This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kRIufqsqnDpAYHY13rVEXLQzSAI.roa File: kRIufqsqnDpAYHY13rVEXLQzSAI.roa (raw, json) Hash identifier: E4QL8PbYsubONG6GLAczrgpfq8pLV5klbKvyQ3rIxwQ= Subject key identifier: 91:12:2E:7E:AB:2A:9C:3A:40:60:76:35:DE:B5:44:5C:B4:33:48:02 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2EF70205F80F60855080C9AAAAEC6 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kRIufqsqnDpAYHY13rVEXLQzSAI.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33802 IP address blocks: 87.120.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ef:70:20:5f:80:f6:08:55:08:0c:9a:aa:ae:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=91122e7eab2a9c3a40607635deb5445cb4334802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5c:7f:03:3e:60:e6:b5:a3:42:af:df:8a:b4: 71:f2:2a:0f:ab:22:ed:b9:6c:c3:2e:62:ff:91:90: 12:b0:34:49:5b:c0:4c:8d:e8:35:ca:03:3d:9d:51: 83:b1:f9:de:25:6c:e0:f1:0f:e4:f6:b5:18:2a:b0: 94:90:2c:2b:4d:4e:43:ca:4c:f4:88:17:0e:99:62: 88:f8:ec:f4:65:26:c2:fc:bb:cd:16:6e:36:60:99: c1:00:14:ed:3e:70:3c:f1:a6:68:ab:b7:75:bd:a4: 35:ee:23:95:15:c6:06:0e:50:b4:3c:61:3d:17:4c: f7:0c:6b:3f:24:19:5b:d9:42:e5:43:df:fa:c1:d0: 1f:37:7f:88:a9:ea:0d:51:84:9a:fc:e6:14:9f:93: 5e:58:c9:fe:ba:4c:2f:64:34:f6:b5:fa:e8:d7:0f: aa:63:56:c5:39:5d:71:fb:09:8b:98:3d:27:89:13: d5:fe:c3:47:34:d1:8a:4d:9c:e6:39:4b:ab:c6:5a: 20:7f:24:8a:b9:14:db:d1:ed:d1:b5:8f:8e:b5:70: 63:ad:65:d8:61:f9:48:99:97:d6:ba:f6:b3:26:6a: 27:a6:ae:99:e5:2b:78:36:23:fe:16:7a:d7:50:ef: cc:f5:49:0f:f2:ce:a5:72:fe:c7:02:b8:27:4a:2c: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:12:2E:7E:AB:2A:9C:3A:40:60:76:35:DE:B5:44:5C:B4:33:48:02 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/kRIufqsqnDpAYHY13rVEXLQzSAI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.10.0/24 Signature Algorithm: sha256WithRSAEncryption ab:59:20:e8:87:54:8d:93:86:bb:c6:fa:a7:73:dc:16:30:ca: c6:9d:ae:a4:d1:e5:dc:e1:40:a4:02:43:62:0d:a2:9b:e4:8d: bb:76:09:55:b2:59:99:b0:fb:24:f9:35:a6:c5:79:99:0e:7c: f4:80:e8:ff:8d:e3:e9:68:8e:c3:7b:b9:da:5d:f9:06:e3:16: ff:c2:e8:a1:2e:11:d8:5a:fd:16:98:fd:74:1b:fc:7d:08:02: ba:4b:ee:6a:72:07:9a:84:7f:24:41:6b:f6:a7:bd:c4:d5:5d: c6:e7:e6:9a:80:60:d8:f9:3b:19:bd:79:3b:0a:9b:c9:11:0c: d2:3f:17:54:5e:39:7a:4f:19:d5:cd:41:01:61:57:0d:40:bf: 06:b6:c0:95:b1:cb:8f:42:0d:f8:c2:27:05:21:f2:e9:19:09: 12:60:6c:85:6e:89:52:8d:a5:08:3b:8b:c3:ac:d6:0d:a1:6a: a8:50:92:1a:b5:52:4f:47:27:19:69:cc:1b:2c:43:1a:1f:9a: 42:23:64:f0:0f:ba:47:88:26:a1:f8:14:6a:95:dc:51:57:7c: cb:2f:ad:6f:d9:ca:72:dc:b7:71:19:6e:f7:d4:a6:92:af:20: a3:70:1a:3e:e8:be:c4:67:35:85:64:94:98:74:64:09:07:b5: 78:d0:31:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ou9wIF+A9ghVCAyaqq7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTEyMmU3ZWFiMmE5YzNhNDA2MDc2MzVkZWI1NDQ1Y2I0MzM0ODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lx/Az5g5rWjQq/firRx8ioPqyLt uWzDLmL/kZASsDRJW8BMjeg1ygM9nVGDsfneJWzg8Q/k9rUYKrCUkCwrTU5Dykz0 iBcOmWKI+Oz0ZSbC/LvNFm42YJnBABTtPnA88aZoq7d1vaQ17iOVFcYGDlC0PGE9 F0z3DGs/JBlb2ULlQ9/6wdAfN3+IqeoNUYSa/OYUn5NeWMn+ukwvZDT2tfro1w+q Y1bFOV1x+wmLmD0niRPV/sNHNNGKTZzmOUurxlogfySKuRTb0e3RtY+OtXBjrWXY YflImZfWuvazJmonpq6Z5St4NiP+FnrXUO/M9UkP8s6lcv7HArgnSiwlKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJESLn6rKpw6QGB2Nd61RFy0M0gCMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEva1JJdWZxc3FuRHBBWUhZMTNyVkVYTFF6U0FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gKMA0G CSqGSIb3DQEBCwUAA4IBAQCrWSDoh1SNk4a7xvqnc9wWMMrGna6k0eXc4UCkAkNi DaKb5I27dglVslmZsPsk+TWmxXmZDnz0gOj/jePpaI7De7naXfkG4xb/wuihLhHY Wv0WmP10G/x9CAK6S+5qcgeahH8kQWv2p73E1V3G5+aagGDY+TsZvXk7CpvJEQzS PxdUXjl6TxnVzUEBYVcNQL8GtsCVscuPQg34wicFIfLpGQkSYGyFbolSjaUIO4vD rNYNoWqoUJIatVJPRycZacwbLEMaH5pCI2TwD7pHiCah+BRqldxRV3zLL61v2cpy 3LdxGW731KaSryCjcBo+6L7EZzWFZJSYdGQJB7V40DFQ -----END CERTIFICATE-----Generated at Fri Jan 2 12:08:59 2026 by rpki-client