This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aJsqTqqynJaCuWyGhpi7PrE2QKI.roa File: aJsqTqqynJaCuWyGhpi7PrE2QKI.roa (raw, json) Hash identifier: zBvmH4utsYt/Hbbmh/+kUXiBlrTmvdCiCCJ59KfGlGY= Subject key identifier: 68:9B:2A:4E:AA:B2:9C:96:82:B9:6C:86:86:98:BB:3E:B1:36:40:A2 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A31F4A8198610A3A446DCDEF0F374B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aJsqTqqynJaCuWyGhpi7PrE2QKI.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198228 IP address blocks: 87.121.34.0/24 maxlen: 24 87.121.35.0/24 maxlen: 24 87.121.35.1/32 maxlen: 32 91.92.194.0/24 maxlen: 24 94.156.3.0/24 maxlen: 24 2a00:1728:d::/48 maxlen: 48 2a00:1728:24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1f:4a:81:98:61:0a:3a:44:6d:cd:ef:0f:37:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=689b2a4eaab29c9682b96c868698bb3eb13640a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:aa:2a:c2:7e:b0:e9:97:a5:d4:69:dc:04: 5b:82:33:53:e2:ed:0f:60:01:c7:6e:e6:0d:61:14: da:d0:a3:51:80:b9:c4:7b:9b:39:be:71:75:65:3c: af:72:b3:b0:11:0f:8b:b8:9e:53:df:c4:02:d3:2d: e9:36:32:f0:93:6e:b9:69:66:1b:2a:35:91:6d:a7: 56:7d:14:bd:e6:e7:ad:f5:07:f0:d1:9b:32:88:4a: 51:a2:be:b1:d2:9b:9e:a8:a3:ab:5c:ce:eb:6f:49: 32:d8:47:41:e4:5c:71:df:b4:42:df:a6:a1:52:d7: 51:ef:b9:0f:38:8e:1e:c6:d8:ff:8d:51:8d:1c:62: 63:2d:02:d5:69:04:98:e4:ae:37:01:cd:5a:e5:49: ab:84:0d:2b:83:d8:36:c1:76:38:39:99:74:e6:02: dd:c7:13:94:fc:c4:f0:2b:95:72:2b:f7:05:4a:ba: 21:ba:ac:e3:74:df:7b:ff:eb:32:5c:a0:e7:e8:2a: 1c:04:3b:81:05:d4:a6:83:b1:a2:0c:13:35:b2:46: c9:47:6f:ad:99:fb:c8:f6:d3:2d:3e:20:62:61:ee: f5:e7:13:da:b2:30:8c:ec:64:d1:c0:cd:23:ea:10: f7:0e:03:a2:c9:34:0d:20:12:3f:4e:a8:eb:c1:27: c5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9B:2A:4E:AA:B2:9C:96:82:B9:6C:86:86:98:BB:3E:B1:36:40:A2 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/aJsqTqqynJaCuWyGhpi7PrE2QKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.34.0/23 91.92.194.0/24 94.156.3.0/24 IPv6: 2a00:1728:d::/48 2a00:1728:24::/48 Signature Algorithm: sha256WithRSAEncryption 37:f3:fd:85:59:a4:5c:6f:a3:3d:6e:2c:65:81:fb:af:ba:e6: 1d:72:13:5e:92:8f:69:74:a5:4a:42:6a:14:4c:eb:c6:bf:d6: 8d:60:4c:7f:93:d9:ff:da:01:6a:e0:75:35:78:f4:42:63:c3: 69:9e:df:d0:5a:67:9f:2f:43:b7:f4:d0:a9:71:7d:dc:ab:d6: d1:be:92:08:c4:e8:e9:30:ad:94:07:d3:3f:29:53:8c:29:7a: 4d:e6:13:95:f7:08:2a:9a:ab:bc:fb:7a:12:06:4a:ac:2e:77: 5b:b5:c1:31:f7:04:37:85:05:92:5a:24:41:69:39:af:86:2e: 92:dd:5a:06:1f:de:7f:6a:9a:30:08:bf:7a:ff:86:5c:76:f6: 19:f4:e3:82:9a:0a:f3:37:c3:85:5a:2c:17:5d:f5:78:e6:95: aa:93:99:89:6e:fa:17:49:87:93:b3:15:f3:35:eb:47:d3:1b: 54:62:63:96:f0:52:88:13:e9:af:46:2a:93:21:2b:48:21:d7: 67:8d:e7:21:c6:81:36:f2:81:26:01:d5:f6:0d:2d:ea:c2:75: 8c:3c:ec:fa:82:b6:de:cf:a4:26:06:e5:54:1b:3f:81:07:6d: 57:95:f8:97:1a:db:92:46:52:de:c5:ee:c8:c5:9e:9c:20:9e: e5:2e:8a:de -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt4ox9KgZhhCjpEbc3vDzdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODliMmE0ZWFhYjI5Yzk2ODJiOTZjODY4Njk4YmIzZWIxMzY0MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCaqKsJ+sOmXpdRp3ARbgjNT4u0P YAHHbuYNYRTa0KNRgLnEe5s5vnF1ZTyvcrOwEQ+LuJ5T38QC0y3pNjLwk265aWYb KjWRbadWfRS95uet9Qfw0ZsyiEpRor6x0pueqKOrXM7rb0ky2EdB5Fxx37RC36ah UtdR77kPOI4extj/jVGNHGJjLQLVaQSY5K43Ac1a5UmrhA0rg9g2wXY4OZl05gLd xxOU/MTwK5VyK/cFSrohuqzjdN97/+syXKDn6CocBDuBBdSmg7GiDBM1skbJR2+t mfvI9tMtPiBiYe715xPasjCM7GTRwM0j6hD3DgOiyTQNIBI/TqjrwSfFrQIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFGibKk6qspyWgrlshoaYuz6xNkCiMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvYUpzcVRxcXluSmFDdVd5R2hwaTdQckUyUUtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAYBAIAATASAwQBV3kiAwQA W1zCAwQAXpwDMBgEAgACMBIDBwAqABcoAA0DBwAqABcoACQwDQYJKoZIhvcNAQEL BQADggEBADfz/YVZpFxvoz1uLGWB+6+65h1yE16Sj2l0pUpCahRM68a/1o1gTH+T 2f/aAWrgdTV49EJjw2me39BaZ58vQ7f00Klxfdyr1tG+kgjE6OkwrZQH0z8pU4wp ek3mE5X3CCqaq7z7ehIGSqwud1u1wTH3BDeFBZJaJEFpOa+GLpLdWgYf3n9qmjAI v3r/hlx29hn044KaCvM3w4VaLBdd9XjmlaqTmYlu+hdJh5OzFfM160fTG1RiY5bw UogT6a9GKpMhK0gh12eN5yHGgTbygSYB1fYNLerCdYw87PqCtt7PpCYG5VQbP4EH bVeV+Jca25JGUt7F7sjFnpwgnuUuit4= -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:02 2026 by rpki-client