This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fayGqpnuKQ-a-1CgKnX1vnwXFYA.roa File: fayGqpnuKQ-a-1CgKnX1vnwXFYA.roa (raw, json) Hash identifier: Eg6CduAZCBMMS240NtuZyPI7UZynm+87okwBqliWVIc= Subject key identifier: 7D:AC:86:AA:99:EE:29:0F:9A:FB:50:A0:2A:75:F5:BE:7C:17:15:80 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019A944C93218EB691B21FB58E7D819CD0C4 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fayGqpnuKQ-a-1CgKnX1vnwXFYA.roa Signing time: Tue 18 Nov 2025 00:10:37 +0000 ROA not before: Tue 18 Nov 2025 00:10:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13213 IP address blocks: 37.46.20.0/23 maxlen: 24 37.46.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:94:4c:93:21:8e:b6:91:b2:1f:b5:8e:7d:81:9c:d0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 18 00:10:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7dac86aa99ee290f9afb50a02a75f5be7c171580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:fa:69:60:f9:42:83:28:ab:70:a7:d2:95: d8:c7:e0:7b:5f:e9:08:5b:b4:30:05:3b:61:00:50: 0f:f5:2b:f2:fe:74:46:51:e9:1c:51:e3:d9:cd:c7: 24:dc:44:d3:ad:a3:b6:9f:c4:db:f0:f6:ab:68:05: 71:ac:0b:a1:28:3c:5f:a8:9c:70:df:4a:d1:e3:38: 2a:45:c0:77:00:dd:32:fd:02:1c:5c:cd:9e:66:d9: 9e:0c:12:8d:d0:d1:34:4e:f3:0e:d3:9d:5d:aa:9b: 49:32:16:8b:bd:cf:ea:09:85:e5:00:da:95:22:e7: dd:1f:e8:7d:2c:4b:3e:ba:0b:2a:69:31:ca:45:ed: aa:11:1b:3c:df:6d:a6:95:8f:08:f1:93:d3:c8:7e: 5c:f1:a8:fc:de:75:d4:88:77:49:25:7d:40:c5:30: 0e:61:0e:44:7e:fe:37:e1:28:63:5d:93:56:b2:93: 1f:62:06:ca:da:90:bf:c3:19:0b:d3:7a:6b:83:d2: 30:6f:71:29:0e:92:1c:e8:18:e1:3b:ea:e3:6e:fd: 3e:82:74:42:8b:88:84:be:0e:42:cb:36:b3:e5:3a: 2f:45:45:fc:36:71:25:35:2d:c5:c5:83:ac:0e:8e: 9a:b8:e2:9e:e3:22:f7:8c:18:fd:4f:f5:03:19:d0: 66:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AC:86:AA:99:EE:29:0F:9A:FB:50:A0:2A:75:F5:BE:7C:17:15:80 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/fayGqpnuKQ-a-1CgKnX1vnwXFYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.20.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:11:3c:f3:84:4e:f7:7f:7a:b0:6e:6b:4f:5a:75:d7:65:c7: d9:62:11:3e:50:c6:ed:49:04:b7:38:25:c2:63:76:2b:72:bb: 70:19:74:24:b4:02:05:10:c8:db:fd:b6:5c:7e:07:9b:1b:3c: d1:6a:44:44:70:11:13:28:35:97:c7:5e:28:a3:e9:1c:4d:40: 03:c5:01:6f:bf:a9:19:94:ff:3c:8e:a7:f2:ea:27:5a:a9:12: 10:25:87:ea:4d:b9:27:db:96:a2:7c:17:1e:a8:7a:2e:36:e2: 7b:ed:3e:93:a5:33:94:72:0f:57:fe:46:c8:32:df:21:05:4c: 8f:5b:53:49:5d:d0:a1:17:1e:9d:6d:f2:c3:a2:47:7b:95:40: c4:0a:0a:ac:e4:3e:ef:41:2d:71:97:f6:dc:f3:03:be:fc:44: a3:1a:10:4f:60:d8:a5:0e:ac:4c:ac:4e:cf:ad:af:8d:d4:8b: 90:f6:62:08:85:79:9c:ab:89:e5:59:5b:90:74:70:53:6f:7e: 35:3d:51:98:fe:c6:06:ef:81:10:0c:22:c4:69:91:25:86:a1: 4a:e6:a1:4d:05:1a:62:90:78:48:94:5c:08:e6:06:fb:f7:0d: 49:04:03:6b:55:77:ca:64:7b:7e:24:bf:d6:ec:04:28:d1:7c: 97:b1:20:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqUTJMhjraRsh+1jn2BnNDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTE4MDAxMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGFjODZhYTk5ZWUyOTBmOWFmYjUwYTAyYTc1ZjViZTdjMTcxNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVf6aWD5QoMoq3Cn0pXYx+B7X+kI W7QwBTthAFAP9Svy/nRGUekcUePZzcck3ETTraO2n8Tb8ParaAVxrAuhKDxfqJxw 30rR4zgqRcB3AN0y/QIcXM2eZtmeDBKN0NE0TvMO051dqptJMhaLvc/qCYXlANqV IufdH+h9LEs+ugsqaTHKRe2qERs8322mlY8I8ZPTyH5c8aj83nXUiHdJJX1AxTAO YQ5Efv434ShjXZNWspMfYgbK2pC/wxkL03prg9Iwb3EpDpIc6BjhO+rjbv0+gnRC i4iEvg5Cyzaz5TovRUX8NnElNS3FxYOsDo6auOKe4yL3jBj9T/UDGdBmOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH2shqqZ7ikPmvtQoCp19b58FxWAMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvZmF5R3FwbnVLUS1hLTFDZ0tuWDF2bndYRllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJS4UMA0G CSqGSIb3DQEBCwUAA4IBAQCcETzzhE73f3qwbmtPWnXXZcfZYhE+UMbtSQS3OCXC Y3YrcrtwGXQktAIFEMjb/bZcfgebGzzRakREcBETKDWXx14oo+kcTUADxQFvv6kZ lP88jqfy6idaqRIQJYfqTbkn25aifBceqHouNuJ77T6TpTOUcg9X/kbIMt8hBUyP W1NJXdChFx6dbfLDokd7lUDECgqs5D7vQS1xl/bc8wO+/ESjGhBPYNilDqxMrE7P ra+N1IuQ9mIIhXmcq4nlWVuQdHBTb341PVGY/sYG74EQDCLEaZElhqFK5qFNBRpi kHhIlFwI5gb79w1JBANrVXfKZHt+JL/W7AQo0XyXsSAY -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:12 2025 by rpki-client