This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BRBiGk2EzcOH4IXCXyeaen1L8kU.roa File: BRBiGk2EzcOH4IXCXyeaen1L8kU.roa (raw, json) Hash identifier: 7bDZQHO3bSKHlq3VEN8RUeuG/7+hYXA77uDoF04wF14= Subject key identifier: 05:10:62:1A:4D:84:CD:C3:87:E0:85:C2:5F:27:9A:7A:7D:4B:F2:45 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B14678EE31CC8F044C18E497CF1EEAB0D Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BRBiGk2EzcOH4IXCXyeaen1L8kU.roa Signing time: Fri 12 Dec 2025 21:11:29 +0000 ROA not before: Fri 12 Dec 2025 21:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213520 IP address blocks: 64.188.68.0/22 maxlen: 24 64.188.74.0/24 maxlen: 24 64.188.104.0/22 maxlen: 24 77.239.120.0/23 maxlen: 24 144.31.16.0/23 maxlen: 24 144.31.18.0/23 maxlen: 24 144.31.84.0/23 maxlen: 24 144.31.116.0/23 maxlen: 24 144.31.118.0/23 maxlen: 24 144.31.122.0/23 maxlen: 24 144.31.138.0/23 maxlen: 24 144.31.196.0/23 maxlen: 24 144.31.232.0/24 maxlen: 24 144.31.233.0/24 maxlen: 24 150.241.78.0/23 maxlen: 24 193.23.197.0/24 maxlen: 24 193.23.210.0/23 maxlen: 24 193.23.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:67:8e:e3:1c:c8:f0:44:c1:8e:49:7c:f1:ee:ab:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 12 21:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0510621a4d84cdc387e085c25f279a7a7d4bf245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:f4:4d:43:9c:11:9e:fe:b2:c1:58:af:4e: b1:fe:3b:01:7e:77:5c:d6:29:f8:5e:db:fa:2f:00: 18:b7:2b:58:7a:18:60:9e:32:fb:2b:30:0f:b8:75: 2b:a2:b9:de:99:83:93:f3:b3:e7:b6:05:4a:6d:35: de:61:88:08:8f:13:8d:f6:c9:ae:b9:1b:6a:2b:48: 66:5a:60:76:df:9a:c8:3c:ff:44:ec:21:7b:a8:3d: f1:bb:e1:80:11:fb:0a:e2:26:4c:59:08:5a:a4:3c: 73:17:fe:f5:98:c3:77:2d:6c:2d:34:c7:e7:4a:70: 1b:3f:3c:d0:14:5e:89:9a:19:46:72:74:70:02:eb: 80:63:6c:a6:c2:74:23:4f:5a:13:3d:80:fc:a5:9f: b4:79:4b:b3:60:62:69:44:4c:58:35:ef:68:b4:4e: ff:52:a3:92:f5:2d:5a:d3:38:17:12:76:04:42:da: f5:98:79:5d:a4:f5:94:a2:1f:c9:30:c0:43:a6:52: aa:79:29:8d:91:21:01:24:b0:ff:5c:49:ab:74:5c: 7c:d3:4e:5e:c0:3a:a8:ff:3b:2b:a5:15:9c:e2:10: 97:97:25:d5:78:bc:9a:a5:74:5d:11:ef:22:af:6f: ca:c4:b3:56:28:7a:bd:0e:4c:2e:68:d7:fe:80:cf: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:62:1A:4D:84:CD:C3:87:E0:85:C2:5F:27:9A:7A:7D:4B:F2:45 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BRBiGk2EzcOH4IXCXyeaen1L8kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.68.0/22 64.188.74.0/24 64.188.104.0/22 77.239.120.0/23 