This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oH8EtaQY74aAKIz-Eeio3VkWUt4.roa File: oH8EtaQY74aAKIz-Eeio3VkWUt4.roa (raw, json) Hash identifier: +Emu7W6/pTQ7JX4zkT6qd5Xc57sRZxD7d8z/3HLQKBs= Subject key identifier: A0:7F:04:B5:A4:18:EF:86:80:28:8C:FE:11:E8:A8:DD:59:16:52:DE Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 019B3293DDB1E7B99CB7765E60FAE0D93E4A Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oH8EtaQY74aAKIz-Eeio3VkWUt4.roa Signing time: Thu 18 Dec 2025 17:48:29 +0000 ROA not before: Thu 18 Dec 2025 17:48:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215474 IP address blocks: 144.31.126.0/24 maxlen: 24 144.31.127.0/24 maxlen: 24 144.31.234.0/24 maxlen: 24 144.31.236.0/24 maxlen: 24 144.31.239.0/24 maxlen: 24 144.31.240.0/24 maxlen: 24 144.31.241.0/24 maxlen: 24 144.31.242.0/24 maxlen: 24 144.31.243.0/24 maxlen: 24 144.31.249.0/24 maxlen: 24 150.241.64.0/24 maxlen: 24 150.241.65.0/24 maxlen: 24 150.241.68.0/24 maxlen: 24 150.241.69.0/24 maxlen: 24 150.241.70.0/24 maxlen: 24 150.241.71.0/24 maxlen: 24 150.241.72.0/24 maxlen: 24 150.241.73.0/24 maxlen: 24 150.241.74.0/24 maxlen: 24 150.241.75.0/24 maxlen: 24 150.241.85.0/24 maxlen: 24 150.241.86.0/24 maxlen: 24 193.23.194.0/24 maxlen: 24 193.23.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:93:dd:b1:e7:b9:9c:b7:76:5e:60:fa:e0:d9:3e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Dec 18 17:48:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a07f04b5a418ef8680288cfe11e8a8dd591652de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:61:89:00:68:42:c2:15:54:82:19:68:df:a6: 54:90:59:7d:9a:8d:48:df:63:34:28:77:a9:63:38: f2:78:91:be:fc:a4:18:75:b3:be:ec:89:6b:f1:1d: 3f:15:f2:5e:20:69:5a:91:f4:40:5c:eb:a7:14:06: 18:6e:53:9f:e1:2b:b7:9a:27:a5:29:b2:74:2c:10: 0e:51:5b:72:cd:ad:5e:d5:e8:49:98:4b:a0:48:38: 72:63:ef:d4:bb:f8:4a:d2:53:0e:c8:f3:50:14:73: 55:a6:1e:67:e7:3b:65:e1:d3:71:46:b1:64:e4:e5: 33:44:83:3a:95:06:4a:c1:6b:fa:5f:d8:7b:10:bf: af:8c:a9:10:77:4d:a7:24:43:0e:95:59:83:30:b5: bf:bc:78:59:ea:24:2c:17:a1:20:c7:4a:a6:b7:6d: 96:56:87:e3:25:27:eb:c0:98:84:0d:62:d8:60:74: 59:9a:f8:bd:07:1b:a0:25:2d:b8:39:1b:ed:b2:83: ea:af:ca:ff:2e:b8:dd:8d:ba:4a:da:13:2f:b3:17: 3a:9a:c1:28:5b:12:5c:19:c6:a4:28:a3:8d:05:09: 14:a5:dd:64:ef:46:1a:22:0c:0f:06:e7:d6:6d:51: 81:b7:0b:59:1c:61:64:0b:77:57:03:ff:01:5a:72: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7F:04:B5:A4:18:EF:86:80:28:8C:FE:11:E8:A8:DD:59:16:52:DE X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/oH8EtaQY74aAKIz-Eeio3VkWUt4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.31.126.0/23 144.31.234.0/24 144.31.236.0/24 144.31.239.0-144.31.243.255 144.31.249.0/24 150.241.64.0/23 150.241.68.0-150.241.75.255 150.241.85.0-150.241.86.255 193.23.194.0/24 193.23.222.