This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pr1qmZst7ckH7FNvmIumeT-DEYk.roa File: pr1qmZst7ckH7FNvmIumeT-DEYk.roa (raw, json) Hash identifier: 30gbNE+m1JQZB/nzNqMR8R3Snw5DEZkTA0FjvB7mli8= Subject key identifier: A6:BD:6A:99:9B:2D:ED:C9:07:EC:53:6F:98:8B:A6:79:3F:83:11:89 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3175395847D048419CE2BE85AEE3C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pr1qmZst7ckH7FNvmIumeT-DEYk.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 87.121.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:53:95:84:7d:04:84:19:ce:2b:e8:5a:ee:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6bd6a999b2dedc907ec536f988ba6793f831189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:39:42:1e:7f:d9:33:3d:85:f6:8d:78:cd:1c: ee:51:20:85:03:8a:7d:46:81:89:00:cd:a0:23:d0: 90:29:b9:bc:74:f2:89:fc:c6:e1:b1:dc:ff:7c:d3: f1:33:36:c5:27:6b:7a:f9:40:2e:86:12:30:c0:df: 63:c1:55:9e:a4:d7:3a:f5:68:af:6b:9c:48:69:21: 1d:8b:01:76:2e:ac:57:ad:74:80:45:0d:ba:8e:86: ea:75:31:d9:23:0e:97:6b:67:95:65:cd:a9:2f:b1: 7f:b8:1a:53:69:1d:58:7d:ba:74:15:91:55:fc:d1: 4f:6d:3d:08:19:1e:9e:8c:44:3e:46:54:a0:48:0c: 0b:6b:5d:9a:82:d8:03:bd:cc:d6:1f:af:54:fc:9e: c8:82:a5:82:df:2a:49:75:ba:25:08:10:db:e3:d8: 06:cb:a8:32:59:54:ea:6a:dc:29:d0:c9:b2:57:57: f1:8b:3f:b6:6d:80:97:17:56:83:90:5e:1a:a1:8f: 0b:02:d9:73:33:e9:9f:c9:ab:39:ec:23:9d:01:1c: a0:b6:dc:2f:6d:31:fc:0a:4f:ea:8e:95:75:22:8c: 0d:ee:d0:cc:a4:2a:eb:1a:57:a2:e8:a5:72:18:d7: fa:69:03:e8:f8:7e:16:c6:db:98:c7:49:31:82:92: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BD:6A:99:9B:2D:ED:C9:07:EC:53:6F:98:8B:A6:79:3F:83:11:89 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pr1qmZst7ckH7FNvmIumeT-DEYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.121.147.0/24 Signature Algorithm: sha256WithRSAEncryption a4:ae:ad:f2:6a:f6:85:0a:f4:71:4a:ab:1a:e2:95:ba:34:34: 30:35:9b:c5:2e:55:24:ad:e8:13:0f:b2:39:87:3a:0c:63:66: 67:e0:3b:70:1d:8b:67:05:89:15:12:85:be:d6:2d:27:03:ee: 7b:b9:0a:d6:8e:91:54:8c:88:77:56:e3:1c:93:2c:5a:37:da: 3d:90:84:8b:45:f5:6c:ed:d4:c5:70:ff:b2:58:a3:f2:2b:61: c2:b3:28:bc:2d:17:e8:65:0d:40:28:80:90:12:f5:8f:d5:5c: 1b:23:e2:f5:c9:af:e4:38:14:7f:46:89:75:2c:62:55:53:5e: 90:f0:5c:6b:59:99:58:d7:20:37:2e:f6:18:06:d1:c7:55:a1: b8:ad:34:af:aa:77:b3:6b:e7:1e:cd:3b:24:b5:30:80:78:6f: 6e:72:2e:e6:b1:e9:3f:f4:55:5c:fc:3b:2a:13:b8:55:b6:dd: b0:8e:15:b1:86:e4:7e:88:3f:16:db:7a:09:6b:d2:77:e9:b7: d9:36:e3:3f:4f:76:17:56:cb:85:de:db:c7:93:45:12:19:7e: 53:73:cb:37:ae:1d:32:e7:45:28:17:4a:49:eb:df:b3:32:3f: bd:92:ea:50:3d:45:f6:a3:d0:51:d9:27:c6:62:13:be:05:9d: 1a:fa:a6:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oxdTlYR9BIQZzivoWu48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmJkNmE5OTliMmRlZGM5MDdlYzUzNmY5ODhiYTY3OTNmODMxMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjlCHn/ZMz2F9o14zRzuUSCFA4p9 RoGJAM2gI9CQKbm8dPKJ/Mbhsdz/fNPxMzbFJ2t6+UAuhhIwwN9jwVWepNc69Wiv a5xIaSEdiwF2LqxXrXSARQ26jobqdTHZIw6Xa2eVZc2pL7F/uBpTaR1Yfbp0FZFV /NFPbT0IGR6ejEQ+RlSgSAwLa12agtgDvczWH69U/J7IgqWC3ypJdbolCBDb49gG y6gyWVTqatwp0MmyV1fxiz+2bYCXF1aDkF4aoY8LAtlzM+mfyas57COdARygttwv bTH8Ck/qjpV1IowN7tDMpCrrGlei6KVyGNf6aQPo+H4WxtuYx0kxgpIUxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKa9apmbLe3JB+xTb5iLpnk/gxGJMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcHIxcW1ac3Q3Y2tIN0ZOdm1JdW1lVC1ERVlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3mTMA0G CSqGSIb3DQEBCwUAA4IBAQCkrq3yavaFCvRxSqsa4pW6NDQwNZvFLlUkregTD7I5 hzoMY2Zn4DtwHYtnBYkVEoW+1i0nA+57uQrWjpFUjIh3VuMckyxaN9o9kISLRfVs 7dTFcP+yWKPyK2HCsyi8LRfoZQ1AKICQEvWP1VwbI+L1ya/kOBR/Rol1LGJVU16Q 8FxrWZlY1yA3LvYYBtHHVaG4rTSvqneza+cezTsktTCAeG9uci7msek/9FVc/Dsq E7hVtt2wjhWxhuR+iD8W23oJa9J36bfZNuM/T3YXVsuF3tvHk0USGX5Tc8s3rh0y 50UoF0pJ69+zMj+9kupQPUX2o9BR2SfGYhO+BZ0a+qY0 -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:05 2026 by rpki-client