This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bHdfax_vQNixz-RKBKkiExHe3ag.roa File: bHdfax_vQNixz-RKBKkiExHe3ag.roa (raw, json) Hash identifier: /EfdHo521B2xo5xTwbrBByaQcdAh1t97c6GwZ+zjLmg= Subject key identifier: 6C:77:5F:6B:1F:EF:40:D8:B1:CF:E4:4A:04:A9:22:13:11:DE:DD:A8 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EC7EB661AF204DA4828C67FA23A8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bHdfax_vQNixz-RKBKkiExHe3ag.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31083 IP address blocks: 87.120.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ec:7e:b6:61:af:20:4d:a4:82:8c:67:fa:23:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c775f6b1fef40d8b1cfe44a04a9221311dedda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:a2:94:9c:ad:86:4a:a5:0f:9d:4f:6a:c2: 6d:8a:06:dd:77:a4:59:46:85:d0:94:75:06:dc:9c: 68:fd:92:61:7b:80:3a:33:39:d6:91:17:39:54:d0: d4:42:14:bb:c6:7c:ea:54:b9:89:61:8b:25:66:40: a6:e9:67:69:db:06:2d:5a:67:ca:78:e7:c5:bd:51: 88:55:cd:ec:42:2c:6c:44:9e:71:a0:cb:59:ea:cd: 6d:d0:db:30:25:5a:4d:fa:78:97:6a:58:e6:57:b0: 86:8d:d5:45:38:82:90:ec:b8:2c:c5:3d:aa:65:3e: 7a:4c:56:32:86:7b:b2:51:34:d3:7c:d5:02:e8:6f: 54:59:48:3f:b5:a7:86:55:5c:5f:c7:b0:b2:01:6f: 47:77:58:1e:45:18:e2:39:5f:9e:67:5e:4f:74:6e: 79:df:3d:ee:e5:79:9b:9f:76:d4:b8:94:72:4d:46: 18:8a:42:d5:6c:c2:54:da:e3:ed:82:cf:5d:fe:b1: fb:1f:31:99:8d:de:3e:14:62:83:63:39:4e:b8:27: 38:ff:b4:87:a9:fc:77:fa:ee:6a:2f:f3:f1:f9:e4: 0f:be:72:9a:c0:e5:a8:a8:e0:e1:1e:cd:ef:76:94: 8d:67:2a:e4:71:70:e5:86:15:be:19:12:47:c4:a2: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:77:5F:6B:1F:EF:40:D8:B1:CF:E4:4A:04:A9:22:13:11:DE:DD:A8 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/bHdfax_vQNixz-RKBKkiExHe3ag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.41.0/24 Signature Algorithm: sha256WithRSAEncryption 76:a6:90:58:43:97:fc:6b:57:b1:3e:5a:e3:6c:b3:e2:3b:df: 8e:50:9f:83:27:17:c5:08:2b:1c:1c:bb:d5:5d:13:32:a6:05: 7d:3b:ae:0c:83:a5:8d:00:c4:d4:f1:8c:5a:d0:a7:15:3f:35: d0:8e:c3:4f:11:7d:3c:31:9c:6f:ec:5a:7e:44:0e:df:01:67: 2d:c8:41:12:73:0e:a6:59:f7:e0:c1:e3:a3:ab:bb:17:81:0a: 75:d1:ae:cf:3c:40:77:0b:c7:18:25:74:70:8a:08:a1:e5:d4: 2b:45:8f:0d:b1:57:95:5e:1b:29:cd:78:cf:09:d8:88:30:b6: b8:7f:67:1a:e5:39:ff:f9:6c:d4:50:84:a8:39:1b:7f:8d:a6: e9:d9:a0:02:e2:47:36:50:33:98:1a:51:a5:d8:75:53:e9:9a: 1e:f7:97:15:5b:25:f2:68:d3:2e:ea:a5:61:d3:c0:41:af:c5: e6:f0:53:37:83:48:2a:35:41:76:5f:bb:83:b6:25:24:34:8a: ac:50:e6:74:bc:62:34:92:70:7d:64:23:46:90:5f:cb:a8:39: dd:35:15:d9:40:94:52:fb:9e:f1:12:12:8a:09:62:d0:97:f8: 5b:36:c4:e2:04:31:c4:83:e3:44:6e:c9:36:80:9e:2f:98:ef: e5:14:ad:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oux+tmGvIE2kgoxn+iOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzc3NWY2YjFmZWY0MGQ4YjFjZmU0NGEwNGE5MjIxMzExZGVkZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6ilJythkqlD51PasJtigbdd6RZ RoXQlHUG3Jxo/ZJhe4A6MznWkRc5VNDUQhS7xnzqVLmJYYslZkCm6Wdp2wYtWmfK eOfFvVGIVc3sQixsRJ5xoMtZ6s1t0NswJVpN+niXaljmV7CGjdVFOIKQ7LgsxT2q ZT56TFYyhnuyUTTTfNUC6G9UWUg/taeGVVxfx7CyAW9Hd1geRRjiOV+eZ15PdG55 3z3u5Xmbn3bUuJRyTUYYikLVbMJU2uPtgs9d/rH7HzGZjd4+FGKDYzlOuCc4/7SH qfx3+u5qL/Px+eQPvnKawOWoqODhHs3vdpSNZyrkcXDlhhW+GRJHxKJ6qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGx3X2sf70DYsc/kSgSpIhMR3t2oMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvYkhkZmF4X3ZRTml4ei1SS0JLa2lFeEhlM2FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gpMA0G CSqGSIb3DQEBCwUAA4IBAQB2ppBYQ5f8a1exPlrjbLPiO9+OUJ+DJxfFCCscHLvV XRMypgV9O64Mg6WNAMTU8Yxa0KcVPzXQjsNPEX08MZxv7Fp+RA7fAWctyEEScw6m WffgweOjq7sXgQp10a7PPEB3C8cYJXRwigih5dQrRY8NsVeVXhspzXjPCdiIMLa4 f2ca5Tn/+WzUUISoORt/jabp2aAC4kc2UDOYGlGl2HVT6Zoe95cVWyXyaNMu6qVh 08BBr8Xm8FM3g0gqNUF2X7uDtiUkNIqsUOZ0vGI0knB9ZCNGkF/LqDndNRXZQJRS +57xEhKKCWLQl/hbNsTiBDHEg+NEbsk2gJ4vmO/lFK0I -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:09 2026 by rpki-client