This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jo9qg_l9HCJhjWhKBOO0mCpPpZ4.roa File: jo9qg_l9HCJhjWhKBOO0mCpPpZ4.roa (raw, json) Hash identifier: rvketuzSyxFZL+rwjaOsS6/GNWmuPcEIMBuWbYd0W94= Subject key identifier: 8E:8F:6A:83:F9:7D:1C:22:61:8D:68:4A:04:E3:B4:98:2A:4F:A5:9E Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A327E394CAE2098AE50C8C8310528F Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jo9qg_l9HCJhjWhKBOO0mCpPpZ4.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201178 IP address blocks: 45.84.220.0/24 maxlen: 24 45.84.221.0/24 maxlen: 24 91.92.70.0/24 maxlen: 24 93.123.37.0/24 maxlen: 32 93.123.64.0/24 maxlen: 32 193.148.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:27:e3:94:ca:e2:09:8a:e5:0c:8c:83:10:52:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8e8f6a83f97d1c22618d684a04e3b4982a4fa59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b3:a4:50:82:1d:19:9c:6c:34:4e:2f:bf:8c: 2f:cf:ff:de:a4:9e:48:94:53:42:b8:b6:3c:5a:a3: 4d:21:fc:5f:ac:48:b9:f1:7f:62:9c:82:78:69:08: 9f:8a:41:c2:25:11:0b:b3:df:f1:20:6a:7d:9c:a4: ef:d3:c7:17:a2:90:4a:66:5b:a3:44:93:79:26:a9: 9e:b6:66:0d:71:7d:2d:e2:0c:4e:37:e1:fc:d2:93: a6:1f:d3:f4:c4:34:76:4d:c9:05:ef:64:79:44:6e: 8a:ac:ec:51:35:ec:3d:05:23:f9:7d:71:d2:85:6c: 61:4e:8e:09:4d:04:36:3b:99:8d:75:00:04:8b:93: 33:c7:a9:df:a7:38:eb:44:59:94:06:28:0a:17:e2: e7:36:af:77:07:07:49:81:f3:1e:53:56:02:87:17: d1:7c:21:31:3d:ec:33:de:d9:18:b0:72:90:1f:a3: fa:65:fc:92:fb:46:ed:ec:3f:6b:da:ff:86:01:4e: 7f:db:3c:25:dd:e0:fe:a1:07:fa:d5:22:79:2a:ac: c2:8a:e5:84:14:31:a9:6a:7e:fa:8d:e5:42:23:37: 5c:81:93:df:76:cd:8a:b7:6f:04:5c:af:29:bc:4e: 21:30:bb:c8:96:3b:e0:22:32:88:69:af:0b:96:2d: 37:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8F:6A:83:F9:7D:1C:22:61:8D:68:4A:04:E3:B4:98:2A:4F:A5:9E X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/jo9qg_l9HCJhjWhKBOO0mCpPpZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.220.0/23 91.92.70.0/24 93.123.37.0/24 93.123.64.0/24 193.148.252.0/24 Signature Algorithm: sha256WithRSAEncryption 56:37:a6:39:19:08:11:b9:07:13:37:9c:48:35:9f:5a:14:95: 3a:4c:27:3f:bf:1f:22:d8:a1:ec:96:c8:ed:e1:01:6f:05:c3: 2e:ee:58:6a:62:ba:30:1c:64:b3:12:34:9b:94:a0:26:54:31: 1e:34:db:29:88:70:3e:7b:4b:86:88:e5:20:70:f3:98:4b:f3: d9:df:f9:3b:a0:ec:4a:35:12:0c:9a:53:b7:6f:42:b2:4f:e3: c8:fb:8b:e7:00:12:8c:07:a6:50:c5:d2:5d:68:fc:6d:e4:fb: 92:f3:7c:96:fe:d5:ab:8e:81:09:5f:ee:8d:3e:4d:b1:31:a7: 44:dc:10:86:56:85:bc:75:d0:a0:77:e3:4f:1c:74:9e:d6:22: 4d:13:11:d9:1b:fd:4f:44:c0:81:85:fc:8e:2e:91:11:68:50: 77:76:fb:e3:98:fc:f1:e6:0b:48:b1:6f:27:97:02:81:c9:1d: 1a:91:59:b8:3b:72:00:15:f2:4c:92:81:ea:96:b6:e0:9a:4e: 68:20:2b:30:b3:69:d6:b4:2d:c9:ca:cc:78:5f:7e:37:03:4b: 30:92:c4:44:54:89:95:16:8c:74:1f:a7:4b:b2:07:29:e4:35: 0c:d0:94:73:7a:66:99:96:74:67:a8:01:9e:b3:d2:2a:d0:29: 10:a8:85:fd -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4oyfjlMriCYrlDIyDEFKPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZThmNmE4M2Y5N2QxYzIyNjE4ZDY4NGEwNGUzYjQ5ODJhNGZhNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bOkUIIdGZxsNE4vv4wvz//epJ5I lFNCuLY8WqNNIfxfrEi58X9inIJ4aQifikHCJRELs9/xIGp9nKTv08cXopBKZluj RJN5JqmetmYNcX0t4gxON+H80pOmH9P0xDR2TckF72R5RG6KrOxRNew9BSP5fXHS hWxhTo4JTQQ2O5mNdQAEi5Mzx6nfpzjrRFmUBigKF+LnNq93BwdJgfMeU1YChxfR fCExPewz3tkYsHKQH6P6ZfyS+0bt7D9r2v+GAU5/2zwl3eD+oQf61SJ5KqzCiuWE FDGpan76jeVCIzdcgZPfds2Kt28EXK8pvE4hMLvIljvgIjKIaa8Lli03GwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFI6PaoP5fRwiYY1oSgTjtJgqT6WeMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvam85cWdfbDlIQ0poaldoS0JPTzBtQ3BQcFo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBLVTcAwQA W1xGAwQAXXslAwQAXXtAAwQAwZT8MA0GCSqGSIb3DQEBCwUAA4IBAQBWN6Y5GQgR uQcTN5xINZ9aFJU6TCc/vx8i2KHslsjt4QFvBcMu7lhqYrowHGSzEjSblKAmVDEe NNspiHA+e0uGiOUgcPOYS/PZ3/k7oOxKNRIMmlO3b0KyT+PI+4vnABKMB6ZQxdJd aPxt5PuS83yW/tWrjoEJX+6NPk2xMadE3BCGVoW8ddCgd+NPHHSe1iJNExHZG/1P RMCBhfyOLpERaFB3dvvjmPzx5gtIsW8nlwKByR0akVm4O3IAFfJMkoHqlrbgmk5o ICsws2nWtC3Jysx4X343A0swksREVImVFox0H6dLsgcp5DUM0JRzemaZlnRnqAGe s9Iq0CkQqIX9 -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:43 2026 by rpki-client