This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7jv8BpT5uRMRfpfA3QzbcEWS4U0.roa File: 7jv8BpT5uRMRfpfA3QzbcEWS4U0.roa (raw, json) Hash identifier: SQApNZXXZO7QLGLpfCw3dAMzdW9maenEDqozkXaq5rw= Subject key identifier: EE:3B:FC:06:94:F9:B9:13:11:7E:97:C0:DD:0C:DB:70:45:92:E1:4D Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC70B7193C958C5A8B5D28BCAB56F4 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7jv8BpT5uRMRfpfA3QzbcEWS4U0.roa Signing time: Thu 01 Jan 2026 14:18:17 +0000 ROA not before: Thu 01 Jan 2026 14:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212598 IP address blocks: 193.23.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:70:b7:19:3c:95:8c:5a:8b:5d:28:bc:ab:56:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3bfc0694f9b913117e97c0dd0cdb704592e14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:7c:33:75:5d:e7:12:34:77:23:b0:72:a0: a8:a0:af:51:88:1f:1b:d7:37:32:e4:8e:7b:97:30: 9b:f7:4e:2e:d4:c1:13:a9:1a:62:1f:37:97:d3:d7: 43:bc:fb:58:b0:3f:27:c5:34:1b:95:38:fb:b9:9d: cb:d5:45:ee:6c:96:3f:d1:92:1c:6c:22:dc:f0:48: d7:c2:da:b0:ff:01:d7:8c:83:3a:52:8d:a0:03:3d: d3:ef:ad:02:6e:5b:75:52:eb:0e:e6:1b:af:d7:ac: 48:32:ee:a7:c0:db:7b:f5:67:48:02:4d:e9:16:e6: 5c:f1:6d:b3:d0:3a:33:f6:9c:6e:c8:1e:a0:e9:61: fd:d7:d4:ea:86:8c:5f:6f:87:0d:fa:6d:28:74:00: ed:b0:8d:b3:8a:d5:ee:40:01:a2:18:7f:1c:03:22: 13:46:3b:03:1b:cc:fe:9d:d4:3c:b3:4c:14:3f:35: 0d:01:62:47:a8:ba:9e:36:3e:7c:17:c6:33:2d:a0: 23:41:21:1e:5b:f1:e2:8c:3b:8e:ad:ed:50:e6:a9: 4a:d8:00:61:20:f8:52:3b:f6:91:62:89:99:2c:19: 8c:28:8d:e9:bb:05:b3:4b:5f:e4:08:7c:14:d6:82: 9c:8b:70:eb:e8:70:93:03:62:4f:f5:56:d6:00:43: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3B:FC:06:94:F9:B9:13:11:7E:97:C0:DD:0C:DB:70:45:92:E1:4D X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7jv8BpT5uRMRfpfA3QzbcEWS4U0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.223.0/24 Signature Algorithm: sha256WithRSAEncryption 62:5f:a0:24:ce:85:d2:e6:73:83:c2:64:5d:2f:dc:27:32:c8: c2:62:5c:97:47:c3:5a:3b:ff:cc:b6:3a:67:52:a1:f0:21:04: 13:d3:0c:78:e4:e5:57:39:29:59:0d:b3:9b:b6:58:62:ec:59: ea:8c:4f:c6:1a:c3:8f:be:be:b6:76:f3:f9:ee:2d:5e:37:ac: cc:d6:27:01:90:05:7c:38:29:0c:b1:c5:c7:19:ba:ef:14:17: ba:49:c5:b7:05:80:3b:f9:98:1b:f7:10:2f:96:68:70:47:c3: 8b:10:54:47:e1:cf:e7:ed:75:b8:6f:42:b1:bb:64:36:1f:c7: 94:87:a4:22:d8:6b:7e:c3:1f:1f:c6:dd:a1:25:64:dd:b1:dd: a4:b4:d8:9d:69:97:1f:2c:ec:c1:79:d6:c2:ce:e2:bf:32:ad: ff:50:81:1f:08:16:6b:5d:65:e7:96:a4:a8:8d:41:13:31:cf: a0:8b:bc:2e:51:a3:86:b9:1a:52:ff:48:5e:09:63:46:22:8e: 59:ed:7d:0b:06:23:8a:84:c6:f8:15:f1:37:0f:b6:44:34:80: 52:7c:ca:8b:89:d3:72:81:00:f4:d6:e2:05:53:72:ec:bb:58: ed:d1:ac:6b:5d:ce:ce:40:fc:41:3f:0d:a5:f3:2f:78:ab:e3: 76:ad:f4:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57HC3GTyVjFqLXSi8q1b0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTNiZmMwNjk0ZjliOTEzMTE3ZTk3YzBkZDBjZGI3MDQ1OTJlMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/t8M3Vd5xI0dyOwcqCooK9RiB8b 1zcy5I57lzCb904u1METqRpiHzeX09dDvPtYsD8nxTQblTj7uZ3L1UXubJY/0ZIc bCLc8EjXwtqw/wHXjIM6Uo2gAz3T760Cblt1UusO5huv16xIMu6nwNt79WdIAk3p FuZc8W2z0Doz9pxuyB6g6WH919Tqhoxfb4cN+m0odADtsI2zitXuQAGiGH8cAyIT RjsDG8z+ndQ8s0wUPzUNAWJHqLqeNj58F8YzLaAjQSEeW/HijDuOre1Q5qlK2ABh IPhSO/aRYomZLBmMKI3puwWzS1/kCHwU1oKci3Dr6HCTA2JP9VbWAEPQuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO47/AaU+bkTEX6XwN0M23BFkuFNMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvN2p2OEJwVDV1Uk1SZnBmQTNRemJjRVdTNFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRffMA0G CSqGSIb3DQEBCwUAA4IBAQBiX6AkzoXS5nODwmRdL9wnMsjCYlyXR8NaO//Mtjpn UqHwIQQT0wx45OVXOSlZDbObtlhi7FnqjE/GGsOPvr62dvP57i1eN6zM1icBkAV8 OCkMscXHGbrvFBe6ScW3BYA7+Zgb9xAvlmhwR8OLEFRH4c/n7XW4b0Kxu2Q2H8eU h6Qi2Gt+wx8fxt2hJWTdsd2ktNidaZcfLOzBedbCzuK/Mq3/UIEfCBZrXWXnlqSo jUETMc+gi7wuUaOGuRpS/0heCWNGIo5Z7X0LBiOKhMb4FfE3D7ZENIBSfMqLidNy gQD01uIFU3Lsu1jt0axrXc7OQPxBPw2l8y94q+N2rfQk -----END CERTIFICATE-----Generated at Wed Jan 21 17:17:21 2026 by rpki-client