This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_IZhLp0Zw4MFrS2Ddk1TuZHOINE.roa File: _IZhLp0Zw4MFrS2Ddk1TuZHOINE.roa (raw, json) Hash identifier: oNXdXBai69cNWks8vCRY35ob9XYcQTWmd/rdNwziegs= Subject key identifier: FC:86:61:2E:9D:19:C3:83:05:AD:2D:83:76:4D:53:B9:91:CE:20:D1 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B79EC6AA09A01C0FB596EC9892A7B15D2 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_IZhLp0Zw4MFrS2Ddk1TuZHOINE.roa Signing time: Thu 01 Jan 2026 14:18:15 +0000 ROA not before: Thu 01 Jan 2026 14:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206715 IP address blocks: 144.31.176.0/24 maxlen: 24 144.31.177.0/24 maxlen: 24 144.31.178.0/24 maxlen: 24 144.31.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:6a:a0:9a:01:c0:fb:59:6e:c9:89:2a:7b:15:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 1 14:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc86612e9d19c38305ad2d83764d53b991ce20d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:10:a0:7c:12:ef:c6:00:f5:e2:21:15:95:48: b4:9d:c8:18:97:c8:a6:52:12:ab:e2:c2:05:12:3b: bc:ca:2a:e5:3c:50:08:ba:56:ff:60:ca:a5:5b:86: 83:ed:30:24:2a:d9:fb:a5:be:95:17:ea:bb:3b:6b: d2:8d:b9:e1:b5:97:d5:db:06:74:6f:24:ea:e4:18: 3f:64:3f:0b:64:58:55:5a:d3:d8:53:fe:05:de:d6: 8e:0e:cf:e3:c9:f6:bb:db:bd:81:4a:a4:92:bb:0b: 65:da:18:60:ae:54:d8:de:4a:74:d9:ed:9e:8c:69: 5a:75:4b:67:ed:01:6c:f5:c1:66:71:12:da:1b:4e: b9:59:e5:18:a4:4f:fc:c8:65:85:9b:d5:e3:cc:c6: 4a:8a:e1:60:41:ac:fb:ba:84:07:e8:43:4d:f0:39: d3:e7:f4:a3:f9:a0:04:6f:6d:c1:b6:2e:97:54:58: 74:5e:a3:e5:7e:79:3a:73:4f:5f:05:be:ec:1c:11: af:1e:81:f3:63:13:b8:ab:6b:58:b2:1c:e7:db:b4: 6f:57:0b:e0:fb:55:da:13:f7:2e:e7:1d:55:84:24: 87:a2:38:fe:f3:af:a7:37:b5:de:f7:62:56:d3:42: b3:ca:e7:43:f3:68:88:63:bb:97:66:06:a6:45:96: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:86:61:2E:9D:19:C3:83:05:AD:2D:83:76:4D:53:B9:91:CE:20:D1 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_IZhLp0Zw4MFrS2Ddk1TuZHOINE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.176.0/22 Signature Algorithm: sha256WithRSAEncryption a3:ae:1e:56:57:6b:a8:9f:89:ff:0d:b6:12:17:4e:50:66:8d: 8a:97:e7:ae:1a:1e:15:17:d9:a9:54:a6:30:a9:57:e9:04:e8: 75:b1:57:ad:85:99:f3:3e:d6:4d:45:27:7a:78:e5:24:9c:07: 57:96:e7:70:4d:f7:28:06:6b:0b:c3:ba:93:05:d0:b2:80:b2: 40:1f:99:2b:ba:d3:dc:2e:3e:ee:75:21:e7:ed:89:c5:8e:2c: f3:64:18:30:a7:6f:d8:e9:06:46:c0:47:75:bc:9c:41:dc:55: 44:6a:b4:0d:f5:f9:75:ac:dd:a5:ad:19:35:a4:8b:f8:f3:df: e2:9d:71:7f:eb:4f:13:f2:9e:b1:db:69:13:67:48:0b:aa:0d: 25:e3:fc:5b:11:ee:6d:00:cd:b3:56:82:34:af:05:e8:a0:36: e1:c9:50:7a:7a:73:9c:eb:bb:4a:d2:85:5e:4b:23:c1:63:fe: 0f:1c:32:ef:08:3d:54:94:79:4e:2f:55:4c:e1:9e:d7:ad:93: 9c:66:fa:e9:93:b6:55:d6:3c:a8:a9:af:2c:75:8f:b1:38:4e: 8d:f5:a2:ac:62:a9:39:bb:e8:d6:04:dd:49:8f:7a:36:47:ad: ee:2c:c3:da:91:a4:68:f4:e8:b0:6b:03:46:87:35:21:21:c4: 38:c9:9a:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57GqgmgHA+1luyYkqexXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTAxMTQxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzg2NjEyZTlkMTljMzgzMDVhZDJkODM3NjRkNTNiOTkxY2UyMGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BCgfBLvxgD14iEVlUi0ncgYl8im UhKr4sIFEju8yirlPFAIulb/YMqlW4aD7TAkKtn7pb6VF+q7O2vSjbnhtZfV2wZ0 byTq5Bg/ZD8LZFhVWtPYU/4F3taODs/jyfa7272BSqSSuwtl2hhgrlTY3kp02e2e jGladUtn7QFs9cFmcRLaG065WeUYpE/8yGWFm9XjzMZKiuFgQaz7uoQH6ENN8DnT 5/Sj+aAEb23Bti6XVFh0XqPlfnk6c09fBb7sHBGvHoHzYxO4q2tYshzn27RvVwvg +1XaE/cu5x1VhCSHojj+86+nN7Xe92JW00KzyudD82iIY7uXZgamRZaGiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPyGYS6dGcODBa0tg3ZNU7mRziDRMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvX0laaExwMFp3NE1GclMyRGRrMVR1WkhPSU5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkB+wMA0G CSqGSIb3DQEBCwUAA4IBAQCjrh5WV2uon4n/DbYSF05QZo2Kl+euGh4VF9mpVKYw qVfpBOh1sVethZnzPtZNRSd6eOUknAdXludwTfcoBmsLw7qTBdCygLJAH5krutPc Lj7udSHn7YnFjizzZBgwp2/Y6QZGwEd1vJxB3FVEarQN9fl1rN2lrRk1pIv489/i nXF/608T8p6x22kTZ0gLqg0l4/xbEe5tAM2zVoI0rwXooDbhyVB6enOc67tK0oVe SyPBY/4PHDLvCD1UlHlOL1VM4Z7XrZOcZvrpk7ZV1jyoqa8sdY+xOE6N9aKsYqk5 u+jWBN1Jj3o2R63uLMPakaRo9OiwawNGhzUhIcQ4yZqn -----END CERTIFICATE-----Generated at Mon Jan 12 02:17:12 2026 by rpki-client