This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E1fxRnGCzSnHzVRdrNSpailjbHo.roa File: E1fxRnGCzSnHzVRdrNSpailjbHo.roa (raw, json) Hash identifier: d3q7o3Dw2t9z/X5Klk2MMadMgvWObPfi8B8EIujtU3k= Subject key identifier: 13:57:F1:46:71:82:CD:29:C7:CD:54:5D:AC:D4:A9:6A:29:63:6C:7A Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2D6DEA021A7BF487ED6FA85F3E353 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E1fxRnGCzSnHzVRdrNSpailjbHo.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 87.120.68.0/23 maxlen: 24 185.252.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d6:de:a0:21:a7:bf:48:7e:d6:fa:85:f3:e3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1357f1467182cd29c7cd545dacd4a96a29636c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:0a:a0:07:bf:c1:c6:30:4e:72:0f:a1:7d: f5:d9:9d:dd:48:83:77:f6:a6:99:b2:3d:08:47:8e: 95:b0:09:ba:f0:8b:37:32:3c:72:1e:d1:d4:ad:05: 7c:d8:cd:3b:66:7d:78:67:42:fa:af:91:8e:18:05: 00:5a:6e:3d:2a:e7:49:6b:aa:bf:19:1d:52:8f:b7: 61:a4:47:5b:31:f0:3a:a6:95:cd:81:bc:be:80:5c: a8:08:e8:e3:e9:f9:49:3d:10:d6:e9:34:81:37:31: fa:14:9b:82:6e:6c:8a:a6:58:46:98:b0:1d:22:bc: b5:87:47:26:a8:36:8c:ff:81:74:8d:69:09:29:01: 29:5c:71:f7:2a:06:45:5d:75:78:9c:7f:74:e1:a5: 71:44:f1:20:5e:61:06:5d:4c:07:4e:c7:b1:47:a9: 31:7d:c2:8f:ae:ae:8c:f7:ac:40:46:58:21:13:c4: 44:75:fa:56:c9:6d:ce:0b:5e:8a:f8:5d:c2:2d:1b: 9c:8c:93:44:1a:5a:89:71:cb:ee:be:30:6a:1c:0b: c8:fd:7d:6e:e3:8f:23:bb:43:9c:cd:2f:50:cb:16: c3:55:c5:41:3e:92:37:62:81:07:a6:94:5b:e7:09: 32:4f:27:dc:6f:74:18:2a:99:a3:67:27:9a:f4:c9: b4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:F1:46:71:82:CD:29:C7:CD:54:5D:AC:D4:A9:6A:29:63:6C:7A X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E1fxRnGCzSnHzVRdrNSpailjbHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/23 185.252.160.0/23 Signature Algorithm: sha256WithRSAEncryption 44:69:2f:74:84:46:fc:5f:75:f5:70:d9:c2:1d:37:7f:06:7a: d0:01:4f:70:89:ab:5e:5b:65:0b:71:6b:37:67:3d:95:bf:07: 4b:c4:a3:15:24:f7:26:eb:0e:cc:67:e5:3e:94:79:43:41:ba: f9:fd:f9:ae:22:25:c9:8f:98:0c:70:e2:e8:3c:54:3c:19:f4: bc:0d:af:b7:2d:15:bf:5e:7a:1a:30:26:f5:b7:9a:ed:fc:af: 46:18:c3:22:74:5f:d4:bd:11:9b:15:34:fe:31:b8:0d:74:dc: 20:12:eb:52:e9:89:53:f6:5a:20:bf:a7:53:7d:b0:5e:47:5b: 22:0c:e3:d0:d2:9a:bd:b0:38:2b:fc:34:a5:53:fc:9b:42:1d: 5b:74:3b:42:eb:e7:cb:2e:5a:e0:7e:bf:48:42:b3:50:51:a9: 09:04:02:f5:c0:c1:9e:36:ef:fa:5f:bd:1a:96:78:a9:dc:fc: ab:30:e6:99:58:dd:e7:ff:4c:99:a8:d9:62:13:ae:4c:a2:7e: 52:60:f4:a3:5d:dd:2b:4e:9e:14:1e:83:9b:8b:56:1e:3f:2e: f6:43:a6:65:d9:d6:fb:75:5b:10:6d:6f:4c:31:ca:a8:4e:81: 01:7a:20:a7:04:64:55:8e:10:70:64:b6:2e:5d:1d:7f:e6:44: 08:f8:11:8f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4otbeoCGnv0h+1vqF8+NTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzU3ZjE0NjcxODJjZDI5YzdjZDU0NWRhY2Q0YTk2YTI5NjM2YzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvkKoAe/wcYwTnIPoX312Z3dSIN3 9qaZsj0IR46VsAm68Is3MjxyHtHUrQV82M07Zn14Z0L6r5GOGAUAWm49KudJa6q/ GR1Sj7dhpEdbMfA6ppXNgby+gFyoCOjj6flJPRDW6TSBNzH6FJuCbmyKplhGmLAd Iry1h0cmqDaM/4F0jWkJKQEpXHH3KgZFXXV4nH904aVxRPEgXmEGXUwHTsexR6kx fcKPrq6M96xARlghE8REdfpWyW3OC16K+F3CLRucjJNEGlqJccvuvjBqHAvI/X1u 448ju0OczS9QyxbDVcVBPpI3YoEHppRb5wkyTyfcb3QYKpmjZyea9Mm0wwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBNX8UZxgs0px81UXazUqWopY2x6MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRTFmeFJuR0N6U25IelZSZHJOU3BhaWxqYkhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3hEAwQB ufygMA0GCSqGSIb3DQEBCwUAA4IBAQBEaS90hEb8X3X1cNnCHTd/BnrQAU9wiate W2ULcWs3Zz2VvwdLxKMVJPcm6w7MZ+U+lHlDQbr5/fmuIiXJj5gMcOLoPFQ8GfS8 Da+3LRW/XnoaMCb1t5rt/K9GGMMidF/UvRGbFTT+MbgNdNwgEutS6YlT9logv6dT fbBeR1siDOPQ0pq9sDgr/DSlU/ybQh1bdDtC6+fLLlrgfr9IQrNQUakJBAL1wMGe Nu/6X70alnip3PyrMOaZWN3n/0yZqNliE65Mon5SYPSjXd0rTp4UHoObi1YePy72 Q6Zl2db7dVsQbW9MMcqoToEBeiCnBGRVjhBwZLYuXR1/5kQI+BGP -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:02 2026 by rpki-client