This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zJw_-7lKioRY-25CLcKUEOun0yE.roa File: zJw_-7lKioRY-25CLcKUEOun0yE.roa (raw, json) Hash identifier: azIDI0ZI5i5MpLXS1AZ9yktn+N1Q7mRUrLHXpn0bk4Y= Subject key identifier: CC:9C:3F:FB:B9:4A:8A:84:58:FB:6E:42:2D:C2:94:10:EB:A7:D3:21 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019AB71A267FBCB4FA6B6C92EF8E6DECE66A Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zJw_-7lKioRY-25CLcKUEOun0yE.roa Signing time: Mon 24 Nov 2025 18:22:15 +0000 ROA not before: Mon 24 Nov 2025 18:22:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15083 IP address blocks: 144.31.20.0/22 maxlen: 24 144.31.88.0/24 maxlen: 24 144.31.124.0/24 maxlen: 24 150.241.92.0/24 maxlen: 24 150.241.93.0/24 maxlen: 24 150.241.94.0/24 maxlen: 24 150.241.95.0/24 maxlen: 24 150.241.100.0/24 maxlen: 24 150.241.101.0/24 maxlen: 24 150.241.102.0/24 maxlen: 24 150.241.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:1a:26:7f:bc:b4:fa:6b:6c:92:ef:8e:6d:ec:e6:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 24 18:22:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc9c3ffbb94a8a8458fb6e422dc29410eba7d321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:46:a9:00:2e:08:6a:ef:e9:4b:0d:21:63: 2e:0b:bc:4f:ed:d3:df:d2:52:3b:26:99:17:25:11: 83:32:f0:e2:06:b2:df:29:ad:24:2f:28:5f:47:f4: 2d:65:3b:ea:1d:81:20:40:5c:7d:da:b7:3e:94:23: 01:53:98:f6:66:09:d7:f7:16:56:f7:3d:01:91:07: 57:f7:8e:02:a1:bf:10:10:16:85:9e:d5:21:23:14: c2:8b:0c:3b:62:25:4a:70:81:2c:53:63:bd:01:12: c1:40:ef:e3:88:a2:79:62:f3:c8:cd:75:3d:74:ed: dd:e9:fe:9d:59:e6:e9:16:ae:8a:80:a2:d1:82:d8: 1a:37:15:d4:52:38:2d:5a:0d:34:b5:2a:e1:40:e4: 82:ce:79:23:32:0f:8d:6f:7b:30:5f:97:93:2a:16: df:ca:31:da:e4:e6:d5:5a:28:55:04:e3:50:9f:1c: 56:90:2c:05:74:23:90:f9:07:7d:c0:a6:4e:89:12: eb:3a:39:ad:20:49:40:a9:ce:e1:28:1a:e0:47:ba: 12:b0:4b:b7:0d:be:82:f6:d9:c2:23:83:5a:bf:23: 55:4c:18:23:84:cf:d0:26:ef:b0:0d:6f:71:6c:b4: 65:b1:e7:08:af:e6:b6:61:41:9c:90:30:83:2f:7f: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9C:3F:FB:B9:4A:8A:84:58:FB:6E:42:2D:C2:94:10:EB:A7:D3:21 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/zJw_-7lKioRY-25CLcKUEOun0yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.20.0/22 144.31.88.0/24 144.31.124.0/24 150.241.92.0/22 150.241.100.0/22 Signature Algorithm: sha256WithRSAEncryption 49:9b:5b:ea:70:03:7f:5a:aa:25:3f:52:05:4f:a3:2d:0e:2e: fc:45:31:58:d0:cc:3e:21:f8:e9:09:d3:34:8b:6d:45:ba:f6: 3e:de:47:ec:df:ad:2d:b4:30:a7:7d:7d:a1:77:2d:52:3a:77: 05:aa:4b:77:e4:56:34:72:68:2a:ba:0f:48:d1:2e:a5:6a:f7: 2a:51:d6:11:8d:a7:bb:87:11:c6:db:cd:cc:4f:55:be:b1:54: 7f:07:3e:55:14:8f:2f:61:0a:11:d9:d3:4d:03:56:b2:ec:29: bd:d8:38:b3:85:c6:f9:4d:22:93:ea:9e:23:50:76:95:4a:df: 77:1b:17:98:16:87:c3:09:ec:19:fa:27:e4:7e:80:0e:f6:ef: b1:28:dd:8c:38:09:5f:08:03:f4:06:dc:54:5c:62:4b:7f:fe: c1:94:2f:bb:1c:c7:ea:e5:2f:8e:e4:65:0c:d9:e6:12:1d:7d: 8f:6e:97:d9:a1:ba:96:34:40:41:39:1a:76:33:eb:3f:16:3e: ff:e6:44:36:33:cb:45:c6:43:ba:fd:76:29:ca:eb:8e:9f:13: 4f:c1:50:58:64:75:a8:5f:57:67:22:71:56:c8:c7:60:0f:54: 36:f9:29:6d:00:d0:73:c3:01:40:a6:0c:42:44:de:74:fc:e1: 78:db:05:77 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZq3GiZ/vLT6a2yS745t7OZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMTI0MTgyMjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzljM2ZmYmI5NGE4YTg0NThmYjZlNDIyZGMyOTQxMGViYTdkMzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDNGqQAuCGrv6UsNIWMuC7xP7dPf 0lI7JpkXJRGDMvDiBrLfKa0kLyhfR/QtZTvqHYEgQFx92rc+lCMBU5j2ZgnX9xZW 9z0BkQdX944Cob8QEBaFntUhIxTCiww7YiVKcIEsU2O9ARLBQO/jiKJ5YvPIzXU9 dO3d6f6dWebpFq6KgKLRgtgaNxXUUjgtWg00tSrhQOSCznkjMg+Nb3swX5eTKhbf yjHa5ObVWihVBONQnxxWkCwFdCOQ+Qd9wKZOiRLrOjmtIElAqc7hKBrgR7oSsEu3 Db6C9tnCI4NavyNVTBgjhM/QJu+wDW9xbLRlsecIr+a2YUGckDCDL3+tmQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMycP/u5SoqEWPtuQi3ClBDrp9MhMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvekp3Xy03bEtpb1JZLTI1Q0xjS1VFT3VuMHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCkB8UAwQA kB9YAwQAkB98AwQClvFcAwQClvFkMA0GCSqGSIb3DQEBCwUAA4IBAQBJm1vqcAN/ WqolP1IFT6MtDi78RTFY0Mw+IfjpCdM0i21FuvY+3kfs360ttDCnfX2hdy1SOncF qkt35FY0cmgqug9I0S6lavcqUdYRjae7hxHG283MT1W+sVR/Bz5VFI8vYQoR2dNN A1ay7Cm92Dizhcb5TSKT6p4jUHaVSt93GxeYFofDCewZ+ifkfoAO9u+xKN2MOAlf CAP0BtxUXGJLf/7BlC+7HMfq5S+O5GUM2eYSHX2PbpfZobqWNEBBORp2M+s/Fj7/ 5kQ2M8tFxkO6/XYpyuuOnxNPwVBYZHWoX1dnInFWyMdgD1Q2+SltANBzwwFApgxC RN50/OF42wV3 -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:19 2025 by rpki-client