This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q9W3_p4KLjopUFrwAX_HwqK-7cY.roa File: Q9W3_p4KLjopUFrwAX_HwqK-7cY.roa (raw, json) Hash identifier: FcHUvbWafAr/JGjwx+GIqSq2X923IZTyYFNlovS+sqM= Subject key identifier: 43:D5:B7:FE:9E:0A:2E:3A:29:50:5A:F0:01:7F:C7:C2:A2:BE:ED:C6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A322804A32E63AFDE762D65B901BEE Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q9W3_p4KLjopUFrwAX_HwqK-7cY.roa Signing time: Thu 01 Jan 2026 08:18:35 +0000 ROA not before: Thu 01 Jan 2026 08:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 87.120.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:22:80:4a:32:e6:3a:fd:e7:62:d6:5b:90:1b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43d5b7fe9e0a2e3a29505af0017fc7c2a2beedc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cc:09:87:ac:ea:e4:3b:1c:b8:82:0d:e8:6b: 7c:d8:2c:01:43:f6:9e:b3:c9:1c:4e:c5:d7:17:d3: cd:5d:99:cc:ad:f2:94:37:2b:c6:28:b3:e2:2f:2a: 80:32:ad:71:6a:60:3d:2c:63:b5:91:c2:45:8a:a9: 3a:93:08:12:17:b0:43:4a:8f:12:88:d8:da:45:2f: 48:96:4b:98:b1:92:10:37:f0:21:9c:7d:81:d6:4e: c6:80:86:46:cf:4c:d7:2d:0d:55:1c:df:9e:bc:34: c3:19:e9:33:6e:16:07:58:39:43:39:30:17:17:1c: 60:b3:10:7a:13:36:53:56:ec:50:20:51:2d:c6:2d: 9b:5d:2c:17:46:79:b1:49:2f:47:0c:83:7f:75:ee: 8f:36:3d:89:a1:64:9d:57:96:d9:69:fe:f6:b8:c5: f1:a1:4f:ac:21:81:53:9d:4e:b7:f3:70:ef:75:0c: ff:84:a7:b7:74:66:85:29:6e:72:05:ae:e5:56:f7: 7b:41:17:5f:3f:a0:4b:84:25:51:6d:65:44:9b:9f: a2:90:66:e7:2d:2b:cb:50:c1:f0:ce:78:41:e3:24: ab:81:fe:a6:8d:fe:cc:9f:2e:e7:17:ee:14:b7:0a: fa:46:2a:d2:c4:ef:02:69:ef:dc:14:d2:3a:50:18: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D5:B7:FE:9E:0A:2E:3A:29:50:5A:F0:01:7F:C7:C2:A2:BE:ED:C6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q9W3_p4KLjopUFrwAX_HwqK-7cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.36.0/24 Signature Algorithm: sha256WithRSAEncryption 13:0a:23:86:03:cd:2b:a5:97:85:24:b3:f7:27:0b:90:91:56: 8e:30:51:09:af:0f:03:89:a3:2d:25:84:43:71:2b:f5:40:ee: 08:0c:07:e7:c4:7e:3f:75:74:cb:cf:17:38:49:1e:32:ff:fc: fe:5d:e7:4d:f2:54:c3:ad:8c:4c:31:97:a5:e4:56:df:cc:65: 80:df:49:70:bc:f6:31:71:ff:4b:ce:a9:cb:25:ee:80:7f:f4: c6:9a:c8:4c:27:5f:4e:74:1d:51:57:85:3e:84:03:39:86:c3: fa:31:3c:40:e9:6a:ea:fe:fa:b7:25:a0:36:05:91:9e:89:79: 73:2e:e1:00:b8:ca:ad:c8:70:09:cd:f6:84:f7:4d:eb:8b:82: eb:ce:12:27:36:92:f5:bc:f6:e7:0f:ee:9a:a1:4d:9a:c0:72: 34:ce:5b:31:41:f1:0e:4b:14:6a:9f:ed:2e:89:4b:99:bf:d0: 53:88:4e:2a:ab:9e:bc:0b:74:36:c9:93:1d:ef:0f:5d:0a:ea: 02:7e:7c:03:de:67:1c:21:88:ac:4e:51:1e:f2:1a:19:b2:28: df:1f:f3:01:a8:43:5e:73:a4:d7:dd:c7:dc:ba:55:29:ae:3d: 51:12:ed:6a:38:3b:33:eb:c2:cd:96:85:84:47:e7:63:08:5e: 22:c4:91:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyKASjLmOv3nYtZbkBvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2Q1YjdmZTllMGEyZTNhMjk1MDVhZjAwMTdmYzdjMmEyYmVlZGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcwJh6zq5DscuIIN6Gt82CwBQ/ae s8kcTsXXF9PNXZnMrfKUNyvGKLPiLyqAMq1xamA9LGO1kcJFiqk6kwgSF7BDSo8S iNjaRS9IlkuYsZIQN/AhnH2B1k7GgIZGz0zXLQ1VHN+evDTDGekzbhYHWDlDOTAX FxxgsxB6EzZTVuxQIFEtxi2bXSwXRnmxSS9HDIN/de6PNj2JoWSdV5bZaf72uMXx oU+sIYFTnU6383DvdQz/hKe3dGaFKW5yBa7lVvd7QRdfP6BLhCVRbWVEm5+ikGbn LSvLUMHwznhB4ySrgf6mjf7Mny7nF+4Utwr6RirSxO8Cae/cFNI6UBhUZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPVt/6eCi46KVBa8AF/x8Kivu3GMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUTlXM19wNEtMam9wVUZyd0FYX0h3cUstN2NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gkMA0G CSqGSIb3DQEBCwUAA4IBAQATCiOGA80rpZeFJLP3JwuQkVaOMFEJrw8DiaMtJYRD cSv1QO4IDAfnxH4/dXTLzxc4SR4y//z+XedN8lTDrYxMMZel5FbfzGWA30lwvPYx cf9LzqnLJe6Af/TGmshMJ19OdB1RV4U+hAM5hsP6MTxA6Wrq/vq3JaA2BZGeiXlz LuEAuMqtyHAJzfaE903ri4LrzhInNpL1vPbnD+6aoU2awHI0zlsxQfEOSxRqn+0u iUuZv9BTiE4qq568C3Q2yZMd7w9dCuoCfnwD3mccIYisTlEe8hoZsijfH/MBqENe c6TX3cfculUprj1REu1qODsz68LNloWER+djCF4ixJFS -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:32 2026 by rpki-client