This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Izy4ymvD-B3LE-bjM5aXDfnTmeo.roa File: Izy4ymvD-B3LE-bjM5aXDfnTmeo.roa (raw, json) Hash identifier: XRNFImgQ724Q0bHeO6Xq2jpc6fNDUtEY/IYqkeyRiTQ= Subject key identifier: 23:3C:B8:CA:6B:C3:F8:1D:CB:13:E6:E3:33:96:97:0D:F9:D3:99:EA Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2F8A23EC5C96DFDA03553BD526995 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Izy4ymvD-B3LE-bjM5aXDfnTmeo.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42942 IP address blocks: 87.120.228.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f8:a2:3e:c5:c9:6d:fd:a0:35:53:bd:52:69:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=233cb8ca6bc3f81dcb13e6e33396970df9d399ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e8:5c:3c:7b:c2:f5:82:7f:69:dc:81:78:99: 97:56:da:8a:5c:c8:4a:40:81:87:c6:90:76:bb:9f: ee:a6:a7:20:f2:cc:d1:c3:82:b1:ce:46:20:78:04: 26:ea:d7:f5:77:23:00:22:d3:86:e6:ca:cb:e8:85: 32:28:e6:5a:7d:d1:e4:7d:31:e4:86:ec:0b:69:c9: 06:bd:2a:99:6a:54:25:f2:8d:ae:2d:8d:01:7e:82: 55:26:d2:06:1a:bb:4d:74:43:33:e3:48:a9:e5:70: ff:b2:3a:e7:d3:4e:f5:46:24:f4:c0:4e:c9:69:e7: 64:a8:0e:98:d7:7f:72:b6:f7:9b:60:64:eb:26:92: a4:96:77:94:4b:3c:4f:21:2a:a4:22:bd:1d:2a:9a: cb:15:44:17:4a:d0:cd:94:ea:99:63:54:1c:cb:20: b5:12:a0:42:ae:ec:ec:b2:fc:42:d2:f2:00:54:c0: c3:e9:bf:fc:d2:06:1f:db:00:70:42:36:9f:7b:6b: 91:f9:df:f0:2d:03:98:cf:10:6e:12:f9:26:78:cd: 0d:d9:70:0c:65:13:63:c3:64:2f:bd:f3:b6:2e:54: ec:b6:70:53:9c:bb:df:7a:7e:a7:09:05:97:53:d0: c8:43:f3:cb:5b:06:ad:4b:64:94:8c:ef:8c:90:2d: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3C:B8:CA:6B:C3:F8:1D:CB:13:E6:E3:33:96:97:0D:F9:D3:99:EA X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Izy4ymvD-B3LE-bjM5aXDfnTmeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.228.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:ea:24:22:19:00:2e:f6:c2:a6:a8:60:cd:69:a9:e9:dd:88: 22:d2:5a:e1:91:9d:5f:59:1c:1b:7b:a9:e8:22:e4:58:c5:76: 52:d1:75:53:78:76:a3:b9:fd:79:67:b7:4e:47:27:eb:1d:79: d6:0d:6b:8f:c5:39:7c:3a:c0:00:52:52:85:7e:6a:c6:b4:f8: df:75:ac:e4:96:83:bd:42:f5:23:50:25:01:0f:cb:53:03:54: c5:a1:f8:ed:f4:c8:f6:f2:c0:4d:c7:4e:26:e5:cd:ad:42:8d: 5b:26:bb:4b:e9:a1:e2:9f:b8:14:0f:cf:36:e1:e0:18:a9:d1: 15:a3:5e:be:cd:a8:e7:9a:5b:f5:0c:15:30:5c:a1:b7:0a:c9: 34:bc:b8:9e:cd:56:cd:f1:7d:40:4d:0f:fb:29:fa:db:85:26: 89:b8:21:e9:84:b0:3f:6a:d0:0f:06:dc:ec:be:30:8b:ac:b6: 7b:31:7c:66:bd:f0:a7:85:f6:aa:21:54:1f:b4:8e:57:e7:97: 1e:8d:f1:d4:7a:63:eb:ee:a2:68:d0:03:5c:66:39:9f:e1:82: 5b:35:f0:e6:3b:c6:c3:bf:50:9a:2e:10:f9:da:a9:e4:5f:82: 99:7f:1f:08:26:c1:55:ad:2a:52:29:15:e2:d0:78:db:1f:36: d8:a2:c6:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oviiPsXJbf2gNVO9UmmVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzNjYjhjYTZiYzNmODFkY2IxM2U2ZTMzMzk2OTcwZGY5ZDM5OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+hcPHvC9YJ/adyBeJmXVtqKXMhK QIGHxpB2u5/upqcg8szRw4KxzkYgeAQm6tf1dyMAItOG5srL6IUyKOZafdHkfTHk huwLackGvSqZalQl8o2uLY0BfoJVJtIGGrtNdEMz40ip5XD/sjrn0071RiT0wE7J aedkqA6Y139ytvebYGTrJpKklneUSzxPISqkIr0dKprLFUQXStDNlOqZY1QcyyC1 EqBCruzssvxC0vIAVMDD6b/80gYf2wBwQjafe2uR+d/wLQOYzxBuEvkmeM0N2XAM ZRNjw2QvvfO2LlTstnBTnLvfen6nCQWXU9DIQ/PLWwatS2SUjO+MkC0+6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCM8uMprw/gdyxPm4zOWlw3505nqMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSXp5NHltdkQtQjNMRS1iak01YVhEZm5UbWVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV3jkMA0G CSqGSIb3DQEBCwUAA4IBAQB+6iQiGQAu9sKmqGDNaanp3Ygi0lrhkZ1fWRwbe6no IuRYxXZS0XVTeHajuf15Z7dORyfrHXnWDWuPxTl8OsAAUlKFfmrGtPjfdazkloO9 QvUjUCUBD8tTA1TFofjt9Mj28sBNx04m5c2tQo1bJrtL6aHin7gUD8824eAYqdEV o16+zajnmlv1DBUwXKG3Csk0vLiezVbN8X1ATQ/7KfrbhSaJuCHphLA/atAPBtzs vjCLrLZ7MXxmvfCnhfaqIVQftI5X55cejfHUemPr7qJo0ANcZjmf4YJbNfDmO8bD v1CaLhD52qnkX4KZfx8IJsFVrSpSKRXi0HjbHzbYosb2 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:21 2026 by rpki-client