This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o6rOFGkx5UOmuh1BPzTfaTFKay0.roa File: o6rOFGkx5UOmuh1BPzTfaTFKay0.roa (raw, json) Hash identifier: EtQuecpjkapJ92/eV/6VI6wWacdSO6ENi83HlBoiyCI= Subject key identifier: A3:AA:CE:14:69:31:E5:43:A6:BA:1D:41:3F:34:DF:69:31:4A:6B:2D Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A303BADA02B560C676949EBD166B95 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o6rOFGkx5UOmuh1BPzTfaTFKay0.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48917 IP address blocks: 87.121.119.0/24 maxlen: 24 91.92.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:ba:da:02:b5:60:c6:76:94:9e:bd:16:6b:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3aace146931e543a6ba1d413f34df69314a6b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:86:f2:c9:9f:d8:60:55:cb:6d:9c:fb:56: e8:e0:07:3e:cf:95:48:ca:c9:fe:ae:37:06:d9:c6: b8:be:78:c7:7d:0c:c2:39:08:f0:50:b9:83:0b:b6: 3f:dd:ae:06:6a:d8:3c:85:4e:8a:d6:37:da:1b:f9: e6:c6:8c:ab:94:3f:bd:5b:0b:e0:2e:10:2a:91:4d: 3a:1b:d9:a5:7a:79:9d:d9:06:94:ba:8d:3c:f7:b2: de:c9:a4:0d:b8:c2:4d:58:f6:69:70:37:f3:fa:2d: 57:ad:dd:4f:cd:19:ba:84:d1:58:d9:1f:15:6d:7f: 1d:e6:68:eb:fd:a2:9c:78:90:21:4d:c0:d4:b8:4b: 0c:3a:e8:8a:43:1a:07:97:86:d6:64:c9:19:6d:64: 83:f5:bb:59:12:e2:23:8c:57:a4:f9:52:82:49:23: 6e:f5:f4:58:d6:05:4d:8d:e8:2e:03:11:ce:18:8f: 2d:ef:18:f2:04:34:11:3d:ab:e5:dc:b4:b6:f9:7c: 17:64:d3:02:20:d3:55:58:20:7b:ca:43:23:8c:0a: 17:fe:af:1c:d4:6b:b1:88:73:e4:02:63:fb:2f:66: b1:a5:04:b7:5b:ee:2b:95:a6:48:04:57:c7:59:26: e8:23:50:fc:4c:72:4b:9e:50:3f:90:2f:9c:7e:46: 5f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AA:CE:14:69:31:E5:43:A6:BA:1D:41:3F:34:DF:69:31:4A:6B:2D X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/o6rOFGkx5UOmuh1BPzTfaTFKay0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.119.0/24 91.92.106.0/23 Signature Algorithm: sha256WithRSAEncryption 05:57:3b:0a:07:7a:9d:7e:88:de:4e:62:a2:95:26:e9:8b:e5: 31:90:f9:16:b3:95:3f:a1:44:40:3f:c9:12:da:99:78:53:53: 6a:fa:ec:6d:c1:f1:44:bb:50:b5:a7:a8:ce:c4:7f:66:2d:f2: 76:f0:67:fe:7f:27:42:f2:b7:eb:48:fe:5a:f5:ab:aa:94:03: d4:c8:1e:7e:fb:81:b6:06:5a:0c:68:53:7b:c9:1d:41:01:b9: ee:f0:f9:94:df:73:fe:09:44:02:23:e4:a4:0c:65:ac:6a:56: e8:01:ec:be:11:b6:65:34:c7:c8:04:67:ee:bd:ed:c9:eb:55: 4e:33:8e:c9:bb:8b:05:97:9b:be:61:f2:8a:62:b2:0b:96:d0: 51:9f:e3:81:b5:f3:65:6e:b2:a0:d6:fa:c3:26:2b:62:9b:e5: 86:78:fc:f6:a4:97:d6:57:14:db:26:b3:2c:09:2b:b3:70:8e: 49:70:92:e6:0c:53:80:d8:41:98:99:c6:55:f7:ca:b1:30:45: a2:94:bb:1d:e7:06:18:19:51:45:44:1f:52:72:e1:48:3e:b1: e2:17:3f:49:b9:99:0a:51:a6:98:e8:40:2d:22:ff:20:2e:31: ea:0c:97:08:4e:d6:ee:2c:a6:74:99:04:ae:7d:5d:bf:ca:02: 20:39:93:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owO62gK1YMZ2lJ69FmuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2FhY2UxNDY5MzFlNTQzYTZiYTFkNDEzZjM0ZGY2OTMxNGE2YjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01mG8smf2GBVy22c+1bo4Ac+z5VI ysn+rjcG2ca4vnjHfQzCOQjwULmDC7Y/3a4Gatg8hU6K1jfaG/nmxoyrlD+9Wwvg LhAqkU06G9mlenmd2QaUuo0897LeyaQNuMJNWPZpcDfz+i1Xrd1PzRm6hNFY2R8V bX8d5mjr/aKceJAhTcDUuEsMOuiKQxoHl4bWZMkZbWSD9btZEuIjjFek+VKCSSNu 9fRY1gVNjeguAxHOGI8t7xjyBDQRPavl3LS2+XwXZNMCINNVWCB7ykMjjAoX/q8c 1GuxiHPkAmP7L2axpQS3W+4rlaZIBFfHWSboI1D8THJLnlA/kC+cfkZfFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKOqzhRpMeVDprodQT8032kxSmstMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvbzZyT0ZHa3g1VU9tdWgxQlB6VGZhVEZLYXkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3l3AwQB W1xqMA0GCSqGSIb3DQEBCwUAA4IBAQAFVzsKB3qdfojeTmKilSbpi+UxkPkWs5U/ oURAP8kS2pl4U1Nq+uxtwfFEu1C1p6jOxH9mLfJ28Gf+fydC8rfrSP5a9auqlAPU yB5++4G2BloMaFN7yR1BAbnu8PmU33P+CUQCI+SkDGWsalboAey+EbZlNMfIBGfu ve3J61VOM47Ju4sFl5u+YfKKYrILltBRn+OBtfNlbrKg1vrDJitim+WGePz2pJfW VxTbJrMsCSuzcI5JcJLmDFOA2EGYmcZV98qxMEWilLsd5wYYGVFFRB9ScuFIPrHi Fz9JuZkKUaaY6EAtIv8gLjHqDJcITtbuLKZ0mQSufV2/ygIgOZMl -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:11 2026 by rpki-client