This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/faHGHvJ0uK_BPougsd5JYFc713s.roa File: faHGHvJ0uK_BPougsd5JYFc713s.roa (raw, json) Hash identifier: +MuWRFMhxmOqDFLfDlz7iV1E45gFbqxfexgbrmle++Q= Subject key identifier: 7D:A1:C6:1E:F2:74:B8:AF:C1:3E:8B:A0:B1:DE:49:60:57:3B:D7:7B Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AA946B8A836DDA5845BCADF7555DB22F7 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/faHGHvJ0uK_BPougsd5JYFc713s.roa Signing time: Sat 22 Nov 2025 01:56:15 +0000 ROA not before: Sat 22 Nov 2025 01:56:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213702 IP address blocks: 150.241.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a9:46:b8:a8:36:dd:a5:84:5b:ca:df:75:55:db:22:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 22 01:56:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7da1c61ef274b8afc13e8ba0b1de4960573bd77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2a:ba:97:49:d9:b3:59:ae:9e:f9:b1:b7:85: bb:41:89:66:6b:e4:c1:46:7d:1b:15:74:fa:82:a9: d4:46:74:62:79:97:b0:c6:59:20:47:1f:fd:c2:1c: 4f:bf:cb:9d:e0:fd:95:d3:38:a6:22:8d:cb:eb:46: 19:ed:ec:7f:cb:78:80:d4:42:fc:f4:70:a4:c2:54: 6f:ad:99:e7:5f:0a:00:c6:01:1e:4b:86:09:88:4c: b3:c2:ec:af:f9:4f:35:66:f2:51:fc:4b:3b:30:d8: 8d:73:79:11:ec:a5:6b:90:8e:5d:6f:4f:80:e7:91: 7b:c6:c9:1a:a7:29:5c:9b:94:79:a8:77:67:0c:95: 2b:63:a3:f9:bc:d9:c2:ed:95:b0:54:a4:79:af:42: e5:49:33:ad:96:a0:0e:f8:cd:2f:74:98:e9:1b:f5: 96:8e:d9:fb:3f:0a:d0:6c:44:3e:72:18:19:04:61: c2:66:6d:0c:08:6f:8f:d7:22:96:d2:4c:24:ab:73: c3:22:e1:8e:f2:59:43:c9:ea:a9:32:04:45:a0:85: 31:16:e2:67:d3:32:e6:b4:4f:94:98:40:60:f2:18: f2:4b:0e:70:ba:48:7f:5a:ac:0c:8f:0b:ca:93:80: 79:c0:b3:fb:30:e0:52:1a:d5:51:79:d0:4d:cd:bf: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A1:C6:1E:F2:74:B8:AF:C1:3E:8B:A0:B1:DE:49:60:57:3B:D7:7B X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/faHGHvJ0uK_BPougsd5JYFc713s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:92:9d:53:44:34:47:ba:55:e7:55:80:da:ae:f4:5e:0f:13: 3c:33:44:4d:bf:0a:f6:fb:19:36:36:08:db:68:62:2d:d0:65: 9c:43:5d:56:4f:56:44:a5:1d:45:f3:87:33:ae:eb:ee:4c:30: 53:fb:33:10:5e:0e:63:e3:95:3d:e1:9a:5a:4a:f9:81:6f:a6: ef:58:5c:2c:16:a4:61:40:31:6c:a6:a3:88:71:c4:9b:f7:7b: 19:8d:80:e0:5f:8e:f9:75:40:99:3c:e9:16:68:ad:5a:bd:b0: 65:9c:44:8e:9a:24:0e:c7:cd:62:8f:d6:ba:97:f6:b2:be:7e: 5b:e5:c6:05:e8:83:8e:a8:91:fe:41:c5:ef:8f:33:f4:43:fc: 80:91:6a:26:3b:97:9a:6d:a6:1b:47:1f:3e:d7:be:6a:b9:9f: 71:6a:8e:f9:84:a9:f2:10:59:06:74:e6:ea:6a:e5:3b:54:f7: 44:38:82:d7:dd:10:a7:c3:45:46:27:77:bf:1b:62:bd:11:13: d5:a8:86:a2:bc:4c:63:a2:8f:ff:e2:34:e3:f6:52:a7:92:32: aa:f3:9d:7e:48:97:b9:71:47:64:9a:fc:94:cd:e2:35:c0:0a: 17:39:61:7f:fa:19:30:1a:db:eb:9a:5a:b5:1b:bb:86:09:3e: f2:86:6d:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqpRrioNt2lhFvK33VV2yL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTIyMDE1NjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGExYzYxZWYyNzRiOGFmYzEzZThiYTBiMWRlNDk2MDU3M2JkNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yq6l0nZs1munvmxt4W7QYlma+TB Rn0bFXT6gqnURnRieZewxlkgRx/9whxPv8ud4P2V0zimIo3L60YZ7ex/y3iA1EL8 9HCkwlRvrZnnXwoAxgEeS4YJiEyzwuyv+U81ZvJR/Es7MNiNc3kR7KVrkI5db0+A 55F7xskapylcm5R5qHdnDJUrY6P5vNnC7ZWwVKR5r0LlSTOtlqAO+M0vdJjpG/WW jtn7PwrQbEQ+chgZBGHCZm0MCG+P1yKW0kwkq3PDIuGO8llDyeqpMgRFoIUxFuJn 0zLmtE+UmEBg8hjySw5wukh/WqwMjwvKk4B5wLP7MOBSGtVRedBNzb/9iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2hxh7ydLivwT6LoLHeSWBXO9d7MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvZmFIR0h2SjB1S19CUG91Z3NkNUpZRmM3MTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvF8MA0G CSqGSIb3DQEBCwUAA4IBAQCKkp1TRDRHulXnVYDarvReDxM8M0RNvwr2+xk2Ngjb aGIt0GWcQ11WT1ZEpR1F84czruvuTDBT+zMQXg5j45U94ZpaSvmBb6bvWFwsFqRh QDFspqOIccSb93sZjYDgX475dUCZPOkWaK1avbBlnESOmiQOx81ij9a6l/ayvn5b 5cYF6IOOqJH+QcXvjzP0Q/yAkWomO5eabaYbRx8+175quZ9xao75hKnyEFkGdObq auU7VPdEOILX3RCnw0VGJ3e/G2K9ERPVqIaivExjoo//4jTj9lKnkjKq851+SJe5 cUdkmvyUzeI1wAoXOWF/+hkwGtvrmlq1G7uGCT7yhm2w -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:22 2025 by rpki-client