This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B9fdcE3XxUY3Xipc9GTdiXdYbis.roa File: B9fdcE3XxUY3Xipc9GTdiXdYbis.roa (raw, json) Hash identifier: sB6pZj6XhFhKceyEZ81bF8gCBC9nZLL+F2x1GW8OX9g= Subject key identifier: 07:D7:DD:70:4D:D7:C5:46:37:5E:2A:5C:F4:64:DD:89:77:58:6E:2B Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B38DC71BBBECE811C3ADE57E90818F504 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B9fdcE3XxUY3Xipc9GTdiXdYbis.roa Signing time: Fri 19 Dec 2025 23:05:29 +0000 ROA not before: Fri 19 Dec 2025 23:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401152 IP address blocks: 77.239.100.0/22 maxlen: 24 77.239.112.0/22 maxlen: 24 144.31.8.0/23 maxlen: 24 144.31.11.0/24 maxlen: 24 144.31.13.0/24 maxlen: 24 144.31.15.0/24 maxlen: 24 144.31.32.0/19 maxlen: 19 144.31.91.0/24 maxlen: 24 144.31.96.0/22 maxlen: 24 144.31.109.0/24 maxlen: 24 144.31.110.0/24 maxlen: 24 144.31.111.0/24 maxlen: 24 144.31.113.0/24 maxlen: 24 144.31.136.0/24 maxlen: 24 144.31.140.0/23 maxlen: 24 144.31.142.0/23 maxlen: 24 144.31.144.0/20 maxlen: 24 144.31.160.0/22 maxlen: 24 144.31.224.0/24 maxlen: 24 144.31.225.0/24 maxlen: 24 144.31.226.0/23 maxlen: 24 144.31.228.0/23 maxlen: 24 144.31.230.0/24 maxlen: 24 150.241.80.0/23 maxlen: 24 193.23.192.0/24 maxlen: 24 193.23.198.0/24 maxlen: 24 193.23.204.0/22 maxlen: 22 193.23.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:dc:71:bb:be:ce:81:1c:3a:de:57:e9:08:18:f5:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 19 23:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=07d7dd704dd7c546375e2a5cf464dd8977586e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:39:1a:2f:28:84:a8:aa:d1:e0:f1:1a:54: 27:20:cc:60:59:4d:41:13:8c:ce:23:9e:90:7c:72: 1e:26:df:2c:28:89:45:ae:40:ca:5b:d2:81:7f:4b: 8f:c3:5f:0f:20:71:64:31:f2:31:2c:af:3e:51:cf: dd:0f:ba:63:ef:32:25:63:4b:2b:f4:73:8c:6b:43: c5:7b:fb:c4:c7:d9:24:07:5e:07:20:65:21:09:f8: 73:c7:95:ed:b8:a9:36:ce:38:a5:73:31:5b:69:c6: 80:de:af:bd:c2:c4:1b:7f:32:7a:45:b2:73:a8:a7: 9c:1c:80:70:7d:1f:35:42:a5:ca:74:66:71:a0:d5: 8c:aa:0c:62:4f:78:79:f3:ef:73:be:44:34:d3:fd: 29:0c:7c:37:b1:46:87:f6:41:dd:11:3b:0b:45:66: 10:28:9d:32:f9:0e:49:57:57:fc:07:38:3a:6a:6c: b6:70:9e:c1:54:02:95:2e:60:4d:16:37:60:f8:03: 47:98:ea:f0:50:87:60:b2:aa:32:15:97:9a:71:af: 24:66:08:e5:90:be:ae:3e:8d:99:f9:7e:b7:b8:72: 3f:59:0e:5c:87:cf:51:15:61:ff:69:6c:56:36:27: 2e:bc:4e:7a:4f:9f:44:5b:22:4b:21:02:a4:99:09: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D7:DD:70:4D:D7:C5:46:37:5E:2A:5C:F4:64:DD:89:77:58:6E:2B X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/B9fdcE3XxUY3Xipc9GTdiXdYbis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.239.100.0/22 77.239.112.0/22 144.31.8.0/23 144.31.11.0/24 144.31.13.0/24 144.31.15.0/24 144.31.32.0/19 144.31.91.0/24 144.31.96.0/22 144.31.109.0-144.31.111.255 144.31.113.0/24 144.31.136.0/24 144.31.140.0-144.31.163.255 144.31.224.0-144.31.230.255 150.241.80.0/23 193.23.192.0/24 193.23.198.0/24 193.23.204.0/22 193.23.