144.31.16.0/22 144.31.84.0/23 144.31.116.0/22 144.31.122.0/23 144.31.138.0/23 144.31.196.0/23 144.31.232.0/23 150.241.78.0/23 193.23.197.0/24 193.23.210.0/23 193.23.218.0/23 Signature Algorithm: sha256WithRSAEncryption b8:8c:4e:61:71:d1:fd:88:24:e7:61:b6:21:04:ed:36:9b:56: f5:b7:3a:36:81:a3:f1:c4:65:40:69:c4:96:c2:1b:17:49:1a: 54:b0:b0:89:cf:ab:1d:ad:16:b7:b7:93:6b:fe:67:b8:48:42: 66:31:4e:06:2c:96:9b:d3:63:cc:fd:43:1f:12:0d:52:9b:e7: 1a:c8:3c:2b:9f:9e:91:e3:35:6e:ca:1b:b7:5a:71:5c:8d:60: 7c:e8:4d:8c:a6:44:0c:c3:7f:bc:0a:12:3f:0b:68:e1:5d:f0: 19:2d:7d:61:8b:6d:9f:0a:f8:7d:fd:a5:57:7b:32:29:47:e8: bb:2c:32:16:9d:b9:37:33:cc:db:94:29:05:39:09:53:64:d2: e6:0c:12:23:80:3d:76:39:ef:2e:18:a4:ac:e9:18:7b:9f:f5: b3:e5:94:13:d3:50:a0:08:9b:b3:ce:84:85:92:c6:2c:a0:6e: cc:21:39:31:42:81:dd:3e:19:30:dc:a3:21:8f:fc:50:54:02: db:60:26:2d:b4:31:7c:5c:1d:2e:01:42:4e:cf:27:40:32:73: 3e:6f:4b:21:56:09:3e:84:a5:5b:61:be:c3:3b:8c:fe:4c:1f: 0d:05:b6:96:75:78:d1:ed:6f:c9:5d:d9:07:4d:87:96:49:ea: 49:96:3d:e6 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZsUZ47jHMjwRMGOSXzx7qsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjEyMjExMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTEwNjIxYTRkODRjZGMzODdlMDg1YzI1ZjI3OWE3YTdkNGJmMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRP0TUOcEZ7+ssFYr06x/jsBfndc 1in4Xtv6LwAYtytYehhgnjL7KzAPuHUrornemYOT87PntgVKbTXeYYgIjxON9smu uRtqK0hmWmB235rIPP9E7CF7qD3xu+GAEfsK4iZMWQhapDxzF/71mMN3LWwtNMfn SnAbPzzQFF6JmhlGcnRwAuuAY2ymwnQjT1oTPYD8pZ+0eUuzYGJpRExYNe9otE7/ UqOS9S1a0zgXEnYEQtr1mHldpPWUoh/JMMBDplKqeSmNkSEBJLD/XEmrdFx8005e wDqo/zsrpRWc4hCXlyXVeLyapXRdEe8ir2/KxLNWKHq9DkwuaNf+gM+5DwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFAUQYhpNhM3Dh+CFwl8nmnp9S/JFMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvQlJCaUdrMkV6Y09INElYQ1h5ZWFlbjFMOGtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQCQLxEAwQA QLxKAwQCQLxoAwQBTe94AwQCkB8QAwQBkB9UAwQCkB90AwQBkB96AwQBkB+KAwQB kB/EAwQBkB/oAwQBlvFOAwQAwRfFAwQBwRfSAwQBwRfaMA0GCSqGSIb3DQEBCwUA A4IBAQC4jE5hcdH9iCTnYbYhBO02m1b1tzo2gaPxxGVAacSWwhsXSRpUsLCJz6sd rRa3t5Nr/me4SEJmMU4GLJab02PM/UMfEg1Sm+cayDwrn56R4zVuyhu3WnFcjWB8 6E2MpkQMw3+8ChI/C2jhXfAZLX1hi22fCvh9/aVXezIpR+i7LDIWnbk3M8zblCkF OQlTZNLmDBIjgD12Oe8uGKSs6Rh7n/Wz5ZQT01CgCJuzzoSFksYsoG7MITkxQoHd Phkw3KMhj/xQVALbYCYttDF8XB0uAUJOzydAMnM+b0shVgk+hKVbYb7DO4z+TB8N BbaWdXjR7W/JXdkHTYeWSepJlj3m -----END CERTIFICATE-----Generated at Sat Dec 20 11:46:46 2025 by rpki-client