This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DXNMo79gN1cXiTiwHrt397d0umM.roa File: DXNMo79gN1cXiTiwHrt397d0umM.roa (raw, json) Hash identifier: 58ir4ZECxu13yTWOWrI1kkwWUb+AsSTkhn3ec6v9Pb4= Subject key identifier: 0D:73:4C:A3:BF:60:37:57:17:89:38:B0:1E:BB:77:F7:B7:74:BA:63 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B0949305FD59FE5279CFF1805415BE4BE Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DXNMo79gN1cXiTiwHrt397d0umM.roa Signing time: Wed 10 Dec 2025 17:22:30 +0000 ROA not before: Wed 10 Dec 2025 17:22:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40950 IP address blocks: 144.31.28.0/24 maxlen: 24 150.241.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:49:30:5f:d5:9f:e5:27:9c:ff:18:05:41:5b:e4:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 10 17:22:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0d734ca3bf603757178938b01ebb77f7b774ba63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:0d:82:98:b8:a1:91:49:3e:83:eb:e7:fb: a2:9c:1e:14:02:1d:a4:b8:fc:4d:f4:3d:22:18:0b: 27:b3:25:85:94:19:65:b2:ef:e8:b5:da:a0:ce:23: 89:12:24:8e:b7:e9:df:3e:17:ac:29:6a:7c:45:8c: 55:cb:59:90:71:06:8a:59:64:78:7e:52:19:ab:98: b9:b7:a2:2a:34:a9:f3:06:ab:1e:cc:fa:f6:1d:a3: 04:53:b4:e7:9a:da:6a:21:f3:71:27:cc:d0:ea:c3: 43:8a:9b:0b:01:dd:a5:12:d8:2f:c1:8b:05:b9:cf: c7:40:65:80:5f:63:1c:dd:53:5d:7e:47:49:45:42: 62:3f:e7:ce:18:ab:10:4c:f2:24:70:65:78:7d:16: f1:49:fc:12:c5:0e:9b:55:ea:89:b8:de:3f:81:a7: 25:33:82:21:0e:0e:0c:3d:f4:3e:88:d6:7b:b6:4b: de:c7:bf:79:75:fd:99:e0:50:fd:ae:f9:46:3f:a4: 8a:96:3e:32:36:38:d5:a8:5a:2f:3b:c0:e4:15:88: 83:f8:2c:0b:4e:23:17:fe:07:47:a5:4a:a5:6a:aa: 11:4c:21:60:81:6f:9c:3e:05:be:b2:44:f8:0d:0c: 25:8a:5f:a4:03:75:15:49:f3:f2:0c:2a:ca:a9:ff: f0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:73:4C:A3:BF:60:37:57:17:89:38:B0:1E:BB:77:F7:B7:74:BA:63 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/DXNMo79gN1cXiTiwHrt397d0umM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.28.0/24 150.241.87.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:50:29:85:e1:4e:e7:fa:8c:04:dd:e5:77:46:7a:43:e8:13: 36:32:91:f0:3d:a4:f1:ad:65:6b:98:30:66:20:58:3a:34:f1: 66:1c:5d:03:b3:b6:ce:57:69:b4:36:31:c3:02:2b:41:35:cb: 45:cc:18:67:e4:9b:ad:3b:9b:7e:73:d4:86:7b:36:28:5f:be: a0:ae:89:9e:96:f2:a3:cf:6a:50:9d:fa:b3:db:89:c9:68:8c: d6:cf:dd:86:38:9b:de:6f:c5:6d:56:95:34:85:13:44:09:2a: aa:12:e3:d9:9f:67:c7:91:4a:ca:14:bb:a2:a0:70:21:91:7d: 1b:08:df:41:cf:46:f8:d4:c3:53:7f:7e:14:63:47:7f:a5:4e: 1b:ca:8d:43:16:6b:e5:2a:e7:5c:c6:f8:61:0c:3b:9c:5c:0a: da:a7:00:4f:72:3b:c4:5a:d4:c1:53:b3:b1:08:20:20:b3:1a: b1:2c:6a:de:66:bc:49:16:81:85:0b:20:55:e3:5d:db:53:0e: 4a:86:24:50:9a:77:3f:d1:32:13:5e:64:75:6d:ab:cf:90:86: a7:cf:ea:73:b4:ff:7c:70:83:ef:ff:7d:a9:29:26:5e:82:b9: ef:98:15:68:8e:fc:1e:d0:d9:9f:e7:a6:78:ce:80:aa:87:59: 2d:92:fe:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsJSTBf1Z/lJ5z/GAVBW+S+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjEwMTcyMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZDczNGNhM2JmNjAzNzU3MTc4OTM4YjAxZWJiNzdmN2I3NzRiYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw4Ngpi4oZFJPoPr5/uinB4UAh2k uPxN9D0iGAsnsyWFlBllsu/otdqgziOJEiSOt+nfPhesKWp8RYxVy1mQcQaKWWR4 flIZq5i5t6IqNKnzBqsezPr2HaMEU7TnmtpqIfNxJ8zQ6sNDipsLAd2lEtgvwYsF uc/HQGWAX2Mc3VNdfkdJRUJiP+fOGKsQTPIkcGV4fRbxSfwSxQ6bVeqJuN4/gacl M4IhDg4MPfQ+iNZ7tkvex795df2Z4FD9rvlGP6SKlj4yNjjVqFovO8DkFYiD+CwL TiMX/gdHpUqlaqoRTCFggW+cPgW+skT4DQwlil+kA3UVSfPyDCrKqf/wPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA1zTKO/YDdXF4k4sB67d/e3dLpjMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvRFhOTW83OWdOMWNYaVRpd0hydDM5N2QwdW1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkB8cAwQA lvFXMA0GCSqGSIb3DQEBCwUAA4IBAQAKUCmF4U7n+owE3eV3RnpD6BM2MpHwPaTx rWVrmDBmIFg6NPFmHF0Ds7bOV2m0NjHDAitBNctFzBhn5JutO5t+c9SGezYoX76g romelvKjz2pQnfqz24nJaIzWz92GOJveb8VtVpU0hRNECSqqEuPZn2fHkUrKFLui oHAhkX0bCN9Bz0b41MNTf34UY0d/pU4byo1DFmvlKudcxvhhDDucXArapwBPcjvE WtTBU7OxCCAgsxqxLGreZrxJFoGFCyBV413bUw5KhiRQmnc/0TITXmR1bavPkIan z+pztP98cIPv/32pKSZegrnvmBVojvwe0Nmf56Z4zoCqh1ktkv6X -----END CERTIFICATE-----Generated at Sat Dec 20 11:47:16 2025 by rpki-client