This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n7pTPDHa46H5bxS8Y0rD8Y_Da8s.roa File: n7pTPDHa46H5bxS8Y0rD8Y_Da8s.roa (raw, json) Hash identifier: K5p10fr4n52Rn3ZFrQqdQiffoKaEOpd62f+fcvjGMig= Subject key identifier: 9F:BA:53:3C:31:DA:E3:A1:F9:6F:14:BC:63:4A:C3:F1:8F:C3:6B:CB Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019ACBC924FCEF5AF19168E551E5C1DB9747 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n7pTPDHa46H5bxS8Y0rD8Y_Da8s.roa Signing time: Fri 28 Nov 2025 18:45:48 +0000 ROA not before: Fri 28 Nov 2025 18:45:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 58212 IP address blocks: 144.31.126.0/24 maxlen: 24 144.31.127.0/24 maxlen: 24 144.31.224.0/24 maxlen: 24 144.31.225.0/24 maxlen: 24 144.31.226.0/24 maxlen: 24 144.31.227.0/24 maxlen: 24 144.31.228.0/24 maxlen: 24 144.31.229.0/24 maxlen: 24 144.31.230.0/24 maxlen: 24 144.31.231.0/24 maxlen: 24 144.31.232.0/24 maxlen: 24 144.31.233.0/24 maxlen: 24 144.31.234.0/24 maxlen: 24 144.31.235.0/24 maxlen: 24 144.31.236.0/24 maxlen: 24 144.31.237.0/24 maxlen: 24 144.31.238.0/24 maxlen: 24 144.31.239.0/24 maxlen: 24 144.31.240.0/24 maxlen: 24 144.31.241.0/24 maxlen: 24 144.31.242.0/24 maxlen: 24 144.31.243.0/24 maxlen: 24 150.241.68.0/24 maxlen: 24 150.241.69.0/24 maxlen: 24 150.241.70.0/24 maxlen: 24 150.241.71.0/24 maxlen: 24 150.241.72.0/24 maxlen: 24 150.241.73.0/24 maxlen: 24 150.241.74.0/24 maxlen: 24 150.241.75.0/24 maxlen: 24 150.241.85.0/24 maxlen: 24 150.241.86.0/24 maxlen: 24 193.23.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:c9:24:fc:ef:5a:f1:91:68:e5:51:e5:c1:db:97:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 28 18:45:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9fba533c31dae3a1f96f14bc634ac3f18fc36bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:e9:74:32:6e:43:30:f3:f9:af:90:0a:96: 53:af:6e:7c:d2:38:32:c6:32:6a:bb:5a:d4:b5:cd: 3c:8b:bf:a7:62:70:9f:11:5b:82:8e:d2:a8:f5:f2: b5:08:7c:e9:3a:f2:22:b8:ff:18:c8:b7:39:5b:bb: 2a:a5:93:81:c3:d4:8b:bc:66:ee:be:8b:1b:3f:01: 71:dc:17:11:ed:90:5c:3e:70:03:7b:e7:52:9d:6f: eb:23:51:9b:a8:fe:56:a6:5e:17:4f:bc:df:5a:c9: 32:15:88:45:5c:0d:75:a5:0c:a6:bc:40:99:6c:4c: f5:9d:98:2f:86:cf:4a:60:a1:70:dc:bb:f5:4e:f2: d6:53:0a:aa:af:57:97:b5:43:ee:7a:58:bc:9f:55: a1:83:47:f3:85:40:20:db:70:c2:0b:8c:e5:56:bb: 0b:c1:cf:b8:e3:2f:ed:e1:29:96:98:cf:6e:6b:6a: f7:ff:5f:5d:79:02:e8:0e:52:4c:ef:78:84:15:f2: 38:0a:33:3a:19:81:48:2d:01:ff:ec:35:43:1b:68: ac:12:60:f3:06:49:8f:d4:cc:5c:e8:e8:9a:4e:db: de:6b:fb:b5:b4:e9:07:de:9f:71:c0:79:36:e3:50: bf:c7:2d:79:95:06:8f:07:62:b9:99:e3:08:db:a6: 96:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BA:53:3C:31:DA:E3:A1:F9:6F:14:BC:63:4A:C3:F1:8F:C3:6B:CB X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/n7pTPDHa46H5bxS8Y0rD8Y_Da8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.126.0/23 144.31.224.0-144.31.243.255 150.241.68.0-150.241.75.255 150.241.85.0-150.241.86.255 193.23.194.0/24 Signature Algorithm: sha256WithRSAEncryption b3:50:71:bb:51:56:d2:18:9c:43:aa:d3:6c:57:a1:6e:76:36: 2a:b1:72:45:57:77:a4:28:72:da:19:e6:e6:56:a7:07:88:a4: 5f:d9:99:27:86:cf:5d:2e:e4:18:b3:b6:9a:da:e8:5b:a9:26: a1:87:10:8b:00:da:62:72:01:87:12:4c:e1:39:d5:f2:e6:23: ab:24:c9:42:b7:a7:15:7c:35:0b:a9:17:3c:a4:2c:77:d0:0b: 63:8e:d0:04:c7:e1:e7:46:3a:5f:21:11:ae:36:f7:a5:a1:9e: ab:7b:b0:77:64:30:ad:f5:9c:59:4c:87:f5:72:21:46:1e:de: 03:83:67:53:e9:2c:0f:97:2f:13:e0:36:37:75:ba:ce:53:65: b7:73:4a:21:04:d3:f4:59:d3:a2:98:58:84:ce:a6:0d:66:6c: c1:3e:c7:fe:b3:a1:da:a5:c7:eb:22:83:8c:e6:b9:42:31:04: b1:5e:eb:dc:4c:00:ec:ee:4b:10:73:ce:e4:9f:dd:d3:06:94: 31:20:13:f6:96:53:6c:fe:af:41:c8:e1:3a:87:5d:05:3e:d0: 4e:fa:7a:65:3e:ad:1b:84:ca:7c:7c:a5:11:4d:48:4d:8f:d3: 16:dd:93:52:88:c6:f3:43:a8:72:bc:76:9e:af:d2:fb:c9:f4: a6:38:2e:ee -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZrLyST871rxkWjlUeXB25dHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTI4MTg0NTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmJhNTMzYzMxZGFlM2ExZjk2ZjE0YmM2MzRhYzNmMThmYzM2YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4fpdDJuQzDz+a+QCpZTr2580jgy xjJqu1rUtc08i7+nYnCfEVuCjtKo9fK1CHzpOvIiuP8YyLc5W7sqpZOBw9SLvGbu vosbPwFx3BcR7ZBcPnADe+dSnW/rI1GbqP5Wpl4XT7zfWskyFYhFXA11pQymvECZ bEz1nZgvhs9KYKFw3Lv1TvLWUwqqr1eXtUPueli8n1Whg0fzhUAg23DCC4zlVrsL wc+44y/t4SmWmM9ua2r3/19deQLoDlJM73iEFfI4CjM6GYFILQH/7DVDG2isEmDz BkmP1Mxc6OiaTtvea/u1tOkH3p9xwHk241C/xy15lQaPB2K5meMI26aWfQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFJ+6Uzwx2uOh+W8UvGNKw/GPw2vLMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvbjdwVFBESGE0Nkg1YnhTOFkwckQ4WV9EYThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBkB9+MAwD BAWQH+ADBAKQH/AwDAMEApbxRAMEApbxSDAMAwQAlvFVAwQAlvFWAwQAwRfCMA0G CSqGSIb3DQEBCwUAA4IBAQCzUHG7UVbSGJxDqtNsV6FudjYqsXJFV3ekKHLaGebm VqcHiKRf2Zknhs9dLuQYs7aa2uhbqSahhxCLANpicgGHEkzhOdXy5iOrJMlCt6cV fDULqRc8pCx30AtjjtAEx+HnRjpfIRGuNveloZ6re7B3ZDCt9ZxZTIf1ciFGHt4D g2dT6SwPly8T4DY3dbrOU2W3c0ohBNP0WdOimFiEzqYNZmzBPsf+s6HapcfrIoOM 5rlCMQSxXuvcTADs7ksQc87kn93TBpQxIBP2llNs/q9ByOE6h10FPtBO+nplPq0b hMp8fKURTUhNj9MW3ZNSiMbzQ6hyvHaer9L7yfSmOC7u -----END CERTIFICATE-----Generated at Fri Dec 5 07:01:34 2025 by rpki-client