This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ro2f3Aex1W_qVINN9qx-vr7VPXo.roa File: ro2f3Aex1W_qVINN9qx-vr7VPXo.roa (raw, json) Hash identifier: YasfMKIcl1t6galvREbQltLkU5MmJLhiechPxzXGxhw= Subject key identifier: AE:8D:9F:DC:07:B1:D5:6F:EA:54:83:4D:F6:AC:7E:BE:BE:D5:3D:7A Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019C0F8269F4A0201FC12473E3D14323BF34 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ro2f3Aex1W_qVINN9qx-vr7VPXo.roa Signing time: Fri 30 Jan 2026 15:25:30 +0000 ROA not before: Fri 30 Jan 2026 15:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201907 IP address blocks: 144.31.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:82:69:f4:a0:20:1f:c1:24:73:e3:d1:43:23:bf:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 30 15:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8d9fdc07b1d56fea54834df6ac7ebebed53d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4f:a0:7a:d6:95:d9:56:b4:2b:52:84:da:f3: 74:94:f6:f8:40:56:99:eb:e5:14:2c:a2:05:dc:c4: e9:7a:09:e5:53:f4:54:b5:e1:da:3e:78:39:b5:a1: b0:d0:0a:ed:f5:97:5f:ef:29:1b:71:e9:ef:18:bb: b7:23:62:6f:54:9f:15:25:e5:68:9b:ea:7b:1c:b0: 4c:ca:83:f6:3b:44:ab:be:17:a2:aa:8d:b7:f0:dd: 1c:97:10:ee:f0:47:40:17:dc:81:06:fb:05:b5:76: c4:cf:1e:00:6b:31:16:19:e1:97:2c:84:50:d0:5b: 89:3b:eb:b2:51:cd:68:2e:41:7e:57:7a:32:6e:f5: f9:ba:23:e4:05:86:03:ff:6e:c2:72:ca:2c:d4:01: 8a:bc:e5:ad:4b:67:de:7b:ff:8b:6b:07:d9:8c:86: 04:86:6d:63:80:66:37:ea:67:18:07:3e:f6:f1:fb: ce:c2:57:f2:15:b0:99:0f:85:50:8b:e4:7b:51:29: 5c:1c:29:43:7d:3d:9a:5a:36:bc:5b:83:21:62:7f: b0:7e:3a:eb:12:6a:8a:2e:d5:a0:27:46:8a:02:7f: 9e:f0:e3:c6:41:80:da:6e:83:ce:94:77:46:f2:c9: 71:35:f5:ce:2b:1b:6a:e1:68:d4:28:04:f1:66:be: c7:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8D:9F:DC:07:B1:D5:6F:EA:54:83:4D:F6:AC:7E:BE:BE:D5:3D:7A X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ro2f3Aex1W_qVINN9qx-vr7VPXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.34.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:7a:b6:cc:48:c8:7d:af:d2:f4:45:a8:ad:64:a8:e6:f8:31: 78:ff:1b:dd:ba:c0:07:02:58:10:27:49:00:dd:0d:a5:d4:14: c2:ce:8e:aa:8d:9a:8f:43:39:1f:d8:28:e3:c1:91:52:c7:08: 74:1c:7c:31:79:0c:7d:45:06:36:4e:d6:01:66:10:23:41:99: 41:8c:0b:e1:e1:55:37:23:b5:fa:b1:f6:18:5f:aa:26:b2:5a: 0f:5b:ed:19:5a:02:3a:74:0e:30:da:1a:ee:15:02:0f:8f:e0: fe:ef:73:6f:6a:91:86:5f:ab:1f:ba:a6:9d:8b:fe:bd:69:7a: 80:62:a0:bc:07:b9:9d:17:e8:e8:d5:b2:87:6d:1c:ec:0f:05: ab:f0:e7:81:a6:1b:5b:e5:22:cd:98:05:2d:3a:b0:7d:be:25: 02:5c:ba:bc:dd:3e:2a:c8:67:a0:a7:d6:5f:46:45:ce:38:01: 0c:c1:e7:be:98:88:c3:36:f0:48:53:97:61:c7:f7:96:a1:f9: fe:40:f0:4a:c4:c0:9a:ec:3b:f1:2a:1c:4f:5f:4e:f1:32:6b: 7e:15:5b:58:53:7c:d3:e5:ed:d2:6d:b6:4e:95:80:4e:a1:bf: af:dd:df:bf:e4:dc:16:9c:60:dd:80:9c:83:48:43:be:0c:98: 96:46:b4:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwPgmn0oCAfwSRz49FDI780MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTMwMTUyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZThkOWZkYzA3YjFkNTZmZWE1NDgzNGRmNmFjN2ViZWJlZDUzZDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8k+getaV2Va0K1KE2vN0lPb4QFaZ 6+UULKIF3MTpegnlU/RUteHaPng5taGw0Art9Zdf7ykbcenvGLu3I2JvVJ8VJeVo m+p7HLBMyoP2O0Srvheiqo238N0clxDu8EdAF9yBBvsFtXbEzx4AazEWGeGXLIRQ 0FuJO+uyUc1oLkF+V3oybvX5uiPkBYYD/27Ccsos1AGKvOWtS2fee/+LawfZjIYE hm1jgGY36mcYBz728fvOwlfyFbCZD4VQi+R7USlcHClDfT2aWja8W4MhYn+wfjrr EmqKLtWgJ0aKAn+e8OPGQYDaboPOlHdG8slxNfXOKxtq4WjUKATxZr7HLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6Nn9wHsdVv6lSDTfasfr6+1T16MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvcm8yZjNBZXgxV19xVklOTjlxeC12cjdWUFhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB8iMA0G CSqGSIb3DQEBCwUAA4IBAQB6erbMSMh9r9L0RaitZKjm+DF4/xvdusAHAlgQJ0kA 3Q2l1BTCzo6qjZqPQzkf2CjjwZFSxwh0HHwxeQx9RQY2TtYBZhAjQZlBjAvh4VU3 I7X6sfYYX6omsloPW+0ZWgI6dA4w2hruFQIPj+D+73NvapGGX6sfuqadi/69aXqA YqC8B7mdF+jo1bKHbRzsDwWr8OeBphtb5SLNmAUtOrB9viUCXLq83T4qyGegp9Zf RkXOOAEMwee+mIjDNvBIU5dhx/eWofn+QPBKxMCa7DvxKhxPX07xMmt+FVtYU3zT 5e3SbbZOlYBOob+v3d+/5NwWnGDdgJyDSEO+DJiWRrSL -----END CERTIFICATE-----Generated at Mon Feb 2 21:10:47 2026 by rpki-client