This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0-xXPI_vLbYdltDk-k1UzfTli_0.roa File: 0-xXPI_vLbYdltDk-k1UzfTli_0.roa (raw, json) Hash identifier: 2O0T4ZvunFE+pkfsAZruKMWgIoWqCY7gPrbIjFuaMqE= Subject key identifier: D3:EC:57:3C:8F:EF:2D:B6:1D:96:D0:E4:FA:4D:54:CD:F4:E5:8B:FD Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B284513ED808E8421C90C1ACC0B83AC1D Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0-xXPI_vLbYdltDk-k1UzfTli_0.roa Signing time: Tue 16 Dec 2025 17:46:14 +0000 ROA not before: Tue 16 Dec 2025 17:46:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207416 IP address blocks: 64.188.115.0/24 maxlen: 24 77.239.127.0/24 maxlen: 24 144.31.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:45:13:ed:80:8e:84:21:c9:0c:1a:cc:0b:83:ac:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 16 17:46:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d3ec573c8fef2db61d96d0e4fa4d54cdf4e58bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:f7:94:33:20:14:ae:7e:2a:5f:8a:19:f5: ce:24:68:53:38:8e:19:6a:3a:b9:92:dc:e7:e7:84: 4d:ed:f2:39:65:0e:c6:5f:c0:d6:18:18:ba:77:2a: 44:77:03:ab:a9:1a:e8:a2:85:a3:08:92:12:95:97: d6:d9:9e:38:8d:53:94:18:9e:65:b3:42:7a:7b:6a: 15:83:4c:6e:b4:0d:18:ed:a8:43:3a:ad:c8:25:82: a8:57:d0:c4:44:fb:52:20:b3:c7:8e:e8:62:ec:99: 19:41:bd:fa:11:3a:c5:eb:a7:11:29:f2:e0:15:33: f8:50:dd:f7:f6:cb:76:8b:74:5b:41:c5:bc:3f:c9: 3e:c0:2b:d0:13:cd:d3:c2:a0:95:22:c3:73:e7:78: c6:6f:25:a8:ee:97:06:33:c2:b9:85:77:d6:00:e9: d5:84:7a:de:eb:27:3b:ad:35:68:80:8c:d6:6e:07: 54:9d:3d:51:3e:09:df:c6:3b:ee:d2:f4:d2:02:ee: bd:75:13:d7:48:81:0d:8f:4f:7b:0b:74:a6:df:a3: 19:a9:6a:9c:04:43:20:9f:c9:61:30:03:5f:c8:7f: 3f:1f:4b:8a:f0:a4:e1:bb:17:70:99:6f:35:40:dc: 28:bd:fb:5b:83:99:4e:16:9c:c5:01:e0:37:e0:25: 57:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EC:57:3C:8F:EF:2D:B6:1D:96:D0:E4:FA:4D:54:CD:F4:E5:8B:FD X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/0-xXPI_vLbYdltDk-k1UzfTli_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.115.0/24 77.239.127.0/24 144.31.250.0/23 Signature Algorithm: sha256WithRSAEncryption 74:fa:37:22:08:2c:b4:25:bc:2a:a7:7e:c2:6b:b4:19:9a:4a: 1a:37:52:72:bc:19:3e:a9:2d:24:a3:b2:4c:36:77:83:2c:ff: c9:3c:db:e7:42:0d:e4:a4:c4:aa:93:51:af:13:c2:ef:d5:9b: 13:d9:04:c9:da:08:32:60:6d:d3:55:cb:7c:29:55:1b:43:a1: 0b:dc:81:ff:a0:f4:6b:8b:01:c7:c4:83:53:0a:6a:b3:89:ce: 96:30:09:ce:6e:99:81:ff:34:35:44:45:08:5c:53:98:c8:39: c0:36:22:ec:3e:00:96:3a:72:ef:69:e5:51:58:00:07:db:8d: 5c:cc:2c:cf:97:35:95:33:90:31:be:3e:e8:80:75:a1:38:0b: e4:6e:05:33:56:91:b8:b3:0d:ee:34:cd:5b:50:75:06:47:7c: bf:b3:5a:28:a6:5e:53:d2:97:ab:99:a7:96:73:9e:7e:9a:77: ac:89:6c:8e:33:4f:1a:93:c2:6a:9e:9b:95:5e:57:67:ad:53: 66:18:94:52:23:99:9a:8e:44:a0:3f:0d:ae:2c:8e:d5:64:15: bc:97:88:58:2d:48:79:6e:5f:0b:7f:7e:46:c8:4b:17:13:c2: 6f:f6:f8:27:04:f0:d2:0a:9c:2d:8b:cc:27:24:b5:e3:61:c4: 3d:57:b1:da -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsoRRPtgI6EIckMGswLg6wdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE2MTc0NjE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2VjNTczYzhmZWYyZGI2MWQ5NmQwZTRmYTRkNTRjZGY0ZTU4YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUX3lDMgFK5+Kl+KGfXOJGhTOI4Z ajq5ktzn54RN7fI5ZQ7GX8DWGBi6dypEdwOrqRroooWjCJISlZfW2Z44jVOUGJ5l s0J6e2oVg0xutA0Y7ahDOq3IJYKoV9DERPtSILPHjuhi7JkZQb36ETrF66cRKfLg FTP4UN339st2i3RbQcW8P8k+wCvQE83TwqCVIsNz53jGbyWo7pcGM8K5hXfWAOnV hHre6yc7rTVogIzWbgdUnT1RPgnfxjvu0vTSAu69dRPXSIENj097C3Sm36MZqWqc BEMgn8lhMANfyH8/H0uK8KThuxdwmW81QNwovftbg5lOFpzFAeA34CVX6wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNPsVzyP7y22HZbQ5PpNVM305Yv9MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvMC14WFBJX3ZMYllkbHREay1rMVV6ZlRsaV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQLxzAwQA Te9/AwQBkB/6MA0GCSqGSIb3DQEBCwUAA4IBAQB0+jciCCy0Jbwqp37Ca7QZmkoa N1JyvBk+qS0ko7JMNneDLP/JPNvnQg3kpMSqk1GvE8Lv1ZsT2QTJ2ggyYG3TVct8 KVUbQ6EL3IH/oPRriwHHxINTCmqzic6WMAnObpmB/zQ1REUIXFOYyDnANiLsPgCW OnLvaeVRWAAH241czCzPlzWVM5Axvj7ogHWhOAvkbgUzVpG4sw3uNM1bUHUGR3y/ s1oopl5T0permaeWc55+mnesiWyOM08ak8JqnpuVXldnrVNmGJRSI5majkSgPw2u LI7VZBW8l4hYLUh5bl8Lf35GyEsXE8Jv9vgnBPDSCpwti8wnJLXjYcQ9V7Ha -----END CERTIFICATE-----Generated at Sat Dec 20 01:45:36 2025 by rpki-client