This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m9vXWT8jreF_N-bU-nMhjMQAD80.roa File: m9vXWT8jreF_N-bU-nMhjMQAD80.roa (raw, json) Hash identifier: PgAzagsi7RL8SBgSuKYKxWTExD7PhdQXxXqfltl5X1o= Subject key identifier: 9B:DB:D7:59:3F:23:AD:E1:7F:37:E6:D4:FA:73:21:8C:C4:00:0F:CD Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3120C0132F0B3089C54E1BAC5B6C5 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m9vXWT8jreF_N-bU-nMhjMQAD80.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60784 IP address blocks: 31.13.227.0/24 maxlen: 24 37.60.136.0/24 maxlen: 24 87.121.76.0/23 maxlen: 23 87.121.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:12:0c:01:32:f0:b3:08:9c:54:e1:ba:c5:b6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bdbd7593f23ade17f37e6d4fa73218cc4000fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:70:83:d1:4e:64:f5:9d:12:ac:cf:c4:d5:94: 91:31:11:ba:6e:95:bb:94:b9:a8:dc:69:27:53:7c: b8:65:6b:4c:52:22:83:ab:d9:41:cc:5a:28:f8:b0: 55:63:43:5c:d5:42:70:da:e7:3e:ee:9d:29:4f:49: 0d:44:c8:7e:d0:d0:7a:a8:6f:39:f9:07:44:90:5c: 08:51:cd:c1:98:aa:5b:e0:7c:b6:f3:62:ff:5c:3b: 09:68:21:1c:5e:c8:2a:fd:5f:09:f2:06:9e:29:9f: 90:2f:2f:37:12:ba:8b:45:5d:5a:92:75:60:3e:b8: fe:2d:62:c0:48:4a:e7:6e:5f:6f:33:68:f8:4e:79: e2:05:a3:46:7e:7e:be:1f:15:bc:81:14:6f:42:2d: 70:76:31:cf:ec:9b:dc:08:0c:26:3d:a0:ff:e8:5f: 40:14:6c:66:33:94:7a:ab:36:7c:e5:68:73:4b:dd: 29:68:ba:25:aa:5c:40:b9:9f:23:7d:3e:c0:5c:55: 8c:a7:f2:ba:dd:86:b7:63:2b:54:3d:7a:cf:f3:2e: 5a:11:67:cc:5a:f3:46:4b:bb:60:43:ea:53:7e:be: 10:ff:6d:a5:26:7e:f3:99:3f:40:28:9a:e8:95:79: f8:94:b0:ce:b8:79:4a:da:25:a5:12:9f:b1:b4:f9: 0f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DB:D7:59:3F:23:AD:E1:7F:37:E6:D4:FA:73:21:8C:C4:00:0F:CD X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/m9vXWT8jreF_N-bU-nMhjMQAD80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.227.0/24 37.60.136.0/24 87.121.76.0-87.121.78.255 Signature Algorithm: sha256WithRSAEncryption 4a:05:ac:01:8f:2a:a4:ef:ef:f8:77:98:71:6d:bb:1b:ed:d3: df:05:13:f7:6c:8c:43:e2:e6:21:64:cd:e9:cd:f5:e6:0c:c4: ee:f0:bc:fb:25:fd:77:b3:3f:dd:73:6c:fc:13:b1:66:95:89: 77:3f:ed:da:f1:e1:eb:c0:63:90:5a:2e:36:d1:97:48:f8:5d: b2:c6:f1:dc:c8:a9:12:d6:11:9e:76:cd:ff:3c:0d:fb:a8:1c: 20:b2:09:5a:aa:73:ed:0a:15:48:f4:d3:99:ee:1d:94:7b:b8: b1:7b:f8:bc:ee:24:cc:03:43:62:69:80:27:2a:6c:fa:d2:30: ce:f7:44:28:69:78:c7:c9:0b:d4:3b:ac:bc:ce:02:b7:1b:09: b7:66:f7:ff:bd:90:63:03:2e:16:9f:ac:48:15:04:41:35:ab: 19:1e:27:68:bb:13:5b:a9:73:03:4d:91:e1:73:b1:7e:28:41: f6:a6:99:0a:0f:fc:26:a4:dc:f4:c0:de:20:08:48:45:bf:7c: 37:e1:a0:f8:7a:8d:e8:63:da:a5:62:83:0b:c8:7f:21:78:90: cf:b4:c8:99:f4:49:73:02:04:3d:62:54:af:b0:6f:1c:8c:8a: 32:08:e2:70:5e:11:e8:5e:2c:4b:b6:ce:af:7f:8b:7f:d6:2d: 53:1b:c0:c6 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4oxIMATLwswicVOG6xbbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmRiZDc1OTNmMjNhZGUxN2YzN2U2ZDRmYTczMjE4Y2M0MDAwZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HCD0U5k9Z0SrM/E1ZSRMRG6bpW7 lLmo3GknU3y4ZWtMUiKDq9lBzFoo+LBVY0Nc1UJw2uc+7p0pT0kNRMh+0NB6qG85 +QdEkFwIUc3BmKpb4Hy282L/XDsJaCEcXsgq/V8J8gaeKZ+QLy83ErqLRV1aknVg Prj+LWLASErnbl9vM2j4TnniBaNGfn6+HxW8gRRvQi1wdjHP7JvcCAwmPaD/6F9A FGxmM5R6qzZ85WhzS90paLolqlxAuZ8jfT7AXFWMp/K63Ya3YytUPXrP8y5aEWfM WvNGS7tgQ+pTfr4Q/22lJn7zmT9AKJrolXn4lLDOuHlK2iWlEp+xtPkPAQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFJvb11k/I63hfzfm1PpzIYzEAA/NMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbTl2WFdUOGpyZUZfTi1iVS1uTWhqTVFBRDgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAHw3jAwQA JTyIMAwDBAJXeUwDBABXeU4wDQYJKoZIhvcNAQELBQADggEBAEoFrAGPKqTv7/h3 mHFtuxvt098FE/dsjEPi5iFkzenN9eYMxO7wvPsl/XezP91zbPwTsWaViXc/7drx 4evAY5BaLjbRl0j4XbLG8dzIqRLWEZ52zf88DfuoHCCyCVqqc+0KFUj005nuHZR7 uLF7+LzuJMwDQ2JpgCcqbPrSMM73RChpeMfJC9Q7rLzOArcbCbdm9/+9kGMDLhaf rEgVBEE1qxkeJ2i7E1upcwNNkeFzsX4oQfammQoP/Cak3PTA3iAISEW/fDfhoPh6 jehj2qVigwvIfyF4kM+0yJn0SXMCBD1iVK+wbxyMijII4nBeEeheLEu2zq9/i3/W LVMbwMY= -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:32 2026 by rpki-client