This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HTiB0jWuP6UpmSksUSlUHmNQadA.roa File: HTiB0jWuP6UpmSksUSlUHmNQadA.roa (raw, json) Hash identifier: 0HQz6vqcELZKuLVp3qBlv2QaplW0d4pXkCWbDff6Bpo= Subject key identifier: 1D:38:81:D2:35:AE:3F:A5:29:99:29:2C:51:29:54:1E:63:50:69:D0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F2DBE736D5E5C1BABA0ACA4BB82C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HTiB0jWuP6UpmSksUSlUHmNQadA.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35448 IP address blocks: 87.120.225.0/24 maxlen: 24 87.120.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f2:db:e7:36:d5:e5:c1:ba:ba:0a:ca:4b:b8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1d3881d235ae3fa52999292c5129541e635069d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:d8:9b:0a:18:bd:fa:12:97:b1:c6:f1:46: 06:c4:ba:41:9a:64:4d:b7:ad:eb:e3:ba:70:6c:5a: 94:e9:78:2d:00:df:4d:5c:55:90:1a:01:93:96:63: 53:1e:ed:f2:48:13:c3:14:43:db:f2:f0:3e:b2:ad: 63:bd:ce:2f:6a:c2:8c:f6:6d:6e:7d:d5:bd:c3:9e: e5:a1:7e:07:10:07:4d:0d:2c:dc:ec:ef:51:6f:80: 52:45:1b:9d:e4:b3:c3:36:37:80:fd:11:c3:20:28: b2:82:c2:b7:f7:62:b0:e6:45:86:29:5a:d9:e1:87: cb:e9:ff:2e:96:82:7b:da:d4:57:f7:f1:d0:7e:fb: 8c:22:f6:15:77:8a:38:24:93:9f:bf:8f:10:4b:6b: fe:c3:f7:74:1b:f3:6d:38:8a:f1:43:71:7c:8c:97: ba:48:bc:07:1e:df:85:54:7c:66:7d:98:d1:4f:32: 47:ac:9b:f7:74:80:3c:08:88:6b:53:e9:6c:1d:76: e4:81:0f:da:e8:df:90:26:88:fe:f9:0f:e7:6c:9c: 78:3a:46:4a:ac:1b:db:df:40:7c:54:14:88:a8:1a: 08:ed:57:b7:35:ba:81:a5:36:11:a9:30:18:e2:62: f4:33:72:81:8a:5d:5d:3e:2f:1a:3a:77:ef:d1:6b: 27:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:81:D2:35:AE:3F:A5:29:99:29:2C:51:29:54:1E:63:50:69:D0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HTiB0jWuP6UpmSksUSlUHmNQadA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.225.0/24 87.120.227.0/24 Signature Algorithm: sha256WithRSAEncryption 88:26:66:63:d7:a0:c2:fd:e4:38:07:11:f3:93:e2:14:86:20: 42:35:bf:72:e0:e1:d8:c0:13:d5:44:d9:16:d7:e3:c0:9c:b6: cb:2e:42:ff:ff:09:68:87:60:93:5b:9a:77:20:99:43:17:f7: 13:aa:f7:de:44:f8:ae:92:be:b4:de:ef:dd:24:bb:c9:01:5e: ac:89:aa:c6:c5:10:a6:ea:20:18:ec:a9:e9:42:8a:4d:00:76: 66:ea:23:29:ac:b1:9f:8e:c0:4e:37:b9:53:dd:4b:38:6c:71: e5:ef:e3:e7:09:d7:e7:0c:5f:28:44:71:24:6b:df:0d:ea:6e: 5b:78:2b:5d:cd:35:9e:19:6f:9d:67:d3:f5:b9:b1:1c:5a:58: 70:1a:8c:2c:e6:f9:ec:06:d3:ca:87:91:ca:f8:81:61:88:f5: 97:48:6b:33:3c:80:ba:06:62:ff:a1:8e:6a:03:59:77:01:11: 50:14:eb:99:fc:da:4a:31:ac:61:ee:f3:81:ad:6b:00:89:f2: 85:e0:27:61:42:95:eb:d0:d8:36:ce:5f:95:b6:35:18:4e:03: b7:b0:c5:ac:43:65:da:4c:f0:d6:52:a8:d6:15:d0:e0:60:12: 07:48:7f:b1:22:8e:19:bc:0c:1f:cc:53:e7:dc:e5:04:06:1b: 8c:b8:f0:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4ovLb5zbV5cG6ugrKS7gsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDM4ODFkMjM1YWUzZmE1Mjk5OTI5MmM1MTI5NTQxZTYzNTA2OWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/zYmwoYvfoSl7HG8UYGxLpBmmRN t63r47pwbFqU6XgtAN9NXFWQGgGTlmNTHu3ySBPDFEPb8vA+sq1jvc4vasKM9m1u fdW9w57loX4HEAdNDSzc7O9Rb4BSRRud5LPDNjeA/RHDICiygsK392Kw5kWGKVrZ 4YfL6f8uloJ72tRX9/HQfvuMIvYVd4o4JJOfv48QS2v+w/d0G/NtOIrxQ3F8jJe6 SLwHHt+FVHxmfZjRTzJHrJv3dIA8CIhrU+lsHXbkgQ/a6N+QJoj++Q/nbJx4OkZK rBvb30B8VBSIqBoI7Ve3NbqBpTYRqTAY4mL0M3KBil1dPi8aOnfv0WsnKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFB04gdI1rj+lKZkpLFEpVB5jUGnQMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSFRpQjBqV3VQNlVwbVNrc1VTbFVIbU5RYWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3jhAwQA V3jjMA0GCSqGSIb3DQEBCwUAA4IBAQCIJmZj16DC/eQ4BxHzk+IUhiBCNb9y4OHY wBPVRNkW1+PAnLbLLkL//wloh2CTW5p3IJlDF/cTqvfeRPiukr603u/dJLvJAV6s iarGxRCm6iAY7KnpQopNAHZm6iMprLGfjsBON7lT3Us4bHHl7+PnCdfnDF8oRHEk a98N6m5beCtdzTWeGW+dZ9P1ubEcWlhwGows5vnsBtPKh5HK+IFhiPWXSGszPIC6 BmL/oY5qA1l3ARFQFOuZ/NpKMaxh7vOBrWsAifKF4CdhQpXr0Ng2zl+VtjUYTgO3 sMWsQ2XaTPDWUqjWFdDgYBIHSH+xIo4ZvAwfzFPn3OUEBhuMuPAV -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:44 2026 by rpki-client