This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gU4DnNTF3FX5-FUFi5wrkQP63ss.roa File: gU4DnNTF3FX5-FUFi5wrkQP63ss.roa (raw, json) Hash identifier: RBGtka4nTFLigopJ6m39DCLsL87Zjvxy18ULvb85N64= Subject key identifier: 81:4E:03:9C:D4:C5:DC:55:F9:F8:55:05:8B:9C:2B:91:03:FA:DE:CB Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AA772E266587F49D6DF455D6DFF802A70 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gU4DnNTF3FX5-FUFi5wrkQP63ss.roa Signing time: Fri 21 Nov 2025 17:25:15 +0000 ROA not before: Fri 21 Nov 2025 17:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199785 IP address blocks: 37.46.16.0/24 maxlen: 24 37.46.17.0/24 maxlen: 24 37.46.18.0/24 maxlen: 24 37.46.19.0/24 maxlen: 24 64.188.99.0/24 maxlen: 24 77.239.106.0/24 maxlen: 24 144.31.80.0/23 maxlen: 24 144.31.194.0/23 maxlen: 24 150.241.76.0/23 maxlen: 24 150.241.113.0/24 maxlen: 24 150.241.114.0/24 maxlen: 24 150.241.115.0/24 maxlen: 24 150.241.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:72:e2:66:58:7f:49:d6:df:45:5d:6d:ff:80:2a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 21 17:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=814e039cd4c5dc55f9f855058b9c2b9103fadecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:88:e0:5d:76:4e:ab:49:bd:b2:f7:73:2c: 45:8d:45:d0:09:2d:b0:cb:71:82:96:96:eb:60:f2: d0:a9:93:4b:c6:c9:32:11:51:93:32:39:98:72:f2: e4:54:5f:60:35:46:fd:50:1c:04:ed:8a:73:19:c7: 2f:13:7b:f7:fb:74:49:d8:64:3e:fc:e2:fd:50:19: e0:8c:f2:52:fc:90:84:56:21:55:0b:f2:f5:60:6f: 1f:94:bd:ae:84:a6:e6:67:49:2c:56:e8:68:29:2a: 7c:ee:84:ca:40:29:59:48:8d:8b:12:7f:3f:c3:53: fa:71:cf:06:bd:1f:e6:a6:b1:a3:21:c8:cf:07:78: 41:3e:a2:1b:55:69:c1:8e:82:6a:b4:ec:61:cf:03: 17:ad:44:6d:f9:ef:99:f1:dd:8d:a1:34:99:9b:72: 79:89:a3:8b:36:39:88:cd:ba:50:9d:e4:23:ac:ce: df:42:be:3f:d7:c7:09:60:e9:1b:7e:de:f5:27:97: 5a:81:b8:0a:50:d6:25:a0:c5:4b:e5:a5:86:18:90: 68:02:28:75:b0:e8:f3:40:8e:1d:9f:b8:2e:9e:f8: 04:99:8a:f4:14:25:78:20:4d:ab:ee:78:68:79:71: 99:ff:e8:a1:de:ee:eb:1f:f8:3d:87:7d:e1:4f:b9: 4d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4E:03:9C:D4:C5:DC:55:F9:F8:55:05:8B:9C:2B:91:03:FA:DE:CB X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/gU4DnNTF3FX5-FUFi5wrkQP63ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.16.0/22 64.188.99.0/24 77.239.106.0/24 144.31.80.0/23 144.31.194.0/23 150.241.76.0/23 150.241.113.0-150.241.116.255 Signature Algorithm: sha256WithRSAEncryption 16:90:34:54:e1:80:98:3e:6d:1c:1b:10:ec:3f:70:0b:0a:38: b9:bc:34:39:6e:cb:50:78:50:0c:a7:38:a8:d4:89:c6:04:8c: dd:ad:fd:71:97:ff:44:8c:04:c7:c8:9f:7f:9c:13:12:64:19: 35:99:68:5d:0a:45:ac:ff:49:4e:80:d9:db:88:b5:07:a9:4b: ce:35:33:d9:e5:dd:0a:e6:a5:96:52:9d:2a:a8:d9:c0:54:9a: 2b:b2:d2:43:75:c4:8a:11:12:72:5c:ac:d0:11:2b:1e:51:2e: 7e:7b:1f:1d:72:23:d0:d8:ea:63:70:25:40:33:77:6b:ba:8c: ba:6e:9f:60:bb:d4:32:a9:d0:7f:b8:d1:76:2b:c3:30:e5:09: 20:d8:f9:7d:c4:14:0a:e9:ce:b3:49:c9:7d:64:24:5b:72:95: 82:e0:c0:27:12:13:13:cb:0a:2d:e9:ac:30:29:ab:4d:5b:30: ef:d8:f8:b5:4f:f4:de:ac:9d:a9:bc:f4:23:c3:9a:27:c4:bb: 56:09:35:96:c4:bb:58:e3:08:fd:88:07:47:60:a7:8b:35:39: 51:c0:ae:01:6b:fb:d9:99:b1:64:58:d1:37:6f:9f:26:58:e7: 6d:f1:a8:27:3f:95:43:e6:90:e7:dd:c2:e0:b6:44:42:b7:ce: 37:ef:75:92 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZqncuJmWH9J1t9FXW3/gCpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTIxMTcyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTRlMDM5Y2Q0YzVkYzU1ZjlmODU1MDU4YjljMmI5MTAzZmFkZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzyI4F12TqtJvbL3cyxFjUXQCS2w y3GClpbrYPLQqZNLxskyEVGTMjmYcvLkVF9gNUb9UBwE7YpzGccvE3v3+3RJ2GQ+ /OL9UBngjPJS/JCEViFVC/L1YG8flL2uhKbmZ0ksVuhoKSp87oTKQClZSI2LEn8/ w1P6cc8GvR/mprGjIcjPB3hBPqIbVWnBjoJqtOxhzwMXrURt+e+Z8d2NoTSZm3J5 iaOLNjmIzbpQneQjrM7fQr4/18cJYOkbft71J5dagbgKUNYloMVL5aWGGJBoAih1 sOjzQI4dn7gunvgEmYr0FCV4IE2r7nhoeXGZ/+ih3u7rH/g9h33hT7lNzQIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFIFOA5zUxdxV+fhVBYucK5ED+t7LMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvZ1U0RG5OVEYzRlg1LUZVRmk1d3JrUVA2M3NzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQCJS4QAwQA QLxjAwQATe9qAwQBkB9QAwQBkB/CAwQBlvFMMAwDBACW8XEDBACW8XQwDQYJKoZI hvcNAQELBQADggEBABaQNFThgJg+bRwbEOw/cAsKOLm8NDluy1B4UAynOKjUicYE jN2t/XGX/0SMBMfIn3+cExJkGTWZaF0KRaz/SU6A2duItQepS841M9nl3QrmpZZS nSqo2cBUmiuy0kN1xIoREnJcrNARKx5RLn57Hx1yI9DY6mNwJUAzd2u6jLpun2C7 1DKp0H+40XYrwzDlCSDY+X3EFArpzrNJyX1kJFtylYLgwCcSExPLCi3prDApq01b MO/Y+LVP9N6snam89CPDmifEu1YJNZbEu1jjCP2IB0dgp4s1OVHArgFr+9mZsWRY 0TdvnyZY523xqCc/lUPmkOfdwuC2REK3zjfvdZI= -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:14 2025 by rpki-client