This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7x5xXSSG2DOB9dd4FONisKkns_A.roa File: 7x5xXSSG2DOB9dd4FONisKkns_A.roa (raw, json) Hash identifier: EzZOujVdH9nT9heOKOxVm5h/hzMEO/SD/dhRBQGAdd0= Subject key identifier: EF:1E:71:5D:24:86:D8:33:81:F5:D7:78:14:E3:62:B0:A9:27:B3:F0 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019A92FC94DE21D2B026F6755F3F110AB3C6 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7x5xXSSG2DOB9dd4FONisKkns_A.roa Signing time: Mon 17 Nov 2025 18:03:37 +0000 ROA not before: Mon 17 Nov 2025 18:03:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206150 IP address blocks: 144.31.202.0/24 maxlen: 24 144.31.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:92:fc:94:de:21:d2:b0:26:f6:75:5f:3f:11:0a:b3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 17 18:03:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef1e715d2486d83381f5d77814e362b0a927b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:10:06:e1:c6:e0:b2:d4:fc:79:b3:62:16:69: 73:fa:19:b7:22:8e:d4:7b:ca:ff:95:34:25:a3:68: 5f:e3:3c:2c:f3:5c:15:68:9f:12:f1:6b:ea:73:69: 1a:44:44:ee:31:ce:4f:43:8e:0a:89:1d:77:31:4d: 65:08:35:94:c6:c3:f3:f9:82:68:8f:19:df:11:1d: 82:85:e6:07:b4:a9:51:31:6e:5d:95:e2:dd:46:72: 03:19:b5:86:67:a0:42:4b:76:10:20:6b:f1:3c:63: 27:b0:76:c8:49:49:f1:27:0f:72:02:a6:a7:51:76: 4f:50:25:37:53:25:46:53:52:d4:a0:88:7e:7e:0d: 83:4e:b2:30:be:c7:f1:94:16:f9:b0:29:b0:58:8f: f5:0c:9c:61:66:7d:d8:6b:f3:00:3f:8f:1b:4d:48: 7e:69:0e:07:f1:9d:09:c2:77:90:30:b4:57:a0:6b: 28:34:1f:09:42:c8:c0:bc:39:13:83:72:20:66:78: b4:2b:6d:7c:28:33:e2:cf:33:6c:e2:05:ec:94:d8: 33:e0:8b:cd:c8:8c:ab:68:eb:d8:d2:12:13:08:16: 49:d7:be:de:6b:a0:d6:6b:29:dc:34:80:72:02:55: d2:1b:13:41:96:7f:25:e9:15:f8:21:b2:7d:1b:96: 66:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1E:71:5D:24:86:D8:33:81:F5:D7:78:14:E3:62:B0:A9:27:B3:F0 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/7x5xXSSG2DOB9dd4FONisKkns_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.202.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:3c:b3:fc:34:cb:4f:9e:53:a9:a4:9d:18:9f:0e:60:46:b1: 97:8b:62:40:d4:fb:4e:41:be:0d:d8:82:7a:90:80:55:32:21: 70:26:c8:e4:97:f6:2a:0b:01:5c:6e:23:c2:d1:c7:36:2e:14: f2:ce:bb:ae:8c:6c:30:88:f6:99:e9:57:2a:33:e7:e5:4b:1f: 4c:22:1f:e6:2e:e0:70:a2:a1:0a:ae:75:29:e5:8a:a6:fd:19: aa:78:8c:49:13:15:5f:c1:d1:aa:47:56:0e:08:fe:e7:d0:5f: 36:9b:28:fe:2c:14:af:ef:e7:08:0d:16:8c:01:9b:7d:5b:11: e6:62:a3:a7:6a:53:74:90:3e:ab:df:ee:e2:8e:e1:41:40:ef: dc:58:0e:b7:f9:e6:26:35:37:59:35:5c:1a:70:ce:d9:33:39: 63:7f:c0:a1:d1:34:1c:b3:57:07:ab:79:de:35:96:4b:db:3c: 9c:5e:e6:dc:c0:1d:7b:33:0e:ac:21:7b:2f:58:26:ca:48:28: 58:0f:10:6b:02:f4:b8:e6:87:f6:40:16:a2:08:dc:90:3a:65: d5:e3:86:69:0a:d4:80:8a:a0:b4:96:df:90:49:f6:06:a0:1a: 62:ab:22:c3:0d:b3:47:64:e1:0c:27:51:cf:df:e6:5c:ad:eb: ac:7c:11:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqS/JTeIdKwJvZ1Xz8RCrPGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTE3MTgwMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjFlNzE1ZDI0ODZkODMzODFmNWQ3NzgxNGUzNjJiMGE5MjdiM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xAG4cbgstT8ebNiFmlz+hm3Io7U e8r/lTQlo2hf4zws81wVaJ8S8Wvqc2kaRETuMc5PQ44KiR13MU1lCDWUxsPz+YJo jxnfER2CheYHtKlRMW5dleLdRnIDGbWGZ6BCS3YQIGvxPGMnsHbISUnxJw9yAqan UXZPUCU3UyVGU1LUoIh+fg2DTrIwvsfxlBb5sCmwWI/1DJxhZn3Ya/MAP48bTUh+ aQ4H8Z0JwneQMLRXoGsoNB8JQsjAvDkTg3IgZni0K218KDPizzNs4gXslNgz4IvN yIyraOvY0hITCBZJ177ea6DWayncNIByAlXSGxNBln8l6RX4IbJ9G5ZmgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO8ecV0khtgzgfXXeBTjYrCpJ7PwMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvN3g1eFhTU0cyRE9COWRkNEZPTmlzS2tuc19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkB/KMA0G CSqGSIb3DQEBCwUAA4IBAQA7PLP8NMtPnlOppJ0Ynw5gRrGXi2JA1PtOQb4N2IJ6 kIBVMiFwJsjkl/YqCwFcbiPC0cc2LhTyzruujGwwiPaZ6VcqM+flSx9MIh/mLuBw oqEKrnUp5Yqm/RmqeIxJExVfwdGqR1YOCP7n0F82myj+LBSv7+cIDRaMAZt9WxHm YqOnalN0kD6r3+7ijuFBQO/cWA63+eYmNTdZNVwacM7ZMzljf8Ch0TQcs1cHq3ne NZZL2zycXubcwB17Mw6sIXsvWCbKSChYDxBrAvS45of2QBaiCNyQOmXV44ZpCtSA iqC0lt+QSfYGoBpiqyLDDbNHZOEMJ1HP3+ZcreusfBHr -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:14 2025 by rpki-client