This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/79rq0T7HcYYMvWlW2ugNoc1BsEg.roa File: 79rq0T7HcYYMvWlW2ugNoc1BsEg.roa (raw, json) Hash identifier: wbV220EFr2q7VXfXfZfy+znRqXYlBZF4/TsFd1XtzNQ= Subject key identifier: EF:DA:EA:D1:3E:C7:71:86:0C:BD:69:56:DA:E8:0D:A1:CD:41:B0:48 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC718CE6CFA4CB2E028E5E37781CCB Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/79rq0T7HcYYMvWlW2ugNoc1BsEg.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213229 IP address blocks: 64.188.88.0/24 maxlen: 24 144.31.31.0/24 maxlen: 24 193.23.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:71:8c:e6:cf:a4:cb:2e:02:8e:5e:37:78:1c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efdaead13ec771860cbd6956dae80da1cd41b048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:f9:b3:32:aa:7a:5f:ca:ce:85:ef:14:f6: 9d:e6:e6:82:2e:d8:bd:f8:c6:cd:9d:18:79:5e:dd: 29:f3:21:16:d9:16:a1:4a:a6:64:6a:7b:55:d4:1a: 9e:dc:2d:02:46:37:be:e2:25:76:02:74:08:02:fd: 47:a2:04:d7:f4:e5:3c:72:6e:e3:68:f7:65:8b:b1: 03:dd:d3:96:fd:c1:74:86:76:e0:91:7f:9b:da:d0: 4e:ca:d4:23:5e:0b:12:30:53:5f:bd:05:c0:61:f0: 92:c5:7a:2f:fa:b7:0c:b7:86:a1:07:7b:93:ab:94: a5:e4:80:4a:9f:34:8d:f5:6a:ac:24:62:bf:b2:d7: ea:2c:4f:1c:73:83:ba:c4:c2:39:89:a1:de:f7:33: 31:da:e6:bc:17:ea:4e:84:6f:56:66:db:e5:23:74: c6:6d:14:23:47:df:c8:a6:65:aa:c3:c6:2d:e9:ae: c5:65:d0:e7:92:bd:39:1b:88:7e:44:2a:ad:a1:52: 99:88:b2:83:17:c5:d0:a0:ef:44:e0:64:e1:f5:23: 3e:09:db:59:3c:13:25:62:a0:07:10:d9:ee:96:87: 51:91:52:d8:81:2c:4d:97:cb:16:40:b8:84:80:75: a3:59:5c:85:28:f7:56:fc:ab:ec:ee:b3:71:90:45: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DA:EA:D1:3E:C7:71:86:0C:BD:69:56:DA:E8:0D:A1:CD:41:B0:48 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/79rq0T7HcYYMvWlW2ugNoc1BsEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.88.0/24 144.31.31.0/24 193.23.208.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:05:f1:35:00:53:79:27:41:75:e5:b5:27:1a:e2:3c:ba:c6: 0a:8d:e3:6a:cd:d2:fc:84:93:e7:c3:9f:2e:90:01:14:f9:3f: d4:d5:5b:fd:a6:8b:b2:40:33:21:d4:a3:12:c5:be:bd:14:e6: cb:db:23:68:dd:36:98:43:09:1a:ec:4a:e2:7e:2a:6a:bc:56: 1b:d7:8b:32:9a:38:c4:7e:e0:8a:cd:0a:f2:9b:45:3e:b1:0a: 07:21:a9:e8:b2:57:67:7a:2d:21:3f:3d:7f:e0:ef:9f:2c:c7: e3:7e:01:53:8c:af:a7:f7:fa:61:5d:b1:c2:db:4e:3f:17:79: e2:ac:ed:e5:82:6e:64:dd:e4:73:64:0d:38:15:a9:b7:5f:a7: 70:5c:b0:2f:56:2f:2c:77:63:b9:ef:6c:60:f5:ad:6d:1b:6b: 84:3b:b2:74:af:4e:92:19:88:81:27:bb:f3:37:b6:09:30:4a: c3:2b:5b:6c:1f:f1:d7:68:2f:2d:01:b0:1b:7d:a0:0c:b4:cb: 8c:50:ab:2b:10:2e:1f:79:2c:73:6c:bb:bd:55:8f:96:34:28: 08:3d:c3:89:4c:ad:30:a2:a7:de:b5:f7:6d:65:5c:b7:c7:ac: 9b:53:4f:dc:43:4f:d1:81:08:b3:bd:ca:a9:f9:8f:04:d8:60: fd:88:89:d1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57HGM5s+kyy4Cjl43eBzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmRhZWFkMTNlYzc3MTg2MGNiZDY5NTZkYWU4MGRhMWNkNDFiMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEL5szKqel/KzoXvFPad5uaCLti9 +MbNnRh5Xt0p8yEW2RahSqZkantV1Bqe3C0CRje+4iV2AnQIAv1HogTX9OU8cm7j aPdli7ED3dOW/cF0hnbgkX+b2tBOytQjXgsSMFNfvQXAYfCSxXov+rcMt4ahB3uT q5Sl5IBKnzSN9WqsJGK/stfqLE8cc4O6xMI5iaHe9zMx2ua8F+pOhG9WZtvlI3TG bRQjR9/IpmWqw8Yt6a7FZdDnkr05G4h+RCqtoVKZiLKDF8XQoO9E4GTh9SM+CdtZ PBMlYqAHENnulodRkVLYgSxNl8sWQLiEgHWjWVyFKPdW/Kvs7rNxkEVzJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO/a6tE+x3GGDL1pVtroDaHNQbBIMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvNzlycTBUN0hjWVlNdldsVzJ1Z05vYzFCc0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAQLxYAwQA kB8fAwQAwRfQMA0GCSqGSIb3DQEBCwUAA4IBAQCLBfE1AFN5J0F15bUnGuI8usYK jeNqzdL8hJPnw58ukAEU+T/U1Vv9pouyQDMh1KMSxb69FObL2yNo3TaYQwka7Eri fipqvFYb14symjjEfuCKzQrym0U+sQoHIanosldnei0hPz1/4O+fLMfjfgFTjK+n 9/phXbHC204/F3nirO3lgm5k3eRzZA04Fam3X6dwXLAvVi8sd2O572xg9a1tG2uE O7J0r06SGYiBJ7vzN7YJMErDK1tsH/HXaC8tAbAbfaAMtMuMUKsrEC4feSxzbLu9 VY+WNCgIPcOJTK0woqfetfdtZVy3x6ybU0/cQ0/RgQizvcqp+Y8E2GD9iInR -----END CERTIFICATE-----Generated at Fri Jan 23 19:17:01 2026 by rpki-client