This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1TsZzpNowPk9aBSmiBNus4Wyl_o.roa File: 1TsZzpNowPk9aBSmiBNus4Wyl_o.roa (raw, json) Hash identifier: MRGFoLGwrVCqYwq0O55d829o0WVXwSojwRd8QXTwUpA= Subject key identifier: D5:3B:19:CE:93:68:C0:F9:3D:68:14:A6:88:13:6E:B3:85:B2:97:FA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A34BEF66E61E015F62B0B5E5605736 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1TsZzpNowPk9aBSmiBNus4Wyl_o.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215261 IP address blocks: 212.73.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4b:ef:66:e6:1e:01:5f:62:b0:b5:e5:60:57:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d53b19ce9368c0f93d6814a688136eb385b297fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:55:9d:13:f9:dc:7a:98:b9:4d:18:18:e7: fb:8d:a2:7b:41:ff:e0:3d:f9:3f:c9:7e:a6:29:7d: 23:87:94:04:08:e9:5a:36:02:91:47:f8:4e:55:81: d3:89:a0:1e:3e:aa:4b:b4:86:50:69:9a:2d:3c:a4: 1b:b9:fd:ed:e7:10:55:66:f7:9f:24:a5:f2:a6:ec: f7:d0:13:c9:38:09:e2:b4:0e:61:7c:c3:b5:85:10: 74:be:5c:6c:45:61:9b:89:8d:69:16:0a:83:c1:7b: ab:4d:39:8e:f7:04:4d:68:26:f9:6e:51:cb:d3:af: b7:c0:cd:e3:e2:06:f8:2c:89:9b:8c:d6:f1:b2:38: a3:a8:62:a3:fb:6e:2b:74:dd:76:4c:68:2e:3e:7a: 2b:40:64:2a:40:19:83:be:4d:93:01:2f:4c:71:3f: d5:4b:38:01:65:39:05:b7:9d:d7:2e:c1:77:95:43: 27:b1:d5:31:67:03:fb:83:99:4b:23:1b:9d:94:fc: 14:ae:5d:02:c3:68:b5:67:80:7d:5e:2d:b5:a5:61: c3:0c:0e:78:c0:dd:49:ef:56:b0:79:62:ae:6b:b8: 09:b5:8e:68:19:f5:7c:86:ca:1a:b8:4a:14:03:3f: e4:6d:58:60:15:e8:34:51:00:1f:da:e6:b0:68:b4: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3B:19:CE:93:68:C0:F9:3D:68:14:A6:88:13:6E:B3:85:B2:97:FA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1TsZzpNowPk9aBSmiBNus4Wyl_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.73.137.0/24 Signature Algorithm: sha256WithRSAEncryption 81:a9:78:68:2b:5f:9a:b9:97:ab:6d:30:6a:08:35:b0:a8:d2: 1f:bd:6e:a9:2a:66:f9:60:7f:7e:be:74:2c:98:12:b5:45:33: 21:50:7d:a2:c8:40:cb:56:da:1c:f3:5f:9f:d3:9c:8e:d9:91: 41:8b:03:f2:cc:66:fa:8b:27:9f:a2:81:ca:78:c2:35:17:c4: 27:0b:9d:63:ba:73:db:00:06:41:3a:f3:be:44:d8:0d:df:a9: 1a:58:20:a0:0f:3d:5b:d9:cf:7b:0d:ca:67:e4:f8:fb:b4:54: f9:68:0f:a7:77:a7:ca:28:7d:77:db:1a:77:81:f1:df:a1:c1: 47:f1:9c:ba:d7:89:55:85:94:ab:00:94:0a:0c:ff:84:58:08: e4:d1:bd:b3:50:aa:f6:bc:61:e0:99:fb:c3:c5:fa:26:d3:c8: 21:80:33:64:66:12:26:a8:81:fe:fe:74:a4:11:90:6a:cb:44: 2d:41:45:1e:7d:d5:49:fc:39:80:04:bd:5f:12:92:3c:c3:a8: d5:2f:10:e6:8f:eb:d9:01:8c:1d:f6:4a:b4:57:39:4e:d5:06: 2f:3c:c9:99:65:62:f5:11:11:a5:54:f5:f8:64:05:7f:ce:9e: 54:d1:69:8b:f4:df:94:32:17:2f:15:8f:c4:6f:99:d2:b2:6b: 2f:d0:e5:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0vvZuYeAV9isLXlYFc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTNiMTljZTkzNjhjMGY5M2Q2ODE0YTY4ODEzNmViMzg1YjI5N2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XtVnRP53HqYuU0YGOf7jaJ7Qf/g Pfk/yX6mKX0jh5QECOlaNgKRR/hOVYHTiaAePqpLtIZQaZotPKQbuf3t5xBVZvef JKXypuz30BPJOAnitA5hfMO1hRB0vlxsRWGbiY1pFgqDwXurTTmO9wRNaCb5blHL 06+3wM3j4gb4LImbjNbxsjijqGKj+24rdN12TGguPnorQGQqQBmDvk2TAS9McT/V SzgBZTkFt53XLsF3lUMnsdUxZwP7g5lLIxudlPwUrl0Cw2i1Z4B9Xi21pWHDDA54 wN1J71aweWKua7gJtY5oGfV8hsoauEoUAz/kbVhgFeg0UQAf2uawaLSA0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNU7Gc6TaMD5PWgUpogTbrOFspf6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMVRzWnpwTm93UGs5YUJTbWlCTnVzNFd5bF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EmJMA0G CSqGSIb3DQEBCwUAA4IBAQCBqXhoK1+auZerbTBqCDWwqNIfvW6pKmb5YH9+vnQs mBK1RTMhUH2iyEDLVtoc81+f05yO2ZFBiwPyzGb6iyefooHKeMI1F8QnC51junPb AAZBOvO+RNgN36kaWCCgDz1b2c97Dcpn5Pj7tFT5aA+nd6fKKH132xp3gfHfocFH 8Zy614lVhZSrAJQKDP+EWAjk0b2zUKr2vGHgmfvDxfom08ghgDNkZhImqIH+/nSk EZBqy0QtQUUefdVJ/DmABL1fEpI8w6jVLxDmj+vZAYwd9kq0VzlO1QYvPMmZZWL1 ERGlVPX4ZAV/zp5U0WmL9N+UMhcvFY/Eb5nSsmsv0OVn -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:29 2026 by rpki-client