This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9DELFJnUppBEeLDpcQUYWA_MOcg.roa File: 9DELFJnUppBEeLDpcQUYWA_MOcg.roa (raw, json) Hash identifier: WCrd7zdMUoImpmB9FvsBmODN2vhLAqo7ChHy32dOGEs= Subject key identifier: F4:31:0B:14:99:D4:A6:90:44:78:B0:E9:71:05:18:58:0F:CC:39:C8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A301F4BF240166EFD26B2935F11D93 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9DELFJnUppBEeLDpcQUYWA_MOcg.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48014 IP address blocks: 80.76.51.0/24 maxlen: 24 87.121.162.0/24 maxlen: 24 93.123.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:01:f4:bf:24:01:66:ef:d2:6b:29:35:f1:1d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4310b1499d4a6904478b0e9710518580fcc39c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:52:29:56:e4:d2:c0:0b:4b:6a:44:41:6a:fc: f9:6c:9d:7b:59:57:65:bb:57:4e:f5:04:85:b6:fc: 6e:94:df:a5:42:ec:5d:c5:01:67:c6:2b:4e:1b:ee: 6e:2c:46:a1:22:66:0a:77:f2:df:df:20:f3:a3:0d: 1a:cd:38:24:c7:4a:b1:65:79:77:33:bc:e5:17:d5: f1:11:4f:51:b7:1e:96:08:8c:29:f1:b2:4c:6f:b7: 18:e4:34:8d:1e:db:36:ce:4d:21:4a:3e:78:f7:63: c6:88:26:1d:73:2d:a0:e6:eb:1c:4c:c0:53:8d:96: 7b:09:30:83:a2:6d:c7:02:84:00:fa:e6:9f:26:70: 3e:76:4b:96:6b:5c:0f:34:55:2e:02:5b:13:27:c8: 28:cb:2a:78:1c:4a:88:42:2f:09:e5:d7:24:d4:4c: 9e:6a:3a:4d:24:da:f4:77:94:ba:14:15:8e:da:76: fe:7e:b2:5a:7e:f1:f8:e1:30:58:15:d6:0b:a5:2e: f6:7b:38:13:ea:5f:d9:be:f1:d7:de:8e:e7:79:8a: d6:b0:7a:24:4b:22:a1:c9:dd:f4:0e:aa:83:dc:db: f2:38:c8:5b:3e:44:9b:02:e8:c1:64:84:c4:cf:99: 22:d8:a9:58:1e:82:52:53:04:ce:e2:e3:3f:42:c5: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:31:0B:14:99:D4:A6:90:44:78:B0:E9:71:05:18:58:0F:CC:39:C8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9DELFJnUppBEeLDpcQUYWA_MOcg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.51.0/24 87.121.162.0/24 93.123.46.0/24 Signature Algorithm: sha256WithRSAEncryption 80:e4:b2:0e:dd:6f:69:4c:d3:4a:4b:61:cf:19:9d:48:df:36: 61:fd:50:d1:0f:c0:5b:ea:2d:3b:0f:2a:fe:cb:92:41:37:9a: 2e:81:81:6f:61:79:1b:10:76:43:bc:4f:1c:2b:95:1c:f1:b5: 12:6f:ad:ef:cc:19:8a:58:ad:1a:65:39:f4:1c:7d:8d:57:48: 9f:92:33:3c:c3:24:88:ae:19:e6:65:6d:f7:4a:fc:9a:96:96: e0:5a:79:1c:70:9d:e9:3e:45:a8:98:a8:83:c6:75:a5:e5:19: af:9a:88:ad:0c:85:f2:0c:55:8f:45:12:82:b3:c5:8c:95:d3: 32:cd:7c:89:04:2b:ba:12:0b:45:63:74:ba:5b:85:49:1f:f5: fc:f2:f6:44:07:8b:e7:32:f1:14:cb:db:72:9f:b2:97:44:af: 0f:32:ca:4e:ad:fe:e9:2c:d8:df:81:aa:15:0a:74:a7:39:bd: c4:f5:63:40:45:b5:74:69:e2:e1:88:d9:38:ec:35:00:b5:38: f1:bf:d5:4f:04:7c:b9:b7:de:ae:c3:8c:28:54:c8:74:f6:bc: 7a:0c:ae:26:77:a4:e8:8c:c7:30:55:4d:44:78:45:c6:38:98: 78:ed:63:6f:b4:55:b7:c5:b0:49:6e:f8:ec:ef:a9:9c:e2:cb: 6d:73:d0:17 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4owH0vyQBZu/Sayk18R2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDMxMGIxNDk5ZDRhNjkwNDQ3OGIwZTk3MTA1MTg1ODBmY2MzOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21IpVuTSwAtLakRBavz5bJ17WVdl u1dO9QSFtvxulN+lQuxdxQFnxitOG+5uLEahImYKd/Lf3yDzow0azTgkx0qxZXl3 M7zlF9XxEU9Rtx6WCIwp8bJMb7cY5DSNHts2zk0hSj5492PGiCYdcy2g5uscTMBT jZZ7CTCDom3HAoQA+uafJnA+dkuWa1wPNFUuAlsTJ8goyyp4HEqIQi8J5dck1Eye ajpNJNr0d5S6FBWO2nb+frJafvH44TBYFdYLpS72ezgT6l/ZvvHX3o7neYrWsHok SyKhyd30DqqD3NvyOMhbPkSbAujBZITEz5ki2KlYHoJSUwTO4uM/QsX2WwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPQxCxSZ1KaQRHiw6XEFGFgPzDnIMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOURFTEZKblVwcEJFZUxEcGNRVVlXQV9NT2NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUEwzAwQA V3miAwQAXXsuMA0GCSqGSIb3DQEBCwUAA4IBAQCA5LIO3W9pTNNKS2HPGZ1I3zZh /VDRD8Bb6i07Dyr+y5JBN5ougYFvYXkbEHZDvE8cK5Uc8bUSb63vzBmKWK0aZTn0 HH2NV0ifkjM8wySIrhnmZW33SvyalpbgWnkccJ3pPkWomKiDxnWl5RmvmoitDIXy DFWPRRKCs8WMldMyzXyJBCu6EgtFY3S6W4VJH/X88vZEB4vnMvEUy9tyn7KXRK8P MspOrf7pLNjfgaoVCnSnOb3E9WNARbV0aeLhiNk47DUAtTjxv9VPBHy5t96uw4wo VMh09rx6DK4md6TojMcwVU1EeEXGOJh47WNvtFW3xbBJbvjs76mc4sttc9AX -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:29 2026 by rpki-client