This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VwHqoOcKvYbX2DJAucxZX1Px_Fk.roa File: VwHqoOcKvYbX2DJAucxZX1Px_Fk.roa (raw, json) Hash identifier: eW+w54Cx1iRR7IlVw2g4cIqeom7XERY0qPzJP3f8GiY= Subject key identifier: 57:01:EA:A0:E7:0A:BD:86:D7:D8:32:40:B9:CC:59:5F:53:F1:FC:59 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A356F60A9FEE21420B6A9D6B531E47 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VwHqoOcKvYbX2DJAucxZX1Px_Fk.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216181 IP address blocks: 87.121.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:56:f6:0a:9f:ee:21:42:0b:6a:9d:6b:53:1e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5701eaa0e70abd86d7d83240b9cc595f53f1fc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:57:86:c7:f9:57:bb:15:de:5c:a8:e9:65: 5f:b2:77:25:48:48:dd:fd:14:f8:92:5b:97:0f:74: a4:89:11:02:11:ad:17:dd:53:be:98:bd:8e:85:59: 90:ee:74:13:1d:2d:1a:26:41:93:7c:92:f8:2a:02: 88:a6:c2:13:07:4a:9d:5a:96:2c:e1:fd:ec:2d:88: d7:ce:77:c6:90:96:6e:ea:ab:fd:75:ab:b4:0b:81: f3:12:2b:b0:03:77:5e:18:6a:93:f5:76:42:1e:9f: d9:47:08:68:d4:7c:dc:c8:49:0c:b9:c4:26:18:83: c1:38:dd:8b:7a:74:4c:f3:e8:0a:2e:b2:06:0b:7f: 8d:76:4d:a4:82:89:47:a7:c8:61:5c:5a:3a:e4:f5: 3a:00:62:b4:5b:01:3e:33:6b:9a:c3:87:81:e2:f8: 4e:82:91:47:e4:43:8b:f3:1e:5c:a2:b9:d3:e8:ad: 91:65:aa:8c:40:96:6f:f0:2e:3d:92:64:cc:56:39: cd:bf:fb:ec:ab:c4:05:4c:af:b5:bf:e2:d6:9b:fa: 73:ab:1c:d6:6c:9f:51:af:f5:86:94:fd:ee:3d:05: 27:d7:a3:4e:78:d0:21:84:2b:f3:0d:33:4f:73:c2: a0:86:96:dc:d8:43:49:c7:08:48:4c:c0:39:81:3e: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:01:EA:A0:E7:0A:BD:86:D7:D8:32:40:B9:CC:59:5F:53:F1:FC:59 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/VwHqoOcKvYbX2DJAucxZX1Px_Fk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.220.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:d3:9e:13:b5:4c:c1:60:e7:7c:1f:c3:89:0c:0e:13:cb:26: 91:75:e1:26:43:c2:1e:ec:17:93:58:4a:1e:cf:a7:eb:c8:4f: 92:6f:fa:b2:5c:ac:f9:34:44:6b:d9:f6:50:71:d2:d2:83:d9: 50:a4:0b:10:c3:a5:9b:bf:83:a0:4c:06:7c:61:f9:aa:1c:a3: 0b:45:7b:63:13:d1:f1:4f:2d:64:23:60:f4:f8:03:a0:b6:79: f0:e2:5f:08:2a:97:9e:e9:ab:43:1e:4c:96:2e:32:17:70:42: 14:83:c8:2a:6d:d5:ba:09:a8:0a:a2:d9:a2:c6:92:bf:39:8d: 08:08:78:09:91:10:35:1f:39:63:f5:e5:f9:ee:0f:f0:5e:4c: d1:f1:c6:40:6d:77:b9:96:d7:78:e9:2f:6e:1a:f0:12:c2:0d: 71:ca:c3:b8:83:d7:1f:fa:64:be:b7:bd:64:91:8e:e6:05:c6: 60:ab:26:c8:60:9b:bc:e1:50:69:5b:90:fd:68:1c:0f:a8:ad: e8:02:1f:52:c5:9f:70:15:4f:97:0c:4b:ad:d5:97:85:10:62: 77:57:bc:85:e3:25:b1:75:45:06:58:92:af:70:9d:23:04:4b: 1d:e6:27:48:5e:e1:53:af:f6:4f:87:87:4d:2c:1a:27:b0:5d: b9:53:26:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1b2Cp/uIUILap1rUx5HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NzAxZWFhMGU3MGFiZDg2ZDdkODMyNDBiOWNjNTk1ZjUzZjFmYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK9Xhsf5V7sV3lyo6WVfsnclSEjd /RT4kluXD3SkiRECEa0X3VO+mL2OhVmQ7nQTHS0aJkGTfJL4KgKIpsITB0qdWpYs 4f3sLYjXznfGkJZu6qv9dau0C4HzEiuwA3deGGqT9XZCHp/ZRwho1HzcyEkMucQm GIPBON2LenRM8+gKLrIGC3+Ndk2kgolHp8hhXFo65PU6AGK0WwE+M2uaw4eB4vhO gpFH5EOL8x5cornT6K2RZaqMQJZv8C49kmTMVjnNv/vsq8QFTK+1v+LWm/pzqxzW bJ9Rr/WGlP3uPQUn16NOeNAhhCvzDTNPc8Kghpbc2ENJxwhITMA5gT49uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFcB6qDnCr2G19gyQLnMWV9T8fxZMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVndIcW9PY0t2WWJYMkRKQXVjeFpYMVB4X0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ncMA0G CSqGSIb3DQEBCwUAA4IBAQBv054TtUzBYOd8H8OJDA4TyyaRdeEmQ8Ie7BeTWEoe z6fryE+Sb/qyXKz5NERr2fZQcdLSg9lQpAsQw6Wbv4OgTAZ8YfmqHKMLRXtjE9Hx Ty1kI2D0+AOgtnnw4l8IKpee6atDHkyWLjIXcEIUg8gqbdW6CagKotmixpK/OY0I CHgJkRA1Hzlj9eX57g/wXkzR8cZAbXe5ltd46S9uGvASwg1xysO4g9cf+mS+t71k kY7mBcZgqybIYJu84VBpW5D9aBwPqK3oAh9SxZ9wFU+XDEut1ZeFEGJ3V7yF4yWx dUUGWJKvcJ0jBEsd5idIXuFTr/ZPh4dNLBonsF25UyZh -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:20 2026 by rpki-client