This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IgU2RccPRpD0SBu9KLJrldB6zYM.roa File: IgU2RccPRpD0SBu9KLJrldB6zYM.roa (raw, json) Hash identifier: lcJJX9Br5V8y1BkHEa87EPh/MRNrdaj79I7XRt5SOnA= Subject key identifier: 22:05:36:45:C7:0F:46:90:F4:48:1B:BD:28:B2:6B:95:D0:7A:CD:83 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2D9B2225BE636121E4E8BEC02666E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IgU2RccPRpD0SBu9KLJrldB6zYM.roa Signing time: Thu 01 Jan 2026 08:18:16 +0000 ROA not before: Thu 01 Jan 2026 08:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8717 IP address blocks: 87.121.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:d9:b2:22:5b:e6:36:12:1e:4e:8b:ec:02:66:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22053645c70f4690f4481bbd28b26b95d07acd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4d:43:d7:91:6d:3b:b8:1a:41:34:f6:3f:bf: 09:70:09:30:eb:40:49:15:d1:d6:60:7b:49:be:a6: 6a:df:e8:5f:51:3f:7e:1d:60:a1:9d:2b:35:bd:59: 88:bc:72:37:bf:fd:69:46:c8:e3:99:9a:d4:68:0f: ae:5c:34:cb:00:d8:71:c1:77:2d:e2:bb:84:d0:03: 37:bc:8f:30:32:c8:e0:ef:56:af:9f:df:1c:4a:6d: 34:75:4d:43:22:8f:e6:ff:35:aa:d7:46:b7:f6:bd: f8:c7:b0:a1:26:67:a0:f4:05:b6:b0:51:37:1f:18: cb:ab:4b:db:b2:8d:6b:a9:ae:11:b5:a0:d8:b7:bc: 96:4e:e8:42:ef:2b:7c:9f:e5:d2:85:d3:9a:d9:d3: 56:1e:e8:44:0d:e4:31:3e:fa:ab:d9:a3:89:24:a9: 23:94:73:dc:fa:02:06:74:b1:3a:b1:2b:d2:3c:20: 2f:78:e4:5f:36:cc:29:13:94:f5:ab:d4:d4:6a:af: f7:c6:08:60:c8:eb:9e:06:61:b4:90:1e:02:e2:2f: 35:90:9b:4d:a5:8c:fd:aa:bb:c9:b5:57:33:a8:d6: e0:b4:ce:38:70:b9:07:2b:86:bd:9e:0d:0a:71:97: 16:d6:7a:19:0e:32:62:b3:3b:fc:e1:73:3a:67:1e: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:05:36:45:C7:0F:46:90:F4:48:1B:BD:28:B2:6B:95:D0:7A:CD:83 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IgU2RccPRpD0SBu9KLJrldB6zYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.223.0/24 Signature Algorithm: sha256WithRSAEncryption 53:6d:53:1a:ac:f8:c3:ad:f5:17:98:7f:68:a2:e4:32:67:a1: 09:49:ab:8e:02:4d:6b:d9:0a:13:06:44:e0:ad:cd:7d:db:24: 30:42:51:ec:3a:36:cd:3c:5e:89:db:e8:0a:6e:d2:aa:be:2e: c8:35:a9:74:8e:23:e8:a5:10:b6:1d:d7:ee:d2:6c:8d:41:2a: 50:7c:18:02:f7:b0:ff:df:84:51:ce:dd:eb:74:49:ff:01:a7: ba:5a:5d:3e:03:d0:65:ad:01:26:c0:c8:44:1e:6c:7f:ee:15: 37:cc:22:3e:d6:be:29:3b:98:39:23:64:fe:ce:95:29:8f:3a: d8:d1:c5:7e:e6:8e:3a:28:8c:d6:61:92:b8:80:65:15:d5:8b: bd:a6:68:5a:8d:ef:df:8e:25:21:e7:0a:37:1c:f5:f4:3c:8b: e4:c9:fb:1c:40:a9:eb:06:a2:b2:89:1e:45:66:d1:c0:2e:b6: e7:c1:b0:91:d4:3a:3c:da:37:05:61:f9:45:3e:5c:4e:db:8b: a2:49:db:cb:8a:26:10:d0:ee:63:16:53:42:43:71:9d:59:25: 1e:c1:f7:4b:52:75:d5:dc:77:c6:07:0d:5b:9f:26:a9:d9:d4: b8:a0:83:24:a8:9a:79:2b:1d:9b:fc:76:cb:1a:4d:13:e3:ee: 73:0f:81:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4otmyIlvmNhIeTovsAmZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjA1MzY0NWM3MGY0NjkwZjQ0ODFiYmQyOGIyNmI5NWQwN2FjZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU1D15FtO7gaQTT2P78JcAkw60BJ FdHWYHtJvqZq3+hfUT9+HWChnSs1vVmIvHI3v/1pRsjjmZrUaA+uXDTLANhxwXct 4ruE0AM3vI8wMsjg71avn98cSm00dU1DIo/m/zWq10a39r34x7ChJmeg9AW2sFE3 HxjLq0vbso1rqa4RtaDYt7yWTuhC7yt8n+XShdOa2dNWHuhEDeQxPvqr2aOJJKkj lHPc+gIGdLE6sSvSPCAveORfNswpE5T1q9TUaq/3xghgyOueBmG0kB4C4i81kJtN pYz9qrvJtVczqNbgtM44cLkHK4a9ng0KcZcW1noZDjJiszv84XM6Zx5lmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIFNkXHD0aQ9EgbvSiya5XQes2DMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSWdVMlJjY1BScEQwU0J1OUtMSnJsZEI2ellNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3nfMA0G CSqGSIb3DQEBCwUAA4IBAQBTbVMarPjDrfUXmH9oouQyZ6EJSauOAk1r2QoTBkTg rc192yQwQlHsOjbNPF6J2+gKbtKqvi7INal0jiPopRC2Hdfu0myNQSpQfBgC97D/ 34RRzt3rdEn/Aae6Wl0+A9BlrQEmwMhEHmx/7hU3zCI+1r4pO5g5I2T+zpUpjzrY 0cV+5o46KIzWYZK4gGUV1Yu9pmhaje/fjiUh5wo3HPX0PIvkyfscQKnrBqKyiR5F ZtHALrbnwbCR1Do82jcFYflFPlxO24uiSdvLiiYQ0O5jFlNCQ3GdWSUewfdLUnXV 3HfGBw1bnyap2dS4oIMkqJp5Kx2b/HbLGk0T4+5zD4GL -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:27 2026 by rpki-client