This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qOUAQAFT6fwmKdCR-zDB5iVhtcw.roa File: qOUAQAFT6fwmKdCR-zDB5iVhtcw.roa (raw, json) Hash identifier: XrlJGL+nyRwDepG6gvojWnCaIs1MU2KuweM3GjXVDY8= Subject key identifier: A8:E5:00:40:01:53:E9:FC:26:29:D0:91:FB:30:C1:E6:25:61:B5:CC Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A314A6889C79C8AEED588977F6F86E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qOUAQAFT6fwmKdCR-zDB5iVhtcw.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 87.120.158.0/23 maxlen: 24 94.156.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:14:a6:88:9c:79:c8:ae:ed:58:89:77:f6:f8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a8e500400153e9fc2629d091fb30c1e62561b5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:17:8c:72:9b:41:bb:49:2b:03:61:a2:1d:f5: eb:f0:ca:41:56:4b:ea:f3:cd:f7:8d:0b:57:06:9e: 51:3d:4b:b4:c7:7d:bf:51:e2:79:60:31:57:16:a9: 02:09:de:d7:92:fc:8b:c5:93:ce:de:ee:da:4d:1a: 00:05:48:c6:22:48:9c:55:bb:e3:e2:17:5d:1c:96: 2d:fc:83:96:82:6e:da:43:27:6c:b3:9d:fb:2f:4b: 35:9a:1a:a9:66:20:93:82:98:a1:fc:a7:88:19:7a: 5a:9b:d6:e7:f4:41:49:6d:bd:80:d2:ce:e3:98:e6: 8a:78:35:bb:e7:ef:47:19:ac:81:9d:1e:65:f1:29: 02:ac:fd:7f:d9:30:6a:f5:53:5a:33:f2:90:8d:3b: 4c:3a:f9:ce:d9:ca:cb:b8:48:a3:fc:ea:5c:ca:9c: cd:fb:d9:d3:e0:b5:b6:07:5e:23:71:c9:fc:ce:08: ab:60:70:62:ee:78:53:7d:ea:69:66:19:12:5f:a4: 67:ad:bf:5a:9d:80:b4:40:c8:3c:fc:35:a2:7d:62: 4e:9c:3b:39:98:b3:4c:ca:59:ad:65:01:d8:59:86: 17:bc:0d:50:74:20:49:f5:ca:f9:1a:be:a7:88:4e: f6:75:9f:7d:f5:10:0d:68:ab:9a:1a:11:6d:c9:84: 7d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:00:40:01:53:E9:FC:26:29:D0:91:FB:30:C1:E6:25:61:B5:CC X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qOUAQAFT6fwmKdCR-zDB5iVhtcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.158.0/23 94.156.14.0/24 Signature Algorithm: sha256WithRSAEncryption 24:c6:e8:1f:5f:4c:4f:37:d1:2a:37:86:0e:22:9e:aa:13:90: e5:59:a2:6b:21:b7:a1:4d:0b:ef:6d:fe:68:ed:53:47:20:b8: 9d:a5:0d:dd:b3:38:76:2e:73:e0:9f:63:61:b4:09:1d:a4:48: 2e:39:54:b9:de:8a:c1:e1:a6:1f:85:71:48:b4:da:ac:59:4b: 05:11:55:3b:38:38:80:3b:c3:ca:c0:96:22:3f:c5:cc:2f:83: 25:7a:2c:4b:ff:7e:34:56:7c:db:35:d6:95:33:35:11:1a:29: f7:71:7c:26:3b:9b:33:e3:c1:e5:cf:89:b8:2a:35:f4:1e:ce: c8:51:d0:1c:00:96:ec:29:17:47:40:1b:3b:19:5d:c6:36:df: 91:f4:f4:dc:df:6c:b1:66:08:ba:3f:c5:55:8a:94:d1:e8:11: ec:45:e1:a4:ba:26:a9:5c:c3:4d:8e:29:00:6b:5e:26:70:e0: 89:75:5e:f4:b0:2f:5f:16:6a:90:ae:2d:27:69:09:a6:52:72: f9:2f:70:65:57:01:48:0a:23:f0:9f:0a:03:8e:29:78:1c:59: 11:10:91:02:51:67:64:81:09:3f:ae:c0:d3:0c:57:b1:be:9d: a8:c4:9a:cb:59:3e:d4:05:ce:de:5b:5d:e5:da:c5:f4:48:87: 82:5e:91:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxSmiJx5yK7tWIl39vhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGU1MDA0MDAxNTNlOWZjMjYyOWQwOTFmYjMwYzFlNjI1NjFiNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwheMcptBu0krA2GiHfXr8MpBVkvq 8833jQtXBp5RPUu0x32/UeJ5YDFXFqkCCd7XkvyLxZPO3u7aTRoABUjGIkicVbvj 4hddHJYt/IOWgm7aQydss537L0s1mhqpZiCTgpih/KeIGXpam9bn9EFJbb2A0s7j mOaKeDW75+9HGayBnR5l8SkCrP1/2TBq9VNaM/KQjTtMOvnO2crLuEij/OpcypzN +9nT4LW2B14jccn8zgirYHBi7nhTfeppZhkSX6Rnrb9anYC0QMg8/DWifWJOnDs5 mLNMylmtZQHYWYYXvA1QdCBJ9cr5Gr6niE72dZ999RANaKuaGhFtyYR9xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKjlAEABU+n8JinQkfswweYlYbXMMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvcU9VQVFBRlQ2ZndtS2RDUi16REI1aVZodGN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV3ieAwQA XpwOMA0GCSqGSIb3DQEBCwUAA4IBAQAkxugfX0xPN9EqN4YOIp6qE5DlWaJrIbeh TQvvbf5o7VNHILidpQ3dszh2LnPgn2NhtAkdpEguOVS53orB4aYfhXFItNqsWUsF EVU7ODiAO8PKwJYiP8XML4MleixL/340VnzbNdaVMzURGin3cXwmO5sz48Hlz4m4 KjX0Hs7IUdAcAJbsKRdHQBs7GV3GNt+R9PTc32yxZgi6P8VVipTR6BHsReGkuiap XMNNjikAa14mcOCJdV70sC9fFmqQri0naQmmUnL5L3BlVwFICiPwnwoDjil4HFkR EJECUWdkgQk/rsDTDFexvp2oxJrLWT7UBc7eW13l2sX0SIeCXpGt -----END CERTIFICATE-----Generated at Fri Jan 2 12:04:27 2026 by rpki-client