This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1HnfUCu8yXHVjVZR2CqvijC2xjU.roa File: 1HnfUCu8yXHVjVZR2CqvijC2xjU.roa (raw, json) Hash identifier: MbhIGV8SkyU6aUm4YPYBLNLBZy/2OrZMnxNWQA4Lm9I= Subject key identifier: D4:79:DF:50:2B:BC:C9:71:D5:8D:56:51:D8:2A:AF:8A:30:B6:C6:35 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2D7239963C574273B802FFD38EA67 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1HnfUCu8yXHVjVZR2CqvijC2xjU.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 87.121.3.0/24 maxlen: 24 93.123.112.0/24 maxlen: 24 93.123.115.0/24 maxlen: 24 141.98.5.0/24 maxlen: 24 194.31.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d7:23:99:63:c5:74:27:3b:80:2f:fd:38:ea:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d479df502bbcc971d58d5651d82aaf8a30b6c635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6c:2b:1a:b0:63:b9:5e:23:02:9a:c1:27:76: 6e:2a:9f:37:82:6c:a5:54:7e:f1:02:0b:b1:b4:5a: c2:50:82:ca:c2:1d:c8:73:9a:f8:8a:55:fd:6c:ce: 11:2c:eb:ec:9a:a2:b2:2e:8e:1d:51:59:a1:35:0e: c6:2d:07:ab:82:8e:6e:a2:64:8b:a7:9d:29:54:6e: fa:1b:20:21:4b:30:91:ba:d3:44:35:e3:e6:11:ee: ed:6e:67:f5:5a:51:d8:56:0c:1e:60:0f:78:15:a6: d3:37:95:48:73:e8:d9:bc:7b:ab:0f:c5:37:1a:bc: 27:ec:a8:c7:b6:cd:f7:17:f8:03:b1:42:4e:af:3b: d1:fe:3a:6c:67:50:f8:3f:8e:c3:bc:ee:34:6e:92: 80:eb:90:00:14:cd:e9:f8:17:6d:71:8f:ee:68:38: 8e:b4:67:e7:0e:66:62:f4:07:df:c2:67:0f:4e:00: 08:1b:a9:b8:7d:c2:61:95:ff:a7:82:8c:03:f4:36: 25:df:70:56:82:9f:0e:70:99:12:a2:3d:44:5f:c0: 63:86:6f:48:a4:37:af:dc:98:2d:91:48:2b:21:7a: 3d:b8:41:22:b1:52:62:a5:14:78:1f:12:75:ef:f2: ba:7b:bc:25:99:cf:e9:4f:80:31:08:05:d3:4b:12: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:79:DF:50:2B:BC:C9:71:D5:8D:56:51:D8:2A:AF:8A:30:B6:C6:35 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1HnfUCu8yXHVjVZR2CqvijC2xjU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.3.0/24 93.123.112.0/24 93.123.115.0/24 141.98.5.0/24 194.31.205.0/24 Signature Algorithm: sha256WithRSAEncryption 87:39:d1:ab:c5:01:5b:74:4e:b9:a8:cb:1a:ec:f5:f9:d3:fa: 76:ae:05:5b:a8:7c:3f:85:64:98:ce:50:62:2e:8c:67:55:22: 05:de:00:a6:5b:90:e9:1f:25:71:4c:0b:e7:89:58:15:c7:0f: a5:39:0a:97:9b:06:cb:5b:88:08:23:95:b7:86:3b:7a:54:86: 2d:b4:9a:12:80:99:0e:a0:52:de:ac:b9:99:c8:7e:ed:aa:25: a2:13:d8:9e:38:65:60:7b:0d:ce:da:e9:24:f3:61:80:ff:58: d6:a7:35:40:00:00:5a:a0:d9:d2:00:1f:d5:9e:10:ab:34:50: 72:67:86:38:49:0d:6e:f7:e3:f7:50:86:c2:2e:0e:fb:46:cc: db:cb:64:05:28:46:76:cb:95:98:bc:df:4c:21:a6:fc:59:66: f3:47:1b:b1:be:68:16:c9:6f:80:4f:bf:c4:28:c9:f6:29:25: 0d:27:eb:24:3a:52:ed:52:af:61:f7:e9:b3:7c:52:a0:4e:30: bf:0f:58:43:ed:96:0a:a6:7c:d4:c9:36:1d:ae:e6:13:bc:5c: f1:14:18:75:fc:0f:a8:25:56:6e:ae:34:75:eb:60:e5:63:2e: cf:e5:dc:6d:7c:a3:ac:a2:8e:8d:bf:ea:59:ea:3d:de:57:ad: 94:be:5c:df -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4otcjmWPFdCc7gC/9OOpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDc5ZGY1MDJiYmNjOTcxZDU4ZDU2NTFkODJhYWY4YTMwYjZjNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WwrGrBjuV4jAprBJ3ZuKp83gmyl VH7xAguxtFrCUILKwh3Ic5r4ilX9bM4RLOvsmqKyLo4dUVmhNQ7GLQergo5uomSL p50pVG76GyAhSzCRutNENePmEe7tbmf1WlHYVgweYA94FabTN5VIc+jZvHurD8U3 Grwn7KjHts33F/gDsUJOrzvR/jpsZ1D4P47DvO40bpKA65AAFM3p+BdtcY/uaDiO tGfnDmZi9AffwmcPTgAIG6m4fcJhlf+ngowD9DYl33BWgp8OcJkSoj1EX8Bjhm9I pDev3JgtkUgrIXo9uEEisVJipRR4HxJ17/K6e7wlmc/pT4AxCAXTSxKoFQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNR531ArvMlx1Y1WUdgqr4owtsY1MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMUhuZlVDdTh5WEhWalZaUjJDcXZpakMyeGpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAV3kDAwQA XXtwAwQAXXtzAwQAjWIFAwQAwh/NMA0GCSqGSIb3DQEBCwUAA4IBAQCHOdGrxQFb dE65qMsa7PX50/p2rgVbqHw/hWSYzlBiLoxnVSIF3gCmW5DpHyVxTAvniVgVxw+l OQqXmwbLW4gII5W3hjt6VIYttJoSgJkOoFLerLmZyH7tqiWiE9ieOGVgew3O2ukk 82GA/1jWpzVAAABaoNnSAB/VnhCrNFByZ4Y4SQ1u9+P3UIbCLg77Rszby2QFKEZ2 y5WYvN9MIab8WWbzRxuxvmgWyW+AT7/EKMn2KSUNJ+skOlLtUq9h9+mzfFKgTjC/ D1hD7ZYKpnzUyTYdruYTvFzxFBh1/A+oJVZurjR162DlYy7P5dxtfKOsoo6Nv+pZ 6j3eV62Uvlzf -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:20 2026 by rpki-client