This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SmGgmfr6TdGizumia3bByOYhyLc.roa File: SmGgmfr6TdGizumia3bByOYhyLc.roa (raw, json) Hash identifier: G8P3DXRvHTOV+8HaMr26YNttD3Jw90h7WL05U5YPNL0= Subject key identifier: 4A:61:A0:99:FA:FA:4D:D1:A2:CE:E9:A2:6B:76:C1:C8:E6:21:C8:B7 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B32F5D362371B0A012F9D31C6724644B4 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SmGgmfr6TdGizumia3bByOYhyLc.roa Signing time: Thu 18 Dec 2025 19:35:29 +0000 ROA not before: Thu 18 Dec 2025 19:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207957 IP address blocks: 64.188.89.0/24 maxlen: 24 64.188.90.0/24 maxlen: 24 64.188.98.0/24 maxlen: 24 64.188.127.0/24 maxlen: 24 77.239.107.0/24 maxlen: 24 144.31.82.0/24 maxlen: 24 144.31.83.0/24 maxlen: 24 144.31.93.0/24 maxlen: 24 144.31.103.0/24 maxlen: 24 144.31.107.0/24 maxlen: 24 144.31.108.0/24 maxlen: 24 144.31.188.0/24 maxlen: 24 144.31.189.0/24 maxlen: 24 144.31.213.0/24 maxlen: 24 144.31.214.0/24 maxlen: 24 144.31.215.0/24 maxlen: 24 144.31.216.0/24 maxlen: 24 144.31.217.0/24 maxlen: 24 144.31.218.0/24 maxlen: 24 144.31.219.0/24 maxlen: 24 144.31.222.0/24 maxlen: 24 150.241.82.0/24 maxlen: 24 150.241.83.0/24 maxlen: 24 185.170.153.0/24 maxlen: 24 185.170.154.0/24 maxlen: 24 193.23.195.0/24 maxlen: 24 193.23.200.0/24 maxlen: 24 193.23.201.0/24 maxlen: 24 193.23.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:f5:d3:62:37:1b:0a:01:2f:9d:31:c6:72:46:44:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 18 19:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4a61a099fafa4dd1a2cee9a26b76c1c8e621c8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:eb:2e:85:f6:b6:5e:44:e7:d9:26:23:0c:b7: c2:dd:e0:72:bc:7a:0a:dd:dc:4d:f8:d4:2c:fe:89: 6e:a7:24:de:00:37:8f:66:33:0d:3f:08:00:17:3f: 57:5e:19:b1:2b:ef:e0:5e:29:5d:f8:54:e7:d6:91: 79:f2:a2:53:ad:4f:c9:17:df:0b:20:7f:4c:b0:cf: 66:70:1d:4b:5c:ec:d9:6d:2e:4a:ca:92:a9:3e:9f: 7f:3d:81:32:64:f7:e1:06:dc:49:a1:ca:56:e7:4b: 59:c7:da:ed:c1:e8:fe:5f:31:99:8d:ea:25:ab:92: ff:3b:ce:60:6a:35:4c:7d:24:55:ae:dd:83:45:7d: cb:ab:6d:3c:eb:43:ae:2a:26:c1:a0:18:2d:f8:f6: c3:6e:d5:b0:7a:ad:e5:c9:86:e9:71:22:c8:06:c5: e6:4a:ea:e2:42:17:0b:1c:f9:9a:d1:8a:2c:dc:15: 8d:58:32:6f:91:c2:30:16:f7:f1:5d:72:bc:70:3d: 9f:b8:46:a6:68:88:98:d2:49:42:13:43:af:30:81: 01:ff:90:47:16:fc:21:98:40:70:ef:19:46:37:47: 61:4a:a0:b2:af:56:df:b6:f7:1d:e3:51:96:05:6a: 18:0c:5b:ef:53:bb:17:90:50:f6:a4:b2:e0:a5:e7: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:61:A0:99:FA:FA:4D:D1:A2:CE:E9:A2:6B:76:C1:C8:E6:21:C8:B7 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/SmGgmfr6TdGizumia3bByOYhyLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.89.0-64.188.90.255 