This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MvSQLBV-eX7LDtF_aLZt696uNGA.roa File: MvSQLBV-eX7LDtF_aLZt696uNGA.roa (raw, json) Hash identifier: /rZCUgm3E6uDNrLK9g+CzG5151IuQ21B3X7BZF8xyyQ= Subject key identifier: 32:F4:90:2C:15:7E:79:7E:CB:0E:D1:7F:68:B6:6D:EB:DE:AE:34:60 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019ACBCA0F37F2AD73FB5B40E8A78C25594B Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MvSQLBV-eX7LDtF_aLZt696uNGA.roa Signing time: Fri 28 Nov 2025 18:46:48 +0000 ROA not before: Fri 28 Nov 2025 18:46:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215474 IP address blocks: 144.31.126.0/24 maxlen: 24 144.31.127.0/24 maxlen: 24 144.31.224.0/24 maxlen: 24 144.31.225.0/24 maxlen: 24 144.31.226.0/24 maxlen: 24 144.31.227.0/24 maxlen: 24 144.31.228.0/24 maxlen: 24 144.31.229.0/24 maxlen: 24 144.31.230.0/24 maxlen: 24 144.31.231.0/24 maxlen: 24 144.31.232.0/24 maxlen: 24 144.31.233.0/24 maxlen: 24 144.31.234.0/24 maxlen: 24 144.31.235.0/24 maxlen: 24 144.31.236.0/24 maxlen: 24 144.31.237.0/24 maxlen: 24 144.31.238.0/24 maxlen: 24 144.31.239.0/24 maxlen: 24 144.31.240.0/24 maxlen: 24 144.31.241.0/24 maxlen: 24 144.31.242.0/24 maxlen: 24 144.31.243.0/24 maxlen: 24 150.241.68.0/24 maxlen: 24 150.241.69.0/24 maxlen: 24 150.241.70.0/24 maxlen: 24 150.241.71.0/24 maxlen: 24 150.241.72.0/24 maxlen: 24 150.241.73.0/24 maxlen: 24 150.241.74.0/24 maxlen: 24 150.241.75.0/24 maxlen: 24 150.241.85.0/24 maxlen: 24 150.241.86.0/24 maxlen: 24 193.23.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:ca:0f:37:f2:ad:73:fb:5b:40:e8:a7:8c:25:59:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 28 18:46:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=32f4902c157e797ecb0ed17f68b66debdeae3460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7f:99:58:c5:61:e0:b1:a5:ba:7f:1a:7e:64: 4a:9d:9b:82:38:ff:96:71:1e:0a:c6:dd:c5:5b:8a: c7:a2:89:31:70:aa:ad:bb:cb:b1:4a:96:63:84:66: d2:df:6e:80:b7:bd:38:9f:4e:bb:39:e2:b2:88:7f: 5a:d9:43:b8:7d:6d:e9:1d:c1:f5:4a:c1:f6:73:96: 24:7d:7e:24:dd:c0:9e:c6:64:6e:af:3f:fc:89:bf: 94:29:9f:a0:69:dc:30:48:da:c0:c2:e3:32:8e:b6: 81:ef:16:8d:6a:89:83:0c:cc:31:70:5c:ff:91:ef: 3b:5e:0e:f3:6c:bd:7a:9b:21:35:a2:8d:6f:ae:e3: 1f:74:b2:1c:bb:00:f0:64:36:ba:c7:54:54:c3:2a: 88:66:c8:c8:86:b3:6e:de:ab:20:0d:cb:6f:03:76: f0:fe:a6:5f:cb:29:a0:93:c9:4c:99:d9:64:4a:7b: 05:6b:00:55:d0:4b:6d:2a:6a:fb:18:d1:b5:b1:e9: a4:0a:7d:85:c6:68:d8:3b:67:39:3c:e4:53:ea:87: 05:d9:9e:a3:cf:20:14:a0:62:42:ac:8c:c2:5e:d8: 01:f8:9d:6b:07:88:89:60:c0:70:d6:31:a6:89:3d: 