This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_P85B0s7dkvBiRYjsWIpV4ZuZtc.roa File: _P85B0s7dkvBiRYjsWIpV4ZuZtc.roa (raw, json) Hash identifier: c90HxT9UQfH0yjma/+L/ip9KOt81oRHMgMG3oCmyIOQ= Subject key identifier: FC:FF:39:07:4B:3B:76:4B:C1:89:16:23:B1:62:29:57:86:6E:66:D7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2FB31175A94AA74C0D4F1CD4C8A77 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_P85B0s7dkvBiRYjsWIpV4ZuZtc.roa Signing time: Thu 01 Jan 2026 08:18:25 +0000 ROA not before: Thu 01 Jan 2026 08:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43548 IP address blocks: 87.120.99.0/24 maxlen: 24 87.121.108.0/23 maxlen: 23 91.92.168.0/22 maxlen: 22 93.123.65.0/24 maxlen: 24 94.156.4.0/23 maxlen: 23 94.156.80.0/21 maxlen: 21 94.156.97.0/24 maxlen: 24 2a00:1728:2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:fb:31:17:5a:94:aa:74:c0:d4:f1:cd:4c:8a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcff39074b3b764bc1891623b1622957866e66d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e0:f6:3e:e9:2e:e6:5e:5b:f3:9d:fa:9a:a3: a4:99:bc:47:02:38:7f:6f:8c:33:84:36:d5:e9:aa: 1f:9f:40:49:67:eb:b5:32:a5:8d:eb:eb:af:1b:df: dd:45:d3:8a:b8:3d:d3:06:67:a0:c2:1f:d3:8a:b7: fd:26:2f:63:0d:78:0e:b8:19:f2:3a:17:fb:5d:c1: df:58:9f:e1:45:d8:93:4a:a4:de:9a:12:ed:44:e7: 95:3f:51:dc:ef:d4:9f:bb:a0:b6:eb:7d:fd:fd:8f: 89:d4:fd:94:cf:fa:ec:4f:c5:69:97:b0:f1:c7:bc: e0:36:c9:50:3b:1c:15:f2:5a:83:b1:34:e7:45:19: e1:48:54:11:d6:eb:99:f2:68:7c:44:01:fe:99:2f: eb:7c:2f:ed:04:f7:c9:8e:62:c8:62:4f:53:7f:b9: 9b:7a:96:b8:46:7e:31:cb:cb:7c:dd:8c:65:8c:df: 97:d5:9b:61:b7:18:e0:6f:e0:11:e5:aa:9e:55:d6: 8f:17:5f:8b:15:27:2e:0c:6d:65:55:e8:15:11:2b: 4c:22:79:9c:d3:c7:ec:91:7b:75:5d:18:2c:35:de: d9:39:4a:6e:e0:65:eb:ab:5b:53:00:85:96:8c:90: 67:70:7d:ab:43:e8:60:74:a5:76:31:ef:02:26:39: 72:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FF:39:07:4B:3B:76:4B:C1:89:16:23:B1:62:29:57:86:6E:66:D7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_P85B0s7dkvBiRYjsWIpV4ZuZtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.99.0/24 87.121.108.0/23 91.92.168.0/22 93.123.65.0/24 94.156.4.0/23 94.156.80.0/21 94.156.97.0/24 IPv6: 2a00:1728:2d::/48 Signature Algorithm: sha256WithRSAEncryption 90:95:82:2a:01:44:b7:c2:61:93:11:43:af:54:3d:e9:45:e9: 74:55:5a:2e:3f:e8:15:5a:26:f9:03:0b:4f:19:be:66:c5:1c: 1a:86:a4:9e:84:8b:8b:29:62:d2:4a:ed:a0:c8:e4:86:ca:99: 5c:ae:df:4f:b8:4e:75:81:fd:83:57:bf:2f:9f:59:b8:a0:03: 09:97:f1:57:ea:79:e6:40:f1:ae:f7:d4:c8:24:c3:05:36:d6: 73:5d:4d:8e:6f:e3:2a:ad:0a:d0:46:ff:1d:b9:7d:47:75:63: 48:81:78:a9:a9:d3:82:63:4c:53:da:33:0e:83:09:1e:be:95: 20:a3:6f:b4:4e:dd:ce:98:51:40:43:cc:39:3d:bd:a9:88:77: 11:6e:dd:bd:dc:06:c9:27:90:1d:d2:56:98:0a:8b:63:3b:da: 74:f1:c4:ad:b0:92:d9:ed:be:c1:a8:ad:1b:19:a7:45:e9:7a: f1:7a:3e:fd:d1:88:d2:0a:66:30:98:19:61:53:8d:ec:ac:31: 72:66:21:21:1a:9a:b4:e5:fe:d7:be:3e:ab:c4:6f:f6:55:61: de:87:93:8c:bf:9a:a5:aa:84:c5:89:fc:4b:14:28:22:5a:41: 41:62:e1:8a:d8:f3:15:6a:92:47:bb:1e:28:81:6b:7a:14:91: a2:fb:a2:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt4ovsxF1qUqnTA1PHNTIp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2ZmMzkwNzRiM2I3NjRiYzE4OTE2MjNiMTYyMjk1Nzg2NmU2NmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+D2Puku5l5b8536mqOkmbxHAjh/ b4wzhDbV6aofn0BJZ+u1MqWN6+uvG9/dRdOKuD3TBmegwh/Tirf9Ji9jDXgOuBny Ohf7XcHfWJ/hRdiTSqTemhLtROeVP1Hc79Sfu6C26339/Y+J1P2Uz/rsT8Vpl7Dx x7zgNslQOxwV8lqDsTTnRRnhSFQR1uuZ8mh8RAH+mS/rfC/tBPfJjmLIYk9Tf7mb epa4Rn4xy8t83YxljN+X1Zthtxjgb+AR5aqeVdaPF1+LFScuDG1lVegVEStMInmc 08fskXt1XRgsNd7ZOUpu4GXrq1tTAIWWjJBncH2rQ+hgdKV2Me8CJjlyewIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFPz/OQdLO3ZLwYkWI7FiKVeGbmbXMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvX1A4NUIwczdka3ZCaVJZanNXSXBWNFp1WnRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAwBAIAATAqAwQAV3hjAwQB V3lsAwQCW1yoAwQAXXtBAwQBXpwEAwQDXpxQAwQAXpxhMA8EAgACMAkDBwAqABco AC0wDQYJKoZIhvcNAQELBQADggEBAJCVgioBRLfCYZMRQ69UPelF6XRVWi4/6BVa JvkDC08ZvmbFHBqGpJ6Ei4spYtJK7aDI5IbKmVyu30+4TnWB/YNXvy+fWbigAwmX 8VfqeeZA8a731MgkwwU21nNdTY5v4yqtCtBG/x25fUd1Y0iBeKmp04JjTFPaMw6D CR6+lSCjb7RO3c6YUUBDzDk9vamIdxFu3b3cBsknkB3SVpgKi2M72nTxxK2wktnt vsGorRsZp0XpevF6Pv3RiNIKZjCYGWFTjeysMXJmISEamrTl/te+PqvEb/ZVYd6H k4y/mqWqhMWJ/EsUKCJaQUFi4YrY8xVqkke7HiiBa3oUkaL7oj0= -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:08 2026 by rpki-client