This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cWNe1nac7gYqC3zemxKNOIEG4cw.roa File: cWNe1nac7gYqC3zemxKNOIEG4cw.roa (raw, json) Hash identifier: DmELGcsBbYAv5NHpYYdixdTUGzn0YyqBfH+07nNRVto= Subject key identifier: 71:63:5E:D6:76:9C:EE:06:2A:0B:7C:DE:9B:12:8D:38:81:06:E1:CC Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30F1E20B495981BE8BA1138633C8A Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cWNe1nac7gYqC3zemxKNOIEG4cw.roa Signing time: Thu 01 Jan 2026 08:18:30 +0000 ROA not before: Thu 01 Jan 2026 08:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60202 IP address blocks: 87.120.230.0/24 maxlen: 24 87.120.231.0/24 maxlen: 24 94.156.56.0/24 maxlen: 24 94.156.57.0/24 maxlen: 24 94.156.58.0/24 maxlen: 24 94.156.59.0/24 maxlen: 24 94.156.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0f:1e:20:b4:95:98:1b:e8:ba:11:38:63:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71635ed6769cee062a0b7cde9b128d388106e1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:af:3a:92:53:bd:77:f5:a1:cc:99:04:29:6c: 09:02:0a:4d:8d:13:be:d0:08:4c:d7:7d:f8:f4:59: ed:5b:b1:4f:11:d5:55:c0:86:23:42:30:ce:02:84: c4:2d:65:82:54:49:af:2f:60:c5:a5:76:44:f5:e1: a9:78:0c:4d:1d:1a:31:02:ae:0b:13:fe:5d:04:0e: 62:11:ad:23:fc:42:e3:a3:c0:38:de:33:68:1b:b4: 93:ee:7c:b7:48:b8:97:0f:ed:fe:ed:dc:cf:b2:e8: 91:c4:09:6c:93:ca:de:35:dd:43:5a:bc:d9:bf:97: d0:68:2a:20:02:3c:71:a7:9d:0b:e7:f8:ae:4a:1f: 31:21:b6:2f:75:cd:ca:6d:fc:5d:ee:75:80:7c:52: 39:48:af:f3:6a:c3:1d:17:5e:a2:64:7e:7f:22:ea: bc:d9:23:06:38:32:24:10:6d:58:17:d5:02:7a:7a: 0f:1d:9e:64:ca:39:97:fa:86:94:a9:c5:c8:eb:a9: 8f:7e:6c:e3:5f:d7:73:04:df:ce:d9:3a:0e:a1:9d: fe:67:5e:b5:a3:95:06:a0:31:ec:b2:9d:5b:cf:49: a7:88:a7:51:11:84:90:7b:33:bc:11:2c:ac:6b:3b: 81:95:e2:0a:9c:27:6d:ab:d8:5b:53:90:95:22:55: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:5E:D6:76:9C:EE:06:2A:0B:7C:DE:9B:12:8D:38:81:06:E1:CC X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cWNe1nac7gYqC3zemxKNOIEG4cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.230.0/23 94.156.56.0-94.156.60.255 Signature Algorithm: sha256WithRSAEncryption 5a:a3:8c:df:76:11:83:09:59:26:cc:f9:20:9e:f4:46:2a:f9: cb:60:0f:b3:02:9f:03:e8:b1:dd:f6:d7:4d:5b:6b:4d:f5:09: af:23:5a:2f:45:3a:e3:08:a8:87:98:2a:7c:30:ef:46:49:4e: 1b:47:82:72:5e:15:8e:d9:ad:10:c9:96:5c:9c:73:50:c4:08: c5:29:ea:14:8e:91:71:84:5a:89:e5:2c:ac:bf:eb:92:25:9c: f0:86:dc:39:07:53:8c:a4:03:f9:e1:da:e4:c6:0c:84:32:5e: 38:c9:89:af:b8:3e:9f:de:30:63:85:7f:da:5a:9c:bd:79:af: 5c:c4:89:ad:f1:52:f0:ea:13:3f:ac:48:c5:59:e0:be:b2:08: 9d:b0:e8:6a:83:1f:a2:7e:fc:1f:8d:b3:4b:1f:3a:12:91:9b: 88:bb:20:be:67:e9:e5:f0:61:70:5f:0f:f1:20:95:1b:5c:48: 92:50:93:f4:0b:e2:0d:4e:74:39:e9:f0:ea:56:cc:92:fb:d8: 8a:79:46:33:ba:14:0c:ce:65:15:fa:f2:19:86:7f:95:91:f6: 9b:67:9d:97:58:f9:7e:21:25:ab:e6:16:66:e0:2a:4e:e2:bf: c1:be:d0:4a:24:6e:c7:ca:91:80:90:fe:3b:68:b3:6a:49:21: 3d:27:48:e4 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4ow8eILSVmBvouhE4YzyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTYzNWVkNjc2OWNlZTA2MmEwYjdjZGU5YjEyOGQzODgxMDZlMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7686klO9d/WhzJkEKWwJAgpNjRO+ 0AhM13349FntW7FPEdVVwIYjQjDOAoTELWWCVEmvL2DFpXZE9eGpeAxNHRoxAq4L E/5dBA5iEa0j/ELjo8A43jNoG7ST7ny3SLiXD+3+7dzPsuiRxAlsk8reNd1DWrzZ v5fQaCogAjxxp50L5/iuSh8xIbYvdc3Kbfxd7nWAfFI5SK/zasMdF16iZH5/Iuq8 2SMGODIkEG1YF9UCenoPHZ5kyjmX+oaUqcXI66mPfmzjX9dzBN/O2ToOoZ3+Z161 o5UGoDHssp1bz0mniKdREYSQezO8ESysazuBleIKnCdtq9hbU5CVIlVHRwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHFjXtZ2nO4GKgt83psSjTiBBuHMMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvY1dOZTFuYWM3Z1lxQzN6ZW14S05PSUVHNGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBV3jmMAwD BANenDgDBABenDwwDQYJKoZIhvcNAQELBQADggEBAFqjjN92EYMJWSbM+SCe9EYq +ctgD7MCnwPosd32101ba031Ca8jWi9FOuMIqIeYKnww70ZJThtHgnJeFY7ZrRDJ llycc1DECMUp6hSOkXGEWonlLKy/65IlnPCG3DkHU4ykA/nh2uTGDIQyXjjJia+4 Pp/eMGOFf9panL15r1zEia3xUvDqEz+sSMVZ4L6yCJ2w6GqDH6J+/B+Ns0sfOhKR m4i7IL5n6eXwYXBfD/EglRtcSJJQk/QL4g1OdDnp8OpWzJL72Ip5RjO6FAzOZRX6 8hmGf5WR9ptnnZdY+X4hJavmFmbgKk7iv8G+0EokbsfKkYCQ/jtos2pJIT0nSOQ= -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:01 2026 by rpki-client