This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EyJBsRpznEm_TkaYXb_SYj0T9XM.roa File: EyJBsRpznEm_TkaYXb_SYj0T9XM.roa (raw, json) Hash identifier: 7zPSWpIbrWMDOFsA2jnMyasmps+P5xmhzgCIYqVlGs4= Subject key identifier: 13:22:41:B1:1A:73:9C:49:BF:4E:46:98:5D:BF:D2:62:3D:13:F5:73 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AC8BD2198253E0ABBB5202EC598C13DA4 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EyJBsRpznEm_TkaYXb_SYj0T9XM.roa Signing time: Fri 28 Nov 2025 04:33:49 +0000 ROA not before: Fri 28 Nov 2025 04:33:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401293 IP address blocks: 87.120.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c8:bd:21:98:25:3e:0a:bb:b5:20:2e:c5:98:c1:3d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 28 04:33:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=132241b11a739c49bf4e46985dbfd2623d13f573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:f8:65:1f:a2:d0:bf:96:78:12:47:81:a8: 31:39:9b:4d:a2:fc:1e:c9:1f:3f:b6:64:a4:b0:59: 3d:51:51:a2:91:bb:be:5e:70:3b:94:25:46:e8:5b: 12:75:09:35:97:69:8f:e7:ab:88:ee:68:38:79:45: fe:8d:63:34:8c:62:16:f0:3c:45:df:5f:4c:ab:84: 2e:b5:36:3a:e3:03:17:14:7c:d6:b4:7a:e7:6a:cd: 0a:5a:f4:99:d4:59:12:0d:6f:6f:5f:49:10:74:50: 54:87:d5:67:bc:3b:03:b9:0c:d7:43:89:38:5f:ec: 31:c2:86:64:2e:e7:26:77:bf:ca:c6:43:a2:09:77: c5:a6:ba:ac:70:4c:b2:da:d8:41:6b:15:a2:84:1b: 56:d3:5f:ca:6f:cc:6b:11:11:65:32:c4:db:20:1d: 61:f0:c2:7a:6e:cc:3c:6c:4e:1e:33:f0:c6:de:8b: a7:be:ec:c1:be:b4:7c:58:ac:99:4d:cc:6a:ee:1e: d4:f1:15:e1:65:dd:47:07:98:41:bf:61:52:89:31: 6e:a7:1d:9b:b5:cd:e6:d1:4a:6f:ad:8c:b5:08:f5: b0:d1:e8:30:51:42:17:99:4a:76:e5:91:a3:18:cb: 46:60:dc:46:db:03:03:66:44:d8:cd:e0:db:c8:40: a7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:22:41:B1:1A:73:9C:49:BF:4E:46:98:5D:BF:D2:62:3D:13:F5:73 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EyJBsRpznEm_TkaYXb_SYj0T9XM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/24 Signature Algorithm: sha256WithRSAEncryption 77:d2:b6:ee:db:02:50:6e:67:9b:bd:8f:f9:08:b1:b1:fa:0f: cd:21:4d:8f:5d:c5:1d:e6:86:ac:90:6c:f3:c1:7a:c0:45:32: 42:db:84:5d:2b:c0:2c:1a:70:76:3c:88:48:75:9e:3f:8c:a4: 32:e4:26:9a:ff:e7:15:98:10:a1:2e:47:b9:0a:64:cc:64:3e: f4:61:16:3b:33:a9:d4:9a:08:39:c4:5a:60:92:c7:42:81:48: b2:6d:2b:44:98:bf:37:5e:41:a1:fa:bd:55:47:2e:1a:5b:cc: c0:35:90:01:a5:1c:d9:e6:6f:f0:91:9a:52:23:20:e4:36:6a: 74:d1:b7:5a:fa:12:8e:cf:fb:a0:77:3b:96:0a:7f:36:64:1c: aa:ad:9c:12:3d:d2:91:de:ac:83:6c:7d:39:ba:cc:95:4f:04: b6:01:6c:47:0a:3c:ed:d7:e5:b6:8e:03:41:d2:2a:9e:9a:a7: 86:1d:9a:3c:d0:86:f3:81:dc:27:bd:7f:7e:4f:63:14:f8:7f: a5:c2:4e:8a:b2:db:17:92:48:11:bd:cc:69:a1:16:76:72:6b: ff:9a:58:11:f2:3f:ad:ac:72:af:0d:bf:78:05:e4:12:7a:22: 6b:82:ee:a6:71:53:0c:cb:3b:f2:7b:af:80:43:74:76:4c:0c: cb:51:8a:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrIvSGYJT4Ku7UgLsWYwT2kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI4MDQzMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzIyNDFiMTFhNzM5YzQ5YmY0ZTQ2OTg1ZGJmZDI2MjNkMTNmNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXT4ZR+i0L+WeBJHgagxOZtNovwe yR8/tmSksFk9UVGikbu+XnA7lCVG6FsSdQk1l2mP56uI7mg4eUX+jWM0jGIW8DxF 319Mq4QutTY64wMXFHzWtHrnas0KWvSZ1FkSDW9vX0kQdFBUh9VnvDsDuQzXQ4k4 X+wxwoZkLucmd7/KxkOiCXfFprqscEyy2thBaxWihBtW01/Kb8xrERFlMsTbIB1h 8MJ6bsw8bE4eM/DG3ounvuzBvrR8WKyZTcxq7h7U8RXhZd1HB5hBv2FSiTFupx2b tc3m0UpvrYy1CPWw0egwUUIXmUp25ZGjGMtGYNxG2wMDZkTYzeDbyECncQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMiQbEac5xJv05GmF2/0mI9E/VzMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRXlKQnNScHpuRW1fVGthWVhiX1NZajBUOVhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hEMA0G CSqGSIb3DQEBCwUAA4IBAQB30rbu2wJQbmebvY/5CLGx+g/NIU2PXcUd5oaskGzz wXrARTJC24RdK8AsGnB2PIhIdZ4/jKQy5Caa/+cVmBChLke5CmTMZD70YRY7M6nU mgg5xFpgksdCgUiybStEmL83XkGh+r1VRy4aW8zANZABpRzZ5m/wkZpSIyDkNmp0 0bda+hKOz/ugdzuWCn82ZByqrZwSPdKR3qyDbH05usyVTwS2AWxHCjzt1+W2jgNB 0iqemqeGHZo80IbzgdwnvX9+T2MU+H+lwk6KstsXkkgRvcxpoRZ2cmv/mlgR8j+t rHKvDb94BeQSeiJrgu6mcVMMyzvye6+AQ3R2TAzLUYqR -----END CERTIFICATE-----Generated at Fri Nov 28 08:36:32 2025 by rpki-client