This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/42cdtySaCKrJdbE_joTKq1G4QJQ.roa File: 42cdtySaCKrJdbE_joTKq1G4QJQ.roa (raw, json) Hash identifier: BukANEV3LXBabRxne9AJc3L/ySvb/kyFEkxNF5usXVM= Subject key identifier: E3:67:1D:B7:24:9A:08:AA:C9:75:B1:3F:8E:84:CA:AB:51:B8:40:94 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A34A20757C969B7698B9F359B79F07 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/42cdtySaCKrJdbE_joTKq1G4QJQ.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214364 IP address blocks: 31.13.212.0/24 maxlen: 24 87.121.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4a:20:75:7c:96:9b:76:98:b9:f3:59:b7:9f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3671db7249a08aac975b13f8e84caab51b84094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:a2:81:fc:46:3b:5b:9e:67:39:09:11:f5: 01:5d:78:32:2f:8e:56:1e:3a:c9:bc:2a:8c:8c:fc: 86:07:dd:48:71:1f:85:73:f7:bf:5d:5a:64:58:05: 20:0e:be:40:2d:f3:7e:e2:ee:e1:a5:d7:6e:66:43: 48:59:a7:1f:c6:5e:57:47:a8:18:46:07:f0:ce:d8: 36:5f:26:2f:36:85:af:db:27:29:61:ac:51:77:71: e1:da:43:69:24:b3:c6:a8:ad:3b:40:b0:b3:4c:e7: ea:18:40:6a:d6:7d:9b:6e:e1:4a:98:87:7d:6e:bf: d7:4b:10:a9:83:32:fb:15:1d:ba:2e:a7:35:23:f2: 56:d3:3a:87:c5:6a:51:18:72:c0:00:c9:9e:64:34: 8a:6f:ed:ef:5a:ed:0e:3a:fd:cb:69:58:53:1a:f5: 3c:44:23:fb:0b:9e:5a:18:3d:f6:4a:6c:95:2d:5e: 0b:bd:0a:02:c8:ba:ba:90:59:02:0c:64:eb:50:09: 29:be:37:16:27:41:00:b6:bb:72:ba:40:96:cb:b1: 21:59:e7:a3:83:56:85:26:3e:fd:31:b2:30:73:a7: 1a:72:0f:1f:12:4f:29:92:5d:08:3b:c0:7a:3f:e9: 5c:12:b8:b3:ee:fa:13:e2:e6:57:cf:21:fa:ef:b5: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:67:1D:B7:24:9A:08:AA:C9:75:B1:3F:8E:84:CA:AB:51:B8:40:94 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/42cdtySaCKrJdbE_joTKq1G4QJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.212.0/24 87.121.220.0/24 Signature Algorithm: sha256WithRSAEncryption ad:75:20:65:05:d3:c9:6b:ae:43:d4:51:16:06:70:a2:12:35: c3:a5:e6:2f:1e:61:cf:7e:66:0b:d3:c5:e3:b3:b1:24:af:46: c4:42:43:12:c3:eb:26:de:6c:cc:a1:99:e8:b5:8f:6b:3f:91: 0c:a1:4f:e6:5d:88:26:6c:64:07:a6:ec:54:ec:6c:64:30:28: c7:f3:03:1d:c8:97:da:f5:9e:74:c0:b7:63:bd:2a:6d:7b:00: 50:42:8e:37:c8:55:2b:50:6f:82:35:b1:04:27:5a:50:a2:61: 7e:d0:df:1e:5e:ca:24:73:ff:0d:63:e4:5e:bd:0e:33:e4:f7: 50:24:22:64:ad:9c:f8:1f:a0:5b:98:9c:f9:b2:fb:82:19:09: 13:a8:bb:8c:64:6c:e5:b8:88:72:36:57:ea:82:e0:68:5c:54: 60:8d:58:3c:f6:b4:74:f3:ca:af:11:ec:dd:ae:99:a4:a8:ad: e5:bb:9d:11:30:84:a3:77:5a:a0:07:dc:74:0c:8e:f5:41:0e: eb:0d:e8:e2:5d:43:2e:49:90:3a:0d:52:41:d3:6b:d5:de:8f: b7:1c:09:75:d4:cc:8e:6a:93:8e:17:3c:46:c3:4b:ea:5f:9a: a8:0c:88:58:7f:d0:f2:92:7b:89:e8:c7:d0:26:77:83:03:77: ab:04:8c:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0ogdXyWm3aYufNZt58HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzY3MWRiNzI0OWEwOGFhYzk3NWIxM2Y4ZTg0Y2FhYjUxYjg0MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbiigfxGO1ueZzkJEfUBXXgyL45W HjrJvCqMjPyGB91IcR+Fc/e/XVpkWAUgDr5ALfN+4u7hpdduZkNIWacfxl5XR6gY Rgfwztg2XyYvNoWv2ycpYaxRd3Hh2kNpJLPGqK07QLCzTOfqGEBq1n2bbuFKmId9 br/XSxCpgzL7FR26Lqc1I/JW0zqHxWpRGHLAAMmeZDSKb+3vWu0OOv3LaVhTGvU8 RCP7C55aGD32SmyVLV4LvQoCyLq6kFkCDGTrUAkpvjcWJ0EAtrtyukCWy7EhWeej g1aFJj79MbIwc6cacg8fEk8pkl0IO8B6P+lcEriz7voT4uZXzyH677UWzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFONnHbckmgiqyXWxP46EyqtRuECUMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvNDJjZHR5U2FDS3JKZGJFX2pvVEtxMUc0UUpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHw3UAwQA V3ncMA0GCSqGSIb3DQEBCwUAA4IBAQCtdSBlBdPJa65D1FEWBnCiEjXDpeYvHmHP fmYL08Xjs7Ekr0bEQkMSw+sm3mzMoZnotY9rP5EMoU/mXYgmbGQHpuxU7GxkMCjH 8wMdyJfa9Z50wLdjvSptewBQQo43yFUrUG+CNbEEJ1pQomF+0N8eXsokc/8NY+Re vQ4z5PdQJCJkrZz4H6BbmJz5svuCGQkTqLuMZGzluIhyNlfqguBoXFRgjVg89rR0 88qvEezdrpmkqK3lu50RMISjd1qgB9x0DI71QQ7rDejiXUMuSZA6DVJB02vV3o+3 HAl11MyOapOOFzxGw0vqX5qoDIhYf9DyknuJ6MfQJneDA3erBIwy -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:21 2026 by rpki-client