This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hc7sB7QIUQA4LrWhEgTsS5hZpyw.roa File: hc7sB7QIUQA4LrWhEgTsS5hZpyw.roa (raw, json) Hash identifier: UNtBFa0SAeHGql3clumtvrMqAXF9LQb5hzvufATfwPQ= Subject key identifier: 85:CE:EC:07:B4:08:51:00:38:2E:B5:A1:12:04:EC:4B:98:59:A7:2C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A35EA2C5F1D8002AFB71A7504EC83B Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hc7sB7QIUQA4LrWhEgTsS5hZpyw.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401293 IP address blocks: 87.120.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5e:a2:c5:f1:d8:00:2a:fb:71:a7:50:4e:c8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=85ceec07b4085100382eb5a11204ec4b9859a72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e8:cc:a0:ba:da:ca:b1:90:6b:59:68:9c:01: 7b:17:11:c2:14:f9:af:9a:46:b3:b3:7a:09:3e:46: c6:95:fc:cb:c9:70:69:3c:a9:1b:68:df:1f:7b:3a: 10:94:6a:2a:ef:31:ff:d8:f6:a4:d3:69:91:6e:3e: f8:4c:f8:c8:4b:23:6e:33:64:c3:62:a0:9f:81:69: b4:2a:12:ae:20:af:e5:92:b8:cc:64:58:a2:00:55: 9d:8a:f1:1d:e4:98:72:37:d0:70:ee:19:1c:96:35: 15:35:d6:72:33:8a:9d:24:81:f4:99:a1:6f:76:54: 30:0e:56:70:b8:59:21:9f:43:14:f2:32:49:0c:67: f7:a4:66:e9:ad:94:8b:94:c6:66:8a:a6:db:90:2f: ce:87:61:7c:08:9d:e7:0f:f0:7a:93:be:72:51:0c: d8:21:74:c2:54:32:80:50:57:00:cc:c4:50:0e:04: 36:c7:e3:9c:43:0d:e7:21:fe:6b:fd:cf:ce:99:87: aa:f4:af:10:77:12:56:3a:ba:ce:4f:32:5f:9e:b5: 61:22:ff:92:37:83:46:d5:1d:5a:99:12:e1:e6:38: 74:e3:d2:56:81:eb:35:1a:67:72:d1:57:d7:99:2e: fd:db:c6:e6:2f:06:5e:61:ef:76:3b:d7:ad:ef:0c: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CE:EC:07:B4:08:51:00:38:2E:B5:A1:12:04:EC:4B:98:59:A7:2C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/hc7sB7QIUQA4LrWhEgTsS5hZpyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/24 Signature Algorithm: sha256WithRSAEncryption 69:84:d1:1b:64:c1:29:44:f7:98:f2:77:f6:70:a1:06:65:31: f5:8f:6c:74:a6:16:08:d6:12:93:4d:67:7d:65:de:a6:df:c4: 3d:76:cc:fb:d9:43:58:08:06:25:a2:c9:9b:39:39:04:90:53: 1b:75:95:65:e4:35:79:c2:b0:54:8d:1b:a5:62:52:71:e0:d8: 0e:07:49:c7:60:93:ec:c5:5b:bb:9b:34:40:d0:0d:a1:0e:c8: b3:6f:bc:bd:25:5e:90:cd:19:f0:99:ff:b0:ea:59:91:2b:cb: dd:69:19:d6:c0:22:f3:b3:69:02:13:e9:b0:17:13:bc:09:73: f3:92:f7:4c:a8:b5:4a:54:6a:a4:94:5a:6c:c6:6b:d5:0d:d1: 10:5f:fc:47:4c:82:b8:da:70:3e:6a:97:51:fd:a8:6d:56:04: 52:6a:e6:ba:c6:4e:d9:6d:ba:11:c4:15:19:f7:a6:5a:dc:df: d8:99:d4:79:ca:3f:43:93:15:35:6e:25:50:e5:a3:41:1c:4a: d9:39:1a:c0:aa:2a:eb:e2:eb:23:13:f1:38:91:61:cf:6a:d9: 75:4b:89:4c:fc:af:0e:bd:05:c4:15:df:5c:53:b4:7f:24:30: b0:7f:f1:70:8c:1f:8f:36:2e:d9:4d:c1:ef:f9:5f:4f:3b:d5: eb:ce:16:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o16ixfHYACr7cadQTsg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NWNlZWMwN2I0MDg1MTAwMzgyZWI1YTExMjA0ZWM0Yjk4NTlhNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoejMoLrayrGQa1lonAF7FxHCFPmv mkazs3oJPkbGlfzLyXBpPKkbaN8fezoQlGoq7zH/2Pak02mRbj74TPjISyNuM2TD YqCfgWm0KhKuIK/lkrjMZFiiAFWdivEd5JhyN9Bw7hkcljUVNdZyM4qdJIH0maFv dlQwDlZwuFkhn0MU8jJJDGf3pGbprZSLlMZmiqbbkC/Oh2F8CJ3nD/B6k75yUQzY IXTCVDKAUFcAzMRQDgQ2x+OcQw3nIf5r/c/OmYeq9K8QdxJWOrrOTzJfnrVhIv+S N4NG1R1amRLh5jh049JWges1Gmdy0VfXmS7928bmLwZeYe92O9et7wyvcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIXO7Ae0CFEAOC61oRIE7EuYWacsMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaGM3c0I3UUlVUUE0THJXaEVnVHNTNWhacHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hEMA0G CSqGSIb3DQEBCwUAA4IBAQBphNEbZMEpRPeY8nf2cKEGZTH1j2x0phYI1hKTTWd9 Zd6m38Q9dsz72UNYCAYlosmbOTkEkFMbdZVl5DV5wrBUjRulYlJx4NgOB0nHYJPs xVu7mzRA0A2hDsizb7y9JV6QzRnwmf+w6lmRK8vdaRnWwCLzs2kCE+mwFxO8CXPz kvdMqLVKVGqklFpsxmvVDdEQX/xHTIK42nA+apdR/ahtVgRSaua6xk7ZbboRxBUZ 96Za3N/YmdR5yj9DkxU1biVQ5aNBHErZORrAqirr4usjE/E4kWHPatl1S4lM/K8O vQXEFd9cU7R/JDCwf/FwjB+PNi7ZTcHv+V9PO9XrzhYN -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:32 2026 by rpki-client