This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D8LU2NWfeNsC_q7CCI1MBSjwJx4.roa File: D8LU2NWfeNsC_q7CCI1MBSjwJx4.roa (raw, json) Hash identifier: LXFfB5Y3GffIVCEZcDexwL85At3bsC9BhX0Y9YluREc= Subject key identifier: 0F:C2:D4:D8:D5:9F:78:DB:02:FE:AE:C2:08:8D:4C:05:28:F0:27:1E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DB04B7E1E937E5AD9B9F134E4D82 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D8LU2NWfeNsC_q7CCI1MBSjwJx4.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9028 IP address blocks: 45.144.155.0/24 maxlen: 24 87.121.54.0/24 maxlen: 24 93.123.16.0/24 maxlen: 24 93.123.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:db:04:b7:e1:e9:37:e5:ad:9b:9f:13:4e:4d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fc2d4d8d59f78db02feaec2088d4c0528f0271e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d8:48:aa:00:f9:7e:95:6b:34:87:72:b8:06: 66:3f:ad:49:86:19:b4:6c:50:60:3c:9b:ba:f8:a7: 06:de:81:ed:8a:b8:b3:e3:ab:1c:a5:a3:c3:0f:36: c4:3b:23:c8:50:e4:5a:22:14:11:b9:53:57:a3:2c: b3:ca:b5:d4:bc:0a:f7:d8:82:fc:1d:80:9f:c7:39: 72:79:e5:1a:19:b8:b5:9e:6e:ab:33:7b:2e:10:13: d2:f9:90:e5:c5:59:4e:5a:23:33:b8:3f:a0:a2:8d: 6a:52:fb:c0:81:5a:97:f8:66:7e:72:0a:9c:3b:2f: b8:2b:3c:72:6d:78:80:c0:e5:4d:79:0b:4b:c1:08: 0d:71:83:b4:41:b6:10:e4:73:22:df:28:eb:c5:ac: ce:58:42:d0:6e:0c:ac:fd:a2:28:c9:21:8a:5c:2b: 59:9c:47:f0:60:9d:c4:fc:b8:1f:af:db:e5:f1:18: 6e:ac:f4:7d:63:96:9e:8e:15:91:ed:61:22:27:af: 45:71:b5:b8:96:f1:6f:80:9f:75:a2:ef:6d:74:fe: 3a:e2:f5:9c:42:01:67:89:2f:20:c1:bb:ce:06:58: 58:5e:83:8c:ae:53:72:a1:1f:92:f4:e3:23:48:39: a4:ce:44:db:56:c9:d5:53:ce:31:72:be:f8:c3:18: 47:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C2:D4:D8:D5:9F:78:DB:02:FE:AE:C2:08:8D:4C:05:28:F0:27:1E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/D8LU2NWfeNsC_q7CCI1MBSjwJx4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.155.0/24 87.121.54.0/24 93.123.16.0/24 93.123.22.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:9e:e7:0e:eb:43:a4:56:4c:c6:0f:19:c4:4d:34:34:c5:ce: 43:1a:e5:91:16:4f:1c:3a:b8:c9:4e:1f:57:6b:cf:7b:ef:29: 42:61:e9:91:68:b3:01:f7:bc:43:b0:71:a8:57:06:6c:27:e0: eb:c8:ec:7c:b7:c2:2a:2a:73:38:7d:89:ca:f5:52:f8:83:01: 1e:b8:07:2a:25:e3:2f:e0:e4:c5:6f:ad:1b:25:a7:a8:79:fe: 4b:4f:59:16:eb:9e:d7:e6:af:a4:84:b4:60:de:54:11:ed:8e: dd:25:72:df:59:1e:52:6e:7f:48:9d:82:81:31:42:f6:12:21: b6:86:69:11:2f:df:54:3c:08:4b:28:11:b9:c1:39:8f:3d:5b: 5a:a3:4f:9c:01:a2:bd:3f:f7:db:c5:18:41:79:c3:b3:ca:92: 79:07:7b:f3:43:1f:d8:f8:c3:d5:3c:54:00:86:b6:fb:58:a1: a0:f2:2e:a3:18:86:fd:eb:90:03:be:08:32:b0:c5:28:f7:63: 57:d0:b8:f5:fa:9f:6b:52:46:59:3d:94:1d:39:45:be:ce:82: b1:c2:d8:45:3d:fc:74:0d:87:f8:0d:09:ca:89:49:77:98:c4: ba:3d:96:6c:a4:3d:04:c2:cb:ae:d0:1d:8e:9a:84:36:8e:f1: 59:3a:f9:70 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4otsEt+HpN+Wtm58TTk2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmMyZDRkOGQ1OWY3OGRiMDJmZWFlYzIwODhkNGMwNTI4ZjAyNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNhIqgD5fpVrNIdyuAZmP61Jhhm0 bFBgPJu6+KcG3oHtiriz46scpaPDDzbEOyPIUORaIhQRuVNXoyyzyrXUvAr32IL8 HYCfxzlyeeUaGbi1nm6rM3suEBPS+ZDlxVlOWiMzuD+goo1qUvvAgVqX+GZ+cgqc Oy+4KzxybXiAwOVNeQtLwQgNcYO0QbYQ5HMi3yjrxazOWELQbgys/aIoySGKXCtZ nEfwYJ3E/Lgfr9vl8RhurPR9Y5aejhWR7WEiJ69FcbW4lvFvgJ91ou9tdP464vWc QgFniS8gwbvOBlhYXoOMrlNyoR+S9OMjSDmkzkTbVsnVU84xcr74wxhH0wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFA/C1NjVn3jbAv6uwgiNTAUo8CceMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRDhMVTJOV2ZlTnNDX3E3Q0NJMU1CU2p3Sng0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZCbAwQA V3k2AwQAXXsQAwQAXXsWMA0GCSqGSIb3DQEBCwUAA4IBAQAdnucO60OkVkzGDxnE TTQ0xc5DGuWRFk8cOrjJTh9Xa8977ylCYemRaLMB97xDsHGoVwZsJ+DryOx8t8Iq KnM4fYnK9VL4gwEeuAcqJeMv4OTFb60bJaeoef5LT1kW657X5q+khLRg3lQR7Y7d JXLfWR5Sbn9InYKBMUL2EiG2hmkRL99UPAhLKBG5wTmPPVtao0+cAaK9P/fbxRhB ecOzypJ5B3vzQx/Y+MPVPFQAhrb7WKGg8i6jGIb965ADvggysMUo92NX0Lj1+p9r UkZZPZQdOUW+zoKxwthFPfx0DYf4DQnKiUl3mMS6PZZspD0Ewsuu0B2OmoQ2jvFZ Ovlw -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:03 2026 by rpki-client