This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0vkTYo9SILqBEsN_a62Swjtpkno.roa File: 0vkTYo9SILqBEsN_a62Swjtpkno.roa (raw, json) Hash identifier: RR3Gnvd3dcqnGnX3yoNmIGjEzg2UOVMy9vmbK8Q/3/Y= Subject key identifier: D2:F9:13:62:8F:52:20:BA:81:12:C3:7F:6B:AD:92:C2:3B:69:92:7A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32832BD2E63A70B5B12CD9EF21D46 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0vkTYo9SILqBEsN_a62Swjtpkno.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201200 IP address blocks: 87.120.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:28:32:bd:2e:63:a7:0b:5b:12:cd:9e:f2:1d:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2f913628f5220ba8112c37f6bad92c23b69927a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fd:39:42:5b:60:77:bc:ca:32:3b:8d:b5:20: d9:9d:84:d5:cc:e6:cd:92:a6:98:6f:a4:46:a0:c1: 9c:e0:09:83:97:83:cb:fb:98:6d:44:ba:c5:1a:bf: d4:50:3f:06:24:42:a6:0c:56:95:dd:af:61:60:bf: a4:df:aa:e5:98:93:0c:c4:b1:3f:b3:f5:10:ce:64: d7:dd:eb:c9:b6:c5:b9:2e:11:7a:0b:08:d7:2f:fc: 4a:13:20:25:7b:c2:73:d8:fe:04:23:42:2f:65:6c: 40:b4:2b:bc:a3:29:ee:d4:1c:9e:fd:e8:fa:d7:e6: 47:e6:34:81:72:6c:bc:ea:1e:35:1c:fe:97:84:80: b9:52:bc:6b:76:4d:ef:c9:6b:56:47:df:83:a8:a1: 4e:cd:35:04:d2:7d:aa:3a:c6:a6:a9:e0:f7:b1:d1: 1e:25:12:20:a5:0d:66:c9:fd:bd:00:f1:c9:f4:47: 55:45:e8:e2:7b:c8:94:32:7b:95:75:10:58:2c:6f: 7f:64:e7:e7:54:93:fa:a6:28:8e:e5:0c:87:20:5b: d8:bc:c8:ab:9a:ff:b5:95:93:a9:2b:5d:33:1a:1f: ca:9e:8d:58:ce:6f:4b:c4:a6:0d:a5:e5:f5:05:25: 8e:0c:da:52:46:b7:f7:a6:ec:e8:b0:25:52:5c:ab: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:13:62:8F:52:20:BA:81:12:C3:7F:6B:AD:92:C2:3B:69:92:7A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/0vkTYo9SILqBEsN_a62Swjtpkno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.40.0/24 Signature Algorithm: sha256WithRSAEncryption 30:c6:15:9e:88:05:b9:eb:f9:e5:65:2a:6e:6f:cc:fd:ea:23: 67:86:70:a0:3b:67:23:33:e8:1b:69:c8:45:8f:7e:7d:3c:d8: 07:50:b7:da:33:dd:87:94:06:72:df:37:e7:d7:08:04:93:57: c0:3e:e1:c6:ca:2b:c9:8e:0d:9c:7a:e9:f4:e9:f2:f1:f7:52: 4e:63:9e:85:22:52:b9:14:01:bf:87:30:2c:86:36:22:57:88: 40:d3:0e:cf:29:42:cb:71:df:bb:c8:ba:ff:a4:fd:59:88:92: 49:b7:2a:39:83:f8:64:2a:31:be:dc:6b:ae:47:83:d7:d0:f1: aa:22:a8:09:92:26:7a:16:66:2f:e9:64:aa:15:6e:0f:89:dc: 71:8b:bb:ba:fb:dd:f5:28:f4:13:ea:85:f2:d9:09:71:aa:e4: e2:8d:3e:11:00:f3:b4:c1:9d:b5:f7:83:48:17:6e:18:1d:a6: be:be:3a:91:04:8d:b4:f2:87:34:33:06:b6:9e:35:12:3e:2c: f4:ce:76:69:3d:75:4e:49:e7:1e:cc:38:c0:fb:14:e9:9f:92: 64:73:f9:14:20:15:bb:42:84:87:99:27:ca:5f:99:2f:7b:ad: 17:16:c2:82:5f:ba:37:c9:60:db:1b:52:b9:92:57:a5:ee:2e: 44:ab:d7:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oygyvS5jpwtbEs2e8h1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmY5MTM2MjhmNTIyMGJhODExMmMzN2Y2YmFkOTJjMjNiNjk5MjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP05Qltgd7zKMjuNtSDZnYTVzObN kqaYb6RGoMGc4AmDl4PL+5htRLrFGr/UUD8GJEKmDFaV3a9hYL+k36rlmJMMxLE/ s/UQzmTX3evJtsW5LhF6CwjXL/xKEyAle8Jz2P4EI0IvZWxAtCu8oynu1Bye/ej6 1+ZH5jSBcmy86h41HP6XhIC5Urxrdk3vyWtWR9+DqKFOzTUE0n2qOsamqeD3sdEe JRIgpQ1myf29APHJ9EdVRejie8iUMnuVdRBYLG9/ZOfnVJP6piiO5QyHIFvYvMir mv+1lZOpK10zGh/Kno1Yzm9LxKYNpeX1BSWODNpSRrf3puzosCVSXKsMlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNL5E2KPUiC6gRLDf2utksI7aZJ6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMHZrVFlvOVNJTHFCRXNOX2E2MlN3anRwa25vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3goMA0G CSqGSIb3DQEBCwUAA4IBAQAwxhWeiAW56/nlZSpub8z96iNnhnCgO2cjM+gbachF j359PNgHULfaM92HlAZy3zfn1wgEk1fAPuHGyivJjg2ceun06fLx91JOY56FIlK5 FAG/hzAshjYiV4hA0w7PKULLcd+7yLr/pP1ZiJJJtyo5g/hkKjG+3GuuR4PX0PGq IqgJkiZ6FmYv6WSqFW4Pidxxi7u6+931KPQT6oXy2QlxquTijT4RAPO0wZ2194NI F24YHaa+vjqRBI208oc0Mwa2njUSPiz0znZpPXVOSecezDjA+xTpn5Jkc/kUIBW7 QoSHmSfKX5kve60XFsKCX7o3yWDbG1K5klel7i5Eq9ee -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:13 2026 by rpki-client