This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Mo0J065C_o9PxGQ6I_7SjW4mHc.roa File: 8Mo0J065C_o9PxGQ6I_7SjW4mHc.roa (raw, json) Hash identifier: 1Ciad4G/efo/FBpJhHc0T5fiyoOT5tfEul1i7X0TyAY= Subject key identifier: F0:CA:34:27:4E:B9:0B:FA:3D:3F:11:90:E8:8F:FB:4A:35:B8:98:77 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EBC3D74F2D52CF8580F7482675D3 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Mo0J065C_o9PxGQ6I_7SjW4mHc.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 87.121.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:eb:c3:d7:4f:2d:52:cf:85:80:f7:48:26:75:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0ca34274eb90bfa3d3f1190e88ffb4a35b89877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:dc:2c:53:1c:dc:52:12:f1:9d:5c:89:b9: dc:65:ce:0c:92:28:fe:3c:ae:24:7f:24:b8:ae:b3: af:06:2c:44:24:0b:78:90:cb:77:b9:30:b8:5b:78: 1d:b8:56:18:bc:e0:11:45:71:ba:a0:d7:58:0a:c0: 6d:5b:41:71:fd:6b:02:d3:a1:9d:ce:97:31:2f:68: 90:59:93:cc:c2:81:e6:fa:57:ea:ef:0a:90:35:b7: a8:2d:14:20:11:95:01:00:36:cb:ff:29:c6:c4:dd: 0c:d1:d9:b7:3a:e7:04:ee:ff:65:b8:e0:23:7e:0b: 27:57:e6:70:ce:c8:dd:ab:a5:71:34:dc:5e:02:35: d8:7e:33:51:67:39:e0:df:3b:7f:20:d2:5c:37:e8: 7a:7a:ca:8a:29:7c:4c:2b:8c:da:e5:fe:ac:78:ec: 85:8b:90:0f:2a:c9:7c:6b:8a:80:d4:bf:3c:3f:b4: dd:96:51:b0:67:13:bd:cc:a9:3f:7a:59:f6:79:e2: a6:bf:fb:4c:20:91:1f:dd:c2:8f:50:a5:93:ca:99: 55:c3:de:8d:a7:c4:7b:35:b7:46:12:4b:db:a7:a4: 8d:8f:8f:c8:7e:43:27:3e:8b:0b:2e:1a:2c:eb:5e: 06:c7:a4:f1:e8:20:e5:51:28:9b:af:13:7e:f8:ae: 03:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:CA:34:27:4E:B9:0B:FA:3D:3F:11:90:E8:8F:FB:4A:35:B8:98:77 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8Mo0J065C_o9PxGQ6I_7SjW4mHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.220.0/24 Signature Algorithm: sha256WithRSAEncryption 31:ca:11:46:98:23:d8:4e:9c:ba:dc:d7:6f:45:aa:4a:bd:36: 3a:a3:d4:8b:8f:9f:46:6d:ee:de:93:84:7d:aa:1c:b8:4f:7d: 1f:4b:f3:db:1e:48:18:fb:b0:5c:43:a3:ec:68:71:90:e1:c9: a9:f6:32:87:f2:35:61:f0:dd:bb:2d:cb:57:98:23:ef:cb:24: ce:47:22:e1:53:7c:60:20:d8:7f:ce:69:b3:97:10:0a:80:94: 9a:35:ba:4d:60:79:19:ca:ac:88:91:97:fe:97:8d:f9:28:58: 2f:9f:67:63:1d:42:4a:f2:21:a2:02:a7:69:c5:22:eb:e5:bd: 3c:f3:58:9f:ed:50:9f:5b:c6:fc:08:cf:28:61:32:12:73:57: 86:74:1b:73:15:a2:77:90:66:c8:ef:be:23:38:7f:46:d3:ec: 1c:c2:23:00:37:c8:69:a1:68:e4:13:d1:1e:81:4e:e9:69:ed: 00:4b:ba:a2:8b:c8:88:1c:eb:9f:28:6e:d7:5e:df:c7:16:67: f0:cb:8d:6b:23:39:5c:c1:11:52:de:fd:06:3a:bd:f4:15:d2: b1:76:81:4f:19:11:6f:15:47:06:3d:34:4f:f4:a5:8c:a5:42: 2b:9a:bb:f9:95:5e:93:9f:c3:66:08:04:0e:4a:da:6c:61:22: 4f:89:f1:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouvD108tUs+FgPdIJnXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGNhMzQyNzRlYjkwYmZhM2QzZjExOTBlODhmZmI0YTM1Yjg5ODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnzcLFMc3FIS8Z1cibncZc4Mkij+ PK4kfyS4rrOvBixEJAt4kMt3uTC4W3gduFYYvOARRXG6oNdYCsBtW0Fx/WsC06Gd zpcxL2iQWZPMwoHm+lfq7wqQNbeoLRQgEZUBADbL/ynGxN0M0dm3OucE7v9luOAj fgsnV+Zwzsjdq6VxNNxeAjXYfjNRZzng3zt/INJcN+h6esqKKXxMK4za5f6seOyF i5APKsl8a4qA1L88P7TdllGwZxO9zKk/eln2eeKmv/tMIJEf3cKPUKWTyplVw96N p8R7NbdGEkvbp6SNj4/IfkMnPosLLhos614Gx6Tx6CDlUSibrxN++K4DMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDKNCdOuQv6PT8RkOiP+0o1uJh3MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOE1vMEowNjVDX285UHhHUTZJXzdTalc0bUhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ncMA0G CSqGSIb3DQEBCwUAA4IBAQAxyhFGmCPYTpy63NdvRapKvTY6o9SLj59Gbe7ek4R9 qhy4T30fS/PbHkgY+7BcQ6PsaHGQ4cmp9jKH8jVh8N27LctXmCPvyyTORyLhU3xg INh/zmmzlxAKgJSaNbpNYHkZyqyIkZf+l435KFgvn2djHUJK8iGiAqdpxSLr5b08 81if7VCfW8b8CM8oYTISc1eGdBtzFaJ3kGbI774jOH9G0+wcwiMAN8hpoWjkE9Ee gU7pae0AS7qii8iIHOufKG7XXt/HFmfwy41rIzlcwRFS3v0GOr30FdKxdoFPGRFv FUcGPTRP9KWMpUIrmrv5lV6Tn8NmCAQOStpsYSJPifGK -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:05 2026 by rpki-client