This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9bQhN_sWkzT1JNXb3x11oAl-r1w.roa File: 9bQhN_sWkzT1JNXb3x11oAl-r1w.roa (raw, json) Hash identifier: /nWiq45q6CUjY5nxGbv6n5JjSjsPSPSf5oB3TcDOdLc= Subject key identifier: F5:B4:21:37:FB:16:93:34:F5:24:D5:DB:DF:1D:75:A0:09:7E:AF:5C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A325387193A0D870D9533D69240A91 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9bQhN_sWkzT1JNXb3x11oAl-r1w.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200195 IP address blocks: 87.120.104.0/24 maxlen: 24 194.113.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:25:38:71:93:a0:d8:70:d9:53:3d:69:24:0a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5b42137fb169334f524d5dbdf1d75a0097eaf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:81:f0:e8:25:be:e0:07:a3:07:5a:a3:c1: 52:bf:91:c7:29:11:c8:92:71:1b:97:67:5a:56:c4: 13:8e:83:81:5e:e4:61:d3:25:de:e0:3c:a2:af:ee: 9f:cc:75:9d:64:18:0f:d0:e8:db:0f:05:fe:35:c1: ad:a1:0d:54:c7:6c:64:eb:af:0c:3c:f0:cf:37:3a: 8b:77:14:ef:53:fb:2f:b3:46:2b:25:11:b0:ef:21: 1a:fb:2d:30:dd:59:15:1b:4f:86:d0:f8:d5:ba:66: d6:58:84:cd:85:ca:3b:96:67:d9:a7:cd:b7:af:e7: 23:ca:e7:16:0c:60:de:6a:95:c4:7c:70:ff:1e:ec: b9:48:be:a4:5a:34:76:eb:8c:a8:fc:e4:43:62:27: 2c:15:42:72:ac:6d:1d:8e:5f:23:16:4e:2c:c8:7b: db:0a:8b:13:6e:26:dc:17:1f:68:ef:1e:64:bd:27: 52:ad:22:da:78:fd:7c:4d:1e:01:90:8d:91:a8:8a: 1c:96:03:93:ed:e8:80:06:c6:83:b6:04:fe:78:b7: c7:d8:9b:e8:a5:88:42:f9:1d:07:d5:28:98:e9:d9: df:b2:b2:23:2c:df:ea:58:da:e6:17:d9:53:e5:d2: 06:6a:09:a2:2d:0e:58:60:35:e7:a4:14:06:f3:1a: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:21:37:FB:16:93:34:F5:24:D5:DB:DF:1D:75:A0:09:7E:AF:5C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/9bQhN_sWkzT1JNXb3x11oAl-r1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.104.0/24 194.113.38.0/24 Signature Algorithm: sha256WithRSAEncryption 20:36:f8:67:de:c0:a7:ac:da:d4:f6:79:69:b2:72:46:68:d0: b1:1d:f7:07:14:30:a2:b2:cd:3d:92:45:73:7c:ab:f5:05:78: 76:da:4b:88:18:c6:12:64:99:02:52:a4:12:92:96:b6:c4:c2: b4:06:48:08:eb:74:2a:51:57:ba:3d:0d:69:d4:56:35:5c:48: 4e:d1:c2:90:73:80:ef:9c:c7:d5:98:ad:c1:00:d9:5b:66:b0: fa:84:93:f5:20:8e:bf:2d:a6:6f:d6:3e:1c:70:ac:0b:8c:9c: ad:95:1f:cf:a1:d4:1a:57:ba:ad:ec:8a:f6:68:ee:af:bb:76: 31:6a:9d:3a:07:62:4b:48:24:d7:54:93:cb:78:ea:c3:2a:40: ea:1b:0b:71:31:3b:a4:c9:1b:2b:87:54:b5:66:19:5b:c8:c9: e5:78:b8:cc:f2:5a:6f:bc:8b:b5:e5:b5:73:1d:b1:db:59:ce: 28:f3:e0:1b:4b:5f:e6:bf:1a:a8:22:26:78:64:dc:c3:c6:48: 8f:38:d1:fc:a2:94:bd:2d:44:95:92:0a:58:aa:54:f4:80:34: bc:ed:f1:86:c1:44:f7:c8:c6:e2:66:cf:66:59:20:4e:99:ac: f1:18:3c:6a:0b:d7:12:ce:1c:10:fd:41:23:c8:ac:e4:c4:ab: 08:8f:11:8d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oyU4cZOg2HDZUz1pJAqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWI0MjEzN2ZiMTY5MzM0ZjUyNGQ1ZGJkZjFkNzVhMDA5N2VhZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobuB8OglvuAHowdao8FSv5HHKRHI knEbl2daVsQTjoOBXuRh0yXe4Dyir+6fzHWdZBgP0OjbDwX+NcGtoQ1Ux2xk668M PPDPNzqLdxTvU/svs0YrJRGw7yEa+y0w3VkVG0+G0PjVumbWWITNhco7lmfZp823 r+cjyucWDGDeapXEfHD/Huy5SL6kWjR264yo/ORDYicsFUJyrG0djl8jFk4syHvb CosTbibcFx9o7x5kvSdSrSLaeP18TR4BkI2RqIoclgOT7eiABsaDtgT+eLfH2Jvo pYhC+R0H1SiY6dnfsrIjLN/qWNrmF9lT5dIGagmiLQ5YYDXnpBQG8xowVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPW0ITf7FpM09STV298ddaAJfq9cMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvOWJRaE5fc1drelQxSk5YYjN4MTFvQWwtcjF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3hoAwQA wnEmMA0GCSqGSIb3DQEBCwUAA4IBAQAgNvhn3sCnrNrU9nlpsnJGaNCxHfcHFDCi ss09kkVzfKv1BXh22kuIGMYSZJkCUqQSkpa2xMK0BkgI63QqUVe6PQ1p1FY1XEhO 0cKQc4DvnMfVmK3BANlbZrD6hJP1II6/LaZv1j4ccKwLjJytlR/PodQaV7qt7Ir2 aO6vu3Yxap06B2JLSCTXVJPLeOrDKkDqGwtxMTukyRsrh1S1ZhlbyMnleLjM8lpv vIu15bVzHbHbWc4o8+AbS1/mvxqoIiZ4ZNzDxkiPONH8opS9LUSVkgpYqlT0gDS8 7fGGwUT3yMbiZs9mWSBOmazxGDxqC9cSzhwQ/UEjyKzkxKsIjxGN -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:00 2026 by rpki-client