This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IRg62FwcCFjhBCrfDwGq9nn1xGg.roa File: IRg62FwcCFjhBCrfDwGq9nn1xGg.roa (raw, json) Hash identifier: /X26BW/ELtdA/2MM2LFBMmnjoyMtYtdnf2LRteBoJCE= Subject key identifier: 21:18:3A:D8:5C:1C:08:58:E1:04:2A:DF:0F:01:AA:F6:79:F5:C4:68 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32AA3240A80268FB2EA214D6DE404 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IRg62FwcCFjhBCrfDwGq9nn1xGg.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202656 IP address blocks: 31.13.247.0/24 maxlen: 24 45.128.97.0/24 maxlen: 24 87.121.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2a:a3:24:0a:80:26:8f:b2:ea:21:4d:6d:e4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21183ad85c1c0858e1042adf0f01aaf679f5c468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6b:d8:1c:f1:5c:ae:6d:0e:ee:b9:c4:c0:47: b7:07:d3:c2:b2:f7:c2:7b:59:19:68:f9:a0:9e:96: 5f:b1:1d:2f:30:fa:be:ba:e7:28:c6:34:c0:54:3a: 02:f3:da:75:e1:69:c8:c1:4e:54:97:f4:40:24:69: b0:e5:55:d8:fa:9f:aa:6a:12:05:6e:6b:ce:b6:ee: 0c:25:8a:2c:c4:f0:1c:9e:17:45:07:a4:f7:d1:63: 86:a8:06:fa:45:9a:e6:1e:51:4f:05:af:78:50:84: d6:a8:e8:04:7e:41:32:51:b4:bf:8f:f8:45:43:5b: ec:16:73:67:08:8c:96:cd:46:f7:94:75:f8:24:43: 99:df:e5:2d:0f:86:e2:44:f9:fa:f0:c2:2e:71:bd: 3f:2e:a3:86:e6:67:8e:00:64:97:27:16:73:c9:8e: 02:92:4d:6d:54:91:db:18:fb:b4:ae:d5:05:f6:c0: 6b:1f:27:4f:8e:ff:e6:f0:d4:e9:bd:2c:31:b8:9e: d4:63:86:f6:19:5b:8b:d4:17:4a:0c:42:6a:4b:a5: 46:b5:36:da:e2:45:67:25:18:02:47:67:7c:42:9d: 6f:60:4d:f2:26:6d:7f:81:aa:00:40:a4:3b:38:b1: a6:86:18:d3:ac:e6:58:3d:2d:51:f2:5f:05:26:b7: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:18:3A:D8:5C:1C:08:58:E1:04:2A:DF:0F:01:AA:F6:79:F5:C4:68 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IRg62FwcCFjhBCrfDwGq9nn1xGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.247.0/24 45.128.97.0/24 87.121.219.0/24 Signature Algorithm: sha256WithRSAEncryption a7:93:64:46:b6:be:c9:f2:7e:e9:b6:0e:5a:69:9b:aa:05:d4: 4c:a9:7a:85:fe:cc:70:0e:42:e9:0b:82:5a:e8:40:3e:c1:15: de:8c:49:d4:9b:95:c2:d8:22:bb:52:e0:91:d5:d5:08:43:de: c1:f5:73:8f:c6:43:3f:8a:5d:9e:3a:f8:01:29:16:dc:a8:80: d3:c7:1b:35:57:74:62:2b:53:a5:a3:59:ef:94:23:91:54:39: 0e:f3:b2:a6:6a:f8:b3:42:ac:be:b5:21:96:98:6e:0f:9d:02: 06:e0:51:b9:30:7f:5e:b4:eb:17:ed:19:83:9c:81:7a:03:21: 7a:ec:6d:10:74:ef:3e:ed:90:dc:b8:5d:34:9e:74:6b:69:03: 56:c6:72:32:42:27:cc:93:e6:5c:ca:01:1b:b2:09:91:1b:48: 36:0a:50:28:ac:a8:8e:58:86:61:20:98:42:29:a3:4c:38:6a: 38:d1:18:4e:9a:76:43:a6:1b:cc:2b:43:77:f1:ea:52:0c:2b: 8c:b8:a9:a2:eb:17:87:54:f0:ce:b2:fe:6d:dc:2c:4b:97:17: 47:db:9e:35:dd:e0:3b:6f:81:e3:b7:b4:35:61:b9:7b:e4:a8: 14:75:72:a0:1a:ac:aa:7f:0f:c1:b1:d7:50:c5:2a:ac:67:2a: 9b:88:df:70 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oyqjJAqAJo+y6iFNbeQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTE4M2FkODVjMWMwODU4ZTEwNDJhZGYwZjAxYWFmNjc5ZjVjNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWvYHPFcrm0O7rnEwEe3B9PCsvfC e1kZaPmgnpZfsR0vMPq+uucoxjTAVDoC89p14WnIwU5Ul/RAJGmw5VXY+p+qahIF bmvOtu4MJYosxPAcnhdFB6T30WOGqAb6RZrmHlFPBa94UITWqOgEfkEyUbS/j/hF Q1vsFnNnCIyWzUb3lHX4JEOZ3+UtD4biRPn68MIucb0/LqOG5meOAGSXJxZzyY4C kk1tVJHbGPu0rtUF9sBrHydPjv/m8NTpvSwxuJ7UY4b2GVuL1BdKDEJqS6VGtTba 4kVnJRgCR2d8Qp1vYE3yJm1/gaoAQKQ7OLGmhhjTrOZYPS1R8l8FJreUSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCEYOthcHAhY4QQq3w8BqvZ59cRoMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSVJnNjJGd2NDRmpoQkNyZkR3R3E5bm4xeEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHw33AwQA LYBhAwQAV3nbMA0GCSqGSIb3DQEBCwUAA4IBAQCnk2RGtr7J8n7ptg5aaZuqBdRM qXqF/sxwDkLpC4Ja6EA+wRXejEnUm5XC2CK7UuCR1dUIQ97B9XOPxkM/il2eOvgB KRbcqIDTxxs1V3RiK1Olo1nvlCORVDkO87KmavizQqy+tSGWmG4PnQIG4FG5MH9e tOsX7RmDnIF6AyF67G0QdO8+7ZDcuF00nnRraQNWxnIyQifMk+ZcygEbsgmRG0g2 ClAorKiOWIZhIJhCKaNMOGo40RhOmnZDphvMK0N38epSDCuMuKmi6xeHVPDOsv5t 3CxLlxdH25413eA7b4Hjt7Q1Ybl75KgUdXKgGqyqfw/BsddQxSqsZyqbiN9w -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:20 2026 by rpki-client