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:ad:95:d6:db:36:67:ba:16:64:dd:99:0b:e5:4a:c8:21:72: 15:2c:84:9f:5a:93:84:b4:99:84:f7:80:76:db:72:f4:f1:1c: 00:b5:73:bc:35:0c:be:a3:63:fc:ec:2f:0f:49:80:37:5b:a6: 34:52:b1:54:0d:5a:6f:72:f8:0a:8d:79:6b:55:08:83:ae:1d: 28:47:d4:e7:e2:ba:23:1f:a6:52:1a:e9:38:15:c8:5d:61:7b: 06:98:da:de:e9:e7:7e:bb:54:69:d5:36:d2:a1:b1:57:e8:31: b7:33:0c:81:e9:4d:f0:6d:55:47:14:ca:db:18:81:58:6d:74: 05:1b:c1:4b:e6:42:b9:7a:2b:8f:e4:39:c6:dd:39:4b:0e:e1: 7f:a9:2a:2c:5a:54:06:90:80:13:ad:e4:b3:52:ed:da:a3:59: 6b:40:e8:ea:ec:84:bc:e4:ad:cc:34:91:64:e9:81:23:5c:4e: 68:b1:25:17:a1:77:80:83:8e:54:a7:44:db:3a:64:27:a1:64: 09:5b:56:91:e5:c6:14:b5:9e:98:91:0c:f6:b6:29:1c:14:b4: 01:7a:13:eb:de:88:53:e2:90:3a:c1:fb:b8:6c:e2:58:dd:9c: 40:ce:d4:e4:3a:59:07:88:9f:eb:39:06:b2:ce:59:d4:56:e1: 3c:82:4a:c0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZs43HG7vs6BHDreV+kIGPUEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE5MjMwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2Q3ZGQ3MDRkZDdjNTQ2Mzc1ZTJhNWNmNDY0ZGQ4OTc3NTg2ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Fc5Gi8ohKiq0eDxGlQnIMxgWU1B E4zOI56QfHIeJt8sKIlFrkDKW9KBf0uPw18PIHFkMfIxLK8+Uc/dD7pj7zIlY0sr 9HOMa0PFe/vEx9kkB14HIGUhCfhzx5XtuKk2zjilczFbacaA3q+9wsQbfzJ6RbJz qKecHIBwfR81QqXKdGZxoNWMqgxiT3h58+9zvkQ00/0pDHw3sUaH9kHdETsLRWYQ KJ0y+Q5JV1f8Bzg6amy2cJ7BVAKVLmBNFjdg+ANHmOrwUIdgsqoyFZeaca8kZgjl kL6uPo2Z+X63uHI/WQ5ch89RFWH/aWxWNicuvE56T59EWyJLIQKkmQlhEQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFAfX3XBN18VGN14qXPRk3Yl3WG4rMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvQjlmZGNFM1h4VVkzWGlwYzlHVGRpWGRZYmlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBAJN 72QDBAJN73ADBAGQHwgDBACQHwsDBACQHw0DBACQHw8DBAWQHyADBACQH1sDBAKQ H2AwDAMEAJAfbQMEBJAfYAMEAJAfcQMEAJAfiDAMAwQCkB+MAwQCkB+gMAwDBAWQ H+ADBACQH+YDBAGW8VADBADBF8ADBADBF8YDBALBF8wDBALBF9QwDQYJKoZIhvcN AQELBQADggEBAGqtldbbNme6FmTdmQvlSsghchUshJ9ak4S0mYT3gHbbcvTxHAC1 c7w1DL6jY/zsLw9JgDdbpjRSsVQNWm9y+AqNeWtVCIOuHShH1OfiuiMfplIa6TgV yF1hewaY2t7p5367VGnVNtKhsVfoMbczDIHpTfBtVUcUytsYgVhtdAUbwUvmQrl6 K4/kOcbdOUsO4X+pKixaVAaQgBOt5LNS7dqjWWtA6OrshLzkrcw0kWTpgSNcTmix JRehd4CDjlSnRNs6ZCehZAlbVpHlxhS1npiRDPa2KRwUtAF6E+veiFPikDrB+7hs 4ljdnEDO1OQ6WQeIn+s5BrLOWdRW4TyCSsA= -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:12 2025 by rpki-client