This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KOdZqmaLPTZxCi5MdCx_PG-A0mI.roa File: KOdZqmaLPTZxCi5MdCx_PG-A0mI.roa (raw, json) Hash identifier: ToJml9/8z1DoEdM6pbYRe15n7qmYbhmE2kchmdfLO9Q= Subject key identifier: 28:E7:59:AA:66:8B:3D:36:71:0A:2E:4C:74:2C:7F:3C:6F:80:D2:62 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AD278445AD0A16D0ACA2F2B663A946FAE Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KOdZqmaLPTZxCi5MdCx_PG-A0mI.roa Signing time: Sun 30 Nov 2025 01:54:48 +0000 ROA not before: Sun 30 Nov 2025 01:54:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213877 IP address blocks: 64.188.73.0/24 maxlen: 24 64.188.75.0/24 maxlen: 24 64.188.92.0/22 maxlen: 24 64.188.96.0/24 maxlen: 24 64.188.97.0/24 maxlen: 24 64.188.112.0/23 maxlen: 24 64.188.124.0/24 maxlen: 24 64.188.125.0/24 maxlen: 24 64.188.126.0/24 maxlen: 24 77.239.104.0/24 maxlen: 24 77.239.105.0/24 maxlen: 24 77.239.122.0/24 maxlen: 24 77.239.123.0/24 maxlen: 24 144.31.26.0/23 maxlen: 24 144.31.64.0/22 maxlen: 24 144.31.68.0/22 maxlen: 24 144.31.72.0/22 maxlen: 24 144.31.76.0/22 maxlen: 24 144.31.86.0/23 maxlen: 24 144.31.89.0/24 maxlen: 24 144.31.120.0/23 maxlen: 24 144.31.137.0/24 maxlen: 24 144.31.192.0/23 maxlen: 24 144.31.198.0/23 maxlen: 24 144.31.246.0/23 maxlen: 24 150.241.105.0/24 maxlen: 24 150.241.108.0/24 maxlen: 24 150.241.123.0/24 maxlen: 24 185.184.122.0/24 maxlen: 24 185.184.123.0/24 maxlen: 24 185.207.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d2:78:44:5a:d0:a1:6d:0a:ca:2f:2b:66:3a:94:6f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 30 01:54:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28e759aa668b3d36710a2e4c742c7f3c6f80d262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:18:35:44:00:36:e6:a0:06:04:a1:49:82:7d: 8f:c0:81:12:24:c1:4e:1c:34:2a:1f:8d:51:05:f2: 7f:11:78:00:44:e1:cf:ef:a1:a5:4c:53:99:0c:0d: d8:b6:26:29:ad:21:be:04:5c:93:76:78:5d:96:82: 39:92:d8:10:a5:67:4f:48:bd:cb:fd:aa:0f:a6:c2: 48:d1:06:66:a1:5c:d5:fd:bb:86:ed:8c:0f:a7:74: c7:a1:61:b6:d9:69:f4:78:1f:2d:7f:a3:2a:ce:40: 74:ed:d0:86:38:14:ac:2b:83:b2:91:72:7d:01:cc: 0d:a5:f4:8a:d0:06:26:d7:21:5d:2e:a9:37:5c:26: d2:8e:c9:5b:e2:69:82:b3:d4:37:70:ff:64:eb:8d: 72:ed:99:4a:67:a2:d0:18:b4:e9:94:f2:37:e9:38: 57:57:a4:cf:c2:cd:9b:61:d0:9d:e6:81:19:01:b8: 06:cb:7d:97:cf:99:ae:f7:f5:f7:03:2a:b3:c7:36: d2:17:52:cc:b1:b9:23:17:6f:87:b1:05:9c:99:29: 0a:6b:39:b8:e4:f8:67:a6:7d:93:12:51:7f:6d:6d: ef:90:65:bd:e8:38:20:bd:54:44:ce:23:7a:ce:ea: 78:71:a1:7b:b2:0a:76:b0:c0:e3:aa:24:26:76:b3: 22:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E7:59:AA:66:8B:3D:36:71:0A:2E:4C:74:2C:7F:3C:6F:80:D2:62 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KOdZqmaLPTZxCi5MdCx_PG-A0mI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.73.0/24 64.188.75.0/24 64.188.92.0-64.188.97.255 64.188.112.0/23 64.188.124.0-64.188.126.255 77.239.104.0/23 77.239.122.0/23 144.31.26.0/23 144.31.64.0/20 144.31.86.0/23 144.31.89.0/24 144.31.120.0/23 144.31.137.0/24 144.31.192.0/23 144.31.198.0/23 144.31.246.0/23 150.241.105.0/24 150.241.108.0/24 150.241.123.0/24 185.184.122.0/23 185.207.133.