This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i_Rthq3QogWX0-nV8TYPNzbuNwU.roa File: i_Rthq3QogWX0-nV8TYPNzbuNwU.roa (raw, json) Hash identifier: n49B6p+Vm/RusJVsfw8CbRDvADqvMdr/I2XbLWRbyJA= Subject key identifier: 8B:F4:6D:86:AD:D0:A2:05:97:D3:E9:D5:F1:36:0F:37:36:EE:37:05 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A330BD04341D500723CFF125B2C902 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i_Rthq3QogWX0-nV8TYPNzbuNwU.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205138 IP address blocks: 147.78.103.0/24 maxlen: 24 193.37.45.0/24 maxlen: 24 2a00:1728:38::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:30:bd:04:34:1d:50:07:23:cf:f1:25:b2:c9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8bf46d86add0a20597d3e9d5f1360f3736ee3705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4a:2c:b5:68:a3:07:e6:32:cd:e6:78:3f:c8: 4f:2d:bf:8a:32:07:6b:56:0b:36:4f:1a:2c:07:0d: e9:28:29:ef:38:00:6a:c5:92:bb:52:83:cd:cc:21: 62:6b:31:2b:8d:0e:f8:4a:2d:57:9b:fc:9e:f7:d8: 7c:83:f2:5b:76:c7:ff:14:5e:a9:72:fa:65:ae:81: cd:19:62:e4:b7:06:4d:f6:f2:d8:6e:a8:8c:fc:65: eb:4a:95:03:37:7d:c1:db:e4:4a:5d:54:5a:fd:73: 0f:0b:2a:3a:36:87:ac:e3:b2:38:c9:19:c6:43:b7: 01:3e:37:6d:53:1b:41:f1:fd:05:15:ba:02:85:38: ab:73:a1:19:bc:15:eb:89:7d:e9:0d:d3:94:56:5f: d2:71:7d:27:33:e0:e5:d9:3f:27:2f:67:8b:e2:99: a0:d2:23:80:e6:ef:9e:e8:1c:96:1b:ec:92:e2:8e: fc:c4:e1:0e:a1:0e:c6:20:6d:5b:74:65:bc:57:3b: 9a:12:ba:55:c7:64:58:f9:e8:1e:92:19:e5:9b:ad: 8d:53:5d:91:6e:34:9f:78:9c:e1:d9:a6:38:ea:64: 1e:1d:4f:4a:15:53:06:b6:1b:77:4f:26:5d:a1:0d: 9d:97:4a:59:2f:d5:e0:a2:e9:55:83:94:50:a3:d2: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F4:6D:86:AD:D0:A2:05:97:D3:E9:D5:F1:36:0F:37:36:EE:37:05 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i_Rthq3QogWX0-nV8TYPNzbuNwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.103.0/24 193.37.45.0/24 IPv6: 2a00:1728:38::/48 Signature Algorithm: sha256WithRSAEncryption 69:e2:24:cc:49:b9:44:e3:98:df:e7:37:74:05:bc:4b:a5:94: 08:bd:5e:f8:63:58:7c:aa:18:39:03:6e:7b:77:0a:fe:c8:80: 3f:1e:5d:37:16:bd:81:a9:a9:a1:d0:2d:60:54:8e:28:66:b0: 8a:d3:f2:f3:7f:b4:b0:00:14:fc:3c:69:9d:4f:32:2f:1b:8f: 01:b3:3b:5c:73:f0:ec:1a:41:63:3c:dd:2f:09:90:1f:90:0c: 0b:33:81:1c:d3:89:51:53:3b:a2:7c:6d:ea:cb:d9:8a:55:40: 00:0b:e1:be:5f:e8:3e:9e:03:d8:65:c3:8b:4c:b0:30:1f:91: 19:3b:51:49:7c:a9:8f:45:61:2f:46:9b:3b:26:77:88:c0:90: 25:fb:1f:7e:61:53:81:a9:dc:1a:22:3f:0f:7d:2e:27:d9:74: ff:96:f0:b6:27:f2:28:74:7a:de:d5:a7:0c:78:4a:cd:91:99: a3:74:84:26:30:f8:d4:21:6e:e7:36:fc:a4:c0:c8:d0:18:62: 5c:dc:ba:8c:51:f0:d3:b5:e9:7c:c8:f1:62:e9:ac:16:0a:e8: d6:c8:96:9a:bc:a1:d2:89:5e:d4:5c:54:62:e5:bf:5a:d8:0d: 37:30:d3:38:7e:a0:90:23:29:18:5e:2e:6c:34:59:48:97:5b: 1d:99:2f:c7 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt4ozC9BDQdUAcjz/ElsskCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmY0NmQ4NmFkZDBhMjA1OTdkM2U5ZDVmMTM2MGYzNzM2ZWUzNzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ostWijB+YyzeZ4P8hPLb+KMgdr Vgs2TxosBw3pKCnvOABqxZK7UoPNzCFiazErjQ74Si1Xm/ye99h8g/Jbdsf/FF6p cvplroHNGWLktwZN9vLYbqiM/GXrSpUDN33B2+RKXVRa/XMPCyo6Noes47I4yRnG Q7cBPjdtUxtB8f0FFboChTirc6EZvBXriX3pDdOUVl/ScX0nM+Dl2T8nL2eL4pmg 0iOA5u+e6ByWG+yS4o78xOEOoQ7GIG1bdGW8VzuaErpVx2RY+egekhnlm62NU12R bjSfeJzh2aY46mQeHU9KFVMGtht3TyZdoQ2dl0pZL9XgoulVg5RQo9LXrQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIv0bYat0KIFl9Pp1fE2Dzc27jcFMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaV9SdGhxM1FvZ1dYMC1uVjhUWVBOemJ1TndVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAk05nAwQA wSUtMA8EAgACMAkDBwAqABcoADgwDQYJKoZIhvcNAQELBQADggEBAGniJMxJuUTj mN/nN3QFvEullAi9XvhjWHyqGDkDbnt3Cv7IgD8eXTcWvYGpqaHQLWBUjihmsIrT 8vN/tLAAFPw8aZ1PMi8bjwGzO1xz8OwaQWM83S8JkB+QDAszgRzTiVFTO6J8berL 2YpVQAAL4b5f6D6eA9hlw4tMsDAfkRk7UUl8qY9FYS9Gmzsmd4jAkCX7H35hU4Gp 3BoiPw99LifZdP+W8LYn8ih0et7Vpwx4Ss2RmaN0hCYw+NQhbuc2/KTAyNAYYlzc uoxR8NO16XzI8WLprBYK6NbIlpq8odKJXtRcVGLlv1rYDTcw0zh+oJAjKRheLmw0 WUiXWx2ZL8c= -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:25 2026 by rpki-client