This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CxjKcVyjQmtBR5dMsYLTOwQz9Z0.roa File: CxjKcVyjQmtBR5dMsYLTOwQz9Z0.roa (raw, json) Hash identifier: C23qycKb1dP0w2Lqd5KbP+uO0qmFmSMwQcCfXBrIPC8= Subject key identifier: 0B:18:CA:71:5C:A3:42:6B:41:47:97:4C:B1:82:D3:3B:04:33:F5:9D Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B0E750AB7DE1F87019DF00CF28E51091A Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CxjKcVyjQmtBR5dMsYLTOwQz9Z0.roa Signing time: Thu 11 Dec 2025 17:28:29 +0000 ROA not before: Thu 11 Dec 2025 17:28:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210457 IP address blocks: 144.31.12.0/24 maxlen: 24 144.31.25.0/24 maxlen: 24 144.31.106.0/24 maxlen: 24 144.31.221.0/24 maxlen: 24 150.241.66.0/24 maxlen: 24 193.23.199.0/24 maxlen: 24 193.23.209.0/24 maxlen: 24 193.23.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:75:0a:b7:de:1f:87:01:9d:f0:0c:f2:8e:51:09:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 11 17:28:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0b18ca715ca3426b4147974cb182d33b0433f59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:99:05:a9:e3:8d:16:f3:de:c0:36:d9:c5: 30:73:e4:4d:ce:fc:fb:78:df:32:0b:c4:2f:5f:0a: 71:7a:ed:74:4c:29:43:9f:11:27:0b:e4:b7:83:fe: 40:64:39:ec:bd:04:22:40:7c:8b:9c:aa:4c:67:b1: 28:6c:95:0a:75:6b:7a:6d:02:b2:5c:05:e9:11:53: 47:3b:0f:d7:5f:8e:2b:7b:86:2b:71:6f:ee:fb:92: cf:06:9a:0b:00:21:c0:a0:eb:73:75:42:cb:b8:8b: 96:0a:32:0e:7a:8a:b6:47:75:b6:44:12:00:8c:a8: 16:4c:e1:b8:06:9c:64:c9:f1:06:58:ca:a9:17:54: d2:dd:b1:4a:02:58:74:08:17:82:a8:5c:db:2e:84: 03:fe:0a:6e:0e:56:32:90:71:62:cf:59:32:39:7a: 50:2e:ee:4e:24:2e:96:32:ed:22:60:68:46:dd:44: da:c8:fe:f7:d6:84:8f:0e:41:b1:05:4e:76:b1:74: e0:e9:f5:a0:d3:d7:e2:ca:8b:de:e6:e1:f1:b4:12: 14:d0:e9:5a:d1:1e:d0:84:6c:7b:fd:07:a0:43:9f: 8a:5a:c5:40:45:dd:8c:a8:cb:d2:e9:b1:23:34:82: 8a:c9:5c:73:47:82:2b:53:c5:16:f5:6c:51:de:bd: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:18:CA:71:5C:A3:42:6B:41:47:97:4C:B1:82:D3:3B:04:33:F5:9D X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/CxjKcVyjQmtBR5dMsYLTOwQz9Z0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.12.0/24 144.31.25.0/24 144.31.106.0/24 144.31.221.0/24 150.241.66.0/24 193.23.199.0/24 193.23.209.0/24 193.23.221.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ee:3c:54:74:7e:a8:a1:82:46:98:a5:b5:93:1c:02:76:5c: cf:b2:10:6a:3d:74:30:9d:e2:e5:46:94:32:c0:4f:2c:d2:ec: f8:fa:bd:b4:8a:bc:25:95:08:aa:bd:4f:cc:66:7d:15:ea:a5: 0e:e4:75:84:d6:32:fe:c3:71:81:36:de:f8:6e:0b:4a:31:8f: 3f:b8:45:14:2b:a4:45:14:c7:30:cf:5d:11:3a:88:07:72:2f: 56:05:8a:ea:4f:0e:e1:d3:fc:e8:b4:e9:25:44:5f:61:23:05: 54:fa:19:85:d4:28:d1:1b:d0:ea:9c:25:eb:c9:9d:8c:4a:ef: c8:3f:da:c2:2c:84:d5:93:04:a6:d0:b7:b0:ab:b5:13:6d:75: e0:c9:27:f5:4c:cd:60:65:28:a3:1e:b3:09:dd:c1:10:74:7a: 4c:c8:ca:f5:71:b9:29:fd:bd:52:b0:bd:82:a0:79:e6:61:4e: 7f:ed:50:64:2e:f5:54:a4:72:49:6b:16:68:68:86:df:e9:7f: 55:18:82:3b:b5:2e:5f:59:4b:6e:36:56:ac:95:94:55:92:1b: 33:8e:96:37:ee:90:ac:69:0f:60:11:db:0d:50:fb:4a:2b:79: 7d:8c:45:42:b9:1c:92:ae:99:93:f4:aa:df:b1:b0:a7:c0:08: 9f:41:e4:5e -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZsOdQq33h+HAZ3wDPKOUQkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjExMTcyODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjE4Y2E3MTVjYTM0MjZiNDE0Nzk3NGNiMTgyZDMzYjA0MzNmNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8yZBanjjRbz3sA22cUwc+RNzvz7 eN8yC8QvXwpxeu10TClDnxEnC+S3g/5AZDnsvQQiQHyLnKpMZ7EobJUKdWt6bQKy XAXpEVNHOw/XX44re4YrcW/u+5LPBpoLACHAoOtzdULLuIuWCjIOeoq2R3W2RBIA jKgWTOG4BpxkyfEGWMqpF1TS3bFKAlh0CBeCqFzbLoQD/gpuDlYykHFiz1kyOXpQ Lu5OJC6WMu0iYGhG3UTayP731oSPDkGxBU52sXTg6fWg09fiyove5uHxtBIU0Ola 0R7QhGx7/QegQ5+KWsVARd2MqMvS6bEjNIKKyVxzR4IrU8UW9WxR3r0XJQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFAsYynFco0JrQUeXTLGC0zsEM/WdMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvQ3hqS2NWeWpRbXRCUjVkTXNZTFRPd1F6OVowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAkB8MAwQA kB8ZAwQAkB9qAwQAkB/dAwQAlvFCAwQAwRfHAwQAwRfRAwQAwRfdMA0GCSqGSIb3 DQEBCwUAA4IBAQBk7jxUdH6ooYJGmKW1kxwCdlzPshBqPXQwneLlRpQywE8s0uz4 +r20irwllQiqvU/MZn0V6qUO5HWE1jL+w3GBNt74bgtKMY8/uEUUK6RFFMcwz10R OogHci9WBYrqTw7h0/zotOklRF9hIwVU+hmF1CjRG9DqnCXryZ2MSu/IP9rCLITV kwSm0Lewq7UTbXXgySf1TM1gZSijHrMJ3cEQdHpMyMr1cbkp/b1SsL2CoHnmYU5/ 7VBkLvVUpHJJaxZoaIbf6X9VGII7tS5fWUtuNlaslZRVkhszjpY37pCsaQ9gEdsN UPtKK3l9jEVCuRySrpmT9KrfsbCnwAifQeRe -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:06 2025 by rpki-client