This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i-kv0bJPsIkSciGDz8TdgfF_1Hw.roa File: i-kv0bJPsIkSciGDz8TdgfF_1Hw.roa (raw, json) Hash identifier: b1CWCDdN4O7Yf3lSUSFOyaiKdnPmnSps8oqflgBxMJU= Subject key identifier: 8B:E9:2F:D1:B2:4F:B0:89:12:72:21:83:CF:C4:DD:81:F1:7F:D4:7C Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019ACBA1C7701481A1F981A12BDCCEBA1E4B Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i-kv0bJPsIkSciGDz8TdgfF_1Hw.roa Signing time: Fri 28 Nov 2025 18:02:48 +0000 ROA not before: Fri 28 Nov 2025 18:02:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210457 IP address blocks: 144.31.12.0/24 maxlen: 24 144.31.25.0/24 maxlen: 24 144.31.106.0/24 maxlen: 24 144.31.221.0/24 maxlen: 24 193.23.199.0/24 maxlen: 24 193.23.209.0/24 maxlen: 24 193.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:a1:c7:70:14:81:a1:f9:81:a1:2b:dc:ce:ba:1e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 28 18:02:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8be92fd1b24fb08912722183cfc4dd81f17fd47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:13:b8:43:84:25:4e:93:ed:fc:82:aa:b3: cf:df:50:8e:df:26:37:1b:a0:94:7f:5f:75:e1:21: 56:1f:f2:de:d8:24:c0:81:60:10:b1:d9:1a:68:d0: a6:90:58:d5:e8:16:f4:ea:dc:b9:91:73:fc:90:0f: f0:30:3a:5a:63:e0:07:a5:bc:c7:be:a9:60:c3:32: 67:99:63:e3:0a:82:10:28:ce:d4:02:c5:ad:ed:8d: 2c:fc:3a:40:cd:1c:44:39:b2:8b:3f:8a:31:97:fa: 0d:83:d1:44:ca:24:48:b4:b9:fc:17:e4:ea:fd:9e: ff:73:09:e9:66:fb:2b:7a:3a:3b:a7:99:8c:9f:14: 67:aa:b6:27:0d:c2:9d:68:e9:31:a4:ea:70:50:d6: 8a:ec:eb:ab:9f:ce:06:b6:bc:b1:95:68:6f:9a:0e: 3a:7f:41:5d:16:fc:96:5b:f0:63:31:12:ea:90:9f: dc:5a:c3:db:a5:9d:4b:68:cf:61:c4:d8:1c:57:0a: 56:13:de:eb:17:b3:68:e7:bd:9f:c8:18:f7:c1:05: d3:45:0f:f1:bd:a9:5c:31:e3:08:54:14:8a:66:b0: ed:10:ef:8a:84:3b:06:d4:96:80:25:50:be:6e:ed: 4f:5a:13:e7:69:ea:1b:8a:0e:50:c5:4f:ab:24:fb: c1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E9:2F:D1:B2:4F:B0:89:12:72:21:83:CF:C4:DD:81:F1:7F:D4:7C X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/i-kv0bJPsIkSciGDz8TdgfF_1Hw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.12.0/24 144.31.25.0/24 144.31.106.0/24 144.31.221.0/24 193.23.199.0/24 193.23.209.0/24 193.23.221.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:13:e7:9d:70:fe:6b:72:01:91:4e:e0:ec:66:98:94:79:17: 56:0f:2b:63:ea:eb:98:80:48:a8:2d:11:c0:59:a1:f6:d1:d3: 98:3c:d6:9e:bd:db:c6:55:49:9c:56:66:20:4a:38:0f:a3:ec: 65:d9:ff:11:47:ff:bc:ab:d7:c9:5f:27:4f:29:ed:ae:4a:d3: 6d:92:c6:52:4e:2e:00:a2:bd:e8:b7:2f:86:65:7b:c4:32:b1: e4:80:cf:82:81:a4:1f:59:b1:c1:33:39:4d:54:ad:60:aa:ed: 56:db:28:42:86:c1:c3:76:a2:62:b1:cc:7a:56:80:91:16:e8: 72:32:e6:3f:05:4b:44:39:84:e2:fb:0a:29:1e:a8:68:52:ad: 31:85:29:d1:66:17:ea:61:4d:b8:0a:88:dc:32:72:aa:8f:cb: ce:d9:85:af:95:e4:be:af:fe:b2:d8:86:98:0b:51:8c:dd:b0: 3a:68:df:3c:3f:16:53:bf:5d:eb:40:3b:8d:8a:e3:c7:c4:83: ef:5b:4c:c5:ab:24:2b:09:b4:96:8e:58:e7:4e:29:76:fe:55: 71:12:70:e1:62:29:fd:c5:ed:a8:84:97:9a:90:0a:80:21:50: 28:f5:86:b9:9a:f0:38:59:0b:ac:3f:f1:c3:ca:1c:76:15:64: 30:1b:34:34 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZrLocdwFIGh+YGhK9zOuh5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTI4MTgwMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmU5MmZkMWIyNGZiMDg5MTI3MjIxODNjZmM0ZGQ4MWYxN2ZkNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3wTuEOEJU6T7fyCqrPP31CO3yY3 G6CUf1914SFWH/Le2CTAgWAQsdkaaNCmkFjV6Bb06ty5kXP8kA/wMDpaY+AHpbzH vqlgwzJnmWPjCoIQKM7UAsWt7Y0s/DpAzRxEObKLP4oxl/oNg9FEyiRItLn8F+Tq /Z7/cwnpZvsrejo7p5mMnxRnqrYnDcKdaOkxpOpwUNaK7Ourn84GtryxlWhvmg46 f0FdFvyWW/BjMRLqkJ/cWsPbpZ1LaM9hxNgcVwpWE97rF7No572fyBj3wQXTRQ/x valcMeMIVBSKZrDtEO+KhDsG1JaAJVC+bu1PWhPnaeobig5QxU+rJPvBmwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFIvpL9GyT7CJEnIhg8/E3YHxf9R8MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvaS1rdjBiSlBzSWtTY2lHRHo4VGRnZkZfMUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAkB8MAwQA kB8ZAwQAkB9qAwQAkB/dAwQAwRfHAwQAwRfRAwQAwRfdMA0GCSqGSIb3DQEBCwUA A4IBAQALE+edcP5rcgGRTuDsZpiUeRdWDytj6uuYgEioLRHAWaH20dOYPNaevdvG VUmcVmYgSjgPo+xl2f8RR/+8q9fJXydPKe2uStNtksZSTi4Aor3oty+GZXvEMrHk gM+CgaQfWbHBMzlNVK1gqu1W2yhChsHDdqJiscx6VoCRFuhyMuY/BUtEOYTi+wop HqhoUq0xhSnRZhfqYU24CojcMnKqj8vO2YWvleS+r/6y2IaYC1GM3bA6aN88PxZT v13rQDuNiuPHxIPvW0zFqyQrCbSWjljnTil2/lVxEnDhYin9xe2ohJeakAqAIVAo 9Ya5mvA4WQusP/HDyhx2FWQwGzQ0 -----END CERTIFICATE-----Generated at Fri Dec 5 17:53:13 2025 by rpki-client