This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I_dD0JNxVARWI9w4CTWE_x31xSs.roa File: I_dD0JNxVARWI9w4CTWE_x31xSs.roa (raw, json) Hash identifier: Q00Wb+xN2ZV+eWjdK2omSXpq6pnj3yieY5uR64L6LCM= Subject key identifier: 23:F7:43:D0:93:71:54:04:56:23:DC:38:09:35:84:FF:1D:F5:C5:2B Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A34B32B9A9A03FCF2DA5C0F2CE0170 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I_dD0JNxVARWI9w4CTWE_x31xSs.roa Signing time: Thu 01 Jan 2026 08:18:46 +0000 ROA not before: Thu 01 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214668 IP address blocks: 45.8.92.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.37.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4b:32:b9:a9:a0:3f:cf:2d:a5:c0:f2:ce:01:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23f743d0937154045623dc38093584ff1df5c52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:be:83:6b:c4:f5:39:3f:09:4b:65:16:1f: 4d:cd:54:18:a1:16:8c:a0:61:65:15:5b:a5:9f:21: 6d:78:91:0a:60:0a:be:a8:29:f4:2c:e0:8a:58:c0: 2c:bf:88:ac:cb:26:e1:28:04:56:f2:82:4c:25:a1: dc:ae:7b:0f:5b:2e:ab:48:41:d4:84:ae:ac:5d:44: fd:fd:a2:40:63:4d:ee:28:0d:34:bd:9b:f7:3c:15: 76:3f:af:fb:4b:5d:3f:c1:45:1d:61:98:04:ca:75: 94:71:ea:fd:50:e3:0d:12:83:0f:ab:d7:e8:9d:a1: 50:e6:9a:ad:d8:91:bd:d5:a0:8d:40:ac:ab:e4:c9: 41:3f:39:91:8b:79:e6:31:24:07:a6:9b:ff:71:68: 85:fc:8a:dd:a2:66:43:55:c4:6d:e6:6c:cf:2e:0d: 3a:7c:46:63:5a:7c:19:38:23:22:91:27:ea:29:e3: 3a:dc:8c:56:29:60:bf:cf:cc:ec:42:65:71:2c:9d: 55:87:63:b5:09:9e:1a:fd:d0:4f:1b:9f:f2:52:21: fd:7b:95:47:4f:d8:1f:dd:b6:e6:49:1b:ba:42:6a: 19:9d:3d:25:5e:08:79:b8:16:0e:80:53:5f:75:b1: 66:f6:11:7e:34:0a:e6:19:ae:74:11:d1:20:16:4c: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:43:D0:93:71:54:04:56:23:DC:38:09:35:84:FF:1D:F5:C5:2B X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/I_dD0JNxVARWI9w4CTWE_x31xSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.92.0/24 81.161.238.0/24 185.222.160.0/24 193.37.41.0/24 Signature Algorithm: sha256WithRSAEncryption 13:5e:15:c2:7c:9c:8b:47:1f:00:bb:31:0f:f3:9a:eb:b9:aa: 6e:3f:05:e6:ee:d2:12:d2:0a:af:76:2d:46:a8:a7:e5:d1:79: f0:7a:82:39:6a:22:61:87:34:57:ae:ea:db:d3:08:eb:cc:30: cc:9f:93:a9:5d:ae:03:8a:94:f2:82:23:f1:e3:d4:cc:f5:80: b5:1a:d3:28:17:a9:84:5a:cf:d2:16:5a:ca:79:f3:e3:53:20: 6b:56:29:d5:72:32:da:d6:a3:a9:c3:b9:cf:61:bf:d1:43:ba: 6f:bc:dd:51:af:6f:e2:2f:80:c8:78:87:21:5b:11:da:33:f2: 2a:22:ba:d3:ef:0f:ac:9c:e0:4d:e6:42:df:df:bc:16:b5:10: 77:88:c7:b5:68:8f:cf:1a:41:ef:cf:95:f9:46:15:b3:c6:86: a8:8a:ef:8b:a0:c4:0a:4b:b6:90:59:5c:ef:00:b9:b3:e9:aa: 90:13:b9:6b:a2:bf:d3:a8:ce:c2:be:72:65:48:1c:2a:ab:67: 12:93:59:98:3a:ca:fc:65:cc:36:cb:c6:23:fe:82:39:70:27: c0:ee:10:8a:f8:7d:b5:3f:f7:36:9a:49:a0:3c:e0:32:8c:27: 01:ff:a4:6e:09:36:c0:a2:8b:3b:91:a5:46:91:52:8f:cb:14: b2:85:d0:df -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4o0syuamgP88tpcDyzgFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2Y3NDNkMDkzNzE1NDA0NTYyM2RjMzgwOTM1ODRmZjFkZjVjNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zy+g2vE9Tk/CUtlFh9NzVQYoRaM oGFlFVulnyFteJEKYAq+qCn0LOCKWMAsv4isyybhKARW8oJMJaHcrnsPWy6rSEHU hK6sXUT9/aJAY03uKA00vZv3PBV2P6/7S10/wUUdYZgEynWUcer9UOMNEoMPq9fo naFQ5pqt2JG91aCNQKyr5MlBPzmRi3nmMSQHppv/cWiF/IrdomZDVcRt5mzPLg06 fEZjWnwZOCMikSfqKeM63IxWKWC/z8zsQmVxLJ1Vh2O1CZ4a/dBPG5/yUiH9e5VH T9gf3bbmSRu6QmoZnT0lXgh5uBYOgFNfdbFm9hF+NArmGa50EdEgFkwoPQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCP3Q9CTcVQEViPcOAk1hP8d9cUrMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSV9kRDBKTnhWQVJXSTl3NENUV0VfeDMxeFNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALQhcAwQA UaHuAwQAud6gAwQAwSUpMA0GCSqGSIb3DQEBCwUAA4IBAQATXhXCfJyLRx8AuzEP 85rruapuPwXm7tIS0gqvdi1GqKfl0XnweoI5aiJhhzRXrurb0wjrzDDMn5OpXa4D ipTygiPx49TM9YC1GtMoF6mEWs/SFlrKefPjUyBrVinVcjLa1qOpw7nPYb/RQ7pv vN1Rr2/iL4DIeIchWxHaM/IqIrrT7w+snOBN5kLf37wWtRB3iMe1aI/PGkHvz5X5 RhWzxoaoiu+LoMQKS7aQWVzvALmz6aqQE7lror/TqM7CvnJlSBwqq2cSk1mYOsr8 Zcw2y8Yj/oI5cCfA7hCK+H21P/c2mkmgPOAyjCcB/6RuCTbAoos7kaVGkVKPyxSy hdDf -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:05 2026 by rpki-client