This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jg4HgB6s6njs5mqrYGQsoIIMlQc.roa File: jg4HgB6s6njs5mqrYGQsoIIMlQc.roa (raw, json) Hash identifier: 0Y2P9rP9S3q2JCefvSHhxSSsMhaCsAf8j8l6CZBUuio= Subject key identifier: 8E:0E:07:80:1E:AC:EA:78:EC:E6:6A:AB:60:64:2C:A0:82:0C:95:07 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B32F5D3A140FAC8A771FC9C894FFDF41E Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jg4HgB6s6njs5mqrYGQsoIIMlQc.roa Signing time: Thu 18 Dec 2025 19:35:29 +0000 ROA not before: Thu 18 Dec 2025 19:35:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213877 IP address blocks: 64.188.73.0/24 maxlen: 24 64.188.75.0/24 maxlen: 24 64.188.92.0/22 maxlen: 24 64.188.96.0/24 maxlen: 24 64.188.97.0/24 maxlen: 24 64.188.112.0/23 maxlen: 24 64.188.124.0/24 maxlen: 24 64.188.125.0/24 maxlen: 24 64.188.126.0/24 maxlen: 24 77.239.104.0/24 maxlen: 24 77.239.105.0/24 maxlen: 24 77.239.122.0/24 maxlen: 24 77.239.123.0/24 maxlen: 24 144.31.26.0/23 maxlen: 24 144.31.64.0/22 maxlen: 24 144.31.68.0/22 maxlen: 24 144.31.72.0/22 maxlen: 24 144.31.76.0/22 maxlen: 24 144.31.86.0/23 maxlen: 24 144.31.89.0/24 maxlen: 24 144.31.104.0/23 maxlen: 24 144.31.114.0/23 maxlen: 24 144.31.120.0/23 maxlen: 24 144.31.137.0/24 maxlen: 24 144.31.192.0/23 maxlen: 24 144.31.198.0/23 maxlen: 24 144.31.246.0/23 maxlen: 24 144.31.252.0/23 maxlen: 24 144.31.254.0/23 maxlen: 24 150.241.105.0/24 maxlen: 24 150.241.108.0/24 maxlen: 24 150.241.123.0/24 maxlen: 24 185.184.122.0/24 maxlen: 24 185.184.123.0/24 maxlen: 24 185.207.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:f5:d3:a1:40:fa:c8:a7:71:fc:9c:89:4f:fd:f4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 18 19:35:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8e0e07801eacea78ece66aab60642ca0820c9507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6a:c5:50:96:d5:79:0d:23:99:1e:95:5f:40: 49:dd:05:29:08:08:23:75:56:fb:86:cc:57:6f:c2: 63:cc:ad:11:99:34:34:09:f1:13:52:47:32:60:2c: 2b:82:d4:4f:22:4b:fe:bd:2d:74:4c:34:0a:f5:3e: 78:41:ae:23:01:c5:b9:f4:70:03:48:c6:cb:18:18: e3:cf:c4:88:55:d9:f0:8f:e4:20:28:84:f9:13:d4: e8:9f:f3:c7:ac:59:08:dc:27:b4:9b:5f:ee:e5:64: 92:69:10:ea:94:f0:e5:63:07:ac:14:6b:b5:12:08: a9:9d:ee:9a:8b:a5:35:2e:88:7e:0b:d5:05:99:f4: 46:a4:37:0c:97:1c:e7:23:1a:2c:3e:cf:bc:c5:e7: 9c:bf:36:69:51:e1:3f:c9:10:a3:3b:f4:ad:ce:7b: cb:44:ab:61:40:d6:21:6e:0d:af:77:e2:46:84:72: 6f:86:c6:5c:0e:06:9a:17:41:28:5f:1b:98:25:d7: 43:35:2c:0e:cf:3e:d4:04:46:ce:1c:8c:3a:c2:ad: bb:91:d1:4d:10:55:b2:b3:2c:a5:f1:eb:04:36:d5: d9:d6:e3:19:24:0c:a6:3f:d2:f8:a9:25:b7:f1:04: c1:90:fe:32:e7:fe:32:75:dc:3e:e2:a2:50:b3:c6: 64:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:0E:07:80:1E:AC:EA:78:EC:E6:6A:AB:60:64:2C:A0:82:0C:95:07 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/jg4HgB6s6njs5mqrYGQsoIIMlQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.73.0/24 