This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cS3C9NhQDk9CG-RuZJrnK7MzBo4.roa File: cS3C9NhQDk9CG-RuZJrnK7MzBo4.roa (raw, json) Hash identifier: ichyu7XESdXQBXShUHyX0hk8Cy6axcAQyOy4gtljNrE= Subject key identifier: 71:2D:C2:F4:D8:50:0E:4F:42:1B:E4:6E:64:9A:E7:2B:B3:33:06:8E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2DA3EA74202601643E659817F9CC1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cS3C9NhQDk9CG-RuZJrnK7MzBo4.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8734 IP address blocks: 87.120.140.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:3e:a7:42:02:60:16:43:e6:59:81:7f:9c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712dc2f4d8500e4f421be46e649ae72bb333068e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:4e:a8:d4:ef:e6:69:c8:05:ae:5a:09:d8: 97:2e:3d:91:69:ef:78:b0:6e:e0:4d:9a:13:51:f5: 29:6e:c0:6a:47:5b:50:9e:db:fd:71:fb:cb:8b:fe: 71:f3:60:a1:8e:fa:74:ec:f8:3a:5b:ee:f2:52:27: e7:1e:08:35:93:a0:37:ab:dc:02:23:b4:d7:30:9a: e3:cf:a1:38:e0:31:ba:a5:cf:15:4b:77:65:7d:40: da:f9:bf:f5:5c:29:0d:64:10:23:57:ff:6f:55:a8: e1:e5:61:7f:7b:95:d5:8a:7f:71:1e:9e:8d:14:2c: bb:1e:19:77:54:00:74:3c:82:d7:35:3c:15:bc:3f: 0f:53:5b:dd:c2:e8:93:6a:21:36:ef:99:3a:43:51: 61:5e:29:a8:1b:b3:52:17:e4:24:8e:ce:a7:30:60: d3:6e:bc:16:89:80:c6:e6:5b:64:02:18:95:22:55: 51:55:af:ea:3f:8f:bc:53:d5:45:2b:ee:74:f1:15: 15:76:54:f1:08:9f:6b:30:46:01:9c:3f:9b:82:68: 87:4b:82:95:d1:de:08:db:bc:a2:ad:ed:d5:f2:05: b9:9a:26:6b:86:d6:05:a6:29:29:ba:d6:8b:07:ce: e9:2f:18:e4:fb:cc:e1:dd:b4:8a:d6:00:08:f2:11: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2D:C2:F4:D8:50:0E:4F:42:1B:E4:6E:64:9A:E7:2B:B3:33:06:8E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cS3C9NhQDk9CG-RuZJrnK7MzBo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.140.0/24 Signature Algorithm: sha256WithRSAEncryption 01:21:35:95:fc:5c:47:13:e1:ef:29:12:e9:9a:f3:56:a5:d2: 99:b1:33:32:a1:9f:a5:2e:6b:49:4e:90:ea:bb:72:45:ad:42: d8:8b:46:b0:81:59:06:64:6b:30:d2:08:32:75:ab:92:b8:18: 6f:8e:13:62:73:e6:c3:02:7c:1c:5c:36:1c:87:65:da:c8:f8: 69:bd:75:d1:73:24:1f:9d:11:db:6b:60:f3:cd:73:88:ed:9e: a0:8f:15:e9:d7:2c:26:69:8a:18:a0:19:a9:41:ca:bd:b3:cf: 39:3c:83:2b:16:2e:33:b9:c5:48:51:fa:d2:ee:ef:a2:33:ea: 7c:87:6d:af:7b:32:2a:8b:35:1b:01:a9:2e:0a:93:8a:55:33: e1:a7:c6:ad:89:3c:94:03:2f:36:39:4c:26:45:7e:6c:65:8f: 92:4d:30:85:9e:27:f2:7c:4d:29:44:cd:4a:fb:6b:55:02:37: 74:b6:fb:a0:a4:26:8c:8e:23:d5:af:20:16:77:d1:6c:ec:fe: 91:3f:6a:5a:25:7e:4a:83:2f:12:e9:d3:dc:da:f3:26:84:1b: de:ce:85:0b:13:7a:53:5c:e6:bd:92:c8:c7:13:f1:83:78:7a: d6:6a:e4:e6:0f:b0:9e:f8:3a:32:7d:f1:fc:bc:ed:c3:49:f1: 68:fd:c3:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oto+p0ICYBZD5lmBf5zBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJkYzJmNGQ4NTAwZTRmNDIxYmU0NmU2NDlhZTcyYmIzMzMwNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbBOqNTv5mnIBa5aCdiXLj2Rae94 sG7gTZoTUfUpbsBqR1tQntv9cfvLi/5x82Chjvp07Pg6W+7yUifnHgg1k6A3q9wC I7TXMJrjz6E44DG6pc8VS3dlfUDa+b/1XCkNZBAjV/9vVajh5WF/e5XVin9xHp6N FCy7Hhl3VAB0PILXNTwVvD8PU1vdwuiTaiE275k6Q1FhXimoG7NSF+Qkjs6nMGDT brwWiYDG5ltkAhiVIlVRVa/qP4+8U9VFK+508RUVdlTxCJ9rMEYBnD+bgmiHS4KV 0d4I27yire3V8gW5miZrhtYFpikputaLB87pLxjk+8zh3bSK1gAI8hEVRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEtwvTYUA5PQhvkbmSa5yuzMwaOMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvY1MzQzlOaFFEazlDRy1SdVpKcm5LN016Qm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3iMMA0G CSqGSIb3DQEBCwUAA4IBAQABITWV/FxHE+HvKRLpmvNWpdKZsTMyoZ+lLmtJTpDq u3JFrULYi0awgVkGZGsw0ggydauSuBhvjhNic+bDAnwcXDYch2XayPhpvXXRcyQf nRHba2DzzXOI7Z6gjxXp1ywmaYoYoBmpQcq9s885PIMrFi4zucVIUfrS7u+iM+p8 h22vezIqizUbAakuCpOKVTPhp8atiTyUAy82OUwmRX5sZY+STTCFnifyfE0pRM1K +2tVAjd0tvugpCaMjiPVryAWd9Fs7P6RP2paJX5Kgy8S6dPc2vMmhBvezoULE3pT XOa9ksjHE/GDeHrWauTmD7Ce+DoyffH8vO3DSfFo/cNH -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:32 2026 by rpki-client