This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CqHNdsZsYmNo025Fd4X2yKiuaZw.roa File: CqHNdsZsYmNo025Fd4X2yKiuaZw.roa (raw, json) Hash identifier: udH7jdEVoiWFjJJZqps/WS2gX1ScfmDWdzhIlMs8KSM= Subject key identifier: 0A:A1:CD:76:C6:6C:62:63:68:D3:6E:45:77:85:F6:C8:A8:AE:69:9C Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AEB0D51367F8E6D11608CE43919DE5FC1 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CqHNdsZsYmNo025Fd4X2yKiuaZw.roa Signing time: Thu 04 Dec 2025 20:28:29 +0000 ROA not before: Thu 04 Dec 2025 20:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207567 IP address blocks: 144.31.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:0d:51:36:7f:8e:6d:11:60:8c:e4:39:19:de:5f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 4 20:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0aa1cd76c66c626368d36e457785f6c8a8ae699c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:d2:cc:ce:95:cf:34:87:44:74:08:34:9a: 14:a6:b0:f0:3b:e7:e3:8a:37:dc:93:81:a4:86:87: fc:c3:aa:b3:8d:61:14:de:af:19:7c:38:79:c4:ec: 5d:01:36:23:0c:30:54:2d:c5:c3:31:26:f7:52:7e: 33:7b:4f:5d:89:18:b5:56:71:b5:83:cc:68:29:64: d0:80:77:fb:44:6c:a4:1f:9b:4a:f7:7c:a6:40:58: 34:fa:b2:f6:91:15:dc:c1:85:5c:4b:93:09:1b:df: ad:68:28:34:0b:13:59:2d:c0:e2:2b:f2:94:00:9a: 2f:53:62:cb:11:0e:74:72:0e:98:f1:cf:12:2d:13: 05:bc:a8:f4:10:58:34:2d:72:96:f6:2d:f8:9f:0e: e6:35:a8:43:0d:2e:ec:c2:6c:f0:cd:96:e6:06:b0: 48:99:10:e6:01:64:e5:39:21:70:19:d8:a2:50:b4: 49:f7:5a:ed:0f:2f:a3:4d:a7:c8:86:cc:e3:f4:e6: 9a:a4:ab:0c:e5:ea:04:85:07:9c:12:f4:99:f6:10: 40:cf:f2:47:f6:e4:77:2c:c0:79:8d:82:ce:b2:3d: ec:b1:18:50:49:a6:88:8a:c3:fe:69:36:3b:99:fb: d4:2e:a8:a5:aa:87:2d:fd:0f:4f:5e:9a:5d:e6:ac: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A1:CD:76:C6:6C:62:63:68:D3:6E:45:77:85:F6:C8:A8:AE:69:9C X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CqHNdsZsYmNo025Fd4X2yKiuaZw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.244.0/23 Signature Algorithm: sha256WithRSAEncryption 13:5b:63:a2:25:90:ae:17:d6:24:79:21:22:b3:31:df:de:66: 81:a8:ff:6f:cd:66:a1:e5:95:8b:bf:1f:00:e3:52:1d:d8:46: 71:5e:d2:d7:81:ee:b3:15:f6:60:1a:ab:f1:df:a9:e2:fc:4c: ce:a1:82:48:b2:ab:9b:50:4d:0c:fd:f2:94:2b:8a:4d:2b:5d: f0:92:ad:16:72:fd:b3:0d:d4:f0:6c:fd:06:ea:74:72:fe:43: c3:0d:2c:4e:38:f1:22:7e:bb:3f:79:69:d2:b1:32:c3:47:d3: c7:8b:9f:d9:a2:2b:1f:2d:d1:b9:ee:af:8d:fc:bb:12:f0:c2: 98:97:03:fc:9b:31:59:9c:8e:f6:91:69:e2:16:fe:42:47:55: a7:e1:cd:d9:48:e8:76:e2:eb:60:c8:24:9e:f9:0d:20:30:e2: 74:20:d1:ef:1f:8f:c6:46:81:ce:e4:80:71:8b:82:cc:5e:6b: af:a5:9a:77:61:3b:91:42:3d:a0:32:74:62:94:67:9d:63:1c: 7c:a4:e2:81:02:93:64:21:2e:35:dd:7d:bf:8e:73:69:b0:18: 47:bf:0d:db:1e:55:0a:69:92:c3:91:d3:e8:5a:49:f3:1a:af: d2:55:6f:e1:e4:51:4d:ba:6a:46:9e:f9:9b:19:7e:b0:1a:f3: 33:5b:7b:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrrDVE2f45tEWCM5DkZ3l/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjA0MjAyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWExY2Q3NmM2NmM2MjYzNjhkMzZlNDU3Nzg1ZjZjOGE4YWU2OTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7fSzM6VzzSHRHQINJoUprDwO+fj ijfck4Gkhof8w6qzjWEU3q8ZfDh5xOxdATYjDDBULcXDMSb3Un4ze09diRi1VnG1 g8xoKWTQgHf7RGykH5tK93ymQFg0+rL2kRXcwYVcS5MJG9+taCg0CxNZLcDiK/KU AJovU2LLEQ50cg6Y8c8SLRMFvKj0EFg0LXKW9i34nw7mNahDDS7swmzwzZbmBrBI mRDmAWTlOSFwGdiiULRJ91rtDy+jTafIhszj9OaapKsM5eoEhQecEvSZ9hBAz/JH 9uR3LMB5jYLOsj3ssRhQSaaIisP+aTY7mfvULqilqoct/Q9PXppd5qzOFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAqhzXbGbGJjaNNuRXeF9siormmcMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvQ3FITmRzWnNZbU5vMDI1RmQ0WDJ5S2l1YVp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkB/0MA0G CSqGSIb3DQEBCwUAA4IBAQATW2OiJZCuF9YkeSEiszHf3maBqP9vzWah5ZWLvx8A 41Id2EZxXtLXge6zFfZgGqvx36ni/EzOoYJIsqubUE0M/fKUK4pNK13wkq0Wcv2z DdTwbP0G6nRy/kPDDSxOOPEifrs/eWnSsTLDR9PHi5/ZoisfLdG57q+N/LsS8MKY lwP8mzFZnI72kWniFv5CR1Wn4c3ZSOh24utgyCSe+Q0gMOJ0INHvH4/GRoHO5IBx i4LMXmuvpZp3YTuRQj2gMnRilGedYxx8pOKBApNkIS413X2/jnNpsBhHvw3bHlUK aZLDkdPoWknzGq/SVW/h5FFNumpGnvmbGX6wGvMzW3sf -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:19 2025 by rpki-client