This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wCKprW7h50aqUo9quCRjQ4AYXbs.roa File: wCKprW7h50aqUo9quCRjQ4AYXbs.roa (raw, json) Hash identifier: SlBjKoVzRj2HuSBQCW9bZbBvfzju93sT2mOUOLkrrps= Subject key identifier: C0:22:A9:AD:6E:E1:E7:46:AA:52:8F:6A:B8:24:63:43:80:18:5D:BB Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B945A8561BA8876D2EE12EDEFB5DB87AD Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wCKprW7h50aqUo9quCRjQ4AYXbs.roa Signing time: Tue 06 Jan 2026 17:28:38 +0000 ROA not before: Tue 06 Jan 2026 17:28:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207513 IP address blocks: 144.31.29.0/24 maxlen: 24 144.31.92.0/24 maxlen: 24 144.31.100.0/24 maxlen: 24 144.31.101.0/24 maxlen: 24 144.31.102.0/24 maxlen: 24 144.31.111.0/24 maxlen: 24 144.31.112.0/24 maxlen: 24 144.31.113.0/24 maxlen: 24 144.31.248.0/24 maxlen: 24 150.241.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:94:5a:85:61:ba:88:76:d2:ee:12:ed:ef:b5:db:87:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Jan 6 17:28:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c022a9ad6ee1e746aa528f6ab824634380185dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:bb:7c:a9:df:be:a3:1c:0e:5a:45:02:72:5e: e6:37:c9:9f:c2:a0:90:7b:8e:33:84:b2:f7:31:1f: 2f:bf:d9:9f:86:23:02:2f:e9:b2:5b:50:4a:a9:bf: 7e:d8:98:3a:55:89:50:d9:d0:98:2a:6b:d5:f7:27: a2:f9:86:db:42:b1:88:ed:5e:c1:6f:21:46:fb:84: 9e:13:96:e0:0d:9b:3d:89:4f:7a:25:d6:65:46:7d: b3:3c:43:b3:20:b4:73:d0:c0:97:29:e8:dc:5c:21: 12:dc:ba:e2:8c:a2:40:c0:86:40:5f:8c:ae:a0:8a: d9:2b:cc:e5:30:17:0f:64:77:05:b0:ed:1b:3e:5e: 40:7a:70:a8:39:bd:06:06:3b:91:d0:10:46:2d:9f: 0e:20:51:55:7c:b4:a5:fc:dd:4c:97:a3:51:7a:be: c3:19:83:85:44:49:27:6e:89:41:56:b2:b2:2c:21: 46:cd:40:08:0c:c6:99:20:2b:46:e9:75:79:f5:b4: cb:4a:b1:38:0f:8d:41:5a:98:7d:c8:e3:c6:cb:79: cc:4e:57:25:85:63:42:e6:bc:24:c5:7f:e2:ff:b5: 61:6e:1b:c6:a0:a5:0f:af:b0:48:94:69:9d:44:83: 72:51:8b:fe:48:47:7f:a9:d1:42:dd:97:ee:61:66: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:22:A9:AD:6E:E1:E7:46:AA:52:8F:6A:B8:24:63:43:80:18:5D:BB X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/wCKprW7h50aqUo9quCRjQ4AYXbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.29.0/24 144.31.92.0/24 144.31.100.0-144.31.102.255 144.31.111.0-144.31.113.255 144.31.248.0/24 150.241.80.0/24 Signature Algorithm: sha256WithRSAEncryption b2:23:8d:80:8f:be:20:83:52:66:25:e8:cb:dc:36:2d:c5:8f: 0f:8f:af:55:60:03:99:dd:0f:12:4e:9e:3b:8b:53:24:76:6b: 81:d8:8e:09:7b:50:16:ba:04:6e:fa:eb:5c:e4:5c:ed:70:f3: 9d:36:1f:be:30:8c:6e:66:4c:2d:02:0f:95:4a:0c:76:e2:88: 08:84:a2:3e:a0:65:49:6b:bd:63:44:82:84:6b:9c:40:e7:93: e0:44:b0:7d:cf:2b:e9:81:73:b5:2e:f9:8c:21:ea:77:96:a6: 7f:07:a5:94:a6:54:2d:66:52:b7:0c:23:3f:9c:cd:0a:22:5a: e7:7c:13:3e:0b:67:33:22:df:0d:da:e4:1d:85:8b:67:50:d5: 6d:01:99:f0:3c:58:7f:25:04:13:f1:3a:d8:49:29:c2:98:f6: 57:60:8e:91:e0:2f:5a:9a:00:9d:5f:73:2d:bb:70:78:53:ff: 31:f9:5d:03:ff:a7:25:09:ca:b4:80:df:5b:be:79:44:f3:33: fe:fb:e0:35:52:8e:0e:c3:83:a2:2e:ca:e0:c4:cb:e9:e8:b4: fa:6c:c0:43:44:7f:58:9e:d4:b6:07:4f:3a:94:cd:4c:23:d2: 0b:5a:d2:ec:50:31:58:a3:e0:8a:41:09:77:b8:2b:e2:25:83: 3e:f3:ce:f1 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZuUWoVhuoh20u4S7e+124etMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjYwMTA2MTcyODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDIyYTlhZDZlZTFlNzQ2YWE1MjhmNmFiODI0NjM0MzgwMTg1ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7t8qd++oxwOWkUCcl7mN8mfwqCQ e44zhLL3MR8vv9mfhiMCL+myW1BKqb9+2Jg6VYlQ2dCYKmvV9yei+YbbQrGI7V7B byFG+4SeE5bgDZs9iU96JdZlRn2zPEOzILRz0MCXKejcXCES3LrijKJAwIZAX4yu oIrZK8zlMBcPZHcFsO0bPl5AenCoOb0GBjuR0BBGLZ8OIFFVfLSl/N1Ml6NRer7D GYOFREknbolBVrKyLCFGzUAIDMaZICtG6XV59bTLSrE4D41BWph9yOPGy3nMTlcl hWNC5rwkxX/i/7VhbhvGoKUPr7BIlGmdRINyUYv+SEd/qdFC3ZfuYWa8dQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFMAiqa1u4edGqlKPargkY0OAGF27MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvd0NLcHJXN2g1MGFxVW85cXVDUmpRNEFZWGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAkB8dAwQA kB9cMAwDBAKQH2QDBACQH2YwDAMEAJAfbwMEAZAfcAMEAJAf+AMEAJbxUDANBgkq hkiG9w0BAQsFAAOCAQEAsiONgI++IINSZiXoy9w2LcWPD4+vVWADmd0PEk6eO4tT JHZrgdiOCXtQFroEbvrrXORc7XDznTYfvjCMbmZMLQIPlUoMduKICISiPqBlSWu9 Y0SChGucQOeT4ESwfc8r6YFztS75jCHqd5amfwellKZULWZStwwjP5zNCiJa53wT PgtnMyLfDdrkHYWLZ1DVbQGZ8DxYfyUEE/E62Ekpwpj2V2COkeAvWpoAnV9zLbtw eFP/MfldA/+nJQnKtIDfW755RPMz/vvgNVKODsODoi7K4MTL6ei0+mzAQ0R/WJ7U tgdPOpTNTCPSC1rS7FAxWKPgikEJd7gr4iWDPvPO8Q== -----END CERTIFICATE-----Generated at Sat Jan 10 20:12:59 2026 by rpki-client