This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/85uhnv_ubWhqimnIE_SeAtYyvCU.roa File: 85uhnv_ubWhqimnIE_SeAtYyvCU.roa (raw, json) Hash identifier: U6YtR2Ul0BfjP19J7xSaF97zxZ6n36Bs2mIVpn/RkYo= Subject key identifier: F3:9B:A1:9E:FF:EE:6D:68:6A:8A:69:C8:13:F4:9E:02:D6:32:BC:25 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A349327003013BE8751D92B1424BE4 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/85uhnv_ubWhqimnIE_SeAtYyvCU.roa Signing time: Thu 01 Jan 2026 08:18:45 +0000 ROA not before: Thu 01 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214291 IP address blocks: 87.120.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:49:32:70:03:01:3b:e8:75:1d:92:b1:42:4b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f39ba19effee6d686a8a69c813f49e02d632bc25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cc:c0:17:01:1c:15:ee:58:a8:37:37:48:c7: 91:aa:52:9b:2f:71:49:ba:d3:0a:c1:0b:a1:53:47: dc:d6:22:0d:b5:51:85:aa:2c:5b:61:42:01:0e:eb: 04:00:74:55:01:7f:30:6b:16:ff:77:a1:94:25:e7: 29:23:40:60:a1:c1:96:49:ad:ed:94:f6:00:cf:e5: d0:67:ea:7b:11:42:3a:45:a8:be:4d:0c:15:22:05: 62:1a:ea:fc:7a:10:fc:2a:17:85:77:cb:5e:b4:d2: 75:db:37:eb:db:4b:de:bf:ef:95:8d:5c:7a:09:e0: 76:19:cf:e0:16:03:ec:ab:6d:11:1b:8a:de:ac:b4: f6:49:45:8d:7e:84:d5:fe:cd:77:af:04:2e:3d:4e: ae:92:f7:01:58:6a:a3:52:6f:84:1a:6c:85:8b:e4: f1:36:d3:ba:19:62:f8:a5:51:0b:20:15:af:b3:db: 09:a0:5c:0a:6b:98:56:0c:d5:1e:43:33:13:bb:a5: d1:ef:8b:50:70:d2:dc:4d:97:ea:90:77:58:6c:dc: 7a:57:14:2c:9b:00:4c:86:af:42:66:4d:7a:7c:f1: 83:55:4a:c7:ee:f9:53:7e:38:71:88:e9:36:0f:39: f2:39:6b:84:04:d5:af:d3:92:ed:ef:30:c5:9a:1e: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9B:A1:9E:FF:EE:6D:68:6A:8A:69:C8:13:F4:9E:02:D6:32:BC:25 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/85uhnv_ubWhqimnIE_SeAtYyvCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.89.0/24 Signature Algorithm: sha256WithRSAEncryption 05:94:b5:0d:40:07:4a:c4:89:9f:98:13:37:92:43:9d:1c:41: f6:b4:f8:90:bd:be:b2:b2:11:fd:b4:b8:e7:7d:14:9d:50:68: 50:4d:46:f4:d2:ed:ea:53:e9:a3:84:36:43:06:5d:50:2d:a5: 83:49:2e:d1:34:df:8c:82:fa:b0:7b:27:5c:aa:72:36:0e:b1: 3c:03:ed:bf:f1:c5:75:fd:44:5e:d0:91:5a:42:da:97:94:aa: d0:fd:6c:14:1b:17:c1:1a:23:af:7d:68:5e:cd:49:c7:cf:7a: df:f8:70:f8:97:2d:4f:45:b2:c7:7d:c1:16:6d:37:d1:cb:b3: c6:4d:07:52:cc:14:63:e7:4c:15:66:df:56:6f:dd:e9:aa:f4: ba:03:b7:2d:66:9a:86:72:7a:4b:7f:eb:19:55:91:5b:4b:09: b9:c3:a7:4c:94:c0:a2:d7:a4:f7:0b:82:a8:32:12:68:c3:cd: ef:72:ec:29:06:41:41:e2:0c:05:1b:87:0b:17:9a:b4:22:ec: 29:4a:45:da:eb:bc:0d:8f:2b:d8:9b:67:7b:61:04:27:b5:7c: d6:e6:04:97:5c:51:3b:d5:5a:5e:7f:56:47:2b:58:8a:f0:3c: e6:09:4e:4d:bf:31:91:b7:77:1d:7a:bd:a5:9f:ab:d2:49:76: 22:b5:62:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o0kycAMBO+h1HZKxQkvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzliYTE5ZWZmZWU2ZDY4NmE4YTY5YzgxM2Y0OWUwMmQ2MzJiYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MzAFwEcFe5YqDc3SMeRqlKbL3FJ utMKwQuhU0fc1iINtVGFqixbYUIBDusEAHRVAX8waxb/d6GUJecpI0BgocGWSa3t lPYAz+XQZ+p7EUI6Rai+TQwVIgViGur8ehD8KheFd8tetNJ12zfr20vev++VjVx6 CeB2Gc/gFgPsq20RG4rerLT2SUWNfoTV/s13rwQuPU6ukvcBWGqjUm+EGmyFi+Tx NtO6GWL4pVELIBWvs9sJoFwKa5hWDNUeQzMTu6XR74tQcNLcTZfqkHdYbNx6VxQs mwBMhq9CZk16fPGDVUrH7vlTfjhxiOk2DznyOWuEBNWv05Lt7zDFmh6PKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPOboZ7/7m1oaoppyBP0ngLWMrwlMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvODV1aG52X3ViV2hxaW1uSUVfU2VBdFl5dkNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hZMA0G CSqGSIb3DQEBCwUAA4IBAQAFlLUNQAdKxImfmBM3kkOdHEH2tPiQvb6yshH9tLjn fRSdUGhQTUb00u3qU+mjhDZDBl1QLaWDSS7RNN+MgvqweydcqnI2DrE8A+2/8cV1 /URe0JFaQtqXlKrQ/WwUGxfBGiOvfWhezUnHz3rf+HD4ly1PRbLHfcEWbTfRy7PG TQdSzBRj50wVZt9Wb93pqvS6A7ctZpqGcnpLf+sZVZFbSwm5w6dMlMCi16T3C4Ko MhJow83vcuwpBkFB4gwFG4cLF5q0IuwpSkXa67wNjyvYm2d7YQQntXzW5gSXXFE7 1Vpef1ZHK1iK8DzmCU5NvzGRt3cder2ln6vSSXYitWJY -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:42 2026 by rpki-client