This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H3KHsrelgQ4z7DpLYyjlPmZUP18.roa File: H3KHsrelgQ4z7DpLYyjlPmZUP18.roa (raw, json) Hash identifier: iE+F96bI0ppj7yHYR5EA0ssVVwQo9lJF00oBZbcakfU= Subject key identifier: 1F:72:87:B2:B7:A5:81:0E:33:EC:3A:4B:63:28:E5:3E:66:54:3F:5F Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019BD7DB2920DD09578FFC8F3F72A59E66EE Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H3KHsrelgQ4z7DpLYyjlPmZUP18.roa Signing time: Mon 19 Jan 2026 20:03:42 +0000 ROA not before: Mon 19 Jan 2026 20:03:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213725 IP address blocks: 87.121.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:db:29:20:dd:09:57:8f:fc:8f:3f:72:a5:9e:66:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 19 20:03:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1f7287b2b7a5810e33ec3a4b6328e53e66543f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:4d:f2:9b:22:dd:33:69:47:14:00:d1:0d: 4b:aa:bf:1c:7f:be:93:af:ae:20:2b:ab:1e:5a:f5: 64:56:b3:70:5c:04:b3:01:7f:4f:95:38:06:df:86: 7a:ed:e6:bd:ec:61:6b:74:53:12:56:39:1f:2a:74: ac:fc:1c:80:3b:7f:77:d5:fd:01:b6:b1:9e:0a:ac: 08:a4:05:14:33:02:02:2e:88:64:6b:b8:40:cd:e7: 76:af:49:1b:ab:d9:48:43:d7:7d:52:80:d4:98:78: f4:bf:1a:76:b8:ed:9e:cf:3e:49:cd:21:9f:bc:09: 98:fa:f8:b3:9e:52:87:2b:f0:0d:da:d9:93:49:05: e9:66:2e:05:e0:e0:43:a2:3a:bb:60:e7:26:73:a8: 01:d5:2f:1d:fd:eb:d6:d4:d9:e7:e8:d4:68:36:7c: 8f:67:a0:0a:cb:f1:8a:f5:40:2b:19:98:fc:42:f3: 9f:d7:1a:71:37:05:f7:63:81:de:3a:99:ee:9e:e6: c5:92:51:d4:64:38:8a:dc:f7:77:3c:5c:7c:d5:43: 0d:52:be:6e:ca:fa:03:ff:55:f3:c5:f6:96:91:a6: 10:24:6a:8a:09:c0:45:b8:85:41:01:71:83:06:e4: 23:1d:01:e8:26:65:8a:3f:5d:fb:b4:34:6d:e9:0f: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:72:87:B2:B7:A5:81:0E:33:EC:3A:4B:63:28:E5:3E:66:54:3F:5F X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/H3KHsrelgQ4z7DpLYyjlPmZUP18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.79.0/24 Signature Algorithm: sha256WithRSAEncryption a5:36:3a:6a:53:b6:f2:7a:64:4d:d5:7d:84:f6:f7:22:a6:c0: 24:45:10:fb:ea:33:b3:9c:92:9b:1c:0f:70:8f:10:b9:2c:57: a5:6b:c5:0d:df:fd:79:37:9a:ce:82:ff:44:93:bc:65:79:13: f0:6c:af:9e:95:fb:21:28:27:98:9f:c2:69:63:1f:4b:0e:d5: c4:a2:fa:c4:8c:6e:57:f4:76:87:a2:33:f0:a8:3f:9b:26:5b: b2:f8:a9:43:fa:60:f1:e3:f7:fb:69:47:af:51:62:79:51:e0: 3e:7e:94:ac:83:d5:e8:86:4b:05:bf:08:2f:10:b1:02:36:64: 05:34:0d:ab:e6:d4:ef:42:67:29:44:33:db:c9:bf:33:27:dc: a8:d4:8e:1b:4f:94:30:d6:51:04:c8:68:32:e3:7b:60:4c:6c: 8d:6b:0f:4d:6c:b4:56:2c:dd:a2:4e:99:e6:6e:c9:59:da:24: 2c:4e:6d:ed:5a:fb:88:99:79:56:ea:67:74:51:e6:5d:55:14: ab:d2:f4:8a:5f:bd:7d:57:c6:3d:53:d3:60:d0:ee:be:8d:04: 2c:2f:01:45:ea:94:b4:f4:d9:a4:27:74:5b:ed:56:11:67:99: 86:d9:0a:7a:68:12:ad:6e:6a:2c:23:21:d7:c3:51:44:37:15: ed:f7:07:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvX2ykg3QlXj/yPP3KlnmbuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTE5MjAwMzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZjcyODdiMmI3YTU4MTBlMzNlYzNhNGI2MzI4ZTUzZTY2NTQzZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjpN8psi3TNpRxQA0Q1Lqr8cf76T r64gK6seWvVkVrNwXASzAX9PlTgG34Z67ea97GFrdFMSVjkfKnSs/ByAO3931f0B trGeCqwIpAUUMwICLohka7hAzed2r0kbq9lIQ9d9UoDUmHj0vxp2uO2ezz5JzSGf vAmY+viznlKHK/AN2tmTSQXpZi4F4OBDojq7YOcmc6gB1S8d/evW1Nnn6NRoNnyP Z6AKy/GK9UArGZj8QvOf1xpxNwX3Y4HeOpnunubFklHUZDiK3Pd3PFx81UMNUr5u yvoD/1XzxfaWkaYQJGqKCcBFuIVBAXGDBuQjHQHoJmWKP137tDRt6Q8YIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB9yh7K3pYEOM+w6S2Mo5T5mVD9fMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSDNLSHNyZWxnUTR6N0RwTFl5amxQbVpVUDE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3lPMA0G CSqGSIb3DQEBCwUAA4IBAQClNjpqU7byemRN1X2E9vcipsAkRRD76jOznJKbHA9w jxC5LFela8UN3/15N5rOgv9Ek7xleRPwbK+elfshKCeYn8JpYx9LDtXEovrEjG5X 9HaHojPwqD+bJluy+KlD+mDx4/f7aUevUWJ5UeA+fpSsg9XohksFvwgvELECNmQF NA2r5tTvQmcpRDPbyb8zJ9yo1I4bT5Qw1lEEyGgy43tgTGyNaw9NbLRWLN2iTpnm bslZ2iQsTm3tWvuImXlW6md0UeZdVRSr0vSKX719V8Y9U9Ng0O6+jQQsLwFF6pS0 9NmkJ3Rb7VYRZ5mG2Qp6aBKtbmosIyHXw1FENxXt9wdT -----END CERTIFICATE-----Generated at Tue Jan 20 18:22:05 2026 by rpki-client