This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/09t0F-KuSAPw8yLZ3CeLg_GXbqk.roa File: 09t0F-KuSAPw8yLZ3CeLg_GXbqk.roa (raw, json) Hash identifier: Gc4fOzAC2jG7ePMUmFOUlJw4+FTCUL9oN3oepDL0u3M= Subject key identifier: D3:DB:74:17:E2:AE:48:03:F0:F3:22:D9:DC:27:8B:83:F1:97:6E:A9 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BDC8D3BFFA0EB981F3D221A0A299BE7AF Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/09t0F-KuSAPw8yLZ3CeLg_GXbqk.roa Signing time: Tue 20 Jan 2026 17:56:42 +0000 ROA not before: Tue 20 Jan 2026 17:56:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 64.188.115.0/24 maxlen: 24 77.239.127.0/24 maxlen: 24 144.31.98.0/24 maxlen: 24 144.31.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:8d:3b:ff:a0:eb:98:1f:3d:22:1a:0a:29:9b:e7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 20 17:56:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3db7417e2ae4803f0f322d9dc278b83f1976ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:08:16:b1:ec:5f:a1:3c:2d:4a:37:d7:3a:81: e2:bb:9b:94:2e:0d:5d:19:23:ec:40:0d:25:8f:d2: 00:ff:8f:73:13:c3:4e:6f:c5:77:0c:c5:9d:ba:c5: bd:f8:9e:dd:fd:5d:3f:64:41:44:8b:e1:b8:50:a5: 47:a8:8a:3e:20:2a:36:8a:76:d0:fb:eb:f8:17:c0: fb:22:ee:8c:55:10:f3:a2:9e:ce:4d:1d:6c:c6:e7: 94:67:3c:85:6d:35:9f:ad:63:e4:21:17:17:53:a0: a6:67:87:07:46:f9:47:f4:1a:5a:fc:26:0b:d4:72: 6c:52:6c:d3:66:ef:6c:cb:5e:59:c0:ce:c3:5a:81: 45:c1:e6:d1:52:1a:f1:7e:80:e5:49:ae:65:cf:c9: 5e:24:a2:07:72:d0:e6:88:58:29:d1:e4:b8:9b:68: 3f:b8:e7:ac:ae:62:04:56:1c:c3:ef:1f:d5:7d:be: ac:65:01:f1:7f:11:59:8a:88:df:7d:87:3d:d1:47: d1:65:2e:01:99:2d:f6:c1:d2:a2:ae:4d:e9:a0:a2: d3:99:78:55:e5:72:57:8c:b3:d7:db:ca:e0:6a:ac: a6:8e:b9:cd:ac:d8:01:1c:88:ff:5e:5c:95:88:98: 91:ac:97:ea:e6:16:3a:06:c4:5d:14:44:cd:85:31: b5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:74:17:E2:AE:48:03:F0:F3:22:D9:DC:27:8B:83:F1:97:6E:A9 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/09t0F-KuSAPw8yLZ3CeLg_GXbqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.115.0/24 77.239.127.0/24 144.31.98.0/24 144.31.251.0/24 Signature Algorithm: sha256WithRSAEncryption 89:d2:0e:56:12:9a:23:2f:54:8c:3a:ad:97:39:8d:8f:4d:60: 3e:fa:22:fb:af:cc:37:66:1f:c2:dc:11:f8:0b:d4:43:cf:ae: 70:f4:9d:d1:5a:53:91:b5:64:3d:74:d1:b7:b3:bb:4d:75:33: c6:66:fd:2d:28:a2:fb:be:11:e7:d5:1b:56:3a:80:d9:24:9d: 8b:21:f8:56:43:44:31:9b:ab:77:77:fa:97:cb:f6:9c:e0:2a: d8:a5:36:36:46:bd:6f:d7:ac:4f:cb:48:55:4f:28:b3:a4:1f: ac:b3:b5:21:71:79:d3:e0:6e:d8:26:bf:22:e1:02:94:27:6e: 88:ca:8a:40:18:19:40:91:af:a6:1d:67:f2:d9:8f:75:86:f7: ac:47:53:e4:54:4d:90:17:09:99:ce:e3:20:79:11:60:c7:3c: 2b:49:3d:a8:61:df:f7:a4:b0:13:1d:ac:77:83:04:f0:5e:c3: a2:2f:16:e3:3d:87:b5:58:7e:b2:68:f9:bd:a3:41:2c:14:6b: d8:d3:97:e2:25:92:06:5a:4c:c3:b1:b4:7f:59:22:67:a0:b3: 45:32:e5:87:65:43:bd:3e:ef:bc:c5:31:64:8d:c2:81:63:25: b6:fd:6c:e7:ec:0d:c6:6a:9e:aa:57:c8:ab:e1:c0:c6:76:2d: 2e:2f:39:1d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvcjTv/oOuYHz0iGgopm+evMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTIwMTc1NjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2RiNzQxN2UyYWU0ODAzZjBmMzIyZDlkYzI3OGI4M2YxOTc2ZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAgWsexfoTwtSjfXOoHiu5uULg1d GSPsQA0lj9IA/49zE8NOb8V3DMWdusW9+J7d/V0/ZEFEi+G4UKVHqIo+ICo2inbQ ++v4F8D7Iu6MVRDzop7OTR1sxueUZzyFbTWfrWPkIRcXU6CmZ4cHRvlH9Bpa/CYL 1HJsUmzTZu9sy15ZwM7DWoFFwebRUhrxfoDlSa5lz8leJKIHctDmiFgp0eS4m2g/ uOesrmIEVhzD7x/Vfb6sZQHxfxFZiojffYc90UfRZS4BmS32wdKirk3poKLTmXhV 5XJXjLPX28rgaqymjrnNrNgBHIj/XlyViJiRrJfq5hY6BsRdFETNhTG1AwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNPbdBfirkgD8PMi2dwni4Pxl26pMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvMDl0MEYtS3VTQVB3OHlMWjNDZUxnX0dYYnFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQLxzAwQA Te9/AwQAkB9iAwQAkB/7MA0GCSqGSIb3DQEBCwUAA4IBAQCJ0g5WEpojL1SMOq2X OY2PTWA++iL7r8w3Zh/C3BH4C9RDz65w9J3RWlORtWQ9dNG3s7tNdTPGZv0tKKL7 vhHn1RtWOoDZJJ2LIfhWQ0Qxm6t3d/qXy/ac4CrYpTY2Rr1v16xPy0hVTyizpB+s s7UhcXnT4G7YJr8i4QKUJ26IyopAGBlAka+mHWfy2Y91hvesR1PkVE2QFwmZzuMg eRFgxzwrST2oYd/3pLATHax3gwTwXsOiLxbjPYe1WH6yaPm9o0EsFGvY05fiJZIG WkzDsbR/WSJnoLNFMuWHZUO9Pu+8xTFkjcKBYyW2/Wzn7A3Gap6qV8ir4cDGdi0u Lzkd -----END CERTIFICATE-----Generated at Wed Jan 21 19:43:02 2026 by rpki-client