This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rveSTIDdntAqpAkg0BOOvDdBMlc.roa File: rveSTIDdntAqpAkg0BOOvDdBMlc.roa (raw, json) Hash identifier: cL43fFzQ0fY5jP1zV4zzqqoRpf+L0qnlnBNo7GeYZco= Subject key identifier: AE:F7:92:4C:80:DD:9E:D0:2A:A4:09:20:D0:13:8E:BC:37:41:32:57 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AE0663F3EF17B8B30D8D7C6B48D918864 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rveSTIDdntAqpAkg0BOOvDdBMlc.roa Signing time: Tue 02 Dec 2025 18:49:48 +0000 ROA not before: Tue 02 Dec 2025 18:49:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24768 IP address blocks: 150.241.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:66:3f:3e:f1:7b:8b:30:d8:d7:c6:b4:8d:91:88:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 2 18:49:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aef7924c80dd9ed02aa40920d0138ebc37413257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:d0:19:7d:ae:3d:e6:2b:8a:b7:25:78:81: e8:13:6e:58:47:27:a3:c5:9c:65:81:73:91:f4:1e: c5:e4:9b:39:0d:cc:96:e9:d3:2e:b8:4a:d5:a6:95: 22:c4:c1:81:07:d2:59:a2:f2:54:2a:79:1b:7a:64: b8:10:c7:0b:7c:b7:e1:9e:04:0e:f1:f1:e9:78:7d: 74:9f:3f:86:8b:7a:97:0a:41:ef:e0:2a:ac:dc:e6: 46:b7:cf:05:72:9e:4f:55:a0:1e:da:2f:6b:5b:a3: 0d:c8:a1:38:a7:5a:b1:26:a2:59:e3:43:e1:f1:ea: 9a:99:e8:04:43:8b:97:eb:a4:1d:4d:81:3b:7a:40: e5:69:47:50:53:3d:bc:78:3d:22:90:ef:80:df:15: cb:d9:5e:2f:8b:6e:86:4a:1f:b9:d5:7a:a9:d6:5a: cd:75:6d:68:b1:f0:87:ed:b7:19:d8:db:ef:8c:02: 11:f4:5a:c9:ce:09:3e:a1:41:b9:53:d0:49:b1:30: cb:6a:cc:b6:a7:97:ab:f7:dc:e0:ff:78:70:b8:ee: 23:a3:6e:4e:99:76:9a:ae:2c:29:4b:4d:53:7b:7c: 5e:d8:aa:92:84:79:c2:12:31:88:7b:f2:0a:4b:11: a3:9a:e3:22:a4:6e:25:97:14:48:06:4d:25:e2:d4: a1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F7:92:4C:80:DD:9E:D0:2A:A4:09:20:D0:13:8E:BC:37:41:32:57 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/rveSTIDdntAqpAkg0BOOvDdBMlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.241.84.0/24 Signature Algorithm: sha256WithRSAEncryption 41:61:b7:52:bb:31:87:2f:6d:66:0b:f8:b3:e5:30:79:40:3e: e2:ca:77:60:63:3d:60:29:2b:de:85:11:c2:14:5c:cc:b7:4c: 44:88:1c:39:ac:2a:a7:e9:d1:01:9a:1f:90:3e:29:fe:2e:43: fe:1e:55:3e:39:cf:b9:d8:1b:a9:85:c1:27:08:4a:4f:ef:c5: fe:18:43:80:2e:6a:75:a9:48:04:2d:1f:2c:95:b8:31:ae:a9: b8:5a:1e:6b:1c:7d:9c:f1:15:ad:06:13:a1:f5:0e:bc:bc:33: 2b:2e:4d:4d:9a:28:51:37:45:c6:a6:3b:d7:e2:58:e6:9c:70: 45:3a:7f:56:6f:fe:4a:85:a1:ba:da:55:93:8d:f4:ab:66:35: 9f:0d:51:fd:e3:03:28:88:60:d2:e9:8e:84:64:85:78:96:5f: 19:ed:30:50:ba:55:f7:9c:bc:c6:03:d3:39:b2:bd:db:03:2a: 1e:b2:6b:9d:48:03:c4:27:41:57:94:7f:d7:f3:a1:d0:63:4e: 73:7d:0e:55:a6:65:9c:4e:72:e2:bc:33:d7:ca:a2:c5:db:97: 9e:6d:e5:9a:7e:15:75:cd:49:7e:7a:67:cc:7d:68:c6:06:26: 19:93:33:0b:2e:e2:aa:b1:3d:14:10:2a:a8:e6:aa:a8:af:ff: 5c:f0:88:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrgZj8+8XuLMNjXxrSNkYhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjAyMTg0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWY3OTI0YzgwZGQ5ZWQwMmFhNDA5MjBkMDEzOGViYzM3NDEzMjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWzQGX2uPeYrircleIHoE25YRyej xZxlgXOR9B7F5Js5DcyW6dMuuErVppUixMGBB9JZovJUKnkbemS4EMcLfLfhngQO 8fHpeH10nz+Gi3qXCkHv4Cqs3OZGt88Fcp5PVaAe2i9rW6MNyKE4p1qxJqJZ40Ph 8eqamegEQ4uX66QdTYE7ekDlaUdQUz28eD0ikO+A3xXL2V4vi26GSh+51Xqp1lrN dW1osfCH7bcZ2NvvjAIR9FrJzgk+oUG5U9BJsTDLasy2p5er99zg/3hwuO4jo25O mXaariwpS01Te3xe2KqShHnCEjGIe/IKSxGjmuMipG4llxRIBk0l4tShkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK73kkyA3Z7QKqQJINATjrw3QTJXMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvcnZlU1RJRGRudEFxcEFrZzBCT092RGRCTWxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlvFUMA0G CSqGSIb3DQEBCwUAA4IBAQBBYbdSuzGHL21mC/iz5TB5QD7iyndgYz1gKSvehRHC FFzMt0xEiBw5rCqn6dEBmh+QPin+LkP+HlU+Oc+52BuphcEnCEpP78X+GEOALmp1 qUgELR8slbgxrqm4Wh5rHH2c8RWtBhOh9Q68vDMrLk1NmihRN0XGpjvX4ljmnHBF On9Wb/5KhaG62lWTjfSrZjWfDVH94wMoiGDS6Y6EZIV4ll8Z7TBQulX3nLzGA9M5 sr3bAyoesmudSAPEJ0FXlH/X86HQY05zfQ5VpmWcTnLivDPXyqLF25eebeWafhV1 zUl+emfMfWjGBiYZkzMLLuKqsT0UECqo5qqor/9c8Ihf -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:18 2025 by rpki-client