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e9:3b:b7:ee:c6:ce:9b:57:c6:23:dd:b8:42:d9:b8:79:20: 7e:a5:e9:14:51:42:40:4e:06:1f:34:6b:6b:a3:9f:c3:65:9b: c1:1e:0a:a7:5b:9a:7c:6a:73:99:8f:75:72:37:16:fa:c4:2c: 2b:da:29:4f:4a:2a:7b:80:05:8f:24:05:b5:90:fd:6c:94:be: 30:fa:7e:ff:ad:b5:f2:96:cd:e6:2c:c7:60:37:a3:14:df:fb: e3:aa:6c:d4:91:82:83:80:34:88:26:65:68:a1:64:4a:4f:bb: a5:5e:68:38:a0:b6:71:32:d7:fd:eb:2a:65:82:89:7e:a4:85: d4:68:cc:33:b3:6c:b7:5b:3a:64:3a:d6:bb:6d:aa:bb:94:4d: 94:c1:b7:42:16:aa:1b:f0:84:4f:d3:94:9e:b2:02:1c:f7:83: 7e:f5:bd:83:3e:6f:12:ff:9b:74:2f:95:fe:57:5b:71:3e:21: 00:f1:8f:29:cb:a5:a8:24:0f:92:da:4d:f4:7b:72:fa:86:6c: 63:d8:f9:ae:0a:02:5a:80:57:e5:aa:cd:32:da:bf:62:56:5f: d1:4c:af:02:7c:d0:94:c8:bf:af:26:64:51:88:7b:2d:33:ee: db:80:7d:d1:29:49:2a:12:02:47:a4:fc:77:5a:53:eb:16:bb: 4c:b2:5a:29 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZsyk92x57mct3ZeYPrg2T5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjUxMjE4MTc0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDdmMDRiNWE0MThlZjg2ODAyODhjZmUxMWU4YThkZDU5MTY1MmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomGJAGhCwhVUghlo36ZUkFl9mo1I 32M0KHepYzjyeJG+/KQYdbO+7Ilr8R0/FfJeIGlakfRAXOunFAYYblOf4Su3miel KbJ0LBAOUVtyza1e1ehJmEugSDhyY+/Uu/hK0lMOyPNQFHNVph5n5ztl4dNxRrFk 5OUzRIM6lQZKwWv6X9h7EL+vjKkQd02nJEMOlVmDMLW/vHhZ6iQsF6Egx0qmt22W VofjJSfrwJiEDWLYYHRZmvi9BxugJS24ORvtsoPqr8r/LrjdjbpK2hMvsxc6msEo WxJcGcakKKONBQkUpd1k70YaIgwPBufWbVGBtwtZHGFkC3dXA/8BWnKbQQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFKB/BLWkGO+GgCiM/hHoqN1ZFlLeMB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvb0g4RXRhUVk3NGFBS0l6LUVlaW8zVmtXVXQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQBkB9+AwQA kB/qAwQAkB/sMAwDBACQH+8DBAKQH/ADBACQH/kDBAGW8UAwDAMEApbxRAMEApbx SDAMAwQAlvFVAwQAlvFWAwQAwRfCAwQAwRfeMA0GCSqGSIb3DQEBCwUAA4IBAQAX 6Tu37sbOm1fGI924Qtm4eSB+pekUUUJATgYfNGtro5/DZZvBHgqnW5p8anOZj3Vy Nxb6xCwr2ilPSip7gAWPJAW1kP1slL4w+n7/rbXyls3mLMdgN6MU3/vjqmzUkYKD gDSIJmVooWRKT7ulXmg4oLZxMtf96yplgol+pIXUaMwzs2y3WzpkOta7baq7lE2U wbdCFqob8IRP05SesgIc94N+9b2DPm8S/5t0L5X+V1txPiEA8Y8py6WoJA+S2k30 e3L6hmxj2PmuCgJagFflqs0y2r9iVl/RTK8CfNCUyL+vJmRRiHstM+7bgH3RKUkq EgJHpPx3WlPrFrtMslop -----END CERTIFICATE-----Generated at Sat Dec 20 08:15:41 2025 by rpki-client