This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X05-Na_p79VAT7HnL-6rOQKaNw4.roa File: X05-Na_p79VAT7HnL-6rOQKaNw4.roa (raw, json) Hash identifier: H7VH58y4Pyu+KPHu26vbtcH6DgX69p4VbOvIOEw6Orw= Subject key identifier: 5F:4E:7E:35:AF:E9:EF:D5:40:4F:B1:E7:2F:EE:AB:39:02:9A:37:0E Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019BDC85E971AD04C0E81C5C8F1B5AE9828D Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X05-Na_p79VAT7HnL-6rOQKaNw4.roa Signing time: Tue 20 Jan 2026 17:48:42 +0000 ROA not before: Tue 20 Jan 2026 17:48:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210457 IP address blocks: 144.31.12.0/24 maxlen: 24 144.31.25.0/24 maxlen: 24 144.31.106.0/24 maxlen: 24 144.31.169.0/24 maxlen: 24 144.31.221.0/24 maxlen: 24 150.241.66.0/24 maxlen: 24 193.23.199.0/24 maxlen: 24 193.23.209.0/24 maxlen: 24 193.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:85:e9:71:ad:04:c0:e8:1c:5c:8f:1b:5a:e9:82:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 20 17:48:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f4e7e35afe9efd5404fb1e72feeab39029a370e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:68:44:ba:ba:89:e9:1f:b7:50:61:d1:a6: 98:14:a9:36:fa:cd:49:5e:75:99:f6:64:f0:f2:a9: d8:45:b0:b4:31:9e:fe:74:e2:25:e5:35:9c:07:29: f9:15:6e:49:e5:48:99:f1:0e:a7:04:2e:3f:21:40: e8:91:52:d5:86:a5:80:52:41:9e:26:53:a9:a4:e6: 2d:f2:ee:cb:d1:fa:14:0c:49:2f:65:c8:12:0a:6f: 9c:4f:c8:6e:b4:06:83:49:49:d2:29:72:ac:0e:ba: 78:62:cd:20:fe:1b:00:84:ba:b5:a0:65:7b:b0:66: 53:46:bf:ef:08:78:5f:83:35:e4:17:d6:17:56:f6: da:c6:f9:17:c4:50:fb:0c:30:a1:4b:26:01:9a:cf: e8:67:cb:4b:ca:8c:87:ea:ce:22:16:17:39:ab:55: 9e:f9:c8:aa:c6:ee:57:9a:75:ae:2d:95:67:c6:b0: a8:32:95:6b:a8:41:09:cc:1d:ee:cd:00:74:2d:1d: 06:ea:d0:d8:a5:02:20:ce:8d:fc:63:98:5a:3f:c6: 4e:d7:d0:3c:3f:77:a0:cd:af:e3:f2:16:85:c2:b6: 97:4c:cf:ec:ea:58:01:e2:2c:63:6b:df:cf:08:1b: a3:89:65:c7:7b:b7:35:ad:4e:29:e0:fe:90:8d:80: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4E:7E:35:AF:E9:EF:D5:40:4F:B1:E7:2F:EE:AB:39:02:9A:37:0E X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/X05-Na_p79VAT7HnL-6rOQKaNw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.12.0/24 144.31.25.0/24 144.31.106.0/24 144.31.169.0/24 144.31.221.0/24 150.241.66.0/24 193.23.199.0/24 193.23.209.0/24 193.23.221.0/24 Signature Algorithm: sha256WithRSAEncryption a1:9d:aa:8a:a3:4f:62:32:23:20:d3:29:23:f6:0f:0d:24:7a: 77:2d:5f:40:eb:3e:e7:7c:a6:ba:e0:0e:df:16:d5:16:6f:40: b4:b7:09:8b:d9:b6:6a:34:fb:05:b0:bb:c1:40:25:9c:e9:66: f9:9a:cb:fa:0a:58:b6:8d:56:86:62:b4:2c:72:54:02:ea:c4: 8f:23:f5:f0:09:57:df:7f:91:5b:1d:6e:33:b3:a9:c1:ef:4c: b5:0c:f3:6e:3b:af:ca:30:f6:1e:03:b4:4b:3a:27:c0:4b:7b: f3:5e:3e:60:51:82:dd:c0:65:1e:bc:92:84:f7:35:b0:a7:04: a0:4f:ef:07:d5:59:ae:b0:b1:43:58:bd:22:a9:f5:7e:f1:6f: 9e:e9:1d:12:46:8b:5d:21:46:1e:a7:1a:f6:0f:97:f0:b0:83: 19:32:47:e4:c5:a4:85:03:94:35:3a:83:70:43:85:95:57:ee: 2a:4f:29:12:ac:5e:db:6a:be:5b:21:78:59:62:fd:5a:ba:0f: 48:7c:11:34:9f:69:ca:4e:7a:0c:56:ca:be:3f:10:02:a8:a6: 61:8e:20:2c:79:2f:a0:ef:29:9b:d2:fa:d2:30:ff:63:0f:3b: 34:e8:ad:76:24:a0:9c:77:bc:3b:c6:85:b3:dd:a3:2c:e3:bd: 73:f7:e9:6e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvchelxrQTA6Bxcjxta6YKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTIwMTc0ODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjRlN2UzNWFmZTllZmQ1NDA0ZmIxZTcyZmVlYWIzOTAyOWEzNzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVRoRLq6iekft1Bh0aaYFKk2+s1J XnWZ9mTw8qnYRbC0MZ7+dOIl5TWcByn5FW5J5UiZ8Q6nBC4/IUDokVLVhqWAUkGe JlOppOYt8u7L0foUDEkvZcgSCm+cT8hutAaDSUnSKXKsDrp4Ys0g/hsAhLq1oGV7 sGZTRr/vCHhfgzXkF9YXVvbaxvkXxFD7DDChSyYBms/oZ8tLyoyH6s4iFhc5q1We +ciqxu5XmnWuLZVnxrCoMpVrqEEJzB3uzQB0LR0G6tDYpQIgzo38Y5haP8ZO19A8 P3egza/j8haFwraXTM/s6lgB4ixja9/PCBujiWXHe7c1rU4p4P6QjYC9CwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFF9OfjWv6e/VQE+x5y/uqzkCmjcOMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvWDA1LU5hX3A3OVZBVDdIbkwtNnJPUUthTnc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAkB8MAwQA kB8ZAwQAkB9qAwQAkB+pAwQAkB/dAwQAlvFCAwQAwRfHAwQAwRfRAwQAwRfdMA0G CSqGSIb3DQEBCwUAA4IBAQChnaqKo09iMiMg0ykj9g8NJHp3LV9A6z7nfKa64A7f FtUWb0C0twmL2bZqNPsFsLvBQCWc6Wb5msv6Cli2jVaGYrQsclQC6sSPI/XwCVff f5FbHW4zs6nB70y1DPNuO6/KMPYeA7RLOifAS3vzXj5gUYLdwGUevJKE9zWwpwSg T+8H1VmusLFDWL0iqfV+8W+e6R0SRotdIUYepxr2D5fwsIMZMkfkxaSFA5Q1OoNw Q4WVV+4qTykSrF7bar5bIXhZYv1aug9IfBE0n2nKTnoMVsq+PxACqKZhjiAseS+g 7ymb0vrSMP9jDzs06K12JKCcd7w7xoWz3aMs471z9+lu -----END CERTIFICATE-----Generated at Wed Jan 21 20:27:32 2026 by rpki-client