This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W27ztMQ7TnOWbUnxdzBDphGlXkE.roa File: W27ztMQ7TnOWbUnxdzBDphGlXkE.roa (raw, json) Hash identifier: TkMrNVHZLZezg+2YO9gowuqblgiNtBxurDLAnZicO5A= Subject key identifier: 5B:6E:F3:B4:C4:3B:4E:73:96:6D:49:F1:77:30:43:A6:11:A5:5E:41 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3546D46909E06A560BDA25E8A1C03 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W27ztMQ7TnOWbUnxdzBDphGlXkE.roa Signing time: Thu 01 Jan 2026 08:18:48 +0000 ROA not before: Thu 01 Jan 2026 08:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215904 IP address blocks: 87.121.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:54:6d:46:90:9e:06:a5:60:bd:a2:5e:8a:1c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b6ef3b4c43b4e73966d49f1773043a611a55e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:58:89:db:25:3a:aa:c2:05:90:f1:fd:a0:3c: 12:fb:76:8f:2e:c0:39:cb:d9:c0:20:b2:48:7c:c1: cc:de:6e:50:96:03:dc:da:a7:f4:a1:70:a0:a8:5a: b7:c1:67:98:c0:a8:d7:34:55:ea:cd:3c:73:b1:e8: f3:6a:e0:12:43:05:a5:ff:e5:b6:c5:6b:b0:2f:fa: 4e:d6:34:12:fd:6e:71:f4:7f:be:6d:17:d0:c9:95: e6:4c:95:f5:ef:41:59:d3:d5:2a:f7:86:1b:d7:57: 42:3d:bc:41:f3:9b:0e:c3:fe:f3:5c:1b:8c:89:67: c9:41:7d:0b:11:d4:c0:91:c3:09:b3:83:42:ab:53: 0e:d4:e9:2b:83:b9:ba:6a:39:aa:38:c8:20:70:52: 48:75:1e:63:9a:7d:dd:a2:3f:70:ca:b3:90:e7:df: 14:57:cf:ec:c9:34:44:6e:8b:3c:e1:8e:c6:24:73: 72:60:0f:39:1b:3c:91:15:61:34:5c:cb:bf:98:77: f0:40:12:6a:63:b3:68:fa:62:8d:4b:b7:19:98:d8: 05:5e:87:68:ef:52:85:9d:3b:d8:ca:25:2f:b2:2e: eb:6b:66:18:a1:c6:9d:90:ea:e8:87:11:28:dd:0d: 2c:62:a1:9e:fc:90:37:b0:54:58:92:cf:c4:29:e3: 87:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6E:F3:B4:C4:3B:4E:73:96:6D:49:F1:77:30:43:A6:11:A5:5E:41 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W27ztMQ7TnOWbUnxdzBDphGlXkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.85.0/24 Signature Algorithm: sha256WithRSAEncryption 33:da:cd:d6:7e:11:2f:df:67:62:45:70:d2:c9:2f:b8:c0:0f: 3a:01:94:85:4a:e2:ba:2f:d6:02:2d:53:d3:c5:3c:87:a7:95: ad:ab:ad:be:96:b9:6f:21:a2:bd:30:0e:fd:cc:86:63:ab:9e: 75:15:17:ff:23:1f:78:fa:20:d6:27:72:17:de:30:45:54:a3: b2:e6:fc:4d:5e:74:c5:d8:e1:08:01:32:db:f3:45:8a:fb:7e: b7:d0:8a:e9:7f:79:df:54:b6:b2:bc:3d:e3:66:b2:82:80:f2: d6:3c:ef:9e:e5:ba:e4:aa:77:de:f7:16:9a:2a:80:8e:48:3f: 73:46:b9:4c:11:f3:f6:97:19:a4:3b:01:d3:a1:b1:c3:54:f0: 80:a7:10:78:9d:b3:1b:95:ea:9a:99:d8:3f:7b:75:35:21:ef: a0:ce:c6:90:5e:7c:29:e4:04:88:87:68:fd:b0:71:95:0b:c1: b1:ea:e0:18:4b:ae:dc:e1:f0:82:89:71:39:5d:40:f5:83:57: 7b:3a:61:04:34:56:c1:ff:af:c0:1e:ef:90:ee:01:25:14:65: 59:15:e0:8e:82:ed:19:42:43:d6:da:e1:61:f6:f1:d2:ed:9e: 1f:5e:07:52:f3:bf:fe:a6:53:d0:36:23:37:36:6d:9e:f3:45: 72:6e:ba:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1RtRpCeBqVgvaJeihwDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjZlZjNiNGM0M2I0ZTczOTY2ZDQ5ZjE3NzMwNDNhNjExYTU1ZTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFiJ2yU6qsIFkPH9oDwS+3aPLsA5 y9nAILJIfMHM3m5QlgPc2qf0oXCgqFq3wWeYwKjXNFXqzTxzsejzauASQwWl/+W2 xWuwL/pO1jQS/W5x9H++bRfQyZXmTJX170FZ09Uq94Yb11dCPbxB85sOw/7zXBuM iWfJQX0LEdTAkcMJs4NCq1MO1Okrg7m6ajmqOMggcFJIdR5jmn3doj9wyrOQ598U V8/syTREbos84Y7GJHNyYA85GzyRFWE0XMu/mHfwQBJqY7No+mKNS7cZmNgFXodo 71KFnTvYyiUvsi7ra2YYocadkOrohxEo3Q0sYqGe/JA3sFRYks/EKeOHqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtu87TEO05zlm1J8XcwQ6YRpV5BMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvVzI3enRNUTdUbk9XYlVueGR6QkRwaEdsWGtFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3lVMA0G CSqGSIb3DQEBCwUAA4IBAQAz2s3WfhEv32diRXDSyS+4wA86AZSFSuK6L9YCLVPT xTyHp5Wtq62+lrlvIaK9MA79zIZjq551FRf/Ix94+iDWJ3IX3jBFVKOy5vxNXnTF 2OEIATLb80WK+3630Irpf3nfVLayvD3jZrKCgPLWPO+e5brkqnfe9xaaKoCOSD9z RrlMEfP2lxmkOwHTobHDVPCApxB4nbMbleqamdg/e3U1Ie+gzsaQXnwp5ASIh2j9 sHGVC8Gx6uAYS67c4fCCiXE5XUD1g1d7OmEENFbB/6/AHu+Q7gElFGVZFeCOgu0Z QkPW2uFh9vHS7Z4fXgdS87/+plPQNiM3Nm2e80Vybrpl -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client