This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AWzHtZhqcYiPeP_G1iVNFsmBBbc.roa File: AWzHtZhqcYiPeP_G1iVNFsmBBbc.roa (raw, json) Hash identifier: +E6X2TZ982Z1DXVDOv45pi1pTWLMWQDhIShiAq0eyBM= Subject key identifier: 01:6C:C7:B5:98:6A:71:88:8F:78:FF:C6:D6:25:4D:16:C9:81:05:B7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FCF5D5A3A9085EDEE83525A0E09D Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AWzHtZhqcYiPeP_G1iVNFsmBBbc.roa Signing time: Thu 01 Jan 2026 08:18:26 +0000 ROA not before: Thu 01 Jan 2026 08:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44564 IP address blocks: 87.121.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fc:f5:d5:a3:a9:08:5e:de:e8:35:25:a0:e0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=016cc7b5986a71888f78ffc6d6254d16c98105b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:20:f4:61:16:8e:2e:78:fc:bd:f7:06:72:36: 99:82:69:50:5c:f8:9f:7c:fe:9a:1e:72:39:5c:c7: b7:e4:f5:9c:45:c3:4d:0a:4e:b1:df:50:93:77:fb: 26:51:d6:de:b3:af:d2:7d:f9:0d:64:41:44:9b:5d: 0a:11:ea:de:1a:55:2b:97:15:f2:cd:a4:db:f3:39: 75:b6:62:d3:6b:26:97:6f:12:5b:a9:52:3b:5e:ad: 2c:d9:1a:29:c0:60:5f:a8:9f:75:33:b2:3d:b1:c8: c0:18:c8:7d:fb:09:07:c0:85:a0:2e:5f:5f:90:9e: 43:f6:50:ac:b3:03:ab:9c:89:fa:57:98:7c:13:03: 65:a4:fa:35:22:bb:2b:5c:4b:eb:92:e2:0a:5c:31: aa:0f:dd:61:23:ed:c5:79:d2:88:5b:7e:8b:5b:f1: 76:49:de:40:b7:7b:a6:d5:4f:1b:f5:7a:8e:a8:51: 5f:88:fa:46:4b:0a:e0:11:b0:3d:83:23:e7:86:c2: 3f:8b:7f:3a:a2:38:17:dd:af:d5:0c:b3:92:e3:6b: 69:4d:28:8b:1b:dd:b6:a1:69:49:37:55:ec:45:8e: b1:9c:46:1c:a1:67:22:28:be:7e:1d:64:ec:98:f1: 78:7d:b2:ac:a3:f3:bc:75:b9:d0:5e:66:6a:87:ae: 7a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6C:C7:B5:98:6A:71:88:8F:78:FF:C6:D6:25:4D:16:C9:81:05:B7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AWzHtZhqcYiPeP_G1iVNFsmBBbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.160.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:6c:ec:7b:39:d8:72:33:11:f0:11:11:8a:97:91:07:b0:76: a7:e2:58:4d:91:3d:46:89:25:bf:cc:ff:f8:46:41:73:40:53: 20:e8:68:8c:81:51:8b:6d:27:5e:34:dd:1f:25:f1:4c:11:2e: ce:8b:27:f7:bc:89:8f:f0:d8:bb:85:e9:ab:55:25:1e:26:4d: 3f:07:5a:50:1e:80:69:38:0b:54:3c:58:2c:61:df:53:d0:f1: 05:f0:0d:69:c2:44:57:ab:04:f2:5e:59:2b:f4:63:ca:9c:a6: f0:14:48:83:76:10:b0:3a:2a:9c:8b:6d:e6:24:6b:ad:76:3a: fc:92:d4:ec:5a:94:8e:e8:c6:0b:e8:a1:ae:e5:38:1b:95:04: ad:4b:ac:9c:6d:d8:a7:e6:67:fe:3f:da:1e:63:7f:43:f7:c1: 6f:81:f3:8f:80:e7:68:c0:63:66:f6:3c:b3:55:87:2a:51:07: b0:c2:3b:7d:94:c2:5b:8f:40:a8:a2:fb:c4:8b:01:74:c9:eb: 29:1c:11:62:15:6a:4a:bc:3d:d7:8e:ee:89:5b:78:12:ea:50: f9:13:03:6a:a2:ac:d6:ab:e8:4c:2a:75:cd:f9:73:a0:fe:e4: 86:ef:d2:37:97:61:38:67:42:13:66:af:e7:2f:70:0c:0c:ef: fa:21:b5:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovz11aOpCF7e6DUloOCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTZjYzdiNTk4NmE3MTg4OGY3OGZmYzZkNjI1NGQxNmM5ODEwNWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCD0YRaOLnj8vfcGcjaZgmlQXPif fP6aHnI5XMe35PWcRcNNCk6x31CTd/smUdbes6/SffkNZEFEm10KEereGlUrlxXy zaTb8zl1tmLTayaXbxJbqVI7Xq0s2RopwGBfqJ91M7I9scjAGMh9+wkHwIWgLl9f kJ5D9lCsswOrnIn6V5h8EwNlpPo1IrsrXEvrkuIKXDGqD91hI+3FedKIW36LW/F2 Sd5At3um1U8b9XqOqFFfiPpGSwrgEbA9gyPnhsI/i386ojgX3a/VDLOS42tpTSiL G922oWlJN1XsRY6xnEYcoWciKL5+HWTsmPF4fbKso/O8dbnQXmZqh656pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAFsx7WYanGIj3j/xtYlTRbJgQW3MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQVd6SHRaaHFjWWlQZVBfRzFpVk5Gc21CQmJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mgMA0G CSqGSIb3DQEBCwUAA4IBAQAKbOx7OdhyMxHwERGKl5EHsHan4lhNkT1GiSW/zP/4 RkFzQFMg6GiMgVGLbSdeNN0fJfFMES7Oiyf3vImP8Ni7hemrVSUeJk0/B1pQHoBp OAtUPFgsYd9T0PEF8A1pwkRXqwTyXlkr9GPKnKbwFEiDdhCwOiqci23mJGutdjr8 ktTsWpSO6MYL6KGu5TgblQStS6ycbdin5mf+P9oeY39D98FvgfOPgOdowGNm9jyz VYcqUQewwjt9lMJbj0CoovvEiwF0yespHBFiFWpKvD3Xju6JW3gS6lD5EwNqoqzW q+hMKnXN+XOg/uSG79I3l2E4Z0ITZq/nL3AMDO/6IbWj -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client