This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1v27v333xMFirBRlkyd9I54TKYM.roa File: 1v27v333xMFirBRlkyd9I54TKYM.roa (raw, json) Hash identifier: aNQWeEoTO/QM7HQ/vhioND0xsxcj74tYVVJvkRx0WlY= Subject key identifier: D6:FD:BB:BF:7D:F7:C4:C1:62:AC:14:65:93:27:7D:23:9E:13:29:83 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC633042A702CE0F81A31BC92FFE5F Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1v27v333xMFirBRlkyd9I54TKYM.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 150.241.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:63:30:42:a7:02:ce:0f:81:a3:1b:c9:2f:fe:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6fdbbbf7df7c4c162ac146593277d239e132983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:4e:18:d3:78:73:fe:32:cc:3c:00:f4:2e: 2d:d9:08:03:1d:86:35:f6:9b:46:e9:cf:03:8a:d5: 11:56:9e:b5:9e:84:dc:a2:4e:30:9a:db:73:25:0a: c9:ee:7b:d4:f7:5e:63:fc:86:f0:1d:c4:13:6a:03: 33:f6:d8:a6:f1:c1:d0:7e:67:41:2d:d7:47:90:ed: 58:82:24:94:10:c0:d4:9f:88:f4:eb:71:c7:35:6a: 62:8f:5b:05:61:ee:bd:98:b5:cd:a7:df:1b:37:17: a7:da:5c:7d:e4:39:09:b3:8a:c2:52:ce:76:e5:10: 22:27:8b:2d:b9:a8:da:f2:97:87:af:4a:69:67:b7: 32:56:99:37:e9:d1:e9:13:00:7b:f1:8d:6c:76:02: 14:5e:65:c7:e8:8d:6e:a8:20:ce:54:a3:4a:50:5c: ae:32:41:3e:8d:ad:49:8a:52:9c:67:04:b6:f6:3d: 73:e2:b2:8c:25:b5:58:eb:bb:dc:79:f3:ad:b1:f8: 4e:1e:bb:ce:d3:11:88:39:24:e4:44:44:f0:63:c1: 1e:2a:9f:5d:5e:a6:9a:30:46:17:e5:a1:ac:02:c7: 95:12:99:85:73:c1:e5:ef:70:96:c0:44:bc:c6:7c: 4d:f2:e7:a9:8b:d9:c7:2e:b8:59:e6:f1:0a:3c:53: c2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:BB:BF:7D:F7:C4:C1:62:AC:14:65:93:27:7D:23:9E:13:29:83 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1v27v333xMFirBRlkyd9I54TKYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.96.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:19:0f:3e:07:b3:e1:ed:51:2b:72:c3:1b:80:59:4e:a6:2d: 2c:dd:de:99:fc:c0:8f:27:25:51:43:7a:13:f4:b2:75:0e:60: 4d:e7:7a:c0:79:20:b3:5d:f2:6f:d7:b3:1d:f1:8c:4a:89:43: 4d:65:85:4d:fb:3a:f4:4e:b7:07:22:16:7d:07:73:9d:7e:aa: df:ac:5f:70:08:25:d1:8d:93:1e:b2:c2:4c:11:86:ab:ae:a9: ae:0d:2b:0b:ac:66:aa:bf:86:58:7c:a8:a1:bc:e1:be:44:0b: 63:61:49:b2:ff:e2:f9:14:bc:6d:c9:c9:20:d5:ac:d0:6d:17: 54:9c:3b:89:11:d7:03:38:e1:a0:c1:9f:b6:92:cd:1d:47:f2: 63:9c:23:ef:02:ef:59:97:35:21:ae:0c:d4:e1:d2:13:d9:fa: 60:f0:d8:a8:25:f9:9a:86:35:c8:df:4c:ca:18:8d:10:c2:51: 1b:68:5a:c1:ce:63:e8:00:8e:dc:ad:80:14:92:20:cb:d9:a9: 74:9b:f0:8d:f4:78:35:35:5b:0f:46:79:e7:a2:c0:d6:53:e7: 94:4e:5b:62:c8:f2:66:59:72:6d:7a:c2:60:24:a5:e8:e2:fe: 6a:e1:b7:af:6b:5e:8b:34:be:ca:9c:3e:ac:a0:45:53:99:4c: 82:78:a5:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GMwQqcCzg+BoxvJL/5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmZkYmJiZjdkZjdjNGMxNjJhYzE0NjU5MzI3N2QyMzllMTMyOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOhOGNN4c/4yzDwA9C4t2QgDHYY1 9ptG6c8DitURVp61noTcok4wmttzJQrJ7nvU915j/IbwHcQTagMz9tim8cHQfmdB LddHkO1YgiSUEMDUn4j063HHNWpij1sFYe69mLXNp98bNxen2lx95DkJs4rCUs52 5RAiJ4stuaja8peHr0ppZ7cyVpk36dHpEwB78Y1sdgIUXmXH6I1uqCDOVKNKUFyu MkE+ja1JilKcZwS29j1z4rKMJbVY67vcefOtsfhOHrvO0xGIOSTkRETwY8EeKp9d XqaaMEYX5aGsAseVEpmFc8Hl73CWwES8xnxN8uepi9nHLrhZ5vEKPFPC6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNb9u79998TBYqwUZZMnfSOeEymDMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvMXYyN3YzMzN4TUZpckJSbGt5ZDlJNTRUS1lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClvFgMA0G CSqGSIb3DQEBCwUAA4IBAQA8GQ8+B7Ph7VErcsMbgFlOpi0s3d6Z/MCPJyVRQ3oT 9LJ1DmBN53rAeSCzXfJv17Md8YxKiUNNZYVN+zr0TrcHIhZ9B3OdfqrfrF9wCCXR jZMessJMEYarrqmuDSsLrGaqv4ZYfKihvOG+RAtjYUmy/+L5FLxtyckg1azQbRdU nDuJEdcDOOGgwZ+2ks0dR/JjnCPvAu9ZlzUhrgzU4dIT2fpg8NioJfmahjXI30zK GI0QwlEbaFrBzmPoAI7crYAUkiDL2al0m/CN9Hg1NVsPRnnnosDWU+eUTltiyPJm WXJtesJgJKXo4v5q4beva16LNL7KnD6soEVTmUyCeKVA -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:27 2026 by rpki-client