64.188.75.0/24 64.188.92.0-64.188.97.255 64.188.112.0/23 64.188.124.0-64.188.126.255 77.239.104.0/23 77.239.122.0/23 144.31.26.0/23 144.31.64.0/20 144.31.86.0/23 144.31.89.0/24 144.31.104.0/23 144.31.114.0/23 144.31.120.0/23 144.31.137.0/24 144.31.192.0/23 144.31.198.0/23 144.31.246.0/23 144.31.252.0/22 150.241.105.0/24 150.241.108.0/24 150.241.123.0/24 185.184.122.0/23 185.207.133.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:05:2f:e5:e5:7c:4a:f2:07:a2:46:35:87:50:d7:0a:12:51: a3:2e:fc:76:1f:c6:ba:c6:71:76:5a:83:39:9f:ed:80:b5:98: fb:bd:59:b6:2e:91:47:08:18:c8:95:5b:1c:d4:a4:bb:4a:8b: e0:39:c7:8d:6f:ef:74:82:0f:1a:55:2f:e4:19:0d:3d:97:dc: 4f:a4:c1:86:c1:fd:18:5f:52:2f:35:8c:c4:1c:0d:83:18:09: 02:ba:67:a6:1a:7b:cd:dc:09:d2:c9:17:d0:16:56:ce:6e:66: d4:52:65:a8:72:96:9a:23:e7:08:ba:45:38:a5:d3:e9:61:bd: 75:ee:49:38:2b:b8:a5:1e:ad:2a:42:67:ca:5a:b4:af:21:5c: f6:ce:6e:1f:55:45:ee:98:32:2f:34:3d:29:ae:fb:76:e5:8f: 1a:4f:5c:ea:db:58:2f:47:3f:9e:ef:33:53:6e:0b:88:71:6c: c2:ae:dd:84:fc:d9:d9:95:b3:b9:6b:6e:ec:9e:4d:9a:e6:f2: 7c:de:31:a4:95:23:d8:5a:84:b3:7f:7f:f0:29:e5:05:ed:ac: 15:88:9c:37:0f:42:49:94:67:24:a9:14:d9:cd:55:82:db:f3: b0:3d:04:2a:c6:8a:3c:64:c3:41:de:f1:34:c5:9f:19:4e:4f: 6d:34:a0:12 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgISAZsy9dOhQPrIp3H8nIlP/fQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE4MTkzNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZTBlMDc4MDFlYWNlYTc4ZWNlNjZhYWI2MDY0MmNhMDgyMGM5NTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mrFUJbVeQ0jmR6VX0BJ3QUpCAgj dVb7hsxXb8JjzK0RmTQ0CfETUkcyYCwrgtRPIkv+vS10TDQK9T54Qa4jAcW59HAD SMbLGBjjz8SIVdnwj+QgKIT5E9Ton/PHrFkI3Ce0m1/u5WSSaRDqlPDlYwesFGu1 Egipne6ai6U1Loh+C9UFmfRGpDcMlxznIxosPs+8xeecvzZpUeE/yRCjO/StznvL RKthQNYhbg2vd+JGhHJvhsZcDgaaF0EoXxuYJddDNSwOzz7UBEbOHIw6wq27kdFN EFWysyyl8esENtXZ1uMZJAymP9L4qSW38QTBkP4y5/4yddw+4qJQs8ZkhQIDAQAB o4ICqDCCAqQwHQYDVR0OBBYEFI4OB4AerOp47OZqq2BkLKCCDJUHMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvamc0SGdCNnM2bmpzNW1xcllHUXNvSUlNbFFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG9BggrBgEFBQcBBwEB/wSBrTCBqjCBpwQCAAEwgaADBABA vEkDBABAvEswDAMEAkC8XAMEAUC8YAMEAUC8cDAMAwQCQLx8AwQAQLx+AwQBTe9o AwQBTe96AwQBkB8aAwQEkB9AAwQBkB9WAwQAkB9ZAwQBkB9oAwQBkB9yAwQBkB94 AwQAkB+JAwQBkB/AAwQBkB/GAwQBkB/2AwQCkB/8AwQAlvFpAwQAlvFsAwQAlvF7 AwQBubh6AwQAuc+FMA0GCSqGSIb3DQEBCwUAA4IBAQB+BS/l5XxK8geiRjWHUNcK ElGjLvx2H8a6xnF2WoM5n+2AtZj7vVm2LpFHCBjIlVsc1KS7SovgOceNb+90gg8a VS/kGQ09l9xPpMGGwf0YX1IvNYzEHA2DGAkCumemGnvN3AnSyRfQFlbObmbUUmWo cpaaI+cIukU4pdPpYb117kk4K7ilHq0qQmfKWrSvIVz2zm4fVUXumDIvND0prvt2 5Y8aT1zq21gvRz+e7zNTbguIcWzCrt2E/NnZlbO5a27snk2a5vJ83jGklSPYWoSz f3/wKeUF7awViJw3D0JJlGckqRTZzVWC2/OwPQQqxoo8ZMNB3vE0xZ8ZTk9tNKAS -----END CERTIFICATE-----Generated at Sat Dec 20 05:59:45 2025 by rpki-client