This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6NFAMlCDTrtHdqDXgSb5M0LkFg.roa File: m6NFAMlCDTrtHdqDXgSb5M0LkFg.roa (raw, json) Hash identifier: SdgEq2HdFl3c4juq1H1E0CCEuO+/qNg3doEEfCYTXI4= Subject key identifier: 9B:A3:45:00:C9:42:0D:3A:ED:1D:DA:83:5E:04:9B:E4:CD:0B:90:58 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A33C22BA851BC7AF16B7D4DBA429F8 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6NFAMlCDTrtHdqDXgSb5M0LkFg.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211437 IP address blocks: 87.120.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3c:22:ba:85:1b:c7:af:16:b7:d4:db:a4:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ba34500c9420d3aed1dda835e049be4cd0b9058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:df:ab:be:62:13:bc:66:18:92:76:f5:ae: 60:85:a0:b2:c9:42:c6:3a:fd:87:e7:6a:3b:5f:84: f9:30:cc:57:75:ce:5c:3b:b8:01:db:0c:0a:aa:94: 97:a4:34:47:36:c7:00:69:31:58:e1:ae:be:62:44: 27:8b:e7:b3:25:23:93:75:ac:bd:92:1c:1b:c8:40: 19:12:61:88:50:08:3c:42:cd:0a:ac:83:ae:18:af: e4:5b:61:44:ed:6b:ff:40:a7:8f:cd:37:c7:97:4f: aa:c4:a4:b1:5b:f9:2b:a4:74:1b:de:fb:73:42:9a: 42:f4:a7:b7:bc:7f:99:e2:1f:71:b0:fa:77:cc:1f: 04:56:52:1d:c1:8f:6a:f7:b3:66:a2:ab:00:d0:ee: e7:cc:ef:1e:3b:b1:58:fa:b9:c0:ae:c2:34:30:b4: c3:67:25:54:ca:5a:ef:8a:19:04:ba:81:67:29:c7: 38:e2:b7:ad:db:a1:61:9f:93:d8:a7:0b:4b:51:1c: 41:fc:12:63:6d:1d:83:0a:8b:ab:34:75:0b:a8:32: 61:54:69:6c:38:64:80:f2:d9:12:01:30:f4:09:f2: eb:ff:25:9b:a1:43:84:7f:56:21:f0:99:c6:c6:c5: f9:c9:80:d6:2d:de:11:d5:23:5f:ee:55:4a:f8:b5: 41:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A3:45:00:C9:42:0D:3A:ED:1D:DA:83:5E:04:9B:E4:CD:0B:90:58 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m6NFAMlCDTrtHdqDXgSb5M0LkFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.5.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:44:42:6e:d1:79:a6:3d:69:cf:b3:62:0e:8c:31:13:b7:1a: 6d:bc:2d:53:f9:89:b3:68:d5:1b:ec:71:e9:67:3b:d9:48:bf: f6:17:c9:55:88:74:ef:6e:4d:bf:79:3a:9b:a9:23:9a:77:03: 24:50:05:ed:ad:0e:8e:37:ca:07:d9:e0:66:b5:ce:e1:97:95: d1:7d:df:ee:56:45:60:1b:ea:0b:9d:1f:71:4a:84:eb:01:09: b7:9e:3f:9c:be:16:97:14:07:0e:6c:62:10:da:7b:7a:b6:ba: bb:85:4e:e9:df:84:10:30:8b:9e:da:7a:79:a1:19:75:e9:62: 93:fc:c9:2a:0a:7f:6a:22:22:d4:96:2d:bc:38:cd:d6:33:3a: a3:1a:b8:42:a6:3d:6b:97:d7:80:2e:1f:54:99:93:6f:6b:e7: 1f:a5:34:aa:41:aa:a6:e4:7e:3d:8f:f2:de:35:63:df:8f:5e: ad:d5:f6:f7:bc:22:6c:03:5b:15:9f:b3:2d:23:19:eb:c2:ae: 0d:50:0c:7f:ec:06:04:99:f1:c4:61:ce:0a:b0:f3:c9:a9:c6: 2f:f6:96:e1:b7:44:55:42:2f:be:a3:54:2e:1c:3a:f5:a9:63: ab:b8:1b:9c:a8:14:60:97:c6:a8:c0:a2:3d:8e:47:48:ae:b8: 25:39:91:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozwiuoUbx68Wt9TbpCn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmEzNDUwMGM5NDIwZDNhZWQxZGRhODM1ZTA0OWJlNGNkMGI5MDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufjfq75iE7xmGJJ29a5ghaCyyULG Ov2H52o7X4T5MMxXdc5cO7gB2wwKqpSXpDRHNscAaTFY4a6+YkQni+ezJSOTday9 khwbyEAZEmGIUAg8Qs0KrIOuGK/kW2FE7Wv/QKePzTfHl0+qxKSxW/krpHQb3vtz QppC9Ke3vH+Z4h9xsPp3zB8EVlIdwY9q97NmoqsA0O7nzO8eO7FY+rnArsI0MLTD ZyVUylrvihkEuoFnKcc44ret26Fhn5PYpwtLURxB/BJjbR2DCourNHULqDJhVGls OGSA8tkSATD0CfLr/yWboUOEf1Yh8JnGxsX5yYDWLd4R1SNf7lVK+LVBMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJujRQDJQg067R3ag14Em+TNC5BYMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbTZORkFNbENEVHJ0SGRxRFhnU2I1TTBMa0ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3gFMA0G CSqGSIb3DQEBCwUAA4IBAQA9REJu0XmmPWnPs2IOjDETtxptvC1T+YmzaNUb7HHp ZzvZSL/2F8lViHTvbk2/eTqbqSOadwMkUAXtrQ6ON8oH2eBmtc7hl5XRfd/uVkVg G+oLnR9xSoTrAQm3nj+cvhaXFAcObGIQ2nt6trq7hU7p34QQMIue2np5oRl16WKT /MkqCn9qIiLUli28OM3WMzqjGrhCpj1rl9eALh9UmZNva+cfpTSqQaqm5H49j/Le NWPfj16t1fb3vCJsA1sVn7MtIxnrwq4NUAx/7AYEmfHEYc4KsPPJqcYv9pbht0RV Qi++o1QuHDr1qWOruBucqBRgl8aowKI9jkdIrrglOZF2 -----END CERTIFICATE-----Generated at Fri Jan 2 12:03:02 2026 by rpki-client