This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nRcaMZW_ZYSPoy7PuGh2pjx1qsA.roa File: nRcaMZW_ZYSPoy7PuGh2pjx1qsA.roa (raw, json) Hash identifier: 2EvM1LVml+52mZ0om8fOdKnOZSC1PW3dkg0K0vI/yXA= Subject key identifier: 9D:17:1A:31:95:BF:65:84:8F:A3:2E:CF:B8:68:76:A6:3C:75:AA:C0 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A340C3826D159C1343F19E2C8E9A61 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nRcaMZW_ZYSPoy7PuGh2pjx1qsA.roa Signing time: Thu 01 Jan 2026 08:18:43 +0000 ROA not before: Thu 01 Jan 2026 08:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213035 IP address blocks: 87.121.69.0/24 maxlen: 24 194.49.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:40:c3:82:6d:15:9c:13:43:f1:9e:2c:8e:9a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d171a3195bf65848fa32ecfb86876a63c75aac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:62:35:90:fe:01:31:69:42:1b:84:05:71: 0d:37:ab:d2:82:9c:1a:e4:79:c4:dc:9d:5c:87:24: a5:1b:b5:24:62:ab:ee:95:1f:86:73:9d:8f:95:f5: 88:c5:3e:f7:07:b0:8a:d7:fa:3e:e8:8d:4c:d5:79: 53:1b:65:bf:23:e6:2c:50:0b:2a:99:99:c8:26:f5: de:c5:bc:11:31:f9:af:b9:a8:2c:02:aa:8c:85:c0: 56:6a:ed:ed:d2:41:c8:c2:6c:13:e7:c9:12:94:ad: 17:eb:a3:0c:27:17:25:29:64:01:60:86:30:ab:76: 08:c1:62:84:ea:5e:1b:d2:33:f7:63:52:07:21:aa: 97:2e:0d:94:26:e7:77:58:b8:c0:da:fb:d9:d1:28: 76:3f:7a:04:98:34:9c:46:31:00:44:d4:e7:80:7a: 76:01:f5:05:6a:69:9f:1e:67:a3:fe:43:0f:95:5a: 2d:c2:93:bb:45:70:15:60:56:9c:64:d2:08:c3:aa: c8:e2:eb:e3:0e:3e:94:cf:58:d0:d8:ad:2d:c6:0f: 84:18:60:56:53:fb:bd:61:4b:00:0f:67:cd:92:30: b0:34:3e:d2:a3:a1:b5:b9:58:c4:ca:42:a0:fa:43: 6d:43:f9:94:b1:bb:30:22:66:af:5c:a2:7d:bf:36: a0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:17:1A:31:95:BF:65:84:8F:A3:2E:CF:B8:68:76:A6:3C:75:AA:C0 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nRcaMZW_ZYSPoy7PuGh2pjx1qsA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.69.0/24 194.49.94.0/24 Signature Algorithm: sha256WithRSAEncryption 81:4f:f6:9b:c7:bf:80:29:de:c2:c9:47:a4:eb:a9:a0:d9:6a: 13:6f:95:e5:d0:16:33:3f:2f:7e:c8:10:f5:c5:1a:be:fa:23: de:4f:7d:40:5e:b1:7f:71:2b:13:55:c2:cf:7a:9d:60:7a:25: 25:b5:2b:7f:06:de:a5:a4:fe:ce:42:b0:31:50:4d:a1:e3:61: ef:cf:0b:da:d1:b3:87:b8:f0:d8:54:1d:19:ba:db:17:fc:a9: 1a:c0:95:4e:47:57:0c:06:5e:50:1e:c5:79:71:4b:89:1a:32: 3d:21:a0:87:fc:94:ec:ea:d5:a2:8c:e2:2b:07:c6:7a:8d:53: 4d:af:0d:d3:03:76:82:56:80:b7:4f:5c:50:83:b1:dc:23:54: 1d:de:d6:f9:cf:d7:aa:ef:26:da:21:19:3a:29:a5:b7:f9:82: 6e:04:6c:b8:4e:3f:6d:af:f3:33:ed:cb:d7:34:7a:7a:e5:36: b5:f9:5d:4e:24:30:97:55:38:50:2b:5c:d0:a1:a3:cf:5e:d6: ba:eb:8c:16:35:62:28:9c:5d:02:b5:d3:87:30:4b:2f:fe:eb: 79:06:d1:9d:89:7b:48:32:a7:f6:2d:1d:2c:a0:c5:ca:75:a0: 17:92:6d:30:5e:00:d6:fd:5d:4b:87:1f:e9:c7:11:a1:03:e6: d7:ef:11:fe -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0DDgm0VnBND8Z4sjpphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDE3MWEzMTk1YmY2NTg0OGZhMzJlY2ZiODY4NzZhNjNjNzVhYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy5iNZD+ATFpQhuEBXENN6vSgpwa 5HnE3J1chySlG7UkYqvulR+Gc52PlfWIxT73B7CK1/o+6I1M1XlTG2W/I+YsUAsq mZnIJvXexbwRMfmvuagsAqqMhcBWau3t0kHIwmwT58kSlK0X66MMJxclKWQBYIYw q3YIwWKE6l4b0jP3Y1IHIaqXLg2UJud3WLjA2vvZ0Sh2P3oEmDScRjEARNTngHp2 AfUFammfHmej/kMPlVotwpO7RXAVYFacZNIIw6rI4uvjDj6Uz1jQ2K0txg+EGGBW U/u9YUsAD2fNkjCwND7So6G1uVjEykKg+kNtQ/mUsbswImavXKJ9vzag2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ0XGjGVv2WEj6Muz7hodqY8darAMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvblJjYU1aV19aWVNQb3k3UHVHaDJwangxcXNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3lFAwQA wjFeMA0GCSqGSIb3DQEBCwUAA4IBAQCBT/abx7+AKd7CyUek66mg2WoTb5Xl0BYz Py9+yBD1xRq++iPeT31AXrF/cSsTVcLPep1geiUltSt/Bt6lpP7OQrAxUE2h42Hv zwva0bOHuPDYVB0ZutsX/KkawJVOR1cMBl5QHsV5cUuJGjI9IaCH/JTs6tWijOIr B8Z6jVNNrw3TA3aCVoC3T1xQg7HcI1Qd3tb5z9eq7ybaIRk6KaW3+YJuBGy4Tj9t r/Mz7cvXNHp65Ta1+V1OJDCXVThQK1zQoaPPXta664wWNWIonF0CtdOHMEsv/ut5 BtGdiXtIMqf2LR0soMXKdaAXkm0wXgDW/V1Lhx/pxxGhA+bX7xH+ -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:45 2026 by rpki-client