24 144.31.37.0/24 maxlen: 24 144.31.38.0/24 maxlen: 24 144.31.39.0/24 maxlen: 24 144.31.40.0/24 maxlen: 24 144.31.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:5e:ad:ad:fc:3d:49:2c:e5:8b:08:8c:ee:ae:b0:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Feb 3 16:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba1d7c9c18780671f84fa0373e736c3e8c97d065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:98:8b:33:6b:b5:19:fd:ce:c1:d2:80:d5: fb:a5:d9:4a:02:36:0a:d5:f6:78:cd:8b:7e:4c:55: 18:53:40:bf:7c:fb:e4:16:a2:17:9e:81:39:b0:29: d9:12:98:23:c3:b6:5c:a1:1e:22:00:81:bc:08:82: 85:d8:8a:f4:86:e5:ba:7d:2d:fd:c1:73:97:78:66: a2:64:d8:a6:59:cd:a0:03:64:42:c0:3f:63:4a:8e: d9:1c:41:59:84:88:b8:77:04:3a:33:c8:82:1f:9e: 47:8b:55:29:bd:1b:c7:46:f7:a7:f5:50:da:00:26: 1e:f5:4f:f8:15:bf:7c:9c:88:56:78:b4:fa:b4:4c: 13:1e:b8:ab:45:2d:0e:d6:3b:2d:75:6a:fe:9c:b3: 5e:c4:58:90:f9:9f:09:38:5e:dc:05:2b:f6:2e:ad: 48:dc:f9:82:83:e4:04:44:d0:e9:30:68:58:78:d8: ef:f1:7e:ad:2f:2f:60:f8:18:98:25:9f:c3:3d:7d: 7a:7f:83:f3:da:0f:17:df:e0:bb:6d:61:29:c6:3d: e5:7d:7b:d6:a4:59:2e:3b:35:20:ef:4d:fb:7b:bb: a4:f3:6c:9c:ed:83:91:e9:a6:c9:84:67:ba:54:d3: e5:d8:29:64:94:12:68:d9:d8:1f:d9:fa:a4:ec:15: a8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:1D:7C:9C:18:78:06:71:F8:4F:A0:37:3E:73:6C:3E:8C:97:D0:65 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uh18nBh4BnH4T6A3PnNsPoyX0GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.32.0/24 144.31.34.0/24 144.31.37.0-144.31.40.255 144.31.43.0/24 Signature Algorithm: sha256WithRSAEncryption 30:59:67:12:23:ea:ea:02:8c:42:eb:83:27:58:91:2c:47:eb: ed:28:1d:3e:9c:6f:d9:65:62:63:d7:77:e8:b7:df:a6:ec:4a: 72:fc:be:0d:02:d9:97:c3:58:a0:43:52:fc:aa:93:6d:f3:a6: 8e:d1:16:ed:97:59:85:61:b7:ac:4d:bf:30:b6:d3:0a:85:c3: 6d:ae:b5:ce:7d:d6:f7:2a:89:14:67:ae:39:e1:2d:4f:1d:07: a5:8c:4b:24:84:ff:ad:7f:3d:28:69:d0:df:98:c0:01:1a:5b: 8d:d6:a5:4f:25:3d:5d:ef:2e:8f:b4:99:94:6a:76:30:ff:3d: de:ff:4e:f2:e4:0f:a6:57:34:43:b1:b1:4b:a0:9f:bc:82:4a: 42:85:ba:75:51:cc:92:8a:2b:01:9a:f4:18:d6:38:a9:42:d1: de:1b:17:35:78:5a:86:b3:e2:3c:83:c1:3b:91:9d:21:95:d9: 27:35:6f:03:8e:12:29:32:e3:db:11:42:96:09:77:52:0c:63: 2d:3e:4c:e7:a2:39:9b:71:72:2c:66:3c:5a:18:2c:df:d1:7b: c3:a0:c5:bb:40:a8:95:62:bd:0b:89:f3:78:5d:eb:29:f4:34: bb:80:dc:32:ac:ec:d7:e8:65:55:ca:79:8a:83:de:f9:fd:51: 58:12:8b:d6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZwkXq2t/D1JLOWLCIzurrBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMjAzMTYzODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTFkN2M5YzE4NzgwNjcxZjg0ZmEwMzczZTczNmMzZThjOTdkMDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDSYizNrtRn9zsHSgNX7pdlKAjYK 1fZ4zYt+TFUYU0C/fPvkFqIXnoE5sCnZEpgjw7ZcoR4iAIG8CIKF2Ir0huW6fS39 wXOXeGaiZNimWc2gA2RCwD9jSo7ZHEFZhIi4dwQ6M8iCH55Hi1UpvRvHRven9VDa ACYe9U/4Fb98nIhWeLT6tEwTHrirRS0O1jstdWr+nLNexFiQ+Z8JOF7cBSv2Lq1I 3PmCg+QERNDpMGhYeNjv8X6tLy9g+BiYJZ/DPX16f4Pz2g8X3+C7bWEpxj3lfXvW pFkuOzUg7037e7uk82yc7YOR6abJhGe6VNPl2ClklBJo2dgf2fqk7BWoqwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLodfJwYeAZx+E+gNz5zbD6Ml9BlMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvdWgxOG5CaDRCbkg0VDZBM1BuTnNQb3lYMEdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAkB8gAwQA kB8iMAwDBACQHyUDBACQHygDBACQHyswDQYJKoZIhvcNAQELBQADggEBADBZZxIj 6uoCjELrgydYkSxH6+0oHT6cb9llYmPXd+i336bsSnL8vg0C2ZfDWKBDUvyqk23z po7RFu2XWYVht6xNvzC20wqFw22utc591vcqiRRnrjnhLU8dB6WMSySE/61/PShp 0N+YwAEaW43WpU8lPV3vLo+0mZRqdjD/Pd7/TvLkD6ZXNEOxsUugn7yCSkKFunVR zJKKKwGa9BjWOKlC0d4bFzV4Woaz4jyDwTuRnSGV2Sc1bwOOEiky49sRQpYJd1IM Yy0+TOeiOZtxcixmPFoYLN/Re8OgxbtAqJVivQuJ83hd6yn0NLuA3DKs7NfoZVXK eYqD3vn9UVgSi9Y= -----END CERTIFICATE-----Generated at Wed Feb 4 10:02:27 2026 by rpki-client