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:6b:0a:2a:ff:04:a1:f3:47:c9:16:8d:dc:91:af:ac:bb:99: 66:c3:b5:4a:48:26:d9:48:48:63:50:b1:b6:92:98:57:5d:df: 79:ac:fc:44:e8:b3:0e:fc:03:26:4d:83:a3:54:63:7e:4e:ff: c7:fd:d2:45:60:3d:57:e5:28:b7:31:82:4c:f0:38:1f:cb:95: ab:34:8c:34:4d:6f:8e:34:57:bb:dd:0d:4d:eb:f9:99:9a:99: 4d:42:e8:6b:15:a5:f8:13:e2:93:0c:a0:15:76:49:13:7f:11: 55:10:fb:83:ae:6a:2b:1e:07:8b:61:e6:39:73:c1:c8:78:34: b5:dd:f0:c8:75:34:b8:b1:b0:a6:94:9a:65:99:8d:bd:30:b2: 49:e3:22:82:f2:04:a9:b2:73:e9:58:a6:7c:02:e3:4f:d2:fd: e8:3b:a4:0c:bc:44:5a:f1:05:c2:2a:60:5c:b1:9d:f5:09:9c: 63:df:b8:82:ff:08:eb:a3:da:91:ab:39:7c:77:70:ca:28:0c: 38:08:7f:7d:f5:63:b9:53:30:bf:b2:1b:fd:c2:1f:25:b9:68: 50:bb:52:9e:f8:ef:52:e8:73:e0:25:4a:e5:9b:34:c1:8c:ee: 82:38:db:a6:7d:93:03:79:5d:61:ba:19:2e:68:f4:0d:cd:b1: 74:e2:40:36 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgISAZrSeERa0KFtCsovK2Y6lG+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTMwMDE1NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOGU3NTlhYTY2OGIzZDM2NzEwYTJlNGM3NDJjN2YzYzZmODBkMjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxg1RAA25qAGBKFJgn2PwIESJMFO HDQqH41RBfJ/EXgAROHP76GlTFOZDA3YtiYprSG+BFyTdnhdloI5ktgQpWdPSL3L /aoPpsJI0QZmoVzV/buG7YwPp3THoWG22Wn0eB8tf6MqzkB07dCGOBSsK4OykXJ9 AcwNpfSK0AYm1yFdLqk3XCbSjslb4mmCs9Q3cP9k641y7ZlKZ6LQGLTplPI36ThX V6TPws2bYdCd5oEZAbgGy32Xz5mu9/X3AyqzxzbSF1LMsbkjF2+HsQWcmSkKazm4 5Phnpn2TElF/bW3vkGW96DggvVREziN6zup4caF7sgp2sMDjqiQmdrMigQIDAQAB o4ICljCCApIwHQYDVR0OBBYEFCjnWapmiz02cQouTHQsfzxvgNJiMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvS09kWnFtYUxQVFp4Q2k1TWRDeF9QRy1BMG1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDCBlQQCAAEwgY4DBABA vEkDBABAvEswDAMEAkC8XAMEAUC8YAMEAUC8cDAMAwQCQLx8AwQAQLx+AwQBTe9o AwQBTe96AwQBkB8aAwQEkB9AAwQBkB9WAwQAkB9ZAwQBkB94AwQAkB+JAwQBkB/A AwQBkB/GAwQBkB/2AwQAlvFpAwQAlvFsAwQAlvF7AwQBubh6AwQAuc+FMA0GCSqG SIb3DQEBCwUAA4IBAQBdawoq/wSh80fJFo3cka+su5lmw7VKSCbZSEhjULG2kphX Xd95rPxE6LMO/AMmTYOjVGN+Tv/H/dJFYD1X5Si3MYJM8Dgfy5WrNIw0TW+ONFe7 3Q1N6/mZmplNQuhrFaX4E+KTDKAVdkkTfxFVEPuDrmorHgeLYeY5c8HIeDS13fDI dTS4sbCmlJplmY29MLJJ4yKC8gSpsnPpWKZ8AuNP0v3oO6QMvERa8QXCKmBcsZ31 CZxj37iC/wjro9qRqzl8d3DKKAw4CH999WO5UzC/shv9wh8luWhQu1Ke+O9S6HPg JUrlmzTBjO6CONumfZMDeV1huhkuaPQNzbF04kA2 -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:21 2025 by rpki-client