53:5d:43:e7:40:52:e9:96:12:af:c5:55:80:97:0f: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F4:90:2C:15:7E:79:7E:CB:0E:D1:7F:68:B6:6D:EB:DE:AE:34:60 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/MvSQLBV-eX7LDtF_aLZt696uNGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.126.0/23 144.31.224.0-144.31.243.255 150.241.68.0-150.241.75.255 150.241.85.0-150.241.86.255 193.23.194.0/24 Signature Algorithm: sha256WithRSAEncryption 71:26:00:ad:00:03:e6:cf:58:a5:41:e9:00:db:35:18:ff:62: 74:bb:d2:96:32:fa:94:ef:53:eb:8e:3c:9d:25:40:d1:ab:96: 9a:9c:d3:3c:4c:a1:f2:a8:ec:72:1a:5f:00:f1:eb:31:03:6e: 95:a1:45:bd:21:a6:a8:f3:14:07:ac:b0:a6:b4:a7:17:29:eb: 4f:f5:0e:42:7c:ff:e9:20:5d:fe:21:b7:8e:a4:13:49:dd:63: ec:ef:70:11:96:d9:89:7c:ea:6f:d0:31:94:c7:a7:6f:fe:d4: a4:d9:ba:2a:9a:0e:e0:6e:aa:7f:82:73:ef:21:3b:0e:56:a6: dd:ab:e1:8d:44:ef:0d:7b:88:d6:29:2d:b1:e8:12:e6:01:9e: b8:14:92:48:59:4f:9d:52:c1:bc:cb:e7:39:3e:7b:64:0b:ee: 1c:d1:57:24:43:55:60:79:f5:c1:67:0d:ac:28:0b:63:db:fb: e6:2b:ba:19:e9:e2:7c:51:1a:a3:2e:98:a0:96:4e:e8:94:be: ff:46:26:ad:32:9f:cf:99:28:df:cd:f0:5e:13:18:eb:e7:e1: a3:5c:e6:e4:65:75:31:3f:34:9f:5d:7e:72:a1:b9:9b:1e:00: 87:58:a0:b2:32:7b:ee:32:fe:7f:6c:9d:9b:2e:a4:73:c1:a8: 78:dc:93:6a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZrLyg838q1z+1tA6KeMJVlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTI4MTg0NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMmY0OTAyYzE1N2U3OTdlY2IwZWQxN2Y2OGI2NmRlYmRlYWUzNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn+ZWMVh4LGlun8afmRKnZuCOP+W cR4Kxt3FW4rHookxcKqtu8uxSpZjhGbS326At704n067OeKyiH9a2UO4fW3pHcH1 SsH2c5YkfX4k3cCexmRurz/8ib+UKZ+gadwwSNrAwuMyjraB7xaNaomDDMwxcFz/ ke87Xg7zbL16myE1oo1vruMfdLIcuwDwZDa6x1RUwyqIZsjIhrNu3qsgDctvA3bw /qZfyymgk8lMmdlkSnsFawBV0EttKmr7GNG1semkCn2FxmjYO2c5PORT6ocF2Z6j zyAUoGJCrIzCXtgB+J1rB4iJYMBw1jGmiT1TXUPnQFLplhKvxVWAlw8+wQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDL0kCwVfnl+yw7Rf2i2beverjRgMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvTXZTUUxCVi1lWDdMRHRGX2FMWnQ2OTZ1TkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBkB9+MAwD BAWQH+ADBAKQH/AwDAMEApbxRAMEApbxSDAMAwQAlvFVAwQAlvFWAwQAwRfCMA0G CSqGSIb3DQEBCwUAA4IBAQBxJgCtAAPmz1ilQekA2zUY/2J0u9KWMvqU71Prjjyd JUDRq5aanNM8TKHyqOxyGl8A8esxA26VoUW9Iaao8xQHrLCmtKcXKetP9Q5CfP/p IF3+IbeOpBNJ3WPs73ARltmJfOpv0DGUx6dv/tSk2boqmg7gbqp/gnPvITsOVqbd q+GNRO8Ne4jWKS2x6BLmAZ64FJJIWU+dUsG8y+c5PntkC+4c0VckQ1VgefXBZw2s KAtj2/vmK7oZ6eJ8URqjLpiglk7olL7/RiatMp/PmSjfzfBeExjr5+GjXObkZXUx PzSfXX5yobmbHgCHWKCyMnvuMv5/bJ2bLqRzwah43JNq -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:15 2025 by rpki-client