This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QvUkBZU7h0-wxl60B5bn3-RAIiA.roa File: QvUkBZU7h0-wxl60B5bn3-RAIiA.roa (raw, json) Hash identifier: BfqOZV3D/hGZFyg7PF6UWWDYxLuzcptOkEmaoNNgww0= Subject key identifier: 42:F5:24:05:95:3B:87:4F:B0:C6:5E:B4:07:96:E7:DF:E4:40:22:20 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35E217EAE80F32EA6948EBB16F028 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QvUkBZU7h0-wxl60B5bn3-RAIiA.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 87.121.114.0/23 maxlen: 23 185.252.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5e:21:7e:ae:80:f3:2e:a6:94:8e:bb:16:f0:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42f52405953b874fb0c65eb40796e7dfe4402220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:f3:f2:18:f6:24:c1:82:de:e0:a4:5a:e0: 86:a6:90:0a:22:d9:ce:70:81:6c:b0:07:1d:52:c3: 59:42:1f:96:b1:7f:3b:0a:df:59:5d:ef:36:4f:1f: 0f:87:c9:7d:3d:41:8d:6e:92:1f:22:09:28:d8:96: 35:85:65:66:ab:ad:dc:e7:0f:dc:5c:ee:64:27:dc: f3:60:af:0a:ab:a1:07:2c:8e:0b:a2:ae:3c:53:f6: 47:63:39:61:81:52:94:b4:4c:6b:9d:6e:d6:00:0c: 35:e9:7b:99:91:fa:f3:87:cb:2a:40:dc:3b:a5:d0: 3d:35:19:61:0a:99:bb:a6:79:37:87:bd:6a:54:92: 5a:b2:b0:83:8c:14:8e:60:4f:d1:14:90:8a:6d:4f: 50:dd:21:de:09:0f:b9:b9:b5:c5:54:da:b8:b5:5f: 2a:1c:f3:7c:2f:7a:26:a7:5f:71:b4:bf:91:5e:4c: 8a:04:fe:68:dc:38:6d:4b:63:bd:f5:5d:d3:14:cf: 68:f1:67:aa:15:5e:b4:21:81:a7:86:b3:23:38:1f: c1:4d:66:d6:15:fd:72:fd:91:dd:a3:2a:c2:50:16: 52:72:c9:26:70:1f:8c:8c:dc:d3:4c:a4:24:df:9d: b6:90:54:5d:9b:7a:72:0b:59:12:e5:3e:ef:ce:36: d1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F5:24:05:95:3B:87:4F:B0:C6:5E:B4:07:96:E7:DF:E4:40:22:20 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QvUkBZU7h0-wxl60B5bn3-RAIiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.114.0/23 185.252.162.0/23 Signature Algorithm: sha256WithRSAEncryption 23:95:7c:66:13:7a:87:1b:c8:2c:cf:91:2c:6b:fc:a9:9c:90: c2:aa:c5:8a:3a:d9:fa:99:76:66:28:8b:08:e2:52:da:db:0c: fe:27:fa:3e:4a:a8:b4:be:9b:f6:5a:cf:b1:3a:0d:e0:73:ad: 03:a9:c8:53:71:21:d2:8b:ff:b9:97:7c:32:d6:8f:29:d8:49: e5:ec:07:c3:5e:dd:76:78:0e:a5:42:cf:0e:1f:b0:0b:dc:5e: b5:1a:4d:18:7b:ab:3e:b1:e1:c2:ef:00:c6:0a:24:fa:cb:3f: 2f:c6:1b:98:57:a9:b1:3b:88:1a:93:03:23:b1:39:ef:40:8e: 2c:90:2b:f1:59:f2:12:b1:b6:38:95:1c:11:1e:d5:83:a9:06: 4a:64:09:c8:dd:e7:db:3a:45:a8:16:53:3e:10:0c:d0:c6:51: 3d:d5:04:6b:60:76:8d:16:58:07:3b:40:da:f4:db:3b:de:41: 77:39:26:a2:b5:70:7e:35:fc:f0:e6:21:ca:10:2e:71:e5:81: 38:06:8e:55:30:0f:09:93:35:0c:a3:08:f1:f3:ec:ed:2e:4d: 29:c0:e8:e5:8e:fa:d0:86:53:95:d0:8f:16:b7:cb:b8:32:c5: fa:00:d8:ad:27:f9:60:3c:93:51:42:30:32:f6:ed:d3:27:d2: 07:8d:b0:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o14hfq6A8y6mlI67FvAoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmY1MjQwNTk1M2I4NzRmYjBjNjVlYjQwNzk2ZTdkZmU0NDAyMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bTz8hj2JMGC3uCkWuCGppAKItnO cIFssAcdUsNZQh+WsX87Ct9ZXe82Tx8Ph8l9PUGNbpIfIgko2JY1hWVmq63c5w/c XO5kJ9zzYK8Kq6EHLI4Loq48U/ZHYzlhgVKUtExrnW7WAAw16XuZkfrzh8sqQNw7 pdA9NRlhCpm7pnk3h71qVJJasrCDjBSOYE/RFJCKbU9Q3SHeCQ+5ubXFVNq4tV8q HPN8L3omp19xtL+RXkyKBP5o3DhtS2O99V3TFM9o8WeqFV60IYGnhrMjOB/BTWbW Ff1y/ZHdoyrCUBZScskmcB+MjNzTTKQk3522kFRdm3pyC1kS5T7vzjbR7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEL1JAWVO4dPsMZetAeW59/kQCIgMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvUXZVa0JaVTdoMC13eGw2MEI1Ym4zLVJBSWlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3lyAwQB ufyiMA0GCSqGSIb3DQEBCwUAA4IBAQAjlXxmE3qHG8gsz5Esa/ypnJDCqsWKOtn6 mXZmKIsI4lLa2wz+J/o+Sqi0vpv2Ws+xOg3gc60DqchTcSHSi/+5l3wy1o8p2Enl 7AfDXt12eA6lQs8OH7AL3F61Gk0Ye6s+seHC7wDGCiT6yz8vxhuYV6mxO4gakwMj sTnvQI4skCvxWfISsbY4lRwRHtWDqQZKZAnI3efbOkWoFlM+EAzQxlE91QRrYHaN FlgHO0Da9Ns73kF3OSaitXB+Nfzw5iHKEC5x5YE4Bo5VMA8JkzUMowjx8+ztLk0p wOjljvrQhlOV0I8Wt8u4MsX6ANitJ/lgPJNRQjAy9u3TJ9IHjbBV -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:59 2026 by rpki-client