This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D3ibCIPKYBTdVUtrTepcjc1oQPg.roa File: D3ibCIPKYBTdVUtrTepcjc1oQPg.roa (raw, json) Hash identifier: Gyp84j2WTSWvGsp1q0lFKL6ZBO+btO9orc6SDhOFqHI= Subject key identifier: 0F:78:9B:08:83:CA:60:14:DD:55:4B:6B:4D:EA:5C:8D:CD:68:40:F8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30B9CF4951CB8B6D74A1EC7E78705 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D3ibCIPKYBTdVUtrTepcjc1oQPg.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57344 IP address blocks: 83.143.114.0/24 maxlen: 24 87.120.194.0/24 maxlen: 24 87.120.198.0/24 maxlen: 24 87.121.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0b:9c:f4:95:1c:b8:b6:d7:4a:1e:c7:e7:87:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f789b0883ca6014dd554b6b4dea5c8dcd6840f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:34:23:96:29:ec:72:d1:18:5d:9e:74:ea: d5:98:ee:53:2a:83:75:09:84:a4:e9:c4:c3:e6:7a: f1:b9:33:88:30:4c:ee:01:81:a8:12:7e:fc:e8:18: bf:9c:42:9e:4a:8e:8a:85:ae:d7:2e:52:35:b3:4b: 85:f9:25:bf:91:f2:3b:b7:73:7e:44:88:15:9e:ab: 8f:e2:0c:6f:3d:87:6a:33:4c:cd:7c:b1:b2:59:d3: 7e:22:87:e4:76:40:28:ab:9e:15:7a:b5:02:21:e2: 21:dd:03:ac:52:eb:a0:63:0d:cf:e3:de:17:63:fa: bb:3d:7a:b9:cd:c0:08:0b:38:90:7d:44:95:64:61: fa:0d:88:49:f6:51:09:16:6d:b2:b5:41:c4:ed:ef: 62:f5:8e:6f:67:75:41:a1:c8:bd:26:d0:23:5c:c6: d2:79:c2:33:ec:95:ce:46:64:60:32:31:67:35:e6: 72:90:48:f3:a6:b6:dd:cf:d9:8e:dd:e0:50:d8:72: 82:71:37:ef:dd:50:50:5b:24:e0:ce:14:f1:49:81: c7:de:51:25:a0:b0:90:7b:e1:ec:18:e5:84:f1:2a: 92:07:42:40:3b:48:1e:db:b3:dd:ca:20:aa:bd:a4: 0e:d4:42:a3:ed:ac:e1:d8:83:95:9a:51:90:57:a1: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:78:9B:08:83:CA:60:14:DD:55:4B:6B:4D:EA:5C:8D:CD:68:40:F8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D3ibCIPKYBTdVUtrTepcjc1oQPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.143.114.0/24 87.120.194.0/24 87.120.198.0/24 87.121.167.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:71:5c:24:f6:a7:98:87:5b:ec:1c:19:55:1d:68:47:7a:2b: 84:26:4b:a4:35:8a:41:ac:5e:c7:bc:94:96:4b:c2:02:0e:ab: 8c:6b:ae:4b:c9:51:ec:7a:54:81:5f:6c:68:8b:8f:24:b2:d6: 72:02:97:b5:9b:18:b3:8d:ee:50:d2:0d:d1:46:cf:a3:49:14: ad:c0:bb:1c:bf:9d:bd:af:08:3a:de:fe:ab:23:fc:ed:9c:8f: 36:24:3b:09:37:65:a5:a1:0f:dd:44:04:94:73:cb:eb:c3:9e: 2e:9e:5a:b9:12:63:eb:83:d3:36:0e:e0:41:05:44:6c:8a:56: 0d:c9:20:87:a1:3c:8b:12:ed:07:53:e2:38:e4:90:c3:bb:68: 4a:03:e7:3c:f3:7d:d7:77:cf:4c:4b:27:3c:fc:f9:e5:1e:d6: 69:62:8f:05:26:9a:52:ce:9d:df:1f:1f:29:c9:c5:19:ff:28: 85:4a:29:9e:54:33:36:48:c2:65:58:20:77:00:e9:5e:a0:92: 74:3b:8b:7b:87:ad:22:d2:cb:32:c7:b9:ac:41:c9:e4:65:2e: 55:1f:16:f7:f1:b3:d4:f0:58:cf:49:25:f8:24:0d:26:ec:7f: 9f:e0:1e:a0:72:a9:75:39:dd:41:46:e5:12:5d:ac:8b:36:71: 42:e8:36:f5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4owuc9JUcuLbXSh7H54cFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjc4OWIwODgzY2E2MDE0ZGQ1NTRiNmI0ZGVhNWM4ZGNkNjg0MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV80I5Yp7HLRGF2edOrVmO5TKoN1 CYSk6cTD5nrxuTOIMEzuAYGoEn786Bi/nEKeSo6Kha7XLlI1s0uF+SW/kfI7t3N+ RIgVnquP4gxvPYdqM0zNfLGyWdN+IofkdkAoq54VerUCIeIh3QOsUuugYw3P494X Y/q7PXq5zcAICziQfUSVZGH6DYhJ9lEJFm2ytUHE7e9i9Y5vZ3VBoci9JtAjXMbS ecIz7JXORmRgMjFnNeZykEjzprbdz9mO3eBQ2HKCcTfv3VBQWyTgzhTxSYHH3lEl oLCQe+HsGOWE8SqSB0JAO0ge27PdyiCqvaQO1EKj7azh2IOVmlGQV6FeBQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA94mwiDymAU3VVLa03qXI3NaED4MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRDNpYkNJUEtZQlRkVlV0clRlcGNqYzFvUVBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAU49yAwQA V3jCAwQAV3jGAwQAV3mnMA0GCSqGSIb3DQEBCwUAA4IBAQB+cVwk9qeYh1vsHBlV HWhHeiuEJkukNYpBrF7HvJSWS8ICDquMa65LyVHselSBX2xoi48kstZyApe1mxiz je5Q0g3RRs+jSRStwLscv529rwg63v6rI/ztnI82JDsJN2WloQ/dRASUc8vrw54u nlq5EmPrg9M2DuBBBURsilYNySCHoTyLEu0HU+I45JDDu2hKA+c8833Xd89MSyc8 /PnlHtZpYo8FJppSzp3fHx8pycUZ/yiFSimeVDM2SMJlWCB3AOleoJJ0O4t7h60i 0ssyx7msQcnkZS5VHxb38bPU8FjPSSX4JA0m7H+f4B6gcql1Od1BRuUSXayLNnFC 6Db1 -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:43 2026 by rpki-client