This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1O97G50Jl6vKE8wEpO5cnzSOsZo.roa File: 1O97G50Jl6vKE8wEpO5cnzSOsZo.roa (raw, json) Hash identifier: KeO3Rjca4hstx5rDpVWWnAK9jAMFQiLL6OgkzGWH7hQ= Subject key identifier: D4:EF:7B:1B:9D:09:97:AB:CA:13:CC:04:A4:EE:5C:9F:34:8E:B1:9A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33ADF2F75F9AA1E90FDE4FDEFA4DD Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1O97G50Jl6vKE8wEpO5cnzSOsZo.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210211 IP address blocks: 31.13.226.0/24 maxlen: 24 87.121.40.0/24 maxlen: 24 87.121.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3a:df:2f:75:f9:aa:1e:90:fd:e4:fd:ef:a4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ef7b1b9d0997abca13cc04a4ee5c9f348eb19a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:d4:92:b3:43:95:37:de:fe:e1:bd:4e:00: 8d:80:f7:4c:5e:19:cd:23:6c:b1:1d:aa:b0:99:96: b4:a5:1a:3d:51:26:bf:6e:f2:02:7c:c8:ab:2d:bf: 7c:1f:30:fd:87:d6:3e:a4:be:93:42:bd:69:2a:e7: 33:8b:96:40:a1:3b:45:d0:17:36:65:9f:ca:fc:46: 97:7e:03:13:0d:50:06:3c:e8:0d:5b:cc:34:e0:70: f8:da:e7:d7:2a:d6:4d:17:e5:46:86:78:50:c8:73: 6b:97:90:12:e3:48:e4:3d:eb:d9:76:54:f8:17:01: a4:4f:96:b1:c1:8a:bf:68:a9:3a:1a:ef:4d:2e:fa: 20:e2:57:0e:1a:40:19:f0:b3:d5:96:c1:be:c2:3b: 1a:7d:45:7a:be:3e:2b:f5:ab:d1:bd:81:21:6a:8e: 16:dd:a3:5b:e7:3a:3f:f1:f7:58:41:d8:27:be:a3: b0:61:3d:75:0c:ef:a7:37:48:14:d7:0f:3a:ea:9b: 23:27:31:8c:df:2a:14:50:c7:47:77:ba:83:b2:9d: be:73:89:7c:ef:ef:a5:03:27:c7:da:47:b9:52:d2: 1e:ae:08:48:84:8c:4b:db:a6:50:3a:65:3e:2e:3a: 6a:58:cb:68:5a:da:94:12:f0:64:a9:4e:d2:69:bc: ce:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EF:7B:1B:9D:09:97:AB:CA:13:CC:04:A4:EE:5C:9F:34:8E:B1:9A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1O97G50Jl6vKE8wEpO5cnzSOsZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.226.0/24 87.121.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:bb:08:d8:e4:17:52:07:f6:13:49:4b:2b:dc:88:c1:58:25: e5:1c:02:72:7b:bb:da:44:6c:eb:1d:77:a4:7f:df:7e:b1:08: e0:97:69:9a:3c:92:be:f7:35:e5:8d:7a:bd:d7:bf:16:83:c5: c6:c3:4d:42:c4:8a:47:be:39:a5:d1:38:fd:b9:2e:07:8e:c8: 65:5f:15:23:7d:2c:9c:f7:fe:3e:fa:ca:d0:00:f4:c9:3b:07: 11:bc:c0:5d:f1:64:47:83:4a:de:a7:82:3c:99:62:72:5f:37: df:39:77:59:af:b9:ca:c9:8d:df:c7:a3:08:71:cf:83:70:3f: a2:24:5f:34:8e:9d:e1:2e:83:ea:20:f6:25:b0:f6:80:d1:bd: be:3c:63:f6:ff:89:52:42:26:b1:93:a4:c2:50:c2:ab:38:1f: 78:c9:41:b8:d9:07:ed:4c:81:cc:7b:7c:a0:12:d8:31:21:ea: 12:fa:9c:b7:e7:f5:d5:ba:45:14:75:86:77:94:8c:fc:7f:65: 88:1d:a5:fb:02:a9:54:6d:1d:84:37:32:3b:98:85:d1:a7:11: e2:f2:e4:f2:5b:6a:e1:ae:ac:77:b0:48:92:bf:d4:35:d0:25: fe:a8:f2:99:8d:50:3b:1c:c1:a0:bd:a4:7c:09:08:77:64:6e: 98:40:90:54 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ozrfL3X5qh6Q/eT976TdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGVmN2IxYjlkMDk5N2FiY2ExM2NjMDRhNGVlNWM5ZjM0OGViMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuILUkrNDlTfe/uG9TgCNgPdMXhnN I2yxHaqwmZa0pRo9USa/bvICfMirLb98HzD9h9Y+pL6TQr1pKuczi5ZAoTtF0Bc2 ZZ/K/EaXfgMTDVAGPOgNW8w04HD42ufXKtZNF+VGhnhQyHNrl5AS40jkPevZdlT4 FwGkT5axwYq/aKk6Gu9NLvog4lcOGkAZ8LPVlsG+wjsafUV6vj4r9avRvYEhao4W 3aNb5zo/8fdYQdgnvqOwYT11DO+nN0gU1w866psjJzGM3yoUUMdHd7qDsp2+c4l8 7++lAyfH2ke5UtIerghIhIxL26ZQOmU+LjpqWMtoWtqUEvBkqU7SabzOqwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNTvexudCZeryhPMBKTuXJ80jrGaMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMU85N0c1MEpsNnZLRTh3RXBPNWNuelNPc1pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw3iAwQB V3koMA0GCSqGSIb3DQEBCwUAA4IBAQAquwjY5BdSB/YTSUsr3IjBWCXlHAJye7va RGzrHXekf99+sQjgl2maPJK+9zXljXq9178Wg8XGw01CxIpHvjml0Tj9uS4Hjshl XxUjfSyc9/4++srQAPTJOwcRvMBd8WRHg0rep4I8mWJyXzffOXdZr7nKyY3fx6MI cc+DcD+iJF80jp3hLoPqIPYlsPaA0b2+PGP2/4lSQiaxk6TCUMKrOB94yUG42Qft TIHMe3ygEtgxIeoS+py35/XVukUUdYZ3lIz8f2WIHaX7AqlUbR2ENzI7mIXRpxHi 8uTyW2rhrqx3sEiSv9Q10CX+qPKZjVA7HMGgvaR8CQh3ZG6YQJBU -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client