This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9PMEFgHl6vuEps1AxfaZbqiUsBs.roa File: 9PMEFgHl6vuEps1AxfaZbqiUsBs.roa (raw, json) Hash identifier: aDdHOtvYAZA0glV5+Bu/w9p0p8n/GU+b0gEFW4RWNCE= Subject key identifier: F4:F3:04:16:01:E5:EA:FB:84:A6:CD:40:C5:F6:99:6E:A8:94:B0:1B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DF428945C6ED133FE1F273F368D1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9PMEFgHl6vuEps1AxfaZbqiUsBs.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 87.120.192.0/23 maxlen: 23 87.121.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:df:42:89:45:c6:ed:13:3f:e1:f2:73:f3:68:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4f3041601e5eafb84a6cd40c5f6996ea894b01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:8b:77:1f:72:ef:a6:99:0d:01:13:68:8d: c2:c1:77:48:05:ab:f2:ff:24:8d:ac:15:77:99:4e: 8f:29:fd:63:f2:5e:27:a5:cf:28:58:cd:3c:57:13: 1d:29:63:ac:9e:1a:5d:ac:bc:5c:62:ad:c3:5f:e2: 67:c4:52:cd:d6:3e:77:81:61:7f:3e:5f:72:d3:d7: 6f:0f:ab:95:5e:43:03:62:61:5f:40:5f:72:68:3e: 5a:db:6a:b4:98:8c:bc:0c:8e:22:9a:60:a0:7a:35: b5:3d:9c:8e:0e:a8:d4:97:82:a6:7c:d7:a1:9f:31: f5:6d:6c:1e:44:c7:c2:e4:9c:e0:61:cf:85:f2:ae: 21:54:9c:1d:35:8c:3c:e8:f6:93:d1:b6:ad:f7:09: f1:bf:c6:12:81:9a:72:53:e5:00:6a:e1:85:16:81: fa:9c:b6:f3:e2:75:d9:64:67:c3:b3:4a:34:86:ce: 9b:ba:ca:8f:80:6b:7d:ab:b0:18:7f:88:64:fe:92: f1:fa:35:62:44:03:da:d2:65:ec:1c:d8:c2:b5:9d: 40:a6:53:75:ec:2c:54:c9:53:e5:34:c1:96:30:a5: 17:4b:c7:58:48:b2:90:55:b9:f9:a7:d2:c1:b3:62: b2:ef:02:9a:7c:14:eb:8e:57:bc:ae:11:6e:c0:78: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F3:04:16:01:E5:EA:FB:84:A6:CD:40:C5:F6:99:6E:A8:94:B0:1B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9PMEFgHl6vuEps1AxfaZbqiUsBs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.192.0/23 87.121.62.0/23 Signature Algorithm: sha256WithRSAEncryption 10:b7:32:b9:9c:4d:b2:ad:00:c7:b0:29:6b:e0:3e:9e:f6:3c: ca:71:29:62:f1:fa:b3:4c:d3:bd:cf:ac:26:18:18:57:e6:1e: ca:00:61:f7:08:33:0a:91:61:58:3b:cc:bb:0f:4c:cb:aa:97: 20:b9:1b:f1:a1:b3:0f:93:f8:0d:42:9b:0d:6f:4b:58:b8:f3: e7:a3:f5:e2:1f:eb:a6:b2:fe:4a:e3:fd:6b:43:6e:f3:4e:33: d0:f5:5c:6e:a7:1c:0f:27:e7:68:8c:75:da:6b:66:9e:95:22: 1f:7f:44:28:bd:80:7d:b8:ce:9d:58:63:f7:a9:55:f6:37:4f: 6e:65:3d:b5:9a:9e:2c:12:33:5e:90:b3:03:14:d9:ce:2f:b7: 1d:5b:ab:f7:5d:a9:0e:13:22:4d:9b:3e:42:a4:a4:04:58:f8: b2:b0:72:ec:a9:91:e5:fc:2e:b2:fd:cd:2d:b5:c1:a8:b4:b2: 39:77:8f:10:a3:df:a4:0f:23:c5:00:fc:88:59:0b:3a:84:eb: 53:50:61:42:dc:81:31:1a:7c:e9:bd:4a:db:ea:7c:4a:71:15: b0:eb:de:7b:85:63:10:98:1d:1d:d1:ba:b4:b6:22:56:ab:7e: 61:e2:b7:dc:17:55:2c:f5:f7:ec:7e:62:2b:05:5a:bd:aa:6b: aa:1f:17:a8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ot9CiUXG7RM/4fJz82jRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGYzMDQxNjAxZTVlYWZiODRhNmNkNDBjNWY2OTk2ZWE4OTRiMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEiLdx9y76aZDQETaI3CwXdIBavy /ySNrBV3mU6PKf1j8l4npc8oWM08VxMdKWOsnhpdrLxcYq3DX+JnxFLN1j53gWF/ Pl9y09dvD6uVXkMDYmFfQF9yaD5a22q0mIy8DI4immCgejW1PZyODqjUl4KmfNeh nzH1bWweRMfC5JzgYc+F8q4hVJwdNYw86PaT0bat9wnxv8YSgZpyU+UAauGFFoH6 nLbz4nXZZGfDs0o0hs6busqPgGt9q7AYf4hk/pLx+jViRAPa0mXsHNjCtZ1AplN1 7CxUyVPlNMGWMKUXS8dYSLKQVbn5p9LBs2Ky7wKafBTrjle8rhFuwHjGVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPTzBBYB5er7hKbNQMX2mW6olLAbMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOVBNRUZnSGw2dnVFcHMxQXhmYVpicWlVc0JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3jAAwQB V3k+MA0GCSqGSIb3DQEBCwUAA4IBAQAQtzK5nE2yrQDHsClr4D6e9jzKcSli8fqz TNO9z6wmGBhX5h7KAGH3CDMKkWFYO8y7D0zLqpcguRvxobMPk/gNQpsNb0tYuPPn o/XiH+umsv5K4/1rQ27zTjPQ9VxupxwPJ+dojHXaa2aelSIff0QovYB9uM6dWGP3 qVX2N09uZT21mp4sEjNekLMDFNnOL7cdW6v3XakOEyJNmz5CpKQEWPiysHLsqZHl /C6y/c0ttcGotLI5d48Qo9+kDyPFAPyIWQs6hOtTUGFC3IExGnzpvUrb6nxKcRWw 6957hWMQmB0d0bq0tiJWq35h4rfcF1Us9ffsfmIrBVq9qmuqHxeo -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:29 2026 by rpki-client