This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NDAtIb36MLWi5acFIZUKyToa22k.roa File: NDAtIb36MLWi5acFIZUKyToa22k.roa (raw, json) Hash identifier: arK5jdYUVdoSY7OmSwoHp0EgYpL8ekHRL0fpRbOLo9Q= Subject key identifier: 34:30:2D:21:BD:FA:30:B5:A2:E5:A7:05:21:95:0A:C9:3A:1A:DB:69 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3074DAD4ED4E41F6A8B04EAC9D9EC Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NDAtIb36MLWi5acFIZUKyToa22k.roa Signing time: Thu 01 Jan 2026 08:18:28 +0000 ROA not before: Thu 01 Jan 2026 08:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51801 IP address blocks: 87.121.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:07:4d:ad:4e:d4:e4:1f:6a:8b:04:ea:c9:d9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=34302d21bdfa30b5a2e5a70521950ac93a1adb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f6:5c:32:4a:79:3a:28:51:01:3e:b2:78:2d: e9:0d:5c:6f:91:86:9a:f7:c4:44:f4:13:56:7a:ae: 3f:81:78:ed:89:ec:ff:53:9b:35:71:fb:f0:c9:87: 38:d3:b1:2e:bb:11:59:04:2c:38:b5:8e:9e:41:a3: d0:1d:27:b7:d8:f9:7a:d1:d1:b6:bf:0d:5f:75:5e: d2:4c:ff:16:25:ce:df:18:37:33:82:ed:1a:77:e7: 47:4e:ba:ba:67:64:0b:dc:cf:b2:55:8d:bd:ac:f1: b4:e0:89:b2:ac:9f:5a:d5:b4:1d:37:1e:e2:c6:03: d7:4f:8f:05:20:b3:c1:db:0f:b6:6d:7d:6c:99:69: c8:f2:43:6b:02:c6:da:95:87:b8:5b:d7:cc:61:70: 6d:d3:0d:41:81:25:34:de:d1:63:85:24:6b:01:a3: 28:84:29:92:52:d4:6f:2d:81:fe:e7:33:4f:95:52: 38:6b:4f:67:f4:df:26:90:53:dc:4c:a5:06:dc:c3: d4:10:f3:a9:30:a2:29:09:e4:ad:ea:43:24:06:98: da:ab:b3:46:48:e5:40:a2:bd:a4:c4:52:d0:f4:1c: a4:e2:c1:d7:14:90:e8:e6:3b:4b:bf:50:91:4c:91: a4:b0:00:da:b0:dc:41:70:a6:6d:71:0e:75:98:1e: bc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:30:2D:21:BD:FA:30:B5:A2:E5:A7:05:21:95:0A:C9:3A:1A:DB:69 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/NDAtIb36MLWi5acFIZUKyToa22k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.122.0/23 Signature Algorithm: sha256WithRSAEncryption 12:56:11:5c:d1:e8:1a:79:dd:c2:b3:5c:5e:74:39:58:06:71: 89:5b:fa:30:8c:1d:f2:a8:48:42:0a:0a:87:88:06:7f:11:8e: ea:7e:80:85:2f:a7:7a:b4:00:f3:e1:30:ac:6a:47:18:f4:39: df:3c:63:d9:57:da:f8:46:7e:eb:0d:f4:4e:4a:2a:da:64:c5: 4f:4c:59:36:1b:4c:66:1e:a1:0e:e8:52:a6:a2:49:62:74:81: 9f:06:7b:78:6a:e1:5e:55:36:dd:42:b3:8a:46:68:99:50:27: 81:f6:68:81:29:b6:7b:31:c4:e8:3a:13:07:40:8e:4f:89:93: c4:3b:42:2a:b9:76:49:0c:ff:3b:af:e7:b7:cb:a8:5f:1c:65: ad:03:ad:c8:38:88:b6:3e:a4:c8:0d:db:cb:3a:18:af:e3:7a: a5:2d:83:13:c8:7c:c0:ca:b8:7c:c5:6f:4a:b3:cf:15:bc:5d: 0e:64:ca:d7:f4:26:fd:40:54:8b:e4:5c:b5:4c:2f:f1:9f:bd: b1:ff:b2:79:4f:eb:bd:c8:5b:ae:6e:a4:5e:e5:ac:02:50:8e: 36:d3:3b:4d:28:0d:55:f6:ff:28:75:2e:8d:cc:a9:9c:9c:0a: 17:e7:f1:ba:48:f5:63:ff:17:2a:67:8b:38:5e:13:a8:ea:0b: 4e:a5:b7:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owdNrU7U5B9qiwTqydnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDMwMmQyMWJkZmEzMGI1YTJlNWE3MDUyMTk1MGFjOTNhMWFkYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fZcMkp5OihRAT6yeC3pDVxvkYaa 98RE9BNWeq4/gXjtiez/U5s1cfvwyYc407EuuxFZBCw4tY6eQaPQHSe32Pl60dG2 vw1fdV7STP8WJc7fGDczgu0ad+dHTrq6Z2QL3M+yVY29rPG04ImyrJ9a1bQdNx7i xgPXT48FILPB2w+2bX1smWnI8kNrAsbalYe4W9fMYXBt0w1BgSU03tFjhSRrAaMo hCmSUtRvLYH+5zNPlVI4a09n9N8mkFPcTKUG3MPUEPOpMKIpCeSt6kMkBpjaq7NG SOVAor2kxFLQ9Byk4sHXFJDo5jtLv1CRTJGksADasNxBcKZtcQ51mB68WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQwLSG9+jC1ouWnBSGVCsk6GttpMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvTkRBdEliMzZNTFdpNWFjRklaVUt5VG9hMjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV3l6MA0G CSqGSIb3DQEBCwUAA4IBAQASVhFc0egaed3Cs1xedDlYBnGJW/owjB3yqEhCCgqH iAZ/EY7qfoCFL6d6tADz4TCsakcY9DnfPGPZV9r4Rn7rDfROSiraZMVPTFk2G0xm HqEO6FKmoklidIGfBnt4auFeVTbdQrOKRmiZUCeB9miBKbZ7McToOhMHQI5PiZPE O0IquXZJDP87r+e3y6hfHGWtA63IOIi2PqTIDdvLOhiv43qlLYMTyHzAyrh8xW9K s88VvF0OZMrX9Cb9QFSL5Fy1TC/xn72x/7J5T+u9yFuubqRe5awCUI420ztNKA1V 9v8odS6NzKmcnAoX5/G6SPVj/xcqZ4s4XhOo6gtOpbcg -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:30 2026 by rpki-client