This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SBxNwfCuAoz9Xsd9ig88VS8Mk0c.roa File: SBxNwfCuAoz9Xsd9ig88VS8Mk0c.roa (raw, json) Hash identifier: oiBpd+PbSFw0FBBTjpYhbHBWpd6NNx1wHr8e73Jmtv4= Subject key identifier: 48:1C:4D:C1:F0:AE:02:8C:FD:5E:C7:7D:8A:0F:3C:55:2F:0C:93:47 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A338690BA29D6092A61585C6205BF1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SBxNwfCuAoz9Xsd9ig88VS8Mk0c.roa Signing time: Thu 01 Jan 2026 08:18:41 +0000 ROA not before: Thu 01 Jan 2026 08:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209628 IP address blocks: 87.121.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:38:69:0b:a2:9d:60:92:a6:15:85:c6:20:5b:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=481c4dc1f0ae028cfd5ec77d8a0f3c552f0c9347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c9:3a:7a:52:cf:10:20:20:91:a6:3f:a4:8d: 89:52:1e:ef:95:97:57:4b:df:ff:6d:1c:0f:a7:43: 60:93:64:20:b0:a5:84:e6:0b:40:f6:a7:c2:63:6b: 16:22:64:fa:95:74:14:6b:d0:e1:27:31:df:c0:d3: ce:ce:52:59:a2:6f:fa:4e:20:50:3b:e8:65:c2:a9: 80:ea:95:be:ed:9e:85:e9:f9:4a:48:ec:16:7f:53: cb:3e:4a:4f:74:12:7a:82:93:c5:a8:17:10:4a:f1: c1:bb:b0:90:59:a9:8e:e5:09:35:e4:18:17:c1:d4: 07:d4:d3:58:3a:68:4b:93:da:89:f3:53:fd:84:5c: e2:78:e8:f0:74:98:68:f0:db:73:b0:b5:f4:30:a0: 8d:a9:68:54:da:c6:60:5a:16:00:3b:8e:c9:72:41: 83:e3:cf:79:3b:f6:a3:53:8e:a5:b0:d8:46:4a:c8: e3:08:31:bb:6a:f8:e3:ce:d8:5e:33:72:9b:73:91: b4:73:45:a7:d2:d7:0f:73:a7:24:42:d2:42:1b:11: 48:ea:49:81:81:4d:96:ce:39:52:d7:68:20:50:18: c4:6f:45:6d:92:0e:63:37:0f:ef:cd:35:02:5e:28: 32:56:98:b5:66:09:1e:d4:64:9c:0c:84:de:e8:d1: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1C:4D:C1:F0:AE:02:8C:FD:5E:C7:7D:8A:0F:3C:55:2F:0C:93:47 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SBxNwfCuAoz9Xsd9ig88VS8Mk0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.54.0/24 Signature Algorithm: sha256WithRSAEncryption 54:ba:0b:91:ed:1b:39:33:55:b0:b6:32:c9:c1:0e:6e:95:3a: 4f:77:de:f0:e4:50:12:15:bf:14:21:a0:86:94:6c:71:c6:5b: 0f:3b:a8:9a:23:1a:89:c4:27:b8:04:f7:7f:5e:24:3e:b2:04: 4e:99:d5:5d:46:ea:a6:71:93:af:4e:92:c1:3f:a9:69:c4:90: a5:52:b5:39:86:62:0c:8d:1f:11:80:de:b2:88:39:8d:0d:24: df:74:1f:6e:52:13:f0:08:85:56:ad:de:50:05:58:2b:fc:53: e2:af:73:2e:83:dc:3d:ec:d9:67:23:fe:d5:2c:99:3d:33:5a: bc:f0:30:23:2d:dd:28:50:5b:23:86:a3:9a:19:95:33:62:99: cd:bc:75:4a:98:2f:68:d4:b3:06:7b:5b:6f:a1:cc:21:3f:82: 5a:c4:ca:b2:08:94:d9:fe:76:67:a8:46:be:dc:f2:a7:ac:35: 8e:39:5a:26:0c:1d:36:7a:a8:83:76:fa:29:00:e4:9f:f5:ae: 45:03:d4:dd:ef:a9:55:98:2b:9b:cb:6f:24:b7:cc:3d:6a:76: fd:0b:a8:40:16:e0:8b:c3:ad:96:98:3a:ed:67:e9:31:9d:b3: 65:48:e5:6b:3f:bc:71:93:d5:e2:d0:38:61:4f:81:fe:8f:8e: 2a:c8:bc:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozhpC6KdYJKmFYXGIFvxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODFjNGRjMWYwYWUwMjhjZmQ1ZWM3N2Q4YTBmM2M1NTJmMGM5MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Mk6elLPECAgkaY/pI2JUh7vlZdX S9//bRwPp0Ngk2QgsKWE5gtA9qfCY2sWImT6lXQUa9DhJzHfwNPOzlJZom/6TiBQ O+hlwqmA6pW+7Z6F6flKSOwWf1PLPkpPdBJ6gpPFqBcQSvHBu7CQWamO5Qk15BgX wdQH1NNYOmhLk9qJ81P9hFzieOjwdJho8NtzsLX0MKCNqWhU2sZgWhYAO47JckGD 4895O/ajU46lsNhGSsjjCDG7avjjztheM3Kbc5G0c0Wn0tcPc6ckQtJCGxFI6kmB gU2WzjlS12ggUBjEb0Vtkg5jNw/vzTUCXigyVpi1Zgke1GScDITe6NGAtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEgcTcHwrgKM/V7HfYoPPFUvDJNHMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvU0J4TndmQ3VBb3o5WHNkOWlnODhWUzhNazBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3k2MA0G CSqGSIb3DQEBCwUAA4IBAQBUuguR7Rs5M1WwtjLJwQ5ulTpPd97w5FASFb8UIaCG lGxxxlsPO6iaIxqJxCe4BPd/XiQ+sgROmdVdRuqmcZOvTpLBP6lpxJClUrU5hmIM jR8RgN6yiDmNDSTfdB9uUhPwCIVWrd5QBVgr/FPir3Mug9w97NlnI/7VLJk9M1q8 8DAjLd0oUFsjhqOaGZUzYpnNvHVKmC9o1LMGe1tvocwhP4JaxMqyCJTZ/nZnqEa+ 3PKnrDWOOVomDB02eqiDdvopAOSf9a5FA9Td76lVmCuby28kt8w9anb9C6hAFuCL w62WmDrtZ+kxnbNlSOVrP7xxk9Xi0DhhT4H+j44qyLz6 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:22 2026 by rpki-client