This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YaW9Dfrmcueme9JhsoAIv3UgoPI.roa File: YaW9Dfrmcueme9JhsoAIv3UgoPI.roa (raw, json) Hash identifier: 0lCoS52+CyEBIQdijMLcO85mBYWb0fd1MC0JVp47AMk= Subject key identifier: 61:A5:BD:0D:FA:E6:72:E7:A6:7B:D2:61:B2:80:08:BF:75:20:A0:F2 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3138F0CC48790F04A6111CC79FCE8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YaW9Dfrmcueme9JhsoAIv3UgoPI.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60949 IP address blocks: 87.120.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:13:8f:0c:c4:87:90:f0:4a:61:11:cc:79:fc:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=61a5bd0dfae672e7a67bd261b28008bf7520a0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:8d:f1:c9:11:cb:bb:c5:6b:40:8a:04:d8: e2:b5:f7:5b:79:b8:a5:59:f7:18:80:95:7b:9e:a5: 53:53:8d:7f:85:5c:58:4f:80:9f:45:54:bc:b1:1e: fe:1e:4e:c7:ec:fb:33:bc:dd:1c:dc:cc:85:b2:da: 6c:79:c0:d7:20:7c:69:eb:e2:57:c2:fa:bc:a5:a7: 7e:09:c1:37:35:f5:be:f5:28:58:d1:af:e5:3b:3c: 4e:45:3f:7d:43:90:6a:14:c9:6d:26:7c:f9:95:de: 8b:8e:20:96:8e:d2:c9:02:02:10:91:4f:89:7b:45: d2:25:40:ac:79:d9:d7:be:2a:b3:83:91:ee:0d:dd: cc:29:ac:93:cb:cc:b5:94:33:49:08:99:9e:21:90: fd:89:93:86:81:6a:ee:88:eb:17:ad:c2:e7:61:0e: 7f:78:d7:17:a9:40:59:76:20:c6:1f:d9:ec:b5:fc: a0:4f:5c:e0:b2:35:06:1a:a8:44:b6:07:43:bb:c4: 22:6f:1a:8f:c2:2b:ed:ed:74:18:00:49:c1:b9:90: 1e:64:56:cb:af:85:fb:60:3f:69:76:42:2a:27:5b: 4f:b7:fb:c3:a9:bb:9e:8c:c6:62:3a:9e:d4:9b:30: a6:c7:cf:e9:8f:77:d2:6b:aa:83:54:62:4e:ab:b3: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A5:BD:0D:FA:E6:72:E7:A6:7B:D2:61:B2:80:08:BF:75:20:A0:F2 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YaW9Dfrmcueme9JhsoAIv3UgoPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.69.0/24 Signature Algorithm: sha256WithRSAEncryption 55:26:35:09:b3:be:31:31:2f:83:cf:7a:fa:08:06:45:e4:ed: a9:9c:37:53:0b:25:5d:71:79:c5:ed:b7:b4:80:b2:62:e4:c4: 43:54:ee:92:e7:f7:63:4c:2c:f4:f9:67:83:b7:0d:bb:46:2b: 83:a9:c9:91:92:71:d0:17:f2:95:8c:11:6d:7d:03:12:b3:d3: fe:e4:55:ad:d0:e1:b2:c1:cd:d8:97:94:f3:af:25:06:7a:14: 3d:a6:49:6e:54:fb:e1:dc:9b:cb:e9:8f:40:fe:7d:f9:fb:9b: d1:34:51:79:16:20:eb:89:8c:37:f9:87:ac:13:6c:d8:31:c3: 39:29:2f:9c:60:9c:e0:d1:8f:78:a9:0a:5a:37:a4:ae:53:9f: fc:47:5b:ba:d5:49:e5:88:29:5b:cb:bd:e3:a6:ef:9b:b9:80: 10:5c:6d:16:4a:a4:74:fa:37:22:49:14:c3:e6:38:cc:a7:aa: fd:df:e2:c1:33:bb:4a:14:dc:ca:62:f4:4f:3c:47:fa:3d:3e: 8c:05:e9:70:ae:a3:eb:d8:a0:5d:f8:46:88:02:6c:9d:96:e3: 20:f6:34:22:b4:63:2d:3a:cf:f3:ae:d4:8f:15:de:b5:7e:f6: f5:51:2a:ab:73:71:34:8e:47:fb:45:cc:b7:df:af:a8:bf:dc: d9:dc:dc:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxOPDMSHkPBKYRHMefzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MWE1YmQwZGZhZTY3MmU3YTY3YmQyNjFiMjgwMDhiZjc1MjBhMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbiN8ckRy7vFa0CKBNjitfdbebil WfcYgJV7nqVTU41/hVxYT4CfRVS8sR7+Hk7H7PszvN0c3MyFstpsecDXIHxp6+JX wvq8pad+CcE3NfW+9ShY0a/lOzxORT99Q5BqFMltJnz5ld6LjiCWjtLJAgIQkU+J e0XSJUCsednXviqzg5HuDd3MKayTy8y1lDNJCJmeIZD9iZOGgWruiOsXrcLnYQ5/ eNcXqUBZdiDGH9nstfygT1zgsjUGGqhEtgdDu8QibxqPwivt7XQYAEnBuZAeZFbL r4X7YD9pdkIqJ1tPt/vDqbuejMZiOp7UmzCmx8/pj3fSa6qDVGJOq7NzDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGGlvQ365nLnpnvSYbKACL91IKDyMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvWWFXOURmcm1jdWVtZTlKaHNvQUl2M1Vnb1BJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hFMA0G CSqGSIb3DQEBCwUAA4IBAQBVJjUJs74xMS+Dz3r6CAZF5O2pnDdTCyVdcXnF7be0 gLJi5MRDVO6S5/djTCz0+WeDtw27RiuDqcmRknHQF/KVjBFtfQMSs9P+5FWt0OGy wc3Yl5TzryUGehQ9pkluVPvh3JvL6Y9A/n35+5vRNFF5FiDriYw3+YesE2zYMcM5 KS+cYJzg0Y94qQpaN6SuU5/8R1u61UnliClby73jpu+buYAQXG0WSqR0+jciSRTD 5jjMp6r93+LBM7tKFNzKYvRPPEf6PT6MBelwrqPr2KBd+EaIAmydluMg9jQitGMt Os/zrtSPFd61fvb1USqrc3E0jkf7Rcy336+ov9zZ3Nxw -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:00 2026 by rpki-client