This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o1GYtD5vp312UzMBWLfjibq4l-s.roa File: o1GYtD5vp312UzMBWLfjibq4l-s.roa (raw, json) Hash identifier: 9Y9QLMBSwkdjGMjxJQV5JzJiDM2DfJyPWYc7PhRBKOM= Subject key identifier: A3:51:98:B4:3E:6F:A7:7D:76:53:33:01:58:B7:E3:89:BA:B8:97:EB Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B8D0ADF1276431FDC4C133450AC8C13D5 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o1GYtD5vp312UzMBWLfjibq4l-s.roa Signing time: Mon 05 Jan 2026 07:24:18 +0000 ROA not before: Mon 05 Jan 2026 07:24:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213035 IP address blocks: 87.121.69.0/24 maxlen: 24 194.49.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:0a:df:12:76:43:1f:dc:4c:13:34:50:ac:8c:13:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 5 07:24:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a35198b43e6fa77d7653330158b7e389bab897eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:73:35:dd:91:cd:fa:90:72:67:09:43:b0: 72:3a:85:2a:cf:12:85:40:ed:60:9f:a3:37:88:d0: 69:f1:2e:ed:5d:c2:79:d8:e2:69:a2:99:44:e0:01: 3a:76:ea:51:1b:40:71:65:05:97:bc:97:79:2c:91: cf:c4:d5:5c:0c:f5:37:7d:3e:8e:5f:31:c5:a5:f4: 79:a3:78:b3:f5:f4:38:de:2d:52:6f:4d:a1:6b:60: e5:66:5a:03:61:7c:2d:91:f8:f2:f5:d5:85:ec:60: 62:c9:42:a5:63:79:b0:88:1b:c7:5e:44:d8:0d:8f: b0:7c:48:ec:60:c7:3e:a9:36:e4:d6:00:95:d4:d4: 15:4e:7f:d1:03:e2:ea:93:14:84:18:8e:11:7c:71: dc:58:dd:3b:98:e0:f8:fe:d9:ef:a8:d5:56:6e:07: 23:72:a6:c4:66:2f:56:2c:d0:66:2e:38:32:ca:a8: 83:c1:06:bc:13:0c:be:b9:38:62:57:b6:1f:28:d0: a8:6b:65:1e:b0:55:c3:8b:3c:be:0a:04:8a:a9:13: 77:fd:55:65:da:e6:21:5c:6d:01:f2:51:ad:b2:89: e8:fa:04:3f:c7:d4:ac:af:74:0b:2c:73:6d:c2:16: f4:31:c1:bd:76:54:63:7e:75:ad:3e:b3:9d:01:b4: db:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:51:98:B4:3E:6F:A7:7D:76:53:33:01:58:B7:E3:89:BA:B8:97:EB X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o1GYtD5vp312UzMBWLfjibq4l-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.69.0/24 194.49.94.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:82:9e:31:10:66:d3:91:93:54:a0:6c:ee:bf:a2:5f:52:c0: 1c:16:01:06:24:86:e4:6c:9e:3e:a6:d4:19:5f:43:6d:91:12: 72:06:e5:f6:2f:50:18:ed:b2:5e:bc:b2:3a:b0:b1:23:af:ce: 07:7b:88:9b:fe:88:29:8c:f8:ed:bc:3a:6c:4c:8b:4c:fc:d7: 85:38:be:96:5c:fb:b6:f9:28:f0:14:25:61:2c:ce:24:c3:05: a0:7f:2d:b3:80:ff:80:1f:35:fd:2d:58:70:36:38:02:c8:34: af:d6:2a:e5:f5:aa:95:f9:33:5b:78:19:fd:1f:6e:50:f2:71: fb:86:05:ab:3b:6d:36:58:d2:99:ee:1f:1d:79:40:19:fd:a7: 09:a4:23:1b:72:66:75:88:89:31:fb:0d:99:f5:be:38:12:4e: d2:11:b7:b3:4b:68:4b:03:41:73:6e:73:e4:a5:c2:f2:89:f8: 9e:1d:8c:9d:57:34:3a:ee:16:ed:9f:af:82:06:1b:b4:d8:cc: da:80:f3:6c:e8:01:c4:51:6a:23:de:f3:95:d1:ff:0e:be:c0: ff:c0:a7:fc:95:41:7d:5d:37:75:bf:75:ce:1c:be:61:13:ea: 57:5a:10:aa:90:4f:5d:c3:19:d4:79:e3:3f:ae:5d:45:90:34: af:98:1d:d3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuNCt8SdkMf3EwTNFCsjBPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTA1MDcyNDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzUxOThiNDNlNmZhNzdkNzY1MzMzMDE1OGI3ZTM4OWJhYjg5N2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L9zNd2RzfqQcmcJQ7ByOoUqzxKF QO1gn6M3iNBp8S7tXcJ52OJpoplE4AE6dupRG0BxZQWXvJd5LJHPxNVcDPU3fT6O XzHFpfR5o3iz9fQ43i1Sb02ha2DlZloDYXwtkfjy9dWF7GBiyUKlY3mwiBvHXkTY DY+wfEjsYMc+qTbk1gCV1NQVTn/RA+LqkxSEGI4RfHHcWN07mOD4/tnvqNVWbgcj cqbEZi9WLNBmLjgyyqiDwQa8Ewy+uThiV7YfKNCoa2UesFXDizy+CgSKqRN3/VVl 2uYhXG0B8lGtsono+gQ/x9Ssr3QLLHNtwhb0McG9dlRjfnWtPrOdAbTbowIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKNRmLQ+b6d9dlMzAVi344m6uJfrMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbzFHWXRENXZwMzEyVXpNQldMZmppYnE0bC1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3lFAwQA wjFeMA0GCSqGSIb3DQEBCwUAA4IBAQBNgp4xEGbTkZNUoGzuv6JfUsAcFgEGJIbk bJ4+ptQZX0NtkRJyBuX2L1AY7bJevLI6sLEjr84He4ib/ogpjPjtvDpsTItM/NeF OL6WXPu2+SjwFCVhLM4kwwWgfy2zgP+AHzX9LVhwNjgCyDSv1irl9aqV+TNbeBn9 H25Q8nH7hgWrO202WNKZ7h8deUAZ/acJpCMbcmZ1iIkx+w2Z9b44Ek7SEbezS2hL A0FzbnPkpcLyifieHYydVzQ67hbtn6+CBhu02MzagPNs6AHEUWoj3vOV0f8OvsD/ wKf8lUF9XTd1v3XOHL5hE+pXWhCqkE9dwxnUeeM/rl1FkDSvmB3T -----END CERTIFICATE-----Generated at Thu Jan 8 17:59:59 2026 by rpki-client