This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PAjMHEpaWYBNiCUNKHgTHxghWXk.roa File: PAjMHEpaWYBNiCUNKHgTHxghWXk.roa (raw, json) Hash identifier: lJmHFcKhuBAn7dyeCINTpr+EFItcRjR6EwoXCe9//z4= Subject key identifier: 3C:08:CC:1C:4A:5A:59:80:4D:88:25:0D:28:78:13:1F:18:21:59:79 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019A98C6D15FDD50BAED7986CAC632539A10 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PAjMHEpaWYBNiCUNKHgTHxghWXk.roa Signing time: Tue 18 Nov 2025 21:02:37 +0000 ROA not before: Tue 18 Nov 2025 21:02:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216127 IP address blocks: 77.239.96.0/22 maxlen: 24 144.31.200.0/23 maxlen: 24 144.31.204.0/23 maxlen: 24 150.241.90.0/23 maxlen: 24 185.184.120.0/24 maxlen: 24 185.184.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:c6:d1:5f:dd:50:ba:ed:79:86:ca:c6:32:53:9a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 18 21:02:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c08cc1c4a5a59804d88250d2878131f18215979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:1c:2d:52:54:28:fe:2e:5e:9f:15:5d:5c: 76:b9:7d:1c:41:54:60:c8:2a:4c:d8:52:80:9d:cd: 32:90:42:34:6b:b3:44:1a:37:ac:37:b8:34:63:21: c4:ef:94:66:d5:cb:e6:e0:53:bf:fe:48:8d:d3:aa: c9:8d:9e:65:8a:ec:c1:d2:f1:4b:c3:67:dd:be:f1: d9:8a:d7:4b:f7:cc:90:18:50:7b:af:7e:b6:7c:7f: 6e:74:20:3d:dd:b7:23:ff:b7:96:c0:6f:ae:9b:c7: bb:26:31:0c:fe:0c:4f:be:08:3d:27:96:c6:87:bb: 67:2d:bc:e5:85:da:65:74:96:b2:fb:bc:59:f4:8d: 22:d5:30:82:84:14:8e:90:41:b0:88:fd:b4:f6:7a: 06:5f:fb:f9:4b:42:f8:cc:90:30:24:b2:6d:74:90: ce:8f:80:8f:a9:1d:28:10:d7:f9:94:35:fb:e2:2e: 89:59:fc:84:54:9a:87:93:58:61:8e:ef:75:52:8f: 35:88:a7:77:e8:65:e0:2c:ff:da:d9:f6:18:7f:ca: 7c:ca:68:87:eb:dd:13:8f:2c:3d:4e:57:4e:f3:f1: 40:59:ec:c5:8b:2e:80:3e:c2:6a:bb:1e:38:dc:a2: db:e4:de:0b:46:2f:8b:46:ab:18:b9:18:54:e7:42: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:08:CC:1C:4A:5A:59:80:4D:88:25:0D:28:78:13:1F:18:21:59:79 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/PAjMHEpaWYBNiCUNKHgTHxghWXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.96.0/22 144.31.200.0/23 144.31.204.0/23 150.241.90.0/23 185.184.120.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:4c:64:f6:2c:84:ef:df:6d:a1:c2:00:5c:fa:f1:7a:58:25: 93:d9:9f:0d:be:b2:5d:12:94:ea:37:b8:27:0b:5a:37:95:b1: 1b:60:da:cb:3f:92:cd:78:00:88:90:b0:e1:d3:87:d7:b0:53: b3:c1:ad:4e:e3:f8:c8:1e:c9:9d:e9:5f:dc:5d:7a:23:13:3e: d4:29:5f:f9:4e:61:98:d4:82:8c:be:cf:79:43:26:cc:f5:50: bd:4d:5b:44:7a:56:4e:db:5b:58:77:19:1c:df:cc:18:0a:33: 4e:13:75:f7:d3:1b:6e:68:94:a6:5e:66:bd:13:0c:7b:4b:c0: 6b:2a:1c:64:0a:5c:80:01:ee:63:f0:5d:d1:97:0f:32:f9:80: a7:24:9f:d6:44:42:c9:a9:64:50:fb:5d:d8:8c:17:7f:b5:bf: d8:17:d7:31:c9:33:38:68:26:0c:46:4e:d0:23:8d:df:1b:17: f2:ef:10:24:ab:a0:9f:ba:38:f6:d1:36:7c:20:9a:84:38:1b: f5:19:aa:a8:47:ba:5a:a4:2d:ad:e3:0f:62:0c:85:20:8b:06: 83:4b:49:20:14:83:0f:50:12:c9:15:2c:f2:43:b2:95:41:9c: 20:f1:09:b6:4e:10:c1:72:eb:b0:7e:b8:64:34:61:35:ed:ca: f5:69:ed:1b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqYxtFf3VC67XmGysYyU5oQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTE4MjEwMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA4Y2MxYzRhNWE1OTgwNGQ4ODI1MGQyODc4MTMxZjE4MjE1OTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWEcLVJUKP4uXp8VXVx2uX0cQVRg yCpM2FKAnc0ykEI0a7NEGjesN7g0YyHE75Rm1cvm4FO//kiN06rJjZ5liuzB0vFL w2fdvvHZitdL98yQGFB7r362fH9udCA93bcj/7eWwG+um8e7JjEM/gxPvgg9J5bG h7tnLbzlhdpldJay+7xZ9I0i1TCChBSOkEGwiP209noGX/v5S0L4zJAwJLJtdJDO j4CPqR0oENf5lDX74i6JWfyEVJqHk1hhju91Uo81iKd36GXgLP/a2fYYf8p8ymiH 690Tjyw9TldO8/FAWezFiy6APsJqux443KLb5N4LRi+LRqsYuRhU50LSoQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDwIzBxKWlmATYglDSh4Ex8YIVl5MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvUEFqTUhFcGFXWUJOaUNVTktIZ1RIeGdoV1hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCTe9gAwQB kB/IAwQBkB/MAwQBlvFaAwQBubh4MA0GCSqGSIb3DQEBCwUAA4IBAQCcTGT2LITv 322hwgBc+vF6WCWT2Z8NvrJdEpTqN7gnC1o3lbEbYNrLP5LNeACIkLDh04fXsFOz wa1O4/jIHsmd6V/cXXojEz7UKV/5TmGY1IKMvs95QybM9VC9TVtEelZO21tYdxkc 38wYCjNOE3X30xtuaJSmXma9Ewx7S8BrKhxkClyAAe5j8F3Rlw8y+YCnJJ/WRELJ qWRQ+13YjBd/tb/YF9cxyTM4aCYMRk7QI43fGxfy7xAkq6Cfujj20TZ8IJqEOBv1 GaqoR7papC2t4w9iDIUgiwaDS0kgFIMPUBLJFSzyQ7KVQZwg8Qm2ThDBcuuwfrhk NGE17cr1ae0b -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:25 2025 by rpki-client