This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2PmDsB69derY-KS1BtwScmvJrfo.roa File: 2PmDsB69derY-KS1BtwScmvJrfo.roa (raw, json) Hash identifier: pWKvf0iJZ4XEO0RdRto2KchBvwdFDjNvBGrFgcKjBFo= Subject key identifier: D8:F9:83:B0:1E:BD:75:EA:D8:F8:A4:B5:06:DC:12:72:6B:C9:AD:FA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3457F9C59CA73C6F77B75D7C3D5AB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2PmDsB69derY-KS1BtwScmvJrfo.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213725 IP address blocks: 87.121.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:45:7f:9c:59:ca:73:c6:f7:7b:75:d7:c3:d5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8f983b01ebd75ead8f8a4b506dc12726bc9adfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:c6:00:9e:1a:2e:a2:52:3b:44:44:4b:dd: 40:b6:27:88:e4:d8:81:c7:22:8c:6c:23:86:c5:f9: 5f:4c:77:f6:88:88:ac:ca:31:2a:8a:4b:82:19:c2: 5d:5e:8c:cd:7f:f7:c5:b8:7a:a2:c7:62:a1:96:19: af:00:aa:f8:74:43:f2:5e:fb:e2:bf:7e:d7:27:04: 78:9c:64:ff:a1:a4:34:a3:51:35:da:31:84:4f:28: d7:d0:04:e8:e3:42:71:56:c5:33:b2:79:0d:f5:29: af:21:18:1a:41:00:23:cc:d8:2a:02:9c:79:96:84: e3:4c:3a:28:6e:83:bd:c7:53:82:11:47:c7:97:88: ca:8e:b9:f7:d7:c0:67:cd:e5:32:5f:60:ba:a2:b8: 59:08:ac:42:95:cc:64:40:17:48:53:8e:7a:d1:01: 9b:d9:a8:71:ca:24:45:47:73:83:63:58:6c:fc:36: 67:de:54:ee:da:da:67:ad:89:74:2b:3a:2b:16:30: 7b:35:6b:7c:78:26:d4:f1:57:0f:92:8c:bf:47:70: ac:6d:6c:51:f2:19:83:f4:c8:92:94:b0:47:e2:89: 20:12:06:a4:82:71:5a:5d:14:dc:1e:ff:bc:aa:98: 84:9b:2f:8e:bd:43:4a:61:aa:e2:79:92:b8:19:12: 1b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:83:B0:1E:BD:75:EA:D8:F8:A4:B5:06:DC:12:72:6B:C9:AD:FA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/2PmDsB69derY-KS1BtwScmvJrfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.79.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:52:95:6a:41:4b:50:19:fc:e0:8e:72:46:c9:70:83:8e:1d: b7:27:ba:b9:ee:ea:ac:ae:65:87:86:f2:eb:ff:87:f7:8a:37: 52:ca:74:a4:e6:42:da:27:ba:6e:37:f4:71:9b:b2:a5:c4:dc: b8:3a:4d:d2:0e:bb:9a:14:74:10:b3:c8:9e:ec:b1:5f:01:14: 7c:1c:28:02:ab:26:3f:d4:b7:4a:2b:86:52:0a:5c:6f:41:9d: 39:9b:18:bf:24:bc:2c:ce:8c:e0:e8:8f:37:58:d9:b6:01:e9: 31:12:ff:4d:3f:30:16:a0:89:72:4b:97:1c:cf:be:32:a3:bc: 2b:6b:f2:74:cf:b3:14:56:9c:a1:a2:2f:d1:09:1c:5c:8e:b3: bc:4c:60:9c:31:d1:03:cb:3a:9f:a7:7f:98:d9:7c:8d:30:d6: 53:04:c2:1e:82:13:20:4c:21:f1:64:dc:df:eb:79:36:2d:9b: d7:f6:52:46:c7:7e:f9:4f:0f:a9:de:28:cc:4f:1f:74:f9:df: 28:ef:b5:37:f9:d4:15:1d:85:f9:d9:39:05:f2:c4:3f:ec:cb: 37:ed:c1:e1:0f:cb:99:24:fb:aa:55:6d:a1:c0:7c:ca:62:98: ea:8e:12:35:2c:74:5e:8e:ba:89:06:db:71:dd:9b:96:d4:7b: 6a:01:51:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0V/nFnKc8b3e3XXw9WrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGY5ODNiMDFlYmQ3NWVhZDhmOGE0YjUwNmRjMTI3MjZiYzlhZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzPGAJ4aLqJSO0RES91AtieI5NiB xyKMbCOGxflfTHf2iIisyjEqikuCGcJdXozNf/fFuHqix2KhlhmvAKr4dEPyXvvi v37XJwR4nGT/oaQ0o1E12jGETyjX0ATo40JxVsUzsnkN9SmvIRgaQQAjzNgqApx5 loTjTDooboO9x1OCEUfHl4jKjrn318BnzeUyX2C6orhZCKxClcxkQBdIU4560QGb 2ahxyiRFR3ODY1hs/DZn3lTu2tpnrYl0KzorFjB7NWt8eCbU8VcPkoy/R3CsbWxR 8hmD9MiSlLBH4okgEgakgnFaXRTcHv+8qpiEmy+OvUNKYarieZK4GRIbvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNj5g7AevXXq2PiktQbcEnJrya36MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvMlBtRHNCNjlkZXJZLUtTMUJ0d1NjbXZKcmZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3lPMA0G CSqGSIb3DQEBCwUAA4IBAQB9UpVqQUtQGfzgjnJGyXCDjh23J7q57uqsrmWHhvLr /4f3ijdSynSk5kLaJ7puN/Rxm7KlxNy4Ok3SDruaFHQQs8ie7LFfARR8HCgCqyY/ 1LdKK4ZSClxvQZ05mxi/JLwszozg6I83WNm2AekxEv9NPzAWoIlyS5ccz74yo7wr a/J0z7MUVpyhoi/RCRxcjrO8TGCcMdEDyzqfp3+Y2XyNMNZTBMIeghMgTCHxZNzf 63k2LZvX9lJGx375Tw+p3ijMTx90+d8o77U3+dQVHYX52TkF8sQ/7Ms37cHhD8uZ JPuqVW2hwHzKYpjqjhI1LHRejrqJBttx3ZuW1HtqAVGV -----END CERTIFICATE-----Generated at Fri Jan 2 12:02:54 2026 by rpki-client