This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cibEFJnsekQbM49DErx2iRTEfx8.roa File: cibEFJnsekQbM49DErx2iRTEfx8.roa (raw, json) Hash identifier: NscONryjeDrASP0xfHBOdtlQFhpeNXEc4TSOJzp+EPA= Subject key identifier: 72:26:C4:14:99:EC:7A:44:1B:33:8F:43:12:BC:76:89:14:C4:7F:1F Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B32ED963AF847DB822A4644F3B9BEB758 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cibEFJnsekQbM49DErx2iRTEfx8.roa Signing time: Thu 18 Dec 2025 19:26:29 +0000 ROA not before: Thu 18 Dec 2025 19:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207513 IP address blocks: 144.31.29.0/24 maxlen: 24 144.31.92.0/24 maxlen: 24 144.31.100.0/24 maxlen: 24 144.31.101.0/24 maxlen: 24 144.31.102.0/24 maxlen: 24 144.31.112.0/24 maxlen: 24 144.31.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:ed:96:3a:f8:47:db:82:2a:46:44:f3:b9:be:b7:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 18 19:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7226c41499ec7a441b338f4312bc768914c47f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:b9:d3:42:89:8c:49:dd:12:94:31:69:2f: 0c:38:ca:a1:08:67:2d:23:41:55:e1:2a:5b:95:28: 82:90:ff:aa:75:6b:a6:21:9c:08:90:1f:3c:32:8a: 6c:2e:76:bf:74:ed:da:86:aa:8b:d8:be:2b:f7:8c: fe:34:71:ca:54:9e:b6:9b:b6:ac:90:c9:8c:fe:07: c4:be:d7:ee:b7:17:a7:55:37:00:51:a8:57:98:d4: c4:a5:e4:59:74:52:4b:d5:c3:c1:2d:bf:71:31:05: 74:b2:05:be:07:99:90:66:3c:92:20:6e:4b:0d:18: 4b:a4:ee:2f:04:d7:42:96:6e:72:96:6a:e9:41:ac: dc:cd:b3:5e:91:10:18:5d:38:b4:26:6c:21:37:bb: 68:89:bf:69:c1:5f:e8:d6:e8:27:b5:61:0d:af:cc: 83:82:78:3a:d4:10:d1:eb:fe:de:67:d4:ca:80:bb: d9:78:53:a4:9c:ef:2d:8c:5b:32:24:48:ff:97:4f: 2e:27:3a:8d:e2:43:0a:21:da:16:89:51:11:d3:37: 3f:e6:bc:85:8f:20:3d:d7:f0:ff:dd:53:b1:bc:5b: f7:3b:c6:6b:a7:59:b8:01:56:79:b6:14:5d:6f:e2: 5c:b1:d6:1a:4a:4e:1e:8a:96:d5:5a:a1:1c:c9:7d: d3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:26:C4:14:99:EC:7A:44:1B:33:8F:43:12:BC:76:89:14:C4:7F:1F X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/cibEFJnsekQbM49DErx2iRTEfx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.29.0/24 144.31.92.0/24 144.31.100.0-144.31.102.255 144.31.112.0/24 144.31.248.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:70:0d:5e:5d:8c:29:dc:a7:ab:b6:f4:ea:23:a5:63:20:16: 4b:97:22:3e:a2:de:b2:d8:17:3c:23:f2:e0:b7:ac:55:de:3d: e9:3e:a5:d5:5a:fa:4a:24:4b:9e:7a:b6:fd:6f:56:71:c9:e6: 21:a5:52:81:02:83:bd:f4:f9:a5:47:e5:97:c8:8a:93:eb:ba: 75:ad:0e:55:35:6a:bb:f3:0f:3c:cb:47:2c:42:01:58:c2:1f: c2:65:5e:8a:fb:f0:12:48:38:bb:0f:7c:eb:8b:c2:99:c3:fb: 2f:92:37:d4:66:65:ea:01:40:e4:35:ae:94:ce:fb:c3:c0:a5: 81:74:e0:ca:1d:9d:cb:4d:f2:65:cb:f2:84:6b:8e:0b:f0:f3: f6:75:03:8b:83:08:87:3f:05:95:dd:ea:92:08:e4:dd:cc:a0: cd:d2:21:89:d1:ed:08:c3:04:55:46:52:11:02:71:13:6f:48: 91:72:21:e6:52:19:71:f9:bc:9d:3e:a3:72:40:64:2e:80:6a: 83:95:a9:45:51:66:c2:4b:e6:14:ca:85:9f:95:99:1f:94:6f: 41:8c:70:08:2c:0e:6b:36:88:c4:fb:e2:67:5b:63:49:b0:1f: 10:2c:d9:40:3e:9c:a0:83:fa:e9:37:21:9c:c1:e2:56:98:31: 6d:bf:59:66 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZsy7ZY6+EfbgipGRPO5vrdYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE4MTkyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjI2YzQxNDk5ZWM3YTQ0MWIzMzhmNDMxMmJjNzY4OTE0YzQ3ZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4y500KJjEndEpQxaS8MOMqhCGct I0FV4SpblSiCkP+qdWumIZwIkB88MopsLna/dO3ahqqL2L4r94z+NHHKVJ62m7as kMmM/gfEvtfutxenVTcAUahXmNTEpeRZdFJL1cPBLb9xMQV0sgW+B5mQZjySIG5L DRhLpO4vBNdClm5ylmrpQazczbNekRAYXTi0JmwhN7toib9pwV/o1ugntWENr8yD gng61BDR6/7eZ9TKgLvZeFOknO8tjFsyJEj/l08uJzqN4kMKIdoWiVER0zc/5ryF jyA91/D/3VOxvFv3O8Zrp1m4AVZ5thRdb+JcsdYaSk4eipbVWqEcyX3TCQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFHImxBSZ7HpEGzOPQxK8dokUxH8fMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvY2liRUZKbnNla1FiTTQ5REVyeDJpUlRFZng4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAkB8dAwQA kB9cMAwDBAKQH2QDBACQH2YDBACQH3ADBACQH/gwDQYJKoZIhvcNAQELBQADggEB AI5wDV5djCncp6u29OojpWMgFkuXIj6i3rLYFzwj8uC3rFXePek+pdVa+kokS556 tv1vVnHJ5iGlUoECg730+aVH5ZfIipPrunWtDlU1arvzDzzLRyxCAVjCH8JlXor7 8BJIOLsPfOuLwpnD+y+SN9RmZeoBQOQ1rpTO+8PApYF04ModnctN8mXL8oRrjgvw 8/Z1A4uDCIc/BZXd6pII5N3MoM3SIYnR7QjDBFVGUhECcRNvSJFyIeZSGXH5vJ0+ o3JAZC6AaoOVqUVRZsJL5hTKhZ+VmR+Ub0GMcAgsDms2iMT74mdbY0mwHxAs2UA+ nKCD+uk3IZzB4laYMW2/WWY= -----END CERTIFICATE-----Generated at Sat Dec 20 15:01:32 2025 by rpki-client