64.188.98.0/24 64.188.127.0/24 77.239.107.0/24 144.31.82.0/23 144.31.93.0/24 144.31.103.0/24 144.31.107.0-144.31.108.255 144.31.188.0/23 144.31.213.0-144.31.219.255 144.31.222.0/24 150.241.82.0/23 185.170.153.0-185.170.154.255 193.23.195.0/24 193.23.200.0-193.23.202.255 Signature Algorithm: sha256WithRSAEncryption a4:35:c2:0f:36:c4:bf:5e:ac:35:0b:14:b2:56:31:c0:48:39: 34:00:85:07:fb:62:fc:d1:93:f2:d4:c0:f0:49:c8:32:7d:86: 8e:64:c0:52:9c:62:d5:c1:10:91:68:27:5a:b9:2a:f3:82:3c: 64:ab:ec:c9:47:4f:29:11:f9:92:4e:05:0c:b1:6c:61:ad:55: 9a:f3:f7:0b:f7:79:7a:aa:44:1d:14:79:83:fe:ed:f6:a8:5d: 1a:45:47:94:45:9d:b5:b2:78:5d:4d:84:95:76:04:a9:20:71: 64:57:2b:fb:4d:8b:a1:cf:9d:d8:b8:a8:3b:5f:0e:f8:b7:e7: 72:42:f2:54:95:e2:ac:06:c5:e0:1a:ed:5b:64:55:a1:1e:7d: 07:07:50:76:8e:e0:44:9a:1b:a4:f6:ca:04:a6:fc:44:53:56: b3:1c:27:38:f1:ba:9b:85:e1:a4:b6:b7:13:15:e9:8b:71:97: ea:f5:5d:a8:2f:59:15:02:07:73:be:1d:7d:55:db:96:1f:f7: 18:7a:d8:79:3c:21:cb:ee:5f:76:00:85:3f:c0:d7:00:81:9b: 08:41:ef:d8:a1:cd:06:71:43:17:c0:28:75:20:0d:98:d5:e9: 18:d5:e7:a8:05:93:f2:ad:84:e0:85:85:f1:a2:e7:54:72:77: 00:2a:23:da -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZsy9dNiNxsKAS+dMcZyRkS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE4MTkzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTYxYTA5OWZhZmE0ZGQxYTJjZWU5YTI2Yjc2YzFjOGU2MjFjOGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOsuhfa2XkTn2SYjDLfC3eByvHoK 3dxN+NQs/olupyTeADePZjMNPwgAFz9XXhmxK+/gXild+FTn1pF58qJTrU/JF98L IH9MsM9mcB1LXOzZbS5KypKpPp9/PYEyZPfhBtxJocpW50tZx9rtwej+XzGZjeol q5L/O85gajVMfSRVrt2DRX3Lq20860OuKibBoBgt+PbDbtWweq3lyYbpcSLIBsXm SuriQhcLHPma0Yos3BWNWDJvkcIwFvfxXXK8cD2fuEamaIiY0klCE0OvMIEB/5BH FvwhmEBw7xlGN0dhSqCyr1bftvcd41GWBWoYDFvvU7sXkFD2pLLgpefOTQIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFEphoJn6+k3Ros7pomt2wcjmIci3MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvU21HZ21mcjZUZEdpenVtaWEzYkJ5T1loeUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIwDAME AEC8WQMEAEC8WgMEAEC8YgMEAEC8fwMEAE3vawMEAZAfUgMEAJAfXQMEAJAfZzAM AwQAkB9rAwQAkB9sAwQBkB+8MAwDBACQH9UDBAKQH9gDBACQH94DBAGW8VIwDAME ALmqmQMEALmqmgMEAMEXwzAMAwQDwRfIAwQAwRfKMA0GCSqGSIb3DQEBCwUAA4IB AQCkNcIPNsS/Xqw1CxSyVjHASDk0AIUH+2L80ZPy1MDwScgyfYaOZMBSnGLVwRCR aCdauSrzgjxkq+zJR08pEfmSTgUMsWxhrVWa8/cL93l6qkQdFHmD/u32qF0aRUeU RZ21snhdTYSVdgSpIHFkVyv7TYuhz53YuKg7Xw74t+dyQvJUleKsBsXgGu1bZFWh Hn0HB1B2juBEmhuk9soEpvxEU1azHCc48bqbheGktrcTFemLcZfq9V2oL1kVAgdz vh19VduWH/cYeth5PCHL7l92AIU/wNcAgZsIQe/Yoc0GcUMXwCh1IA2Y1ekY1eeo BZPyrYTghYXxoudUcncAKiPa -----END CERTIFICATE-----Generated at Sat Dec 20 15:01:22 2025